last executing test programs: 4.188232783s ago: executing program 3 (id=1804): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x1, @empty, 0x400}, 0x80, 0x0}, 0x20000041) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000040)="a7", 0x1}, {0x0}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000a000000000100000025000000020100000000000048"], 0x6b}, 0x0) 3.909604227s ago: executing program 3 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x641fd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200002f000000000000000100000085100000010000009500000000000000180100002020732100000000002020207b1af8ff000000003fa100000000000007010000f8ffffffb702000008000000b7030000000000288500000076000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000030000000500000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000010b7b78366315a073de439eaeb85d792d6932bb2423096dbae7b787ab5c8076bc3e9cf21389942908bf1299ac0372cc195877c3ab6ad0000001b6d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff8e}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc000) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 3.881059818s ago: executing program 1 (id=1810): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="8f03000000070060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4) 3.854104848s ago: executing program 2 (id=1811): socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640a", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb250aeaf60d002700020400bf050005001201f2b30e35baa2e0903d86b77a3f3fd5975ed6aa2d7bd91f2b7dc672a8d98b47b0f73c2ae8e984b3177edc7aa5ac2f4a7ba89e86c579e0b6e3b1a5404000d96c0f2a20b90c1790762704b23addae2f64b36341b5bc797b26b87483954e7d157424d1c09f70b1ca22c19064d72bbc9a444da96fc6aac19d6d7e5c6078f227aaba7907af2985e725d7e809a3ba3770", 0xbb}], 0x1}, 0x20048084) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) setsockopt$sock_attach_bpf(r1, 0x6, 0x11, 0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x10, &(0x7f0000000000), 0x8) socket$kcm(0x2b, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000730000000000"], 0x0, 0x100003}, 0xe7) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.663147872s ago: executing program 1 (id=1813): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x88a8, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.981006572s ago: executing program 1 (id=1814): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r5) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xea37d383afb94786, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x80000000000, 0x9c, 0x0, 0x40000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1d83) 2.447506321s ago: executing program 3 (id=1815): socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806}, 0x50) 2.285992063s ago: executing program 2 (id=1817): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) r2 = socket$kcm(0x2, 0x5, 0x84) close(0x3) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) 2.183563795s ago: executing program 3 (id=1818): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000860007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4) 2.120525306s ago: executing program 2 (id=1819): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e", 0x52}], 0x1}, 0x0) (async, rerun: 64) r0 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000000000000000000000fdff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)}, 0x40800) (async) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31116b876c1d0000007ea60864160af36514003dc00800020007000200050007c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (rerun: 32) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000000000000000000000005a22e240001812000079818ca4480a5885ac22a8be991bcf24354f006bc86c51712307e115688250e36982ffffdae0fcfa209f4506300d49c91960fa6fb10000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70900000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000400"/28], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x80000000, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000004000000000000008affffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff0000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185200000c000000000000000000000000e5020080000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000851000000400000018000000000800000000000007000000c047d9cd02000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000480)=[{0x0, 0x3, 0x6, 0x4}, {0x3, 0x4, 0xb, 0x4}, {0x3, 0x3, 0x3, 0x6}, {0x2, 0x1, 0x6, 0x4}, {0x0, 0x2, 0x2, 0x28147a772a707ba5}, {0x4, 0x3, 0xf}, {0x1, 0x3, 0x6, 0x7}, {0x0, 0x5, 0xb, 0x5}], 0x10, 0x3}, 0x94) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118c0000000000180000000000000000000000001000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) 2.038171558s ago: executing program 0 (id=1820): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010f0000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.984251638s ago: executing program 1 (id=1821): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x280000, 0x4, 0x10009, 0xf033f71cfcbaa755}], 0x10, 0xfffffff6}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000400000000020000000000001202000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x2}, 0x28) socket$kcm(0x23, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e0a42a68f7ca8a9877b976ecf06b0ba1a81559bb95f0e87dbe5e36d7f60e4fbdeb56745025310f70737f9323ad3ee3a71a71443bba10f48794e225c45890bcd548451a2daee941afa9bfaac8c978be4b89aaa1a9cd88be492b1d069f0c3da529da12a0b1dc6b5ff8d51bc1c091798910af1765ae9c8e6af5b6229e13b61d9ddb18f145231c474ad33f24cc3cf30876e38d699ca868122abf1ab5fdbb3f42d1"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x5a1c, 0x20024, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x104010, 0x400000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$kcm(0x2, 0x5, 0x84) 1.93617654s ago: executing program 3 (id=1822): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000c00)=""/4088, 0xff8}, {0x0}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0) recvmsg$kcm(r1, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x2000) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r4) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xea37d383afb94786, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x80000000000, 0x9c, 0x0, 0x40000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xc3ff, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1d83) 1.88184946s ago: executing program 2 (id=1823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x641fd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200002f000000000000000100000085100000010000009500000000000000180100002020732100000000002020207b1af8ff000000003fa100000000000007010000f8ffffffb702000008000000b7030000000000288500000076000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000000000030000000500000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000010b7b78366315a073de439eaeb85d792d6932bb2423096dbae7b787ab5c8076bc3e9cf21389942908bf1299ac0372cc195877c3ab6ad0000001b6d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff8e}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc000) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1.858149261s ago: executing program 0 (id=1824): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602180000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 1.676205943s ago: executing program 1 (id=1825): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rmw'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 1.602156585s ago: executing program 0 (id=1826): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0, r3}) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r5}, &(0x7f0000000200), &(0x7f00000009c0)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r5, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cb000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff3a2c}, 0x94) 1.535922155s ago: executing program 2 (id=1827): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}, r1, 0x1, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)="1400000037000b0f925a2a22feab3c3d06a2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000000000000000000000000000000081000000000000000f03000000032a080000006100b2158c27e1cf5b7bd32e3fab8f2f24d8777ca5830b7387f21052dce5f1dc110f94c888439741fe19201bd2c355ffc20856dea6c915406a516ed204aafaceb716"], 0x0, 0x45}, 0x28) syz_clone(0x22080000, &(0x7f0000001380)="27cbae07f1611ab9b0c8cf0ecc9b35531331d79d73a3d1f6c36e609415a2dc1ae00de426ee4df0650e30e86cfd26fcf543c28109baf0721617838f39575d88ff207b8f1b8f6d5eed3ebcba8ade1db1bccd4fd338d421ef7c978b735a4b1b9f21bf75949155fb95cc087cfc1557330702708607250717e46bf3e08759bf45dee529c52e67333228987b486af4261972286abf19fde32099f6f9bc77d6a3cc8c9b48098d03e4a4a655ece645094b82140ab584474f3c22e6", 0xb7, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="673312ff46d35426f6b5114a14a9eb089485e6dbe47147aefdb530e9cb45d9f705b7778bec66035c38feabad10") sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}, {&(0x7f00000004c0)="4ed690d353d2805b4da9930402cc4a97105dbfd56c8587be9a038ab0f622dc7ccfb7d049aea29494146df3656eb20485c5bdf01840d1093b43de74fdc3d0129fdb749edbc35e627f1cba8000d9ce213ec1d00fabce1469d4be582ef07867cdf41e3e630ad165e6751a2632e621e93fbc2babec90798956a99b90bf27c1aaa96d6705b935eb", 0x85}, {&(0x7f0000000580)="0c714b31680ee29a203a9162e1c4e1e3f5f49e9b3f0700ecef0bd688d0ddcd3c53a1aee58d", 0x25}, {&(0x7f00000005c0)="dda291085fb0219ed9106a9b8f923f25ab3505c814769925a0fa670d0f9d3f1cb1e5d17bad347786fd2ad52408ac14d1e2357c56b35e0a8ea970c9a4bc40bc6d0ebd0129c3c955679bded520db2d9448dc0966e08591e4b29fca976801415fac1fd19733d4801279dc866497c74f6652e1469564d667ed4cb084d6826646712487a6283ef6921afc39c9e0400f3cc0b557cea514b3bad65886d8", 0x9a}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="88000000000000000801000001000000fe40da15cff1544dcfd7e9d3b058d61628536dac4f5e075198d350302771ce4378397c221c0ecc517a435d269f2fef743656fecec69a8dbdfffd75aebf8fafe26a85ad9216029d6d9af64ba7a1b4f81298ba0112412dd73ee11c058e977412d43ceaff75a0c1a28161385e5b15331fba000000000000"], 0x88}, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10801, 0x0) perf_event_open(&(0x7f0000001300)={0x5, 0x80, 0x55, 0x6, 0x5, 0x0, 0x0, 0x607, 0x66211, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xe6ca}, 0x10a044, 0x3, 0x5, 0x8, 0x7, 0x7fffffff, 0x7fff, 0x0, 0x81, 0x0, 0x7}, r1, 0x9, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000001040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000840)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfec2}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) r6 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x34}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) 1.379978938s ago: executing program 0 (id=1828): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0x7, 0x5f, 0x40000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.29555774s ago: executing program 3 (id=1829): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dff", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1a, 0x5, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0xb, '\x00', 0x0, r2, 0x0, 0x1, 0x2}, 0x50) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff9}, 0x0, 0xc8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e23, @private=0xa010102}, 0x80, 0x0}, 0x4045) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025cc", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x9, &(0x7f0000000080), 0x4) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x240048cd) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f40)=0xffffffffffffffff, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 664.82326ms ago: executing program 1 (id=1830): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0, 0xf0}, 0x0) close(r5) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xea37d383afb94786, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x80000000000, 0x9c, 0x0, 0x40000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1d83) 590.27599ms ago: executing program 0 (id=1831): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000c00)=""/4088, 0xff8}, {0x0}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0) recvmsg$kcm(r1, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x2000) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/299], &(0x7f0000000280)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x13c8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="666d11e8500a9c8b98b4b0bec2b53a2b2ec200ff9d42d8a7f40e5c56ed29", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="94029641513009ef0c14beef72392ffe01a016330f85d7e8c74fb19a", @ANYRES32, @ANYBLOB="42ef207406e361ad8d124433fa8307ad6277c79d15cb971634f7be8faed26cd416d7de37b58aef7a937b312aaac4e02548297f0f113865506ebccd6fbb443303520ed9d35ce55e78fc72cdc544772bfdd5c30c5571fa50a8806b12efed0b068158", @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="3400000002000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="d0a3b9090000000400000000005c8d8735b31b8444f6b3912618013817cd2df6f947bb759ed1c70fd3db31bcdaafe5b507fbeee80c4da687c7332b244f5f83a61edd8d323f934c84034ebe8a46d2c72f7d81383f8265daa8f25645da9ec90489ad855f54d064a83f0517fe798ad471d456bafd05c0f472d12f74953c20edc2f69da74b29d35e9962e749f7f35450046a4b5cbfd47b2a73148b636210d56ea6471d63734666f2c1eb3f8a8bfac4097a7f4760074ca81f4afc9d9e0e71fc9b8cf0251291ac0f0b429118d38b5c8075f57b51fd94613fa54fa9c80e80aa556b21e5b8fcf99289c43fc86312e990ec8bc069354668d90a34904999f18f11953c90961794b47761cccc48f77dc40951ed27f275b85121497cf7fa577f6889c7b484a75c6f283c91ced6a668cd68fa2d044c5f6d7e04161faa3b409930006d3237f791a9fa473469cc4d21862cfdb1bbf847a4ff8301f0fa898e8c1e688ff8779d99b674ac0795550ba735ce0d64560fba439036f23d8b4df802c1a05377d780967e967073efde99b5dbf5e5173848d0a75ca8cdb7b7846fe7773498638114f08a4eb4c918a7b5306cbb064f202856bfd96b66d1489696f8bd3537d972cdf471382f0a8908e9dfa9bc", @ANYRES64=0x0], 0x20) close(r7) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xea37d383afb94786, @perf_config_ext={0x1, 0x8}, 0x11efa, 0x80000000000, 0x9c, 0x8, 0x89, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, r6, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1d83) 529.435932ms ago: executing program 2 (id=1832): r0 = socket$kcm(0x11, 0x200000000000001, 0x300) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r0, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000001680)=[0x0, 0x0], &(0x7f00000016c0)=[0x0], 0x0, 0x4a, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001740), &(0x7f0000001780), 0x8, 0x29, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000007000000000000000080002095000000000000009510a1bd3961ecadd40c3c016f33a067231cd69fd237c87c0f7abd29f1b562d96c708f19b7331850e6001f88bd762600bd1952768bf0ead0bcf5c6e29aa9"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007", @ANYRESOCT=r1, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) r11 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90924fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=1833): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r5, r4, 0x0, 0x53, 0xfffffffffffffffe}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) close(r6) r8 = syz_clone(0x1004000, &(0x7f0000002380)="48d9c7c28547aa9a853ebe81f77d56957540d45a114b442d2c08836d2ea989801691668f45beb729b71c5853aac5d77fc6db06e679ecb2a8e475945e7cf02f066eccd53ee3c41eaf88e20e19bcdb8f62dd5955fd0a9ed53a0f0cede7e5085ace1f636bf9115a0c232bc5c18057841665895d81cda3be4ce7f9ffbc34aa778e2cbb64e7e54f7f54d1fb75bcc9d0e802bc7f0becf2e587147c4c7ad41d89fbfb62316d76462c8b088b573b1240b056dd0a549463251387274acd5e46db41af20827570864f32913108ce3cdcf15cc65ddba5088ff3d2bb1a243d21e88368e8d4ddbaad24a2e7023584c0f63f75ab096d420ba5ad24c037645fd9ef1eedb57ed4bad2cbc1204280f98ee239533d66d414a6fcd559396495fc72b46feee8a23eeb11007318f9544e80ba92edf86785611971330eeee104aef1e2411f6f0cd6eb1da2e0c7383bd32bdfc76b7c3b57a4c04836a0ab6b894fcda1b7b946c803f63019a2db073c4989b67cf3a05f0a1283f72c7b9ce7f63d4ce248883bb1620c9ae61f03432fbb453d4c8708137c6a6f589c8a0a009ad34cc5f60ffda2afe0996316898eae77577f0d3cae93ba81b6e3b9a9e6b29ad5e229e7fe9060541ae9022e70954654ea9f9b341196dff84ce3c8dbab8f0688d4669c27f6652dd4e0b85c10803314185e164266ce55bc215221ff0716682d890de32d1660f8d8bcd689d30bda6c783a0f85d8c90a81ff2cd065999850464bd71a950f862bb2c828c558a20f33fc5d4192ce67abcc5e3cc902b5fdcfa5181fc6458459d63437ab538257524cdb405e12102590ac613ab7e756d84c131969b6220ad97378e74fa07944abb8e77b8e9110686ef0d1f96826f578c8bf804dc58fe2b0624d95cee3a9fc24cd38bb0c77430d03763cfc030c00a594050dd17165e5df4a153532f0f56b7da7dbe66088a3f9d7d6d8b711e3a698e0b1c89c74f27867e80374621de277bea0a8689beb1478051606cef484f321bc25169b408645d51ea3d6b7425981f88fdeb5818e3f69d84a6a6fbab61b7bc760a290aa8844123db21f0451fcca7a4aa236f570abfa02789a9b005410b81feb5014cf173929e8e4c00c9d34985ff0544e5e73aba649b9d3bbbb5e6ac7a1b833800404b7b5696d0fa166d186a022c5f19b5eb2851ee6a382d2cceae76c5c0cb9f7a192f8025bba1e4c03bf34e5c711c114a606448ecae8d33b81e42a1cf4727532d9cc81128cfc218a6669a1d286ce6c1d95e3616afe6c5ec502fba9b69c15887697f48c5399d57eaa51fbe47beaede54d1f14a1dbf8ee1445ad1785e96111b860e8b8fe7fa7a8be44a542602884b39b5fdea9b4bfcc8e94546e254dfe189ad6181eaabaec92178f15ed0c431bd7cd7c5d6d88223527a548194d5f1cf58fe1890b0c4924d92bca74d9e53ebc7fad2b796a0f83290e9fcea1eb2a77835e39780e0524ecd92954e0b5136f7d293c0e487f406bfdd145aabe2e39abac3868aaf6d04c9b413b8752d8bf5c9022fa91be07e50861bd60c7359c8127007c14ec6e788112ee7fb18c344ed00ce0b017fecc55e476ce2a6603ddc832585b8898feef4810ede40c9fdcdf1133ab5617f4b147a63b9ef8316f91468959631c35d14c9fe40b361f4be13010168b240b865580ebd3c0dbf8ee46d82fda3390bb778c90dd24a5cda3f860b5f461a43750868bfed0b0b131a49470e6fa3539ceac13333122edd990d7a769350c911d7704d073e2ccfc44d23cebe376f9095b9d186448401ee3cd21f27295f3a68c8b276362944ee5854d07b3e72f8561cec34cb0bef5cd6353c3591bd81f9e0017358aef9fd9a141b036aeae8d87c43dcde6cb193e72ae303004a556063e588a7fddd11062ef92eaa385af021cd07af12a2329cb4ad9160c866788990c46a5da734fa12c5279de66b91ab7085e2aac8face96c0c35c0d01db8a5f945e5648fecc1893ff59021f7ef43976e6090b2e995b3ccef09c0df95697b2740a2b0e7d8fe552bc034a2d5f311908069e9a469c7d393e9580ef3f3b18ca5ca616ef1f1a2924d273750ef5c53a19e394cd3e7862b9dc89c261b7ba37f7046e38bfe26a7fde21cbfa0384ee5b9008f0a6f74391267a26a571f72ae870ff85572dbc6c83f7d4c77b4ad98fddf332e0430ec36934e8de1bad2393fe84cf5609ee536c0b267d62e2013688f10e67a80feb3a103d097eb2d956ca4af3c9df13c17c85458697919dccde2d4d75d5a497bad8e722d783b65fed3982a312c577e7474af92f827f6fb456603096888ca864186f0770bc31ae5747b5f7918b0b1b25774bf3fa4e1877f8c44bf58ea3672cf199df810f6172b0e4e1afb34eb2ef9cbedc09033b09c1805c2550f5d1104519d9d4f8488fd03781c74807d2b3c488e446c93a26ee89b319e16a49fc90826f1c007711c998cd4f5ce6bc5a583c0e8ee4c9cb28b1d5873c4663cd073f23e102ceb25abe4dcbd6eb7ed863c7fdcd6099a859d0bc529bb5669227d2e8f62a6c72f73e2b9316bca0da16e587f087024248ebd58d4d1d4e5974843ee86f223bfcae71ca611d08aca3098610c68efc07cc24208685a8f8b486c06a37d4a0d7075221f6aee80ea05403ce07223376afb38209d792c49cf80e4c26be2f28afbfb8dc57b3d04c27b627928ac58ca08b2b4c75d562dd904df0b502a621bfcaa064e18f151f2638d236dcc2ba5c54c730fd9975ce4a2001d434e17356fb68d2bec0b97dac0e36f736f925080170930e57fdba8ea1a5d2405d71d9443a95290c321a97db627f5fe874babcc1347c04bff10abffc9f60f78ac6a627ef164e18ff4049a13e1e0dd8f3421ecae0b5c5a1909c07db31ea696664ceb868ca446b543b1fcb47facfdac151d74afce241d3cb566869d569a79bc19ad1ba05cbbb033bc7fb6585f8178305b9121a5bc6cc3e50b8bad0d9e63495863899dcfb0722e7a7ecc08280e627c429772ca04c45bd3a80ed56a7f1ffd3218bf605cb1cd7fb92cead8e502f81853cc7d5d35051333504d9dc5c33be4dabbdbdce9f83b14e1ffda79de7142c4add8d72b8ca5e2dce7168fb1694fb58bb6e28e0a2be27bd7454581922f47e736f1a5604f8e9071c6539b6e8926561d38ef5935571e0668ba467c5c6f34efe76372715be3147de3e1af281eceef3d395a2f697e6abdc6ef8c5492d4050a58fbe171980fad70bd6179a9ffb2fc8b29efc90cadce9d2067d289c6111eaf2867d18104bc43e5ead5e98a04c1bb36c1dd39fd0df0693fb88c5d4affc334e155308fc4475a802e3546a77451891bf9610376414dcd15e2e7af7a1881d200b67f7eeb1ecb4e6f0447665a3d675fb4b7fda8df32a9e71a4d5d9c855a2d7d50d79d3810474e7015d1f0cb26be6fee11acf248092786d5aba04f321a9d5c763fd38fe88305cbf761ecac74c36cad430c42689eed0506b64032bb18ee4fe28b93dabedac4d8ab20d00ef43023b8b7b768b9fc2a8007d46ad2a91e0e753432358ef88521e4e3b32d5df8d2807f91669f466422e8b645baa04a5fc320cd0e43ca25c8d43e562bac21cc0c8d2b921a321adf4715e4ef57c614982df0bfd497e95f8ddee897c0ca8aef1c410db3b752a0cf41042e030fbc9b62e048bd086a2c3457517f576b5bef2403eff18a63597191c00e33f2003058ba57d22d9897c599d8331910fdfc1658212b5c4a04d45d8575dbeb0976fc3109c461b5bcf0cef2ff841da365b3b1278b2f55fc38c20c6baa786a33b75e3b8eaac10a89c3ec9028e16fa3aa91634ba88ba0b6313dc1f4ee86604282ca809d87e64f245aeb8a7b25359a28c1d84b90ad5081494db3fcbfdc4a228b9969443df9c10bc3e0316aa5fea371e4a1419eff22995ba0e830df2422a88480d353bbc006be9e8e0947f00e956191401824d665ac641e91cbd705a6fcb424d37b8e188ac90c0d3a2cf7ef0902d75fb4ac0e8ffc1ae1fd276426bd6186273257e9b43406cfaf23bf473a48766dfecefc3f75f31667822ef646f4c5a0ea1954522541bc91c58a58a36dacb77af0ad0465c6198bede2a1f1ca0443eafa106e998b2fa439ecc52306efc87db2d65d2396938a1471487d35c50747a091d958f7c03f536442edaf357b9995b4c420576a6dac4b88e7edffd6054138bf0994057a6a8a9c0c94d98cf658b59919ec3b0d6f5960f801496cbb5235be28a151e4b88c954fdfbe812ac256379c96ab50811909c7726236a1558548322094d1fd90646d918390948aa827a96f06413762fac17e1fc353623c3fc5d2b5007bb5bcb47b43a49d8380c2c46ab31a5ec386f0f4f5df40b8ad3968dc63742dde48212812c1ba8fc86da9381004ee4ccfd082353395b95dc0506ed518ea83dd81b71abbc707d39e1561625daa5c21227956091493af2ee3791bfa7f13bc71ab24affbd74a9422c8e3addbfd7b44a9b689f7f502bf91face2669183cfab74f132231d5306928fdf3d898b91880051998a55004a8fb058d4e12bfabcf9ddcd3386a8a20181d91e82b7cdf3d891846ba2dd76fd156cf2ddead849b9909ab32ad21b5009ded49c1824b456a6ffe7a757fb3ea7a186f44e43daa39b49370a9b5f2ab33d459b8bb2c9174fb2ac0712f004652bce381622571d3113c15f3df3233c760a043022c518121c0a18ed4ffc32515f60feb0531e1ea156b6575ce116f14ecfc6812c046cc3e176ad921f277629e6e380e10b3c727b5339f310a0ca85ba95f8f3400b0a757db1a3930140c2edcd78811e6c9a82851299814b63937c8090e7ab3ee505bb01147d3015f0833854820caabd81c9e04da22f4d674f23dd7175d42d01ab0b55689e7c451b7db9e1e0baadb0f5a5d794b9e68f7fa334d8bd07f03330fde9a16a593155ae074537c3c95283576a617429a08cb954ef1956b2b6cb93784321a59cc673ec76adc28d486cece389de932b2734a6d5816d559dbb87bb03b87fb8a0cf1c83ca47dfe9ef7801fde318c40e898790f269a3dbf8312ae710505888b7bed16679fdc5ead48a9cd6b288c7df9b92f3e39c1da81b9a3d841bb165ad31eb03deae96e80644b24f6f9d4c64b89931462425fd6068acc10c247fcaad08ecddf0d432b9547b62fc694b5d0041965d06c62aa68d6fade8d93514bf4ae8c888d9b855da394cd359837fcfc33bd29d97675414fa6f0888caf987110e8bd4da9f4f945b1c595b1bd441e2b4ddc06aa11a19de6e8ec424584a226b0b6088e875cc67519415372060c5b96aa362ca025ac65e7afa954c1f8d4fc6fd28ff806d35a26a1ef8c2e2a9379fccc92e76f1570c17c271d195d610cedd3f464cf3d1ee25bcebf631c9c486130ae8f725cbe9548e1d8ff3307f7568ab63ca96d955df3179c166001b60af751161dfd0d2af42b33dcf75dd1bc44464c60f9465155ff194a417d97a77900bc0c20ec28a153b63bc9444e372081ce2718b919de959faec7717f5deccc1e6ef14a01b58d81f24843fd8c724e4133b5ffa683cb23a5c7e99865baa9d399b42b89969c6d619214710aa49b7492cc6647b9ff33ab66496c101fb991eb37bb0d8ebe5b61ada110d3ae57f65cb9a7c06c66f934e3c750c786f73b96df1251443dc4067b7599ae558d8d91a06d266f9d6a6aeb86bd46925fb444a65313fdc198c0f128c357dc30f51bafc2b2ac77c5a6caae2301086b39a4aa45b1e58a71327da60021b2c4c971137079182d3cb8480b01849442957d3a5ff15ff1a4267beea5c61c5136ff0ab8e602bd936abeb359fa0981a04643ab892879e42caf65f7512938fb0bb02989cecc202438", 0x1000, &(0x7f0000003380), &(0x7f00000033c0), &(0x7f0000003400)="732f0bf2e758d3e279c7e11d04f2c3c4cf5a29e8bd73a41757115fb57ee053b268f666db44082f0a85c73bf3f84dcb88075f64") gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000340)="3b753997e0611fa5b512238330cc7fd432c932ad1ab1fa909a7781c7a3bfa70b1f44de6d9877", 0x26}, {&(0x7f0000000740)="07333a79271b741c05d1e9e44fa907b6fe836d42abd44919fdcf207af34d442e86bac7009ef2dcfc3d91906e2a0a611af30534fbcaf9b7e3d8dc0a2b87ab4634d98cbd4354ea8eb73fced333fe5264c4fb0351083d5f8475c488fa7cd3e208e512205969cbdc8ef28fc6acf8e44883dc6d6e859694c697cebcfd295da3145cfe558a1d04f180d6ce0d0249c76991f6b5a0cfca6c20a2ee8b0966ced7ef7bd5f031c328a355441d3c88ea3143d83fe2aaebead6de2d23d12f8aa756af2fa291ded6763b1b11970cb2d0ba3f555ae14be622786cdc39f360ad7e32450872ea88bf79bebb6d408c98932969", 0xea}, {&(0x7f0000000840)}], 0x3, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [r2, r1, r1, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r3, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xd0, 0xc000}, 0x10000) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xa, 0x4}, {0xd, 0x4}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xf, 0xe, 0x5}, {0x2, 0x6, 0x1000}]}, @datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x1, 0x8, 0xa9}, {0x3, 0x2c00, 0x4b}, {0x1, 0x2, 0x4}, {0x1, 0x7, 0x2}, {0x4, 0x8f, 0x10}], "b00ef3"}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3e, [{0x2, 0x4, 0x11}, {0x8, 0x3, 0x1}]}, @const={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0xee, 0x1000, 0x1, 0x7}, 0x28) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='pids.events\x00', 0x26e1, 0x0) ioctl$TUNGETVNETLE(r10, 0x8953, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb443f09000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [T10531] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 396.486200][T10531] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 396.492592][T10531] ? lockdep_hardirqs_on+0x98/0x150 [ 396.497862][T10531] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.504094][T10531] ? __nla_parse+0x40/0x50 [ 396.508573][T10531] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 396.515130][T10531] genl_family_rcv_msg_doit+0x21a/0x310 [ 396.520766][T10531] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 396.526768][T10531] ? bpf_lsm_capable+0x9/0x10 [ 396.531513][T10531] ? security_capable+0x89/0xb0 [ 396.536448][T10531] genl_rcv_msg+0x611/0x7a0 [ 396.541029][T10531] ? genl_bind+0x360/0x360 [ 396.545504][T10531] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 396.551922][T10531] netlink_rcv_skb+0x235/0x4c0 [ 396.556756][T10531] ? genl_bind+0x360/0x360 [ 396.561245][T10531] ? netlink_ack+0x1160/0x1160 [ 396.566094][T10531] ? __lock_acquire+0x7d80/0x7d80 [ 396.571196][T10531] ? down_read+0x1ac/0x2e0 [ 396.575686][T10531] genl_rcv+0x28/0x40 [ 396.579726][T10531] netlink_unicast+0x7b1/0x930 [ 396.584587][T10531] netlink_sendmsg+0x8d0/0xbf0 [ 396.589429][T10531] ? netlink_getsockopt+0x590/0x590 [ 396.594696][T10531] ? aa_sock_msg_perm+0x94/0x150 [ 396.599710][T10531] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 396.605072][T10531] ? security_socket_sendmsg+0x80/0xa0 [ 396.610588][T10531] ? netlink_getsockopt+0x590/0x590 [ 396.615858][T10531] ____sys_sendmsg+0x61b/0x980 [ 396.620697][T10531] ? __asan_memset+0x22/0x40 [ 396.625346][T10531] ? __sys_sendmsg_sock+0x30/0x30 [ 396.630426][T10531] ? __import_iovec+0x5f2/0x850 [ 396.635342][T10531] ? import_iovec+0x73/0xa0 [ 396.639909][T10531] ___sys_sendmsg+0x2a6/0x360 [ 396.644653][T10531] ? __sys_sendmsg+0x2b0/0x2b0 [ 396.649537][T10531] __se_sys_sendmsg+0x1d0/0x2c0 [ 396.654462][T10531] ? __x64_sys_sendmsg+0x80/0x80 [ 396.659488][T10531] ? syscall_enter_from_user_mode+0x2e/0x80 [ 396.665462][T10531] do_syscall_64+0x55/0xb0 [ 396.669939][T10531] ? clear_bhb_loop+0x40/0x90 [ 396.674674][T10531] ? clear_bhb_loop+0x40/0x90 [ 396.679412][T10531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.685379][T10531] RIP: 0033:0x7f1a22d9ce59 [ 396.689848][T10531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.709513][T10531] RSP: 002b:00007f1a23ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.717990][T10531] RAX: ffffffffffffffda RBX: 00007f1a23015fa0 RCX: 00007f1a22d9ce59 [ 396.726013][T10531] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 396.734032][T10531] RBP: 00007f1a22e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 396.742049][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.750077][T10531] R13: 00007f1a23016038 R14: 00007f1a23015fa0 R15: 00007ffdbdd24e48 [ 396.758165][T10531] [ 396.892582][T10535] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1653'. [ 396.971969][T10535] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 396.981761][T10535] CPU: 1 PID: 10535 Comm: syz.0.1653 Not tainted syzkaller #0 [ 396.989319][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.999435][T10535] Call Trace: [ 397.002761][T10535] [ 397.005749][T10535] dump_stack_lvl+0x18c/0x250 [ 397.010501][T10535] ? show_regs_print_info+0x20/0x20 [ 397.015763][T10535] ? load_image+0x420/0x420 [ 397.020348][T10535] sysfs_warn_dup+0x8e/0xa0 [ 397.024903][T10535] sysfs_do_create_link_sd+0xc0/0x110 [ 397.030341][T10535] device_add_class_symlinks+0x1cf/0x240 [ 397.036052][T10535] device_add+0x4f9/0xc40 [ 397.040458][T10535] wiphy_register+0x1d99/0x2ac0 [ 397.045400][T10535] ? cfg80211_event_work+0x40/0x40 [ 397.050580][T10535] ? minstrel_ht_alloc+0x88a/0x990 [ 397.055762][T10535] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 397.061894][T10535] ieee80211_register_hw+0x2dd8/0x3b30 [ 397.067426][T10535] ? ieee80211_register_hw+0xfc1/0x3b30 [ 397.073017][T10535] ? ieee80211_tasklet_handler+0x20/0x20 [ 397.078696][T10535] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 397.084633][T10535] ? __debug_object_init+0xec/0x450 [ 397.089885][T10535] ? __asan_memset+0x22/0x40 [ 397.094519][T10535] ? __hrtimer_init+0x189/0x270 [ 397.099451][T10535] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 397.105233][T10535] ? mac80211_hwsim_free+0x220/0x220 [ 397.110582][T10535] ? rcu_is_watching+0x15/0xb0 [ 397.115383][T10535] ? kstrndup+0xbd/0x140 [ 397.119691][T10535] hwsim_new_radio_nl+0xdad/0x1a70 [ 397.124884][T10535] ? __nla_validate+0x50/0x50 [ 397.129612][T10535] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 397.135976][T10535] ? __nla_parse+0x40/0x50 [ 397.140428][T10535] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 397.146803][T10535] genl_family_rcv_msg_doit+0x21a/0x310 [ 397.152407][T10535] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 397.158334][T10535] ? bpf_lsm_capable+0x9/0x10 [ 397.163049][T10535] ? security_capable+0x89/0xb0 [ 397.167951][T10535] genl_rcv_msg+0x611/0x7a0 [ 397.172481][T10535] ? genl_bind+0x360/0x360 [ 397.176915][T10535] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 397.183303][T10535] netlink_rcv_skb+0x235/0x4c0 [ 397.188111][T10535] ? genl_bind+0x360/0x360 [ 397.192544][T10535] ? netlink_ack+0x1160/0x1160 [ 397.197341][T10535] ? __lock_acquire+0x7d80/0x7d80 [ 397.202394][T10535] ? net_generic+0x1e/0x240 [ 397.206965][T10535] ? down_read+0x1ac/0x2e0 [ 397.211433][T10535] genl_rcv+0x28/0x40 [ 397.215458][T10535] netlink_unicast+0x7b1/0x930 [ 397.220271][T10535] netlink_sendmsg+0x8d0/0xbf0 [ 397.225075][T10535] ? netlink_getsockopt+0x590/0x590 [ 397.230328][T10535] ? aa_sock_msg_perm+0x94/0x150 [ 397.235309][T10535] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 397.240652][T10535] ? security_socket_sendmsg+0x80/0xa0 [ 397.246168][T10535] ? netlink_getsockopt+0x590/0x590 [ 397.251390][T10535] ____sys_sendmsg+0x61b/0x980 [ 397.256180][T10535] ? __asan_memset+0x22/0x40 [ 397.260792][T10535] ? __sys_sendmsg_sock+0x30/0x30 [ 397.265855][T10535] ? __import_iovec+0x5f2/0x850 [ 397.270737][T10535] ? import_iovec+0x73/0xa0 [ 397.275277][T10535] ___sys_sendmsg+0x2a6/0x360 [ 397.280023][T10535] ? __sys_sendmsg+0x2b0/0x2b0 [ 397.284986][T10535] __se_sys_sendmsg+0x1d0/0x2c0 [ 397.289929][T10535] ? __x64_sys_sendmsg+0x80/0x80 [ 397.294955][T10535] ? syscall_enter_from_user_mode+0x2e/0x80 [ 397.300945][T10535] do_syscall_64+0x55/0xb0 [ 397.305429][T10535] ? clear_bhb_loop+0x40/0x90 [ 397.310197][T10535] ? clear_bhb_loop+0x40/0x90 [ 397.314913][T10535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.320874][T10535] RIP: 0033:0x7fcbc179ce59 [ 397.325342][T10535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.345008][T10535] RSP: 002b:00007fcbc266d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.353495][T10535] RAX: ffffffffffffffda RBX: 00007fcbc1a15fa0 RCX: 00007fcbc179ce59 [ 397.361489][T10535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 397.369483][T10535] RBP: 00007fcbc1832e6f R08: 0000000000000000 R09: 0000000000000000 [ 397.377474][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.385475][T10535] R13: 00007fcbc1a16038 R14: 00007fcbc1a15fa0 R15: 00007ffcaa53e578 [ 397.393519][T10535] [ 397.776751][T10546] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1659'. [ 397.833161][T10546] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 397.862004][T10546] CPU: 1 PID: 10546 Comm: syz.1.1659 Not tainted syzkaller #0 [ 397.869555][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.879666][T10546] Call Trace: [ 397.882986][T10546] [ 397.885956][T10546] dump_stack_lvl+0x18c/0x250 [ 397.890700][T10546] ? show_regs_print_info+0x20/0x20 [ 397.895960][T10546] ? load_image+0x420/0x420 [ 397.900544][T10546] sysfs_warn_dup+0x8e/0xa0 [ 397.905110][T10546] sysfs_do_create_link_sd+0xc0/0x110 [ 397.910573][T10546] device_add_class_symlinks+0x1cf/0x240 [ 397.916342][T10546] device_add+0x4f9/0xc40 [ 397.920747][T10546] wiphy_register+0x1d99/0x2ac0 [ 397.925689][T10546] ? cfg80211_event_work+0x40/0x40 [ 397.930862][T10546] ? minstrel_ht_alloc+0x88a/0x990 [ 397.936065][T10546] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 397.942217][T10546] ieee80211_register_hw+0x2dd8/0x3b30 [ 397.947759][T10546] ? ieee80211_register_hw+0xfc1/0x3b30 [ 397.953386][T10546] ? ieee80211_tasklet_handler+0x20/0x20 [ 397.959081][T10546] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 397.965062][T10546] ? __debug_object_init+0xec/0x450 [ 397.970337][T10546] ? __asan_memset+0x22/0x40 [ 397.974998][T10546] ? __hrtimer_init+0x189/0x270 [ 397.979910][T10546] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 397.985720][T10546] ? mac80211_hwsim_free+0x220/0x220 [ 397.991068][T10546] ? rcu_is_watching+0x15/0xb0 [ 397.995898][T10546] ? kstrndup+0xbd/0x140 [ 398.000217][T10546] hwsim_new_radio_nl+0xdad/0x1a70 [ 398.005396][T10546] ? __nla_validate+0x50/0x50 [ 398.010150][T10546] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 398.016558][T10546] ? __nla_parse+0x40/0x50 [ 398.021037][T10546] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 398.027477][T10546] genl_family_rcv_msg_doit+0x21a/0x310 [ 398.033100][T10546] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 398.039103][T10546] ? bpf_lsm_capable+0x9/0x10 [ 398.043854][T10546] ? security_capable+0x89/0xb0 [ 398.048789][T10546] genl_rcv_msg+0x611/0x7a0 [ 398.053399][T10546] ? genl_bind+0x360/0x360 [ 398.057880][T10546] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 398.064296][T10546] ? kasan_check_range+0x14b/0x290 [ 398.069493][T10546] netlink_rcv_skb+0x235/0x4c0 [ 398.074330][T10546] ? genl_bind+0x360/0x360 [ 398.078830][T10546] ? netlink_ack+0x1160/0x1160 [ 398.083672][T10546] ? __lock_acquire+0x7d80/0x7d80 [ 398.088778][T10546] ? down_read+0x1ac/0x2e0 [ 398.093273][T10546] genl_rcv+0x28/0x40 [ 398.097320][T10546] netlink_unicast+0x7b1/0x930 [ 398.102165][T10546] netlink_sendmsg+0x8d0/0xbf0 [ 398.107003][T10546] ? netlink_getsockopt+0x590/0x590 [ 398.112270][T10546] ? netlink_getsockopt+0x590/0x590 [ 398.117528][T10546] ____sys_sendmsg+0x61b/0x980 [ 398.122360][T10546] ? __asan_memset+0x22/0x40 [ 398.127015][T10546] ? __sys_sendmsg_sock+0x30/0x30 [ 398.132094][T10546] ? __import_iovec+0x5f2/0x850 [ 398.136991][T10546] ? import_iovec+0x73/0xa0 [ 398.141529][T10546] ___sys_sendmsg+0x2a6/0x360 [ 398.146289][T10546] ? __sys_sendmsg+0x2b0/0x2b0 [ 398.151136][T10546] __se_sys_sendmsg+0x1d0/0x2c0 [ 398.156024][T10546] ? perf_trace_preemptirq_template+0x269/0x330 [ 398.162306][T10546] ? __x64_sys_sendmsg+0x80/0x80 [ 398.167291][T10546] ? lockdep_hardirqs_on+0x98/0x150 [ 398.172530][T10546] do_syscall_64+0x55/0xb0 [ 398.176982][T10546] ? clear_bhb_loop+0x40/0x90 [ 398.181684][T10546] ? clear_bhb_loop+0x40/0x90 [ 398.186395][T10546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.192326][T10546] RIP: 0033:0x7f1a22d9ce59 [ 398.196770][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.216409][T10546] RSP: 002b:00007f1a23ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.224854][T10546] RAX: ffffffffffffffda RBX: 00007f1a23015fa0 RCX: 00007f1a22d9ce59 [ 398.232858][T10546] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 398.240854][T10546] RBP: 00007f1a22e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 398.248889][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.256905][T10546] R13: 00007f1a23016038 R14: 00007f1a23015fa0 R15: 00007ffdbdd24e48 [ 398.264935][T10546] [ 398.525155][T10556] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1666'. [ 398.571055][T10556] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 398.590879][T10556] CPU: 1 PID: 10556 Comm: syz.0.1666 Not tainted syzkaller #0 [ 398.598434][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.608577][T10556] Call Trace: [ 398.611898][T10556] [ 398.614868][T10556] dump_stack_lvl+0x18c/0x250 [ 398.619604][T10556] ? show_regs_print_info+0x20/0x20 [ 398.624861][T10556] ? load_image+0x420/0x420 [ 398.629434][T10556] sysfs_warn_dup+0x8e/0xa0 [ 398.633987][T10556] sysfs_do_create_link_sd+0xc0/0x110 [ 398.639417][T10556] device_add_class_symlinks+0x1cf/0x240 [ 398.645124][T10556] device_add+0x4f9/0xc40 [ 398.649525][T10556] wiphy_register+0x1d99/0x2ac0 [ 398.654485][T10556] ? cfg80211_event_work+0x40/0x40 [ 398.659676][T10556] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.665911][T10556] ? rtnl_unlock+0x9/0x10 [ 398.670312][T10556] ieee80211_register_hw+0x2dd8/0x3b30 [ 398.675856][T10556] ? ieee80211_register_hw+0xfc1/0x3b30 [ 398.681475][T10556] ? ieee80211_tasklet_handler+0x20/0x20 [ 398.687165][T10556] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 398.693130][T10556] ? __debug_object_init+0xec/0x450 [ 398.698402][T10556] ? __asan_memset+0x22/0x40 [ 398.703060][T10556] ? __hrtimer_init+0x189/0x270 [ 398.707980][T10556] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 398.713815][T10556] ? mac80211_hwsim_free+0x220/0x220 [ 398.719172][T10556] ? rcu_is_watching+0x15/0xb0 [ 398.724000][T10556] ? kstrndup+0xbd/0x140 [ 398.728315][T10556] hwsim_new_radio_nl+0xdad/0x1a70 [ 398.733490][T10556] ? mark_lock+0x94/0x320 [ 398.737883][T10556] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 398.743943][T10556] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 398.750346][T10556] ? lockdep_hardirqs_on+0x98/0x150 [ 398.755628][T10556] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.761886][T10556] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 398.768301][T10556] genl_family_rcv_msg_doit+0x21a/0x310 [ 398.773928][T10556] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 398.779907][T10556] ? bpf_lsm_capable+0x9/0x10 [ 398.784702][T10556] ? security_capable+0x89/0xb0 [ 398.789640][T10556] genl_rcv_msg+0x611/0x7a0 [ 398.794223][T10556] ? genl_bind+0x360/0x360 [ 398.798706][T10556] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 398.805162][T10556] netlink_rcv_skb+0x235/0x4c0 [ 398.810007][T10556] ? genl_bind+0x360/0x360 [ 398.814497][T10556] ? netlink_ack+0x1160/0x1160 [ 398.819357][T10556] ? down_read+0x1ac/0x2e0 [ 398.823842][T10556] genl_rcv+0x28/0x40 [ 398.827890][T10556] netlink_unicast+0x7b1/0x930 [ 398.832727][T10556] netlink_sendmsg+0x8d0/0xbf0 [ 398.837560][T10556] ? lockdep_hardirqs_on+0x98/0x150 [ 398.842865][T10556] ? netlink_getsockopt+0x590/0x590 [ 398.848177][T10556] ? aa_sock_msg_perm+0x94/0x150 [ 398.853190][T10556] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 398.858542][T10556] ? security_socket_sendmsg+0x80/0xa0 [ 398.864068][T10556] ? netlink_getsockopt+0x590/0x590 [ 398.869335][T10556] ____sys_sendmsg+0x61b/0x980 [ 398.874179][T10556] ? __asan_memset+0x22/0x40 [ 398.878843][T10556] ? __sys_sendmsg_sock+0x30/0x30 [ 398.883934][T10556] ? __import_iovec+0x5f2/0x850 [ 398.888853][T10556] ? import_iovec+0x73/0xa0 [ 398.893416][T10556] ___sys_sendmsg+0x2a6/0x360 [ 398.898196][T10556] ? __sys_sendmsg+0x2b0/0x2b0 [ 398.903090][T10556] __se_sys_sendmsg+0x1d0/0x2c0 [ 398.908012][T10556] ? __x64_sys_sendmsg+0x80/0x80 [ 398.913054][T10556] ? syscall_enter_from_user_mode+0x2e/0x80 [ 398.919022][T10556] do_syscall_64+0x55/0xb0 [ 398.923502][T10556] ? clear_bhb_loop+0x40/0x90 [ 398.928241][T10556] ? clear_bhb_loop+0x40/0x90 [ 398.932977][T10556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.938943][T10556] RIP: 0033:0x7fcbc179ce59 [ 398.943420][T10556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.963260][T10556] RSP: 002b:00007fcbc266d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.971742][T10556] RAX: ffffffffffffffda RBX: 00007fcbc1a15fa0 RCX: 00007fcbc179ce59 [ 398.979779][T10556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 398.987806][T10556] RBP: 00007fcbc1832e6f R08: 0000000000000000 R09: 0000000000000000 [ 398.995819][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.003826][T10556] R13: 00007fcbc1a16038 R14: 00007fcbc1a15fa0 R15: 00007ffcaa53e578 [ 399.011850][T10556] [ 399.161799][T10560] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1669'. [ 399.194817][T10560] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 399.203695][T10560] CPU: 0 PID: 10560 Comm: syz.2.1669 Not tainted syzkaller #0 [ 399.211229][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.221345][T10560] Call Trace: [ 399.224668][T10560] [ 399.227639][T10560] dump_stack_lvl+0x18c/0x250 [ 399.232388][T10560] ? show_regs_print_info+0x20/0x20 [ 399.237653][T10560] ? load_image+0x420/0x420 [ 399.242237][T10560] sysfs_warn_dup+0x8e/0xa0 [ 399.246810][T10560] sysfs_do_create_link_sd+0xc0/0x110 [ 399.252237][T10560] device_add_class_symlinks+0x1cf/0x240 [ 399.257906][T10560] device_add+0x4f9/0xc40 [ 399.262264][T10560] wiphy_register+0x1d99/0x2ac0 [ 399.267171][T10560] ? cfg80211_event_work+0x40/0x40 [ 399.272324][T10560] ? minstrel_ht_alloc+0x88a/0x990 [ 399.277492][T10560] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 399.283616][T10560] ieee80211_register_hw+0x2dd8/0x3b30 [ 399.289137][T10560] ? ieee80211_register_hw+0xfc1/0x3b30 [ 399.294733][T10560] ? ieee80211_tasklet_handler+0x20/0x20 [ 399.300396][T10560] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 399.306327][T10560] ? __debug_object_init+0xec/0x450 [ 399.311569][T10560] ? __asan_memset+0x22/0x40 [ 399.316200][T10560] ? __hrtimer_init+0x189/0x270 [ 399.321088][T10560] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 399.326871][T10560] ? mac80211_hwsim_free+0x220/0x220 [ 399.332198][T10560] ? rcu_is_watching+0x15/0xb0 [ 399.336995][T10560] ? kstrndup+0xbd/0x140 [ 399.341286][T10560] hwsim_new_radio_nl+0xdad/0x1a70 [ 399.346437][T10560] ? __nla_validate+0x50/0x50 [ 399.351159][T10560] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 399.357535][T10560] ? __nla_parse+0x40/0x50 [ 399.361980][T10560] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 399.368355][T10560] genl_family_rcv_msg_doit+0x21a/0x310 [ 399.373943][T10560] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 399.379876][T10560] ? bpf_lsm_capable+0x9/0x10 [ 399.384600][T10560] ? security_capable+0x89/0xb0 [ 399.389495][T10560] genl_rcv_msg+0x611/0x7a0 [ 399.394042][T10560] ? genl_bind+0x360/0x360 [ 399.398493][T10560] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 399.404886][T10560] netlink_rcv_skb+0x235/0x4c0 [ 399.409682][T10560] ? genl_bind+0x360/0x360 [ 399.414136][T10560] ? netlink_ack+0x1160/0x1160 [ 399.418941][T10560] ? __lock_acquire+0x7d80/0x7d80 [ 399.424003][T10560] ? down_read+0x1ac/0x2e0 [ 399.428456][T10560] genl_rcv+0x28/0x40 [ 399.432593][T10560] netlink_unicast+0x7b1/0x930 [ 399.437422][T10560] netlink_sendmsg+0x8d0/0xbf0 [ 399.442234][T10560] ? lockdep_hardirqs_on+0x98/0x150 [ 399.447483][T10560] ? netlink_getsockopt+0x590/0x590 [ 399.452728][T10560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 399.458045][T10560] ? security_socket_sendmsg+0x80/0xa0 [ 399.463537][T10560] ? netlink_getsockopt+0x590/0x590 [ 399.468771][T10560] ____sys_sendmsg+0x61b/0x980 [ 399.473604][T10560] ? __asan_memset+0x22/0x40 [ 399.478260][T10560] ? __sys_sendmsg_sock+0x30/0x30 [ 399.483336][T10560] ? __import_iovec+0x5f2/0x850 [ 399.488251][T10560] ? import_iovec+0x73/0xa0 [ 399.492816][T10560] ___sys_sendmsg+0x2a6/0x360 [ 399.497551][T10560] ? __sys_sendmsg+0x2b0/0x2b0 [ 399.502373][T10560] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.508596][T10560] __se_sys_sendmsg+0x1d0/0x2c0 [ 399.513488][T10560] ? perf_trace_preemptirq_template+0x269/0x330 [ 399.519787][T10560] ? __x64_sys_sendmsg+0x80/0x80 [ 399.524784][T10560] ? lockdep_hardirqs_on+0x98/0x150 [ 399.530030][T10560] do_syscall_64+0x55/0xb0 [ 399.534485][T10560] ? clear_bhb_loop+0x40/0x90 [ 399.539191][T10560] ? clear_bhb_loop+0x40/0x90 [ 399.543895][T10560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.549828][T10560] RIP: 0033:0x7f2f5e79ce59 [ 399.554277][T10560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.573923][T10560] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.582380][T10560] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 399.590384][T10560] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 399.598397][T10560] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 399.606393][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.614393][T10560] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 399.622414][T10560] [ 400.136046][T10572] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1680'. [ 400.269730][T10572] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 400.291313][T10572] CPU: 1 PID: 10572 Comm: syz.2.1680 Not tainted syzkaller #0 [ 400.298868][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.309017][T10572] Call Trace: [ 400.312352][T10572] [ 400.315332][T10572] dump_stack_lvl+0x18c/0x250 [ 400.320070][T10572] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.326292][T10572] ? show_regs_print_info+0x20/0x20 [ 400.331552][T10572] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.337804][T10572] sysfs_warn_dup+0x8e/0xa0 [ 400.342370][T10572] sysfs_do_create_link_sd+0xc0/0x110 [ 400.347804][T10572] device_add_class_symlinks+0x1cf/0x240 [ 400.353514][T10572] device_add+0x4f9/0xc40 [ 400.357909][T10572] wiphy_register+0x1d99/0x2ac0 [ 400.362840][T10572] ? cfg80211_event_work+0x40/0x40 [ 400.368023][T10572] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.374276][T10572] ieee80211_register_hw+0x2dd8/0x3b30 [ 400.379819][T10572] ? ieee80211_register_hw+0xfc1/0x3b30 [ 400.385445][T10572] ? ieee80211_tasklet_handler+0x20/0x20 [ 400.391143][T10572] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 400.397181][T10572] ? __debug_object_init+0xec/0x450 [ 400.402423][T10572] ? __asan_memset+0x22/0x40 [ 400.407053][T10572] ? __hrtimer_init+0x189/0x270 [ 400.411944][T10572] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 400.417722][T10572] ? mac80211_hwsim_free+0x220/0x220 [ 400.423049][T10572] ? rcu_is_watching+0x15/0xb0 [ 400.427855][T10572] ? kstrndup+0xbd/0x140 [ 400.432146][T10572] hwsim_new_radio_nl+0xdad/0x1a70 [ 400.437297][T10572] ? __nla_validate+0x50/0x50 [ 400.442023][T10572] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 400.448402][T10572] ? __nla_parse+0x40/0x50 [ 400.452864][T10572] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 400.459238][T10572] genl_family_rcv_msg_doit+0x21a/0x310 [ 400.464824][T10572] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 400.470762][T10572] ? bpf_lsm_capable+0x9/0x10 [ 400.475485][T10572] ? security_capable+0x89/0xb0 [ 400.480384][T10572] genl_rcv_msg+0x611/0x7a0 [ 400.484941][T10572] ? genl_bind+0x360/0x360 [ 400.489388][T10572] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 400.495805][T10572] ? netlink_rcv_skb+0x61/0x4c0 [ 400.500707][T10572] ? netlink_rcv_skb+0x10a/0x4c0 [ 400.506623][T10572] netlink_rcv_skb+0x235/0x4c0 [ 400.511879][T10572] ? genl_bind+0x360/0x360 [ 400.516366][T10572] ? netlink_ack+0x1160/0x1160 [ 400.521175][T10572] ? __lock_acquire+0x7d80/0x7d80 [ 400.526266][T10572] ? down_read+0x1ac/0x2e0 [ 400.530746][T10572] genl_rcv+0x28/0x40 [ 400.534780][T10572] netlink_unicast+0x7b1/0x930 [ 400.539595][T10572] netlink_sendmsg+0x8d0/0xbf0 [ 400.544391][T10572] ? lockdep_hardirqs_on+0x98/0x150 [ 400.549644][T10572] ? netlink_getsockopt+0x590/0x590 [ 400.554882][T10572] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 400.560206][T10572] ? security_socket_sendmsg+0x80/0xa0 [ 400.565699][T10572] ? netlink_getsockopt+0x590/0x590 [ 400.570938][T10572] ____sys_sendmsg+0x61b/0x980 [ 400.575751][T10572] ? __asan_memset+0x22/0x40 [ 400.580390][T10572] ? __sys_sendmsg_sock+0x30/0x30 [ 400.585451][T10572] ? __import_iovec+0x5f2/0x850 [ 400.590350][T10572] ? import_iovec+0x73/0xa0 [ 400.594895][T10572] ___sys_sendmsg+0x2a6/0x360 [ 400.599619][T10572] ? __sys_sendmsg+0x2b0/0x2b0 [ 400.604449][T10572] ? ktime_get+0x7f/0x280 [ 400.608843][T10572] __se_sys_sendmsg+0x1d0/0x2c0 [ 400.613732][T10572] ? perf_trace_preemptirq_template+0x269/0x330 [ 400.620020][T10572] ? __x64_sys_sendmsg+0x80/0x80 [ 400.625037][T10572] ? lockdep_hardirqs_on+0x98/0x150 [ 400.630302][T10572] do_syscall_64+0x55/0xb0 [ 400.634768][T10572] ? clear_bhb_loop+0x40/0x90 [ 400.639477][T10572] ? clear_bhb_loop+0x40/0x90 [ 400.644221][T10572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.650182][T10572] RIP: 0033:0x7f2f5e79ce59 [ 400.654630][T10572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.674271][T10572] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.682722][T10572] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 400.690729][T10572] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 400.698731][T10572] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 400.706733][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.714741][T10572] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 400.722771][T10572] [ 400.874709][T10574] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1672'. [ 400.959440][T10574] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 400.998565][T10574] CPU: 1 PID: 10574 Comm: syz.0.1672 Not tainted syzkaller #0 [ 401.006129][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.016238][T10574] Call Trace: [ 401.019586][T10574] [ 401.022566][T10574] dump_stack_lvl+0x18c/0x250 [ 401.027322][T10574] ? show_regs_print_info+0x20/0x20 [ 401.032586][T10574] ? load_image+0x420/0x420 [ 401.037157][T10574] sysfs_warn_dup+0x8e/0xa0 [ 401.041720][T10574] sysfs_do_create_link_sd+0xc0/0x110 [ 401.047435][T10574] device_add_class_symlinks+0x1cf/0x240 [ 401.053196][T10574] device_add+0x4f9/0xc40 [ 401.057605][T10574] wiphy_register+0x1d99/0x2ac0 [ 401.062556][T10574] ? cfg80211_event_work+0x40/0x40 [ 401.067736][T10574] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.073981][T10574] ? ieee80211_register_hw+0x2978/0x3b30 [ 401.079702][T10574] ieee80211_register_hw+0x2dd8/0x3b30 [ 401.085248][T10574] ? ieee80211_register_hw+0xfc1/0x3b30 [ 401.090879][T10574] ? ieee80211_tasklet_handler+0x20/0x20 [ 401.096587][T10574] ? __hrtimer_next_event_base+0x261/0x2d0 [ 401.102464][T10574] ? kasan_check_range+0x89/0x290 [ 401.107558][T10574] ? __asan_memset+0x22/0x40 [ 401.112220][T10574] ? __hrtimer_init+0x189/0x270 [ 401.117136][T10574] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 401.122938][T10574] ? mac80211_hwsim_free+0x220/0x220 [ 401.128285][T10574] ? rcu_is_watching+0x15/0xb0 [ 401.133098][T10574] ? kstrndup+0xbd/0x140 [ 401.137447][T10574] hwsim_new_radio_nl+0xdad/0x1a70 [ 401.142608][T10574] ? __nla_validate+0x50/0x50 [ 401.147333][T10574] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 401.153707][T10574] ? memset_orig+0x7b/0xac [ 401.158160][T10574] ? __nla_parse+0x40/0x50 [ 401.162614][T10574] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 401.169017][T10574] genl_family_rcv_msg_doit+0x21a/0x310 [ 401.174620][T10574] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 401.180554][T10574] ? bpf_lsm_capable+0x9/0x10 [ 401.185319][T10574] ? security_capable+0x89/0xb0 [ 401.190310][T10574] genl_rcv_msg+0x611/0x7a0 [ 401.194861][T10574] ? genl_bind+0x360/0x360 [ 401.199400][T10574] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 401.205869][T10574] netlink_rcv_skb+0x235/0x4c0 [ 401.210672][T10574] ? genl_bind+0x360/0x360 [ 401.215128][T10574] ? netlink_ack+0x1160/0x1160 [ 401.219940][T10574] ? __lock_acquire+0x7d80/0x7d80 [ 401.225008][T10574] ? net_generic+0x1e/0x240 [ 401.229554][T10574] ? down_read+0x1ac/0x2e0 [ 401.234035][T10574] genl_rcv+0x28/0x40 [ 401.238054][T10574] netlink_unicast+0x7b1/0x930 [ 401.242868][T10574] netlink_sendmsg+0x8d0/0xbf0 [ 401.247676][T10574] ? netlink_getsockopt+0x590/0x590 [ 401.252930][T10574] ? netlink_getsockopt+0x590/0x590 [ 401.258523][T10574] ____sys_sendmsg+0x61b/0x980 [ 401.263333][T10574] ? __asan_memset+0x22/0x40 [ 401.267971][T10574] ? __sys_sendmsg_sock+0x30/0x30 [ 401.273044][T10574] ? __import_iovec+0x5f2/0x850 [ 401.277938][T10574] ? import_iovec+0x73/0xa0 [ 401.282484][T10574] ___sys_sendmsg+0x2a6/0x360 [ 401.287208][T10574] ? __sys_sendmsg+0x2b0/0x2b0 [ 401.292055][T10574] __se_sys_sendmsg+0x1d0/0x2c0 [ 401.296951][T10574] ? __x64_sys_sendmsg+0x80/0x80 [ 401.301946][T10574] ? syscall_enter_from_user_mode+0x2e/0x80 [ 401.307946][T10574] do_syscall_64+0x55/0xb0 [ 401.312410][T10574] ? clear_bhb_loop+0x40/0x90 [ 401.317117][T10574] ? clear_bhb_loop+0x40/0x90 [ 401.321833][T10574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.327857][T10574] RIP: 0033:0x7fcbc179ce59 [ 401.332361][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.352018][T10574] RSP: 002b:00007fcbc266d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.360478][T10574] RAX: ffffffffffffffda RBX: 00007fcbc1a15fa0 RCX: 00007fcbc179ce59 [ 401.368490][T10574] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 401.376498][T10574] RBP: 00007fcbc1832e6f R08: 0000000000000000 R09: 0000000000000000 [ 401.384498][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.392503][T10574] R13: 00007fcbc1a16038 R14: 00007fcbc1a15fa0 R15: 00007ffcaa53e578 [ 401.400526][T10574] [ 401.913592][T10595] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1681'. [ 402.177503][T10595] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 402.206717][T10595] CPU: 0 PID: 10595 Comm: syz.1.1681 Not tainted syzkaller #0 [ 402.214282][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.224409][T10595] Call Trace: [ 402.227737][T10595] [ 402.230715][T10595] dump_stack_lvl+0x18c/0x250 [ 402.235467][T10595] ? show_regs_print_info+0x20/0x20 [ 402.240731][T10595] ? load_image+0x420/0x420 [ 402.245295][T10595] sysfs_warn_dup+0x8e/0xa0 [ 402.249844][T10595] sysfs_do_create_link_sd+0xc0/0x110 [ 402.255263][T10595] device_add_class_symlinks+0x1cf/0x240 [ 402.261067][T10595] device_add+0x4f9/0xc40 [ 402.265508][T10595] wiphy_register+0x1d99/0x2ac0 [ 402.270458][T10595] ? cfg80211_event_work+0x40/0x40 [ 402.275636][T10595] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 402.281863][T10595] ? ieee80211_register_hw+0x2d37/0x3b30 [ 402.287660][T10595] ieee80211_register_hw+0x2dd8/0x3b30 [ 402.293206][T10595] ? ieee80211_register_hw+0xfc1/0x3b30 [ 402.298819][T10595] ? ieee80211_tasklet_handler+0x20/0x20 [ 402.304592][T10595] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 402.310546][T10595] ? __debug_object_init+0xec/0x450 [ 402.315850][T10595] ? __asan_memset+0x22/0x40 [ 402.320524][T10595] ? __hrtimer_init+0x189/0x270 [ 402.325439][T10595] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 402.331260][T10595] ? mac80211_hwsim_free+0x220/0x220 [ 402.336618][T10595] ? rcu_is_watching+0x15/0xb0 [ 402.341438][T10595] ? kstrndup+0xbd/0x140 [ 402.345746][T10595] hwsim_new_radio_nl+0xdad/0x1a70 [ 402.350927][T10595] ? __nla_validate+0x50/0x50 [ 402.355671][T10595] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 402.362152][T10595] ? __nla_parse+0x24/0x50 [ 402.366648][T10595] ? __nla_parse+0x40/0x50 [ 402.371131][T10595] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 402.377535][T10595] genl_family_rcv_msg_doit+0x21a/0x310 [ 402.383138][T10595] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 402.389097][T10595] ? bpf_lsm_capable+0x9/0x10 [ 402.393846][T10595] ? security_capable+0x89/0xb0 [ 402.398769][T10595] genl_rcv_msg+0x611/0x7a0 [ 402.403342][T10595] ? genl_bind+0x360/0x360 [ 402.407829][T10595] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 402.414229][T10595] netlink_rcv_skb+0x235/0x4c0 [ 402.419133][T10595] ? genl_bind+0x360/0x360 [ 402.423767][T10595] ? netlink_ack+0x1160/0x1160 [ 402.428625][T10595] ? genl_bind+0x360/0x360 [ 402.433098][T10595] genl_rcv+0x28/0x40 [ 402.437125][T10595] netlink_unicast+0x7b1/0x930 [ 402.441955][T10595] netlink_sendmsg+0x8d0/0xbf0 [ 402.446875][T10595] ? netlink_getsockopt+0x590/0x590 [ 402.452123][T10595] ? aa_sock_msg_perm+0x94/0x150 [ 402.457200][T10595] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.462542][T10595] ? security_socket_sendmsg+0x80/0xa0 [ 402.468059][T10595] ? netlink_getsockopt+0x590/0x590 [ 402.473323][T10595] ____sys_sendmsg+0x61b/0x980 [ 402.478176][T10595] ? __asan_memset+0x22/0x40 [ 402.482844][T10595] ? __sys_sendmsg_sock+0x30/0x30 [ 402.487935][T10595] ? __import_iovec+0x5f2/0x850 [ 402.492919][T10595] ? import_iovec+0x73/0xa0 [ 402.497482][T10595] ___sys_sendmsg+0x2a6/0x360 [ 402.502217][T10595] ? __sys_sendmsg+0x2b0/0x2b0 [ 402.507044][T10595] ? irqentry_enter+0x37/0x50 [ 402.511833][T10595] __se_sys_sendmsg+0x1d0/0x2c0 [ 402.516746][T10595] ? __x64_sys_sendmsg+0x80/0x80 [ 402.521765][T10595] ? syscall_enter_from_user_mode+0x2e/0x80 [ 402.527721][T10595] do_syscall_64+0x55/0xb0 [ 402.532195][T10595] ? clear_bhb_loop+0x40/0x90 [ 402.536931][T10595] ? clear_bhb_loop+0x40/0x90 [ 402.541696][T10595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.547660][T10595] RIP: 0033:0x7f1a22d9ce59 [ 402.552120][T10595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.571786][T10595] RSP: 002b:00007f1a23ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.580262][T10595] RAX: ffffffffffffffda RBX: 00007f1a23015fa0 RCX: 00007f1a22d9ce59 [ 402.588286][T10595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 402.596324][T10595] RBP: 00007f1a22e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 402.604341][T10595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.612364][T10595] R13: 00007f1a23016038 R14: 00007f1a23015fa0 R15: 00007ffdbdd24e48 [ 402.620408][T10595] [ 402.762637][T10597] sit0: entered promiscuous mode [ 403.381725][T10609] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1686'. [ 403.620312][T10609] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 403.630052][T10609] CPU: 0 PID: 10609 Comm: syz.2.1686 Not tainted syzkaller #0 [ 403.637574][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.647727][T10609] Call Trace: [ 403.651061][T10609] [ 403.654045][T10609] dump_stack_lvl+0x18c/0x250 [ 403.658797][T10609] ? show_regs_print_info+0x20/0x20 [ 403.664066][T10609] ? load_image+0x420/0x420 [ 403.668627][T10609] sysfs_warn_dup+0x8e/0xa0 [ 403.673176][T10609] sysfs_do_create_link_sd+0xc0/0x110 [ 403.678604][T10609] device_add_class_symlinks+0x1cf/0x240 [ 403.684300][T10609] device_add+0x4f9/0xc40 [ 403.688682][T10609] wiphy_register+0x1d99/0x2ac0 [ 403.693593][T10609] ? cfg80211_event_work+0x40/0x40 [ 403.698754][T10609] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 403.704871][T10609] ieee80211_register_hw+0x2dd8/0x3b30 [ 403.710389][T10609] ? ieee80211_register_hw+0xfc1/0x3b30 [ 403.716070][T10609] ? ieee80211_tasklet_handler+0x20/0x20 [ 403.721733][T10609] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 403.727937][T10609] ? __debug_object_init+0xec/0x450 [ 403.733189][T10609] ? __asan_memset+0x22/0x40 [ 403.737832][T10609] ? __hrtimer_init+0x189/0x270 [ 403.742736][T10609] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 403.748523][T10609] ? mac80211_hwsim_free+0x220/0x220 [ 403.753845][T10609] ? rcu_is_watching+0x15/0xb0 [ 403.758649][T10609] ? kstrndup+0xbd/0x140 [ 403.762948][T10609] hwsim_new_radio_nl+0xdad/0x1a70 [ 403.768108][T10609] ? __nla_validate+0x50/0x50 [ 403.772836][T10609] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 403.779222][T10609] ? __nla_parse+0x40/0x50 [ 403.783676][T10609] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 403.790057][T10609] genl_family_rcv_msg_doit+0x21a/0x310 [ 403.795651][T10609] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 403.801592][T10609] ? bpf_lsm_capable+0x9/0x10 [ 403.806311][T10609] ? security_capable+0x89/0xb0 [ 403.811210][T10609] genl_rcv_msg+0x611/0x7a0 [ 403.815758][T10609] ? genl_bind+0x360/0x360 [ 403.820204][T10609] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 403.826230][T10609] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 403.832624][T10609] ? ref_tracker_free+0x686/0x830 [ 403.837705][T10609] netlink_rcv_skb+0x235/0x4c0 [ 403.842508][T10609] ? genl_bind+0x360/0x360 [ 403.846965][T10609] ? netlink_ack+0x1160/0x1160 [ 403.851777][T10609] ? __lock_acquire+0x7d80/0x7d80 [ 403.856848][T10609] ? down_read+0x1ac/0x2e0 [ 403.861306][T10609] genl_rcv+0x28/0x40 [ 403.865324][T10609] netlink_unicast+0x7b1/0x930 [ 403.870138][T10609] netlink_sendmsg+0x8d0/0xbf0 [ 403.874935][T10609] ? lockdep_hardirqs_on+0x98/0x150 [ 403.880183][T10609] ? netlink_getsockopt+0x590/0x590 [ 403.885425][T10609] ? aa_sock_msg_perm+0x94/0x150 [ 403.890408][T10609] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 403.895730][T10609] ? security_socket_sendmsg+0x80/0xa0 [ 403.901227][T10609] ? netlink_getsockopt+0x590/0x590 [ 403.906470][T10609] ____sys_sendmsg+0x61b/0x980 [ 403.911281][T10609] ? __asan_memset+0x22/0x40 [ 403.915915][T10609] ? __sys_sendmsg_sock+0x30/0x30 [ 403.920979][T10609] ? __import_iovec+0x5f2/0x850 [ 403.925872][T10609] ? import_iovec+0x73/0xa0 [ 403.930417][T10609] ___sys_sendmsg+0x2a6/0x360 [ 403.935145][T10609] ? __sys_sendmsg+0x2b0/0x2b0 [ 403.939997][T10609] __se_sys_sendmsg+0x1d0/0x2c0 [ 403.944906][T10609] ? __x64_sys_sendmsg+0x80/0x80 [ 403.949910][T10609] ? syscall_enter_from_user_mode+0x2e/0x80 [ 403.955861][T10609] do_syscall_64+0x55/0xb0 [ 403.960324][T10609] ? clear_bhb_loop+0x40/0x90 [ 403.965033][T10609] ? clear_bhb_loop+0x40/0x90 [ 403.969747][T10609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.975690][T10609] RIP: 0033:0x7f2f5e79ce59 [ 403.980145][T10609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.999799][T10609] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.008284][T10609] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 404.016294][T10609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 404.024303][T10609] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 404.032308][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.040312][T10609] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 404.048337][T10609] [ 404.154215][T10602] netlink: 'syz.3.1684': attribute type 10 has an invalid length. [ 404.264304][T10617] netlink: 'syz.1.1688': attribute type 10 has an invalid length. [ 404.425685][T10617] netlink: 'syz.1.1688': attribute type 3 has an invalid length. [ 404.463142][T10617] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 404.503246][T10617] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1688'. [ 404.829558][T10625] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1691'. [ 405.029306][T10625] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 405.038107][T10625] CPU: 0 PID: 10625 Comm: syz.2.1691 Not tainted syzkaller #0 [ 405.045639][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.055758][T10625] Call Trace: [ 405.059085][T10625] [ 405.062055][T10625] dump_stack_lvl+0x18c/0x250 [ 405.066816][T10625] ? show_regs_print_info+0x20/0x20 [ 405.072091][T10625] ? load_image+0x420/0x420 [ 405.076703][T10625] sysfs_warn_dup+0x8e/0xa0 [ 405.081271][T10625] sysfs_do_create_link_sd+0xc0/0x110 [ 405.086710][T10625] device_add_class_symlinks+0x1cf/0x240 [ 405.092425][T10625] device_add+0x4f9/0xc40 [ 405.096829][T10625] wiphy_register+0x1d99/0x2ac0 [ 405.101777][T10625] ? cfg80211_event_work+0x40/0x40 [ 405.106944][T10625] ? minstrel_ht_alloc+0x88a/0x990 [ 405.112163][T10625] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 405.118301][T10625] ieee80211_register_hw+0x2dd8/0x3b30 [ 405.123846][T10625] ? ieee80211_register_hw+0xfc1/0x3b30 [ 405.129473][T10625] ? ieee80211_tasklet_handler+0x20/0x20 [ 405.135169][T10625] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 405.141136][T10625] ? __debug_object_init+0xec/0x450 [ 405.146408][T10625] ? __asan_memset+0x22/0x40 [ 405.151065][T10625] ? __hrtimer_init+0x189/0x270 [ 405.155980][T10625] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 405.161765][T10625] ? lock_chain_count+0x20/0x20 [ 405.166724][T10625] ? mac80211_hwsim_free+0x220/0x220 [ 405.172076][T10625] ? kstrndup+0x95/0x140 [ 405.176394][T10625] ? kstrndup+0xbd/0x140 [ 405.180709][T10625] hwsim_new_radio_nl+0xdad/0x1a70 [ 405.185933][T10625] ? __nla_validate+0x50/0x50 [ 405.190687][T10625] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 405.197104][T10625] ? __nla_parse+0x40/0x50 [ 405.201600][T10625] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 405.208010][T10625] genl_family_rcv_msg_doit+0x21a/0x310 [ 405.213630][T10625] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 405.219603][T10625] ? bpf_lsm_capable+0x9/0x10 [ 405.224349][T10625] ? security_capable+0x89/0xb0 [ 405.229273][T10625] genl_rcv_msg+0x611/0x7a0 [ 405.233850][T10625] ? genl_bind+0x360/0x360 [ 405.238335][T10625] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 405.244762][T10625] netlink_rcv_skb+0x235/0x4c0 [ 405.249588][T10625] ? genl_bind+0x360/0x360 [ 405.254065][T10625] ? netlink_ack+0x1160/0x1160 [ 405.258925][T10625] ? __lock_acquire+0x7d80/0x7d80 [ 405.264024][T10625] ? down_read+0x1ac/0x2e0 [ 405.268594][T10625] genl_rcv+0x28/0x40 [ 405.272642][T10625] netlink_unicast+0x7b1/0x930 [ 405.277475][T10625] netlink_sendmsg+0x8d0/0xbf0 [ 405.282318][T10625] ? netlink_getsockopt+0x590/0x590 [ 405.287606][T10625] ? aa_sock_msg_perm+0x94/0x150 [ 405.292631][T10625] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 405.298035][T10625] ? security_socket_sendmsg+0x80/0xa0 [ 405.303555][T10625] ? netlink_getsockopt+0x590/0x590 [ 405.308819][T10625] ____sys_sendmsg+0x61b/0x980 [ 405.313657][T10625] ? __asan_memset+0x22/0x40 [ 405.318333][T10625] ? __sys_sendmsg_sock+0x30/0x30 [ 405.323526][T10625] ? __import_iovec+0x5f2/0x850 [ 405.328457][T10625] ? import_iovec+0x73/0xa0 [ 405.333030][T10625] ___sys_sendmsg+0x2a6/0x360 [ 405.337779][T10625] ? __sys_sendmsg+0x2b0/0x2b0 [ 405.342735][T10625] __se_sys_sendmsg+0x1d0/0x2c0 [ 405.347662][T10625] ? __x64_sys_sendmsg+0x80/0x80 [ 405.352705][T10625] ? syscall_enter_from_user_mode+0x2e/0x80 [ 405.358681][T10625] do_syscall_64+0x55/0xb0 [ 405.363166][T10625] ? clear_bhb_loop+0x40/0x90 [ 405.367896][T10625] ? clear_bhb_loop+0x40/0x90 [ 405.372642][T10625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.378611][T10625] RIP: 0033:0x7f2f5e79ce59 [ 405.383139][T10625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.402814][T10625] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.411292][T10625] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 405.419319][T10625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 405.427953][T10625] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 405.435979][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.444007][T10625] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 405.452057][T10625] [ 405.755909][T10633] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1695'. [ 405.861686][T10635] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1696'. [ 405.998497][T10635] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 406.023115][T10635] CPU: 0 PID: 10635 Comm: syz.2.1696 Not tainted syzkaller #0 [ 406.030673][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.040785][T10635] Call Trace: [ 406.044108][T10635] [ 406.047086][T10635] dump_stack_lvl+0x18c/0x250 [ 406.051830][T10635] ? show_regs_print_info+0x20/0x20 [ 406.057089][T10635] ? load_image+0x420/0x420 [ 406.061665][T10635] sysfs_warn_dup+0x8e/0xa0 [ 406.066223][T10635] sysfs_do_create_link_sd+0xc0/0x110 [ 406.071667][T10635] device_add_class_symlinks+0x1cf/0x240 [ 406.077382][T10635] device_add+0x4f9/0xc40 [ 406.081777][T10635] wiphy_register+0x1d99/0x2ac0 [ 406.086719][T10635] ? cfg80211_event_work+0x40/0x40 [ 406.091888][T10635] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.098128][T10635] ? ieee80211_register_hw+0x2b5c/0x3b30 [ 406.103833][T10635] ieee80211_register_hw+0x2dd8/0x3b30 [ 406.109371][T10635] ? ieee80211_register_hw+0xfc1/0x3b30 [ 406.114991][T10635] ? ieee80211_tasklet_handler+0x20/0x20 [ 406.120693][T10635] ? __asan_memset+0x22/0x40 [ 406.125348][T10635] ? __hrtimer_init+0x189/0x270 [ 406.130261][T10635] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 406.136074][T10635] ? mac80211_hwsim_free+0x220/0x220 [ 406.141419][T10635] ? kstrndup+0xbd/0x140 [ 406.145731][T10635] hwsim_new_radio_nl+0xdad/0x1a70 [ 406.150913][T10635] ? __nla_validate+0x50/0x50 [ 406.155666][T10635] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 406.162073][T10635] ? __nla_parse+0x40/0x50 [ 406.166580][T10635] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 406.172986][T10635] genl_family_rcv_msg_doit+0x21a/0x310 [ 406.178614][T10635] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 406.184597][T10635] genl_rcv_msg+0x611/0x7a0 [ 406.189187][T10635] ? genl_bind+0x360/0x360 [ 406.193666][T10635] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 406.200061][T10635] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.206292][T10635] netlink_rcv_skb+0x235/0x4c0 [ 406.211126][T10635] ? genl_bind+0x360/0x360 [ 406.215602][T10635] ? netlink_ack+0x1160/0x1160 [ 406.220441][T10635] ? __lock_acquire+0x7d80/0x7d80 [ 406.225569][T10635] ? down_read+0x1ac/0x2e0 [ 406.230061][T10635] genl_rcv+0x28/0x40 [ 406.234103][T10635] netlink_unicast+0x7b1/0x930 [ 406.238943][T10635] netlink_sendmsg+0x8d0/0xbf0 [ 406.243761][T10635] ? lockdep_hardirqs_on+0x98/0x150 [ 406.249025][T10635] ? netlink_getsockopt+0x590/0x590 [ 406.254316][T10635] ? bpf_lsm_socket_accept+0x10/0x10 [ 406.260367][T10635] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 406.265711][T10635] ? security_socket_sendmsg+0x80/0xa0 [ 406.271227][T10635] ? netlink_getsockopt+0x590/0x590 [ 406.276489][T10635] ____sys_sendmsg+0x61b/0x980 [ 406.281320][T10635] ? __asan_memset+0x22/0x40 [ 406.285979][T10635] ? __sys_sendmsg_sock+0x30/0x30 [ 406.291061][T10635] ? __import_iovec+0x5f2/0x850 [ 406.295975][T10635] ? import_iovec+0x73/0xa0 [ 406.300538][T10635] ___sys_sendmsg+0x2a6/0x360 [ 406.305287][T10635] ? __sys_sendmsg+0x2b0/0x2b0 [ 406.310140][T10635] ? trace_call_bpf+0xc3/0x6c0 [ 406.315006][T10635] __se_sys_sendmsg+0x1d0/0x2c0 [ 406.319924][T10635] ? __x64_sys_sendmsg+0x80/0x80 [ 406.324943][T10635] ? lockdep_hardirqs_on+0x98/0x150 [ 406.330223][T10635] do_syscall_64+0x55/0xb0 [ 406.334712][T10635] ? clear_bhb_loop+0x40/0x90 [ 406.339441][T10635] ? clear_bhb_loop+0x40/0x90 [ 406.344172][T10635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.350173][T10635] RIP: 0033:0x7f2f5e79ce59 [ 406.354662][T10635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.374336][T10635] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.382812][T10635] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 406.390866][T10635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 406.398891][T10635] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 406.406919][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.415246][T10635] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 406.423305][T10635] [ 406.958802][T10646] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1700'. [ 406.976748][T10646] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 406.988962][T10646] CPU: 0 PID: 10646 Comm: syz.3.1700 Not tainted syzkaller #0 [ 406.996504][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.006618][T10646] Call Trace: [ 407.009951][T10646] [ 407.012932][T10646] dump_stack_lvl+0x18c/0x250 [ 407.017675][T10646] ? show_regs_print_info+0x20/0x20 [ 407.022949][T10646] ? load_image+0x420/0x420 [ 407.027571][T10646] sysfs_warn_dup+0x8e/0xa0 [ 407.032147][T10646] sysfs_do_create_link_sd+0xc0/0x110 [ 407.037613][T10646] device_add_class_symlinks+0x1cf/0x240 [ 407.043323][T10646] device_add+0x4f9/0xc40 [ 407.047721][T10646] wiphy_register+0x1d99/0x2ac0 [ 407.052628][T10646] ? cfg80211_event_work+0x40/0x40 [ 407.057779][T10646] ? minstrel_ht_alloc+0x88a/0x990 [ 407.062938][T10646] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 407.069063][T10646] ieee80211_register_hw+0x2dd8/0x3b30 [ 407.074847][T10646] ? ieee80211_register_hw+0xfc1/0x3b30 [ 407.080439][T10646] ? ieee80211_tasklet_handler+0x20/0x20 [ 407.086112][T10646] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 407.092051][T10646] ? __debug_object_init+0xec/0x450 [ 407.097299][T10646] ? __asan_memset+0x22/0x40 [ 407.101932][T10646] ? __hrtimer_init+0x189/0x270 [ 407.106825][T10646] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 407.112692][T10646] ? mac80211_hwsim_free+0x220/0x220 [ 407.118045][T10646] ? rcu_is_watching+0x15/0xb0 [ 407.122848][T10646] ? kstrndup+0xbd/0x140 [ 407.127136][T10646] hwsim_new_radio_nl+0xdad/0x1a70 [ 407.132296][T10646] ? __nla_validate+0x50/0x50 [ 407.137018][T10646] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 407.143394][T10646] ? __nla_parse+0x40/0x50 [ 407.147850][T10646] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 407.154243][T10646] genl_family_rcv_msg_doit+0x21a/0x310 [ 407.159859][T10646] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 407.165797][T10646] ? bpf_lsm_capable+0x9/0x10 [ 407.170518][T10646] ? security_capable+0x89/0xb0 [ 407.175413][T10646] genl_rcv_msg+0x611/0x7a0 [ 407.180047][T10646] ? genl_bind+0x360/0x360 [ 407.184534][T10646] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 407.190907][T10646] ? ref_tracker_free+0x686/0x830 [ 407.195977][T10646] ? __kasan_kmalloc_large+0x8b/0xa0 [ 407.201310][T10646] netlink_rcv_skb+0x235/0x4c0 [ 407.206114][T10646] ? genl_bind+0x360/0x360 [ 407.210566][T10646] ? netlink_ack+0x1160/0x1160 [ 407.215387][T10646] ? __lock_acquire+0x7d80/0x7d80 [ 407.220450][T10646] ? down_read+0x1ac/0x2e0 [ 407.224914][T10646] genl_rcv+0x28/0x40 [ 407.228927][T10646] netlink_unicast+0x7b1/0x930 [ 407.233727][T10646] netlink_sendmsg+0x8d0/0xbf0 [ 407.238533][T10646] ? netlink_getsockopt+0x590/0x590 [ 407.243768][T10646] ? aa_sock_msg_perm+0x94/0x150 [ 407.248835][T10646] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 407.254151][T10646] ? security_socket_sendmsg+0x80/0xa0 [ 407.259637][T10646] ? netlink_getsockopt+0x590/0x590 [ 407.264872][T10646] ____sys_sendmsg+0x61b/0x980 [ 407.269681][T10646] ? __asan_memset+0x22/0x40 [ 407.274314][T10646] ? __sys_sendmsg_sock+0x30/0x30 [ 407.279396][T10646] ? __import_iovec+0x5f2/0x850 [ 407.284303][T10646] ? import_iovec+0x73/0xa0 [ 407.288850][T10646] ___sys_sendmsg+0x2a6/0x360 [ 407.293574][T10646] ? __sys_sendmsg+0x2b0/0x2b0 [ 407.298396][T10646] ? trace_call_bpf+0xc3/0x6c0 [ 407.303227][T10646] __se_sys_sendmsg+0x1d0/0x2c0 [ 407.308117][T10646] ? __x64_sys_sendmsg+0x80/0x80 [ 407.313107][T10646] ? lockdep_hardirqs_on+0x98/0x150 [ 407.318346][T10646] do_syscall_64+0x55/0xb0 [ 407.322799][T10646] ? clear_bhb_loop+0x40/0x90 [ 407.327507][T10646] ? clear_bhb_loop+0x40/0x90 [ 407.332214][T10646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.338148][T10646] RIP: 0033:0x7f352359ce59 [ 407.342596][T10646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.362259][T10646] RSP: 002b:00007f3524509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.370730][T10646] RAX: ffffffffffffffda RBX: 00007f3523815fa0 RCX: 00007f352359ce59 [ 407.378744][T10646] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 407.386766][T10646] RBP: 00007f3523632e6f R08: 0000000000000000 R09: 0000000000000000 [ 407.394788][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.402881][T10646] R13: 00007f3523816038 R14: 00007f3523815fa0 R15: 00007fff6897f968 [ 407.410903][T10646] [ 407.829585][T10652] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1702'. [ 407.983389][T10656] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 408.153180][T10656] team0: Device wg1 is of different type [ 408.255988][T10652] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 408.269221][T10652] CPU: 0 PID: 10652 Comm: syz.0.1702 Not tainted syzkaller #0 [ 408.276853][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.286965][T10652] Call Trace: [ 408.290333][T10652] [ 408.293311][T10652] dump_stack_lvl+0x18c/0x250 [ 408.298143][T10652] ? show_regs_print_info+0x20/0x20 [ 408.303402][T10652] ? load_image+0x420/0x420 [ 408.307973][T10652] sysfs_warn_dup+0x8e/0xa0 [ 408.312540][T10652] sysfs_do_create_link_sd+0xc0/0x110 [ 408.317972][T10652] device_add_class_symlinks+0x1cf/0x240 [ 408.323673][T10652] device_add+0x4f9/0xc40 [ 408.328081][T10652] wiphy_register+0x1d99/0x2ac0 [ 408.333026][T10652] ? cfg80211_event_work+0x40/0x40 [ 408.338198][T10652] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.344445][T10652] ieee80211_register_hw+0x2dd8/0x3b30 [ 408.350026][T10652] ? ieee80211_register_hw+0xfc1/0x3b30 [ 408.355649][T10652] ? ieee80211_tasklet_handler+0x20/0x20 [ 408.361340][T10652] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 408.367305][T10652] ? __debug_object_init+0xec/0x450 [ 408.372672][T10652] ? __asan_memset+0x22/0x40 [ 408.377326][T10652] ? __hrtimer_init+0x189/0x270 [ 408.382233][T10652] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 408.388040][T10652] ? mac80211_hwsim_free+0x220/0x220 [ 408.393386][T10652] ? rcu_is_watching+0x15/0xb0 [ 408.398211][T10652] ? kstrndup+0xbd/0x140 [ 408.402538][T10652] hwsim_new_radio_nl+0xdad/0x1a70 [ 408.407722][T10652] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 408.413603][T10652] ? mark_lock+0x94/0x320 [ 408.418013][T10652] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 408.424413][T10652] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.430721][T10652] ? lockdep_hardirqs_on+0x98/0x150 [ 408.435993][T10652] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.442235][T10652] genl_family_rcv_msg_doit+0x21a/0x310 [ 408.447857][T10652] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 408.453965][T10652] ? bpf_lsm_capable+0x9/0x10 [ 408.458720][T10652] ? security_capable+0x89/0xb0 [ 408.463664][T10652] genl_rcv_msg+0x611/0x7a0 [ 408.468250][T10652] ? genl_bind+0x360/0x360 [ 408.472733][T10652] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 408.479125][T10652] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.485352][T10652] ? lockdep_hardirqs_on+0x98/0x150 [ 408.490621][T10652] netlink_rcv_skb+0x235/0x4c0 [ 408.495453][T10652] ? genl_bind+0x360/0x360 [ 408.499940][T10652] ? netlink_ack+0x1160/0x1160 [ 408.504769][T10652] ? __lock_acquire+0x7d80/0x7d80 [ 408.509837][T10652] ? net_generic+0x1e/0x240 [ 408.514402][T10652] ? down_read+0x1ac/0x2e0 [ 408.518887][T10652] genl_rcv+0x28/0x40 [ 408.522948][T10652] netlink_unicast+0x7b1/0x930 [ 408.527788][T10652] netlink_sendmsg+0x8d0/0xbf0 [ 408.532602][T10652] ? lockdep_hardirqs_on+0x98/0x150 [ 408.537874][T10652] ? netlink_getsockopt+0x590/0x590 [ 408.543126][T10652] ? aa_sock_msg_perm+0x94/0x150 [ 408.548128][T10652] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 408.553472][T10652] ? security_socket_sendmsg+0x80/0xa0 [ 408.558993][T10652] ? netlink_getsockopt+0x590/0x590 [ 408.564698][T10652] ____sys_sendmsg+0x61b/0x980 [ 408.569601][T10652] ? __asan_memset+0x22/0x40 [ 408.574260][T10652] ? __sys_sendmsg_sock+0x30/0x30 [ 408.579349][T10652] ? __import_iovec+0x5f2/0x850 [ 408.584268][T10652] ? import_iovec+0x73/0xa0 [ 408.588827][T10652] ___sys_sendmsg+0x2a6/0x360 [ 408.593562][T10652] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 408.599438][T10652] ? __sys_sendmsg+0x2b0/0x2b0 [ 408.604293][T10652] ? lockdep_hardirqs_on+0x98/0x150 [ 408.609565][T10652] __se_sys_sendmsg+0x1d0/0x2c0 [ 408.614552][T10652] ? __x64_sys_sendmsg+0x80/0x80 [ 408.619664][T10652] ? syscall_enter_from_user_mode+0x2e/0x80 [ 408.625631][T10652] do_syscall_64+0x55/0xb0 [ 408.630109][T10652] ? clear_bhb_loop+0x40/0x90 [ 408.634854][T10652] ? clear_bhb_loop+0x40/0x90 [ 408.639600][T10652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.645564][T10652] RIP: 0033:0x7fcbc179ce59 [ 408.650037][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.669709][T10652] RSP: 002b:00007fcbc266d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.678189][T10652] RAX: ffffffffffffffda RBX: 00007fcbc1a15fa0 RCX: 00007fcbc179ce59 [ 408.686310][T10652] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 408.694344][T10652] RBP: 00007fcbc1832e6f R08: 0000000000000000 R09: 0000000000000000 [ 408.702408][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.710443][T10652] R13: 00007fcbc1a16038 R14: 00007fcbc1a15fa0 R15: 00007ffcaa53e578 [ 408.718582][T10652] [ 409.209298][T10662] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1706'. [ 409.381463][T10662] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 409.393552][T10662] CPU: 0 PID: 10662 Comm: syz.3.1706 Not tainted syzkaller #0 [ 409.401107][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.411213][T10662] Call Trace: [ 409.414554][T10662] [ 409.417527][T10662] dump_stack_lvl+0x18c/0x250 [ 409.422278][T10662] ? show_regs_print_info+0x20/0x20 [ 409.427539][T10662] ? load_image+0x420/0x420 [ 409.432124][T10662] sysfs_warn_dup+0x8e/0xa0 [ 409.436684][T10662] sysfs_do_create_link_sd+0xc0/0x110 [ 409.442172][T10662] device_add_class_symlinks+0x1cf/0x240 [ 409.447921][T10662] device_add+0x4f9/0xc40 [ 409.452324][T10662] wiphy_register+0x1d99/0x2ac0 [ 409.457532][T10662] ? cfg80211_event_work+0x40/0x40 [ 409.462975][T10662] ? minstrel_ht_alloc+0x88a/0x990 [ 409.468143][T10662] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 409.474267][T10662] ieee80211_register_hw+0x2dd8/0x3b30 [ 409.479782][T10662] ? ieee80211_register_hw+0xfc1/0x3b30 [ 409.485375][T10662] ? ieee80211_tasklet_handler+0x20/0x20 [ 409.491044][T10662] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 409.497006][T10662] ? __debug_object_init+0xec/0x450 [ 409.502252][T10662] ? __asan_memset+0x22/0x40 [ 409.506888][T10662] ? __hrtimer_init+0x189/0x270 [ 409.511792][T10662] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 409.517573][T10662] ? mac80211_hwsim_free+0x220/0x220 [ 409.522915][T10662] ? rcu_is_watching+0x15/0xb0 [ 409.527725][T10662] ? kstrndup+0xbd/0x140 [ 409.532020][T10662] hwsim_new_radio_nl+0xdad/0x1a70 [ 409.537182][T10662] ? mark_lock+0x94/0x320 [ 409.541551][T10662] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 409.548010][T10662] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.554230][T10662] ? lockdep_hardirqs_on+0x98/0x150 [ 409.559472][T10662] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.565681][T10662] genl_family_rcv_msg_doit+0x21a/0x310 [ 409.571269][T10662] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 409.577228][T10662] ? bpf_lsm_capable+0x9/0x10 [ 409.581950][T10662] ? security_capable+0x89/0xb0 [ 409.586848][T10662] genl_rcv_msg+0x611/0x7a0 [ 409.591404][T10662] ? genl_bind+0x360/0x360 [ 409.595863][T10662] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 409.602235][T10662] netlink_rcv_skb+0x235/0x4c0 [ 409.607039][T10662] ? genl_bind+0x360/0x360 [ 409.611497][T10662] ? netlink_ack+0x1160/0x1160 [ 409.616313][T10662] ? genl_bind+0x360/0x360 [ 409.620791][T10662] genl_rcv+0x28/0x40 [ 409.624822][T10662] netlink_unicast+0x7b1/0x930 [ 409.629643][T10662] netlink_sendmsg+0x8d0/0xbf0 [ 409.634463][T10662] ? netlink_getsockopt+0x590/0x590 [ 409.639783][T10662] ? aa_sock_msg_perm+0x94/0x150 [ 409.644760][T10662] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 409.650087][T10662] ? security_socket_sendmsg+0x80/0xa0 [ 409.655586][T10662] ? netlink_getsockopt+0x590/0x590 [ 409.660825][T10662] ____sys_sendmsg+0x61b/0x980 [ 409.665640][T10662] ? __asan_memset+0x22/0x40 [ 409.670298][T10662] ? __sys_sendmsg_sock+0x30/0x30 [ 409.675356][T10662] ? __import_iovec+0x5f2/0x850 [ 409.680249][T10662] ? import_iovec+0x73/0xa0 [ 409.684792][T10662] ___sys_sendmsg+0x2a6/0x360 [ 409.689512][T10662] ? __sys_sendmsg+0x2b0/0x2b0 [ 409.694429][T10662] __se_sys_sendmsg+0x1d0/0x2c0 [ 409.699324][T10662] ? __x64_sys_sendmsg+0x80/0x80 [ 409.704294][T10662] ? lockdep_hardirqs_on+0x98/0x150 [ 409.709541][T10662] ? __x64_sys_sendmsg+0x4f/0x80 [ 409.714523][T10662] do_syscall_64+0x55/0xb0 [ 409.718969][T10662] ? clear_bhb_loop+0x40/0x90 [ 409.723670][T10662] ? clear_bhb_loop+0x40/0x90 [ 409.728725][T10662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.734655][T10662] RIP: 0033:0x7f352359ce59 [ 409.739452][T10662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.759184][T10662] RSP: 002b:00007f3524509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.767638][T10662] RAX: ffffffffffffffda RBX: 00007f3523815fa0 RCX: 00007f352359ce59 [ 409.775647][T10662] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 409.783648][T10662] RBP: 00007f3523632e6f R08: 0000000000000000 R09: 0000000000000000 [ 409.791647][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.799647][T10662] R13: 00007f3523816038 R14: 00007f3523815fa0 R15: 00007fff6897f968 [ 409.807671][T10662] [ 409.892335][T10666] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1707'. [ 410.130142][T10680] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1711'. [ 410.144844][T10680] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 410.153277][T10680] CPU: 1 PID: 10680 Comm: syz.3.1711 Not tainted syzkaller #0 [ 410.160806][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.170927][T10680] Call Trace: [ 410.174263][T10680] [ 410.177246][T10680] dump_stack_lvl+0x18c/0x250 [ 410.181988][T10680] ? show_regs_print_info+0x20/0x20 [ 410.187264][T10680] ? load_image+0x420/0x420 [ 410.191839][T10680] sysfs_warn_dup+0x8e/0xa0 [ 410.196382][T10680] sysfs_do_create_link_sd+0xc0/0x110 [ 410.201795][T10680] device_add_class_symlinks+0x1cf/0x240 [ 410.207476][T10680] device_add+0x4f9/0xc40 [ 410.211848][T10680] wiphy_register+0x1d99/0x2ac0 [ 410.216751][T10680] ? cfg80211_event_work+0x40/0x40 [ 410.221902][T10680] ? minstrel_ht_alloc+0x88a/0x990 [ 410.227051][T10680] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 410.233163][T10680] ieee80211_register_hw+0x2dd8/0x3b30 [ 410.238669][T10680] ? ieee80211_register_hw+0xfc1/0x3b30 [ 410.244260][T10680] ? ieee80211_tasklet_handler+0x20/0x20 [ 410.249949][T10680] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 410.255987][T10680] ? __debug_object_init+0xec/0x450 [ 410.261333][T10680] ? __asan_memset+0x22/0x40 [ 410.265980][T10680] ? __hrtimer_init+0x189/0x270 [ 410.270970][T10680] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 410.276749][T10680] ? mac80211_hwsim_free+0x220/0x220 [ 410.282077][T10680] ? rcu_is_watching+0x15/0xb0 [ 410.286888][T10680] ? kstrndup+0xbd/0x140 [ 410.291178][T10680] hwsim_new_radio_nl+0xdad/0x1a70 [ 410.296328][T10680] ? __nla_validate+0x50/0x50 [ 410.301046][T10680] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 410.307424][T10680] ? __nla_parse+0x40/0x50 [ 410.311876][T10680] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 410.318246][T10680] genl_family_rcv_msg_doit+0x21a/0x310 [ 410.323840][T10680] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 410.329787][T10680] ? bpf_lsm_capable+0x9/0x10 [ 410.334508][T10680] ? security_capable+0x89/0xb0 [ 410.339403][T10680] genl_rcv_msg+0x611/0x7a0 [ 410.343955][T10680] ? genl_bind+0x360/0x360 [ 410.348427][T10680] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 410.354822][T10680] ? ref_tracker_free+0x686/0x830 [ 410.359896][T10680] ? __kasan_kmalloc_large+0x8b/0xa0 [ 410.365232][T10680] netlink_rcv_skb+0x235/0x4c0 [ 410.370041][T10680] ? genl_bind+0x360/0x360 [ 410.374509][T10680] ? netlink_ack+0x1160/0x1160 [ 410.379317][T10680] ? __lock_acquire+0x7d80/0x7d80 [ 410.384387][T10680] ? down_read+0x1ac/0x2e0 [ 410.388852][T10680] genl_rcv+0x28/0x40 [ 410.392895][T10680] netlink_unicast+0x7b1/0x930 [ 410.397709][T10680] netlink_sendmsg+0x8d0/0xbf0 [ 410.402521][T10680] ? netlink_getsockopt+0x590/0x590 [ 410.407753][T10680] ? aa_sock_msg_perm+0x94/0x150 [ 410.412757][T10680] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.418106][T10680] ? security_socket_sendmsg+0x80/0xa0 [ 410.423611][T10680] ? netlink_getsockopt+0x590/0x590 [ 410.428863][T10680] ____sys_sendmsg+0x61b/0x980 [ 410.433679][T10680] ? __asan_memset+0x22/0x40 [ 410.438320][T10680] ? __sys_sendmsg_sock+0x30/0x30 [ 410.443380][T10680] ? __import_iovec+0x5f2/0x850 [ 410.448274][T10680] ? import_iovec+0x73/0xa0 [ 410.452818][T10680] ___sys_sendmsg+0x2a6/0x360 [ 410.457537][T10680] ? __sys_sendmsg+0x2b0/0x2b0 [ 410.462355][T10680] ? trace_call_bpf+0xc3/0x6c0 [ 410.467184][T10680] __se_sys_sendmsg+0x1d0/0x2c0 [ 410.472087][T10680] ? perf_trace_preemptirq_template+0x269/0x330 [ 410.478368][T10680] ? __x64_sys_sendmsg+0x80/0x80 [ 410.483460][T10680] ? lockdep_hardirqs_on+0x98/0x150 [ 410.488738][T10680] do_syscall_64+0x55/0xb0 [ 410.493207][T10680] ? clear_bhb_loop+0x40/0x90 [ 410.497938][T10680] ? clear_bhb_loop+0x40/0x90 [ 410.502686][T10680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.508647][T10680] RIP: 0033:0x7f352359ce59 [ 410.513105][T10680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.532752][T10680] RSP: 002b:00007f3524509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.541239][T10680] RAX: ffffffffffffffda RBX: 00007f3523815fa0 RCX: 00007f352359ce59 [ 410.549255][T10680] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 410.557265][T10680] RBP: 00007f3523632e6f R08: 0000000000000000 R09: 0000000000000000 [ 410.565277][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.573292][T10680] R13: 00007f3523816038 R14: 00007f3523815fa0 R15: 00007fff6897f968 [ 410.581369][T10680] [ 410.950465][T10685] netlink: 'syz.0.1710': attribute type 10 has an invalid length. [ 411.013638][T10685] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 411.063283][T10681] sit0: entered promiscuous mode [ 411.481458][T10692] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1716'. [ 411.570590][T10692] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 411.614005][T10692] CPU: 1 PID: 10692 Comm: syz.2.1716 Not tainted syzkaller #0 [ 411.621558][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.631680][T10692] Call Trace: [ 411.635039][T10692] [ 411.638023][T10692] dump_stack_lvl+0x18c/0x250 [ 411.642764][T10692] ? show_regs_print_info+0x20/0x20 [ 411.648017][T10692] ? load_image+0x420/0x420 [ 411.652588][T10692] sysfs_warn_dup+0x8e/0xa0 [ 411.657157][T10692] sysfs_do_create_link_sd+0xc0/0x110 [ 411.662595][T10692] device_add_class_symlinks+0x1cf/0x240 [ 411.668323][T10692] device_add+0x4f9/0xc40 [ 411.672729][T10692] wiphy_register+0x1d99/0x2ac0 [ 411.677674][T10692] ? cfg80211_event_work+0x40/0x40 [ 411.682862][T10692] ? minstrel_ht_alloc+0x88a/0x990 [ 411.688053][T10692] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 411.694205][T10692] ieee80211_register_hw+0x2dd8/0x3b30 [ 411.699767][T10692] ? ieee80211_register_hw+0xfc1/0x3b30 [ 411.705422][T10692] ? ieee80211_tasklet_handler+0x20/0x20 [ 411.711116][T10692] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 411.717091][T10692] ? __debug_object_init+0xec/0x450 [ 411.722358][T10692] ? __asan_memset+0x22/0x40 [ 411.727016][T10692] ? __hrtimer_init+0x189/0x270 [ 411.731939][T10692] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 411.737769][T10692] ? mac80211_hwsim_free+0x220/0x220 [ 411.743122][T10692] ? rcu_is_watching+0x15/0xb0 [ 411.747955][T10692] ? kstrndup+0xbd/0x140 [ 411.752279][T10692] hwsim_new_radio_nl+0xdad/0x1a70 [ 411.757475][T10692] ? __nla_validate+0x50/0x50 [ 411.762229][T10692] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 411.768648][T10692] ? __nla_parse+0x40/0x50 [ 411.773140][T10692] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 411.779546][T10692] genl_family_rcv_msg_doit+0x21a/0x310 [ 411.785173][T10692] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 411.791146][T10692] ? bpf_lsm_capable+0x9/0x10 [ 411.795893][T10692] ? security_capable+0x89/0xb0 [ 411.800931][T10692] genl_rcv_msg+0x611/0x7a0 [ 411.805509][T10692] ? genl_bind+0x360/0x360 [ 411.809992][T10692] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 411.816395][T10692] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 411.822297][T10692] netlink_rcv_skb+0x235/0x4c0 [ 411.827150][T10692] ? genl_bind+0x360/0x360 [ 411.831641][T10692] ? netlink_ack+0x1160/0x1160 [ 411.836498][T10692] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.842749][T10692] ? down_read+0x1ac/0x2e0 [ 411.847244][T10692] genl_rcv+0x28/0x40 [ 411.851289][T10692] netlink_unicast+0x7b1/0x930 [ 411.856174][T10692] netlink_sendmsg+0x8d0/0xbf0 [ 411.861031][T10692] ? netlink_getsockopt+0x590/0x590 [ 411.866304][T10692] ? aa_sock_msg_perm+0x94/0x150 [ 411.871325][T10692] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 411.876680][T10692] ? security_socket_sendmsg+0x80/0xa0 [ 411.882217][T10692] ? netlink_getsockopt+0x590/0x590 [ 411.887485][T10692] ____sys_sendmsg+0x61b/0x980 [ 411.892335][T10692] ? __asan_memset+0x22/0x40 [ 411.897078][T10692] ? __sys_sendmsg_sock+0x30/0x30 [ 411.902167][T10692] ? __import_iovec+0x5f2/0x850 [ 411.907183][T10692] ? import_iovec+0x73/0xa0 [ 411.911756][T10692] ___sys_sendmsg+0x2a6/0x360 [ 411.916588][T10692] ? __sys_sendmsg+0x2b0/0x2b0 [ 411.921486][T10692] __se_sys_sendmsg+0x1d0/0x2c0 [ 411.926414][T10692] ? __x64_sys_sendmsg+0x80/0x80 [ 411.931435][T10692] ? syscall_enter_from_user_mode+0x2e/0x80 [ 411.937411][T10692] do_syscall_64+0x55/0xb0 [ 411.941895][T10692] ? clear_bhb_loop+0x40/0x90 [ 411.946635][T10692] ? clear_bhb_loop+0x40/0x90 [ 411.951467][T10692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.957437][T10692] RIP: 0033:0x7f2f5e79ce59 [ 411.961915][T10692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.981629][T10692] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.990126][T10692] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 411.998160][T10692] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 412.006201][T10692] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 412.014232][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.022267][T10692] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 412.030319][T10692] [ 412.193850][T10695] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1717'. [ 412.301812][T10695] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 412.317430][T10695] CPU: 1 PID: 10695 Comm: syz.1.1717 Not tainted syzkaller #0 [ 412.325125][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.335245][T10695] Call Trace: [ 412.338568][T10695] [ 412.341620][T10695] dump_stack_lvl+0x18c/0x250 [ 412.346347][T10695] ? show_regs_print_info+0x20/0x20 [ 412.351582][T10695] ? load_image+0x420/0x420 [ 412.356127][T10695] sysfs_warn_dup+0x8e/0xa0 [ 412.360671][T10695] sysfs_do_create_link_sd+0xc0/0x110 [ 412.366080][T10695] device_add_class_symlinks+0x1cf/0x240 [ 412.371762][T10695] device_add+0x4f9/0xc40 [ 412.376127][T10695] wiphy_register+0x1d99/0x2ac0 [ 412.381036][T10695] ? cfg80211_event_work+0x40/0x40 [ 412.386186][T10695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.392390][T10695] ieee80211_register_hw+0x2dd8/0x3b30 [ 412.397903][T10695] ? ieee80211_register_hw+0xfc1/0x3b30 [ 412.403579][T10695] ? ieee80211_tasklet_handler+0x20/0x20 [ 412.409243][T10695] ? lockdep_hardirqs_on+0x98/0x150 [ 412.414482][T10695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.420691][T10695] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 412.426470][T10695] ? mac80211_hwsim_free+0x220/0x220 [ 412.431785][T10695] ? rcu_is_watching+0x15/0xb0 [ 412.436590][T10695] ? kstrndup+0xbd/0x140 [ 412.440878][T10695] hwsim_new_radio_nl+0xdad/0x1a70 [ 412.446025][T10695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 412.452046][T10695] ? lock_chain_count+0x20/0x20 [ 412.456923][T10695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 412.462965][T10695] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 412.469372][T10695] ? __nla_parse+0x44/0x50 [ 412.473835][T10695] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 412.480213][T10695] genl_family_rcv_msg_doit+0x21a/0x310 [ 412.485805][T10695] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 412.491834][T10695] ? bpf_lsm_capable+0x9/0x10 [ 412.496545][T10695] ? security_capable+0x89/0xb0 [ 412.501434][T10695] genl_rcv_msg+0x611/0x7a0 [ 412.505983][T10695] ? genl_bind+0x360/0x360 [ 412.510428][T10695] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 412.516800][T10695] netlink_rcv_skb+0x235/0x4c0 [ 412.521598][T10695] ? genl_bind+0x360/0x360 [ 412.526050][T10695] ? netlink_ack+0x1160/0x1160 [ 412.530863][T10695] ? __lock_acquire+0x7d80/0x7d80 [ 412.535928][T10695] ? net_generic+0x1e/0x240 [ 412.540465][T10695] ? down_read+0x1ac/0x2e0 [ 412.544927][T10695] genl_rcv+0x28/0x40 [ 412.548945][T10695] netlink_unicast+0x7b1/0x930 [ 412.553768][T10695] netlink_sendmsg+0x8d0/0xbf0 [ 412.558606][T10695] ? netlink_getsockopt+0x590/0x590 [ 412.563857][T10695] ? aa_sock_msg_perm+0x94/0x150 [ 412.568842][T10695] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 412.574178][T10695] ? security_socket_sendmsg+0x80/0xa0 [ 412.579775][T10695] ? netlink_getsockopt+0x590/0x590 [ 412.585024][T10695] ____sys_sendmsg+0x61b/0x980 [ 412.589842][T10695] ? __asan_memset+0x22/0x40 [ 412.594471][T10695] ? __sys_sendmsg_sock+0x30/0x30 [ 412.599531][T10695] ? __import_iovec+0x5f2/0x850 [ 412.604429][T10695] ? import_iovec+0x73/0xa0 [ 412.608964][T10695] ___sys_sendmsg+0x2a6/0x360 [ 412.613686][T10695] ? __sys_sendmsg+0x2b0/0x2b0 [ 412.618526][T10695] __se_sys_sendmsg+0x1d0/0x2c0 [ 412.623415][T10695] ? __x64_sys_sendmsg+0x80/0x80 [ 412.628416][T10695] do_syscall_64+0x55/0xb0 [ 412.632872][T10695] ? clear_bhb_loop+0x40/0x90 [ 412.637581][T10695] ? clear_bhb_loop+0x40/0x90 [ 412.642290][T10695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.648225][T10695] RIP: 0033:0x7f1a22d9ce59 [ 412.652675][T10695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.672441][T10695] RSP: 002b:00007f1a23ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.680899][T10695] RAX: ffffffffffffffda RBX: 00007f1a23015fa0 RCX: 00007f1a22d9ce59 [ 412.688908][T10695] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 412.696912][T10695] RBP: 00007f1a22e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 412.704912][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.712932][T10695] R13: 00007f1a23016038 R14: 00007f1a23015fa0 R15: 00007ffdbdd24e48 [ 412.721036][T10695] [ 413.960713][T10722] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1725'. [ 414.000488][T10722] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 414.011800][T10722] CPU: 0 PID: 10722 Comm: syz.2.1725 Not tainted syzkaller #0 [ 414.019359][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.029471][T10722] Call Trace: [ 414.032810][T10722] [ 414.035797][T10722] dump_stack_lvl+0x18c/0x250 [ 414.040603][T10722] ? show_regs_print_info+0x20/0x20 [ 414.045878][T10722] ? load_image+0x420/0x420 [ 414.050469][T10722] sysfs_warn_dup+0x8e/0xa0 [ 414.055060][T10722] sysfs_do_create_link_sd+0xc0/0x110 [ 414.060503][T10722] device_add_class_symlinks+0x1cf/0x240 [ 414.066272][T10722] device_add+0x4f9/0xc40 [ 414.070714][T10722] wiphy_register+0x1d99/0x2ac0 [ 414.075662][T10722] ? cfg80211_event_work+0x40/0x40 [ 414.080848][T10722] ? minstrel_ht_alloc+0x88a/0x990 [ 414.086040][T10722] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 414.092202][T10722] ieee80211_register_hw+0x2dd8/0x3b30 [ 414.097757][T10722] ? ieee80211_register_hw+0xfc1/0x3b30 [ 414.103394][T10722] ? ieee80211_tasklet_handler+0x20/0x20 [ 414.109099][T10722] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 414.115079][T10722] ? __debug_object_init+0xec/0x450 [ 414.120359][T10722] ? __asan_memset+0x22/0x40 [ 414.125003][T10722] ? __hrtimer_init+0x189/0x270 [ 414.129895][T10722] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 414.135677][T10722] ? mac80211_hwsim_free+0x220/0x220 [ 414.141028][T10722] ? rcu_is_watching+0x15/0xb0 [ 414.145833][T10722] ? kstrndup+0xbd/0x140 [ 414.150128][T10722] hwsim_new_radio_nl+0xdad/0x1a70 [ 414.155285][T10722] ? __nla_validate+0x50/0x50 [ 414.160018][T10722] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 414.166392][T10722] ? __nla_parse+0x40/0x50 [ 414.170851][T10722] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 414.177223][T10722] genl_family_rcv_msg_doit+0x21a/0x310 [ 414.182819][T10722] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 414.189648][T10722] ? bpf_lsm_capable+0x9/0x10 [ 414.194386][T10722] ? security_capable+0x89/0xb0 [ 414.199289][T10722] genl_rcv_msg+0x611/0x7a0 [ 414.203844][T10722] ? genl_bind+0x360/0x360 [ 414.208288][T10722] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 414.214313][T10722] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 414.220711][T10722] ? ref_tracker_free+0x686/0x830 [ 414.225794][T10722] netlink_rcv_skb+0x235/0x4c0 [ 414.230604][T10722] ? genl_bind+0x360/0x360 [ 414.235066][T10722] ? netlink_ack+0x1160/0x1160 [ 414.239880][T10722] ? __lock_acquire+0x7d80/0x7d80 [ 414.244946][T10722] ? down_read+0x1ac/0x2e0 [ 414.249401][T10722] genl_rcv+0x28/0x40 [ 414.253418][T10722] netlink_unicast+0x7b1/0x930 [ 414.258220][T10722] netlink_sendmsg+0x8d0/0xbf0 [ 414.263018][T10722] ? lockdep_hardirqs_on+0x98/0x150 [ 414.268273][T10722] ? netlink_getsockopt+0x590/0x590 [ 414.273508][T10722] ? security_socket_sendmsg+0x37/0xa0 [ 414.279045][T10722] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 414.284390][T10722] ? security_socket_sendmsg+0x80/0xa0 [ 414.289887][T10722] ? netlink_getsockopt+0x590/0x590 [ 414.295122][T10722] ____sys_sendmsg+0x61b/0x980 [ 414.299925][T10722] ? __asan_memset+0x22/0x40 [ 414.304553][T10722] ? __sys_sendmsg_sock+0x30/0x30 [ 414.309609][T10722] ? __import_iovec+0x5f2/0x850 [ 414.314514][T10722] ? import_iovec+0x73/0xa0 [ 414.319058][T10722] ___sys_sendmsg+0x2a6/0x360 [ 414.323808][T10722] ? __sys_sendmsg+0x2b0/0x2b0 [ 414.328742][T10722] __se_sys_sendmsg+0x1d0/0x2c0 [ 414.333634][T10722] ? __x64_sys_sendmsg+0x80/0x80 [ 414.338626][T10722] ? syscall_enter_from_user_mode+0x2e/0x80 [ 414.344571][T10722] do_syscall_64+0x55/0xb0 [ 414.349025][T10722] ? clear_bhb_loop+0x40/0x90 [ 414.353735][T10722] ? clear_bhb_loop+0x40/0x90 [ 414.358444][T10722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.364376][T10722] RIP: 0033:0x7f2f5e79ce59 [ 414.368827][T10722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.388488][T10722] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.396942][T10722] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 414.404955][T10722] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 414.412965][T10722] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 414.420968][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.428971][T10722] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 414.437000][T10722] [ 414.568207][T10724] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1728'. [ 414.994017][T10726] sit0: entered promiscuous mode [ 416.572066][T10753] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1738'. [ 416.631796][T10753] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 416.648222][T10753] CPU: 0 PID: 10753 Comm: syz.3.1738 Not tainted syzkaller #0 [ 416.655790][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.665909][T10753] Call Trace: [ 416.669240][T10753] [ 416.672225][T10753] dump_stack_lvl+0x18c/0x250 [ 416.677022][T10753] ? show_regs_print_info+0x20/0x20 [ 416.682299][T10753] ? load_image+0x420/0x420 [ 416.686885][T10753] sysfs_warn_dup+0x8e/0xa0 [ 416.691446][T10753] sysfs_do_create_link_sd+0xc0/0x110 [ 416.696881][T10753] device_add_class_symlinks+0x1cf/0x240 [ 416.702584][T10753] device_add+0x4f9/0xc40 [ 416.707120][T10753] wiphy_register+0x1d99/0x2ac0 [ 416.712061][T10753] ? cfg80211_event_work+0x40/0x40 [ 416.717233][T10753] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.723472][T10753] ? ieee80211_register_hw+0x2bff/0x3b30 [ 416.729209][T10753] ieee80211_register_hw+0x2dd8/0x3b30 [ 416.734753][T10753] ? ieee80211_register_hw+0xfc1/0x3b30 [ 416.740370][T10753] ? ieee80211_tasklet_handler+0x20/0x20 [ 416.746067][T10753] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 416.752030][T10753] ? __debug_object_init+0xec/0x450 [ 416.757306][T10753] ? __asan_memset+0x22/0x40 [ 416.761968][T10753] ? __hrtimer_init+0x189/0x270 [ 416.766885][T10753] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 416.772705][T10753] ? mac80211_hwsim_free+0x220/0x220 [ 416.778052][T10753] ? rcu_is_watching+0x15/0xb0 [ 416.782870][T10753] ? kstrndup+0xbd/0x140 [ 416.787166][T10753] hwsim_new_radio_nl+0xdad/0x1a70 [ 416.792316][T10753] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 416.798166][T10753] ? mark_lock+0x94/0x320 [ 416.802539][T10753] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 416.808917][T10753] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.815115][T10753] ? lockdep_hardirqs_on+0x98/0x150 [ 416.820358][T10753] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.826570][T10753] genl_family_rcv_msg_doit+0x21a/0x310 [ 416.832162][T10753] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 416.838108][T10753] ? bpf_lsm_capable+0x9/0x10 [ 416.842827][T10753] ? security_capable+0x89/0xb0 [ 416.847729][T10753] genl_rcv_msg+0x611/0x7a0 [ 416.852325][T10753] ? genl_bind+0x360/0x360 [ 416.856780][T10753] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 416.863147][T10753] ? netlink_rcv_skb+0x142/0x4c0 [ 416.868129][T10753] netlink_rcv_skb+0x235/0x4c0 [ 416.872933][T10753] ? genl_bind+0x360/0x360 [ 416.877387][T10753] ? netlink_ack+0x1160/0x1160 [ 416.882198][T10753] ? __lock_acquire+0x7d80/0x7d80 [ 416.887300][T10753] ? down_read+0x1ac/0x2e0 [ 416.892224][T10753] genl_rcv+0x28/0x40 [ 416.896264][T10753] netlink_unicast+0x7b1/0x930 [ 416.901104][T10753] netlink_sendmsg+0x8d0/0xbf0 [ 416.905927][T10753] ? netlink_getsockopt+0x590/0x590 [ 416.911198][T10753] ? aa_sock_msg_perm+0x94/0x150 [ 416.916181][T10753] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 416.921503][T10753] ? security_socket_sendmsg+0x80/0xa0 [ 416.927001][T10753] ? netlink_getsockopt+0x590/0x590 [ 416.932278][T10753] ____sys_sendmsg+0x61b/0x980 [ 416.937094][T10753] ? __asan_memset+0x22/0x40 [ 416.941724][T10753] ? __sys_sendmsg_sock+0x30/0x30 [ 416.946781][T10753] ? __import_iovec+0x5f2/0x850 [ 416.951677][T10753] ? import_iovec+0x73/0xa0 [ 416.956216][T10753] ___sys_sendmsg+0x2a6/0x360 [ 416.960937][T10753] ? __sys_sendmsg+0x2b0/0x2b0 [ 416.965789][T10753] __se_sys_sendmsg+0x1d0/0x2c0 [ 416.970676][T10753] ? __x64_sys_sendmsg+0x80/0x80 [ 416.975756][T10753] do_syscall_64+0x55/0xb0 [ 416.980300][T10753] ? clear_bhb_loop+0x40/0x90 [ 416.985008][T10753] ? clear_bhb_loop+0x40/0x90 [ 416.989747][T10753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.995683][T10753] RIP: 0033:0x7f352359ce59 [ 417.000134][T10753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.019788][T10753] RSP: 002b:00007f3524509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.028248][T10753] RAX: ffffffffffffffda RBX: 00007f3523815fa0 RCX: 00007f352359ce59 [ 417.036267][T10753] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 417.044279][T10753] RBP: 00007f3523632e6f R08: 0000000000000000 R09: 0000000000000000 [ 417.052290][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.060299][T10753] R13: 00007f3523816038 R14: 00007f3523815fa0 R15: 00007fff6897f968 [ 417.068334][T10753] [ 417.139103][T10755] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1736'. [ 417.182073][T10755] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 417.191568][T10755] CPU: 0 PID: 10755 Comm: syz.2.1736 Not tainted syzkaller #0 [ 417.199132][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.209316][T10755] Call Trace: [ 417.212624][T10755] [ 417.215583][T10755] dump_stack_lvl+0x18c/0x250 [ 417.220300][T10755] ? show_regs_print_info+0x20/0x20 [ 417.225626][T10755] ? load_image+0x420/0x420 [ 417.230167][T10755] sysfs_warn_dup+0x8e/0xa0 [ 417.234702][T10755] sysfs_do_create_link_sd+0xc0/0x110 [ 417.240101][T10755] device_add_class_symlinks+0x1cf/0x240 [ 417.245797][T10755] device_add+0x4f9/0xc40 [ 417.250180][T10755] wiphy_register+0x1d99/0x2ac0 [ 417.255082][T10755] ? cfg80211_event_work+0x40/0x40 [ 417.260226][T10755] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.266444][T10755] ieee80211_register_hw+0x2dd8/0x3b30 [ 417.271956][T10755] ? ieee80211_register_hw+0xfc1/0x3b30 [ 417.277569][T10755] ? ieee80211_tasklet_handler+0x20/0x20 [ 417.283297][T10755] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 417.289269][T10755] ? __debug_object_init+0xec/0x450 [ 417.294526][T10755] ? __asan_memset+0x22/0x40 [ 417.299178][T10755] ? __hrtimer_init+0x189/0x270 [ 417.304069][T10755] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 417.309851][T10755] ? mac80211_hwsim_free+0x220/0x220 [ 417.315183][T10755] ? kstrndup+0xbd/0x140 [ 417.319480][T10755] hwsim_new_radio_nl+0xdad/0x1a70 [ 417.324637][T10755] ? __nla_validate+0x50/0x50 [ 417.329361][T10755] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 417.335743][T10755] ? __nla_parse+0x40/0x50 [ 417.340196][T10755] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 417.346603][T10755] genl_family_rcv_msg_doit+0x21a/0x310 [ 417.352199][T10755] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 417.358141][T10755] ? bpf_lsm_capable+0x9/0x10 [ 417.362857][T10755] ? security_capable+0x89/0xb0 [ 417.367758][T10755] genl_rcv_msg+0x611/0x7a0 [ 417.372310][T10755] ? genl_bind+0x360/0x360 [ 417.376773][T10755] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 417.383198][T10755] netlink_rcv_skb+0x235/0x4c0 [ 417.388026][T10755] ? genl_bind+0x360/0x360 [ 417.392568][T10755] ? netlink_ack+0x1160/0x1160 [ 417.397395][T10755] ? __lock_acquire+0x7d80/0x7d80 [ 417.402463][T10755] ? down_read+0x1ac/0x2e0 [ 417.407004][T10755] genl_rcv+0x28/0x40 [ 417.411025][T10755] netlink_unicast+0x7b1/0x930 [ 417.415828][T10755] netlink_sendmsg+0x8d0/0xbf0 [ 417.420708][T10755] ? lockdep_hardirqs_on+0x98/0x150 [ 417.426769][T10755] ? netlink_getsockopt+0x590/0x590 [ 417.432025][T10755] ? aa_sock_msg_perm+0x94/0x150 [ 417.437013][T10755] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.442344][T10755] ? security_socket_sendmsg+0x80/0xa0 [ 417.447842][T10755] ? netlink_getsockopt+0x590/0x590 [ 417.453107][T10755] ____sys_sendmsg+0x61b/0x980 [ 417.457946][T10755] ? __asan_memset+0x22/0x40 [ 417.462589][T10755] ? __sys_sendmsg_sock+0x30/0x30 [ 417.467648][T10755] ? __import_iovec+0x5f2/0x850 [ 417.472541][T10755] ? import_iovec+0x73/0xa0 [ 417.477074][T10755] ___sys_sendmsg+0x2a6/0x360 [ 417.481791][T10755] ? __sys_sendmsg+0x2b0/0x2b0 [ 417.486645][T10755] __se_sys_sendmsg+0x1d0/0x2c0 [ 417.491548][T10755] ? __x64_sys_sendmsg+0x80/0x80 [ 417.496516][T10755] ? lockdep_hardirqs_on+0x98/0x150 [ 417.501766][T10755] ? __x64_sys_sendmsg+0x70/0x80 [ 417.506789][T10755] do_syscall_64+0x55/0xb0 [ 417.511247][T10755] ? clear_bhb_loop+0x40/0x90 [ 417.515967][T10755] ? clear_bhb_loop+0x40/0x90 [ 417.520681][T10755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.526614][T10755] RIP: 0033:0x7f2f5e79ce59 [ 417.531063][T10755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.550706][T10755] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.559158][T10755] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 417.567162][T10755] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 417.575168][T10755] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 417.583167][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.591172][T10755] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 417.599205][T10755] [ 418.007730][T10762] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1741'. [ 418.044533][T10767] netlink: 'syz.3.1745': attribute type 10 has an invalid length. [ 418.083991][T10767] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 418.438311][T10784] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 419.466335][T10793] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1759'. [ 419.530943][T10793] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 419.559916][T10793] CPU: 1 PID: 10793 Comm: syz.3.1759 Not tainted syzkaller #0 [ 419.567486][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.577598][T10793] Call Trace: [ 419.580926][T10793] [ 419.583908][T10793] dump_stack_lvl+0x18c/0x250 [ 419.588664][T10793] ? show_regs_print_info+0x20/0x20 [ 419.593933][T10793] ? load_image+0x420/0x420 [ 419.598502][T10793] sysfs_warn_dup+0x8e/0xa0 [ 419.603069][T10793] sysfs_do_create_link_sd+0xc0/0x110 [ 419.608477][T10793] device_add_class_symlinks+0x1cf/0x240 [ 419.614155][T10793] device_add+0x4f9/0xc40 [ 419.618530][T10793] wiphy_register+0x1d99/0x2ac0 [ 419.623444][T10793] ? cfg80211_event_work+0x40/0x40 [ 419.628594][T10793] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.634803][T10793] ieee80211_register_hw+0x2dd8/0x3b30 [ 419.640314][T10793] ? ieee80211_register_hw+0xfc1/0x3b30 [ 419.645906][T10793] ? ieee80211_tasklet_handler+0x20/0x20 [ 419.651603][T10793] ? __hrtimer_init+0x7e/0x270 [ 419.656440][T10793] ? __sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 419.662725][T10793] ? __hrtimer_init+0x189/0x270 [ 419.667621][T10793] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 419.673401][T10793] ? mac80211_hwsim_free+0x220/0x220 [ 419.678720][T10793] ? rcu_is_watching+0x15/0xb0 [ 419.683527][T10793] ? kstrndup+0xbd/0x140 [ 419.687812][T10793] hwsim_new_radio_nl+0xdad/0x1a70 [ 419.692966][T10793] ? __nla_validate+0x50/0x50 [ 419.697731][T10793] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 419.704115][T10793] ? __nla_parse+0x40/0x50 [ 419.708564][T10793] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 419.714938][T10793] genl_family_rcv_msg_doit+0x21a/0x310 [ 419.720534][T10793] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 419.726580][T10793] ? bpf_lsm_capable+0x9/0x10 [ 419.731296][T10793] ? security_capable+0x89/0xb0 [ 419.736231][T10793] genl_rcv_msg+0x611/0x7a0 [ 419.740776][T10793] ? genl_bind+0x360/0x360 [ 419.745226][T10793] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 419.751590][T10793] ? kasan_check_range+0x1b1/0x290 [ 419.756753][T10793] netlink_rcv_skb+0x235/0x4c0 [ 419.761562][T10793] ? genl_bind+0x360/0x360 [ 419.766017][T10793] ? netlink_ack+0x1160/0x1160 [ 419.770935][T10793] ? __lock_acquire+0x7d80/0x7d80 [ 419.776032][T10793] ? down_read+0x1ac/0x2e0 [ 419.780499][T10793] genl_rcv+0x28/0x40 [ 419.784516][T10793] netlink_unicast+0x7b1/0x930 [ 419.789326][T10793] netlink_sendmsg+0x8d0/0xbf0 [ 419.794123][T10793] ? lockdep_hardirqs_on+0x98/0x150 [ 419.799379][T10793] ? netlink_getsockopt+0x590/0x590 [ 419.804621][T10793] ? security_socket_sendmsg+0x45/0xa0 [ 419.810123][T10793] ? security_socket_sendmsg+0x80/0xa0 [ 419.815615][T10793] ? netlink_getsockopt+0x590/0x590 [ 419.820851][T10793] ____sys_sendmsg+0x61b/0x980 [ 419.825664][T10793] ? __asan_memset+0x22/0x40 [ 419.830288][T10793] ? __sys_sendmsg_sock+0x30/0x30 [ 419.835355][T10793] ? __import_iovec+0x5f2/0x850 [ 419.840254][T10793] ? import_iovec+0x73/0xa0 [ 419.844795][T10793] ___sys_sendmsg+0x2a6/0x360 [ 419.849519][T10793] ? __sys_sendmsg+0x2b0/0x2b0 [ 419.854344][T10793] ? ktime_get+0x7f/0x280 [ 419.858735][T10793] __se_sys_sendmsg+0x1d0/0x2c0 [ 419.863631][T10793] ? __x64_sys_sendmsg+0x80/0x80 [ 419.868621][T10793] ? lockdep_hardirqs_on+0x98/0x150 [ 419.873868][T10793] do_syscall_64+0x55/0xb0 [ 419.878318][T10793] ? clear_bhb_loop+0x40/0x90 [ 419.883028][T10793] ? clear_bhb_loop+0x40/0x90 [ 419.887752][T10793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.893692][T10793] RIP: 0033:0x7f352359ce59 [ 419.898138][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.917778][T10793] RSP: 002b:00007f3524509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.926230][T10793] RAX: ffffffffffffffda RBX: 00007f3523815fa0 RCX: 00007f352359ce59 [ 419.934237][T10793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 419.942241][T10793] RBP: 00007f3523632e6f R08: 0000000000000000 R09: 0000000000000000 [ 419.950269][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.958375][T10793] R13: 00007f3523816038 R14: 00007f3523815fa0 R15: 00007fff6897f968 [ 419.966403][T10793] [ 420.563997][T10796] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1753'. [ 420.638412][T10796] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 420.660597][T10796] CPU: 1 PID: 10796 Comm: syz.3.1753 Not tainted syzkaller #0 [ 420.668159][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.678336][T10796] Call Trace: [ 420.681675][T10796] [ 420.684666][T10796] dump_stack_lvl+0x18c/0x250 [ 420.689454][T10796] ? show_regs_print_info+0x20/0x20 [ 420.694696][T10796] ? load_image+0x420/0x420 [ 420.699245][T10796] sysfs_warn_dup+0x8e/0xa0 [ 420.703780][T10796] sysfs_do_create_link_sd+0xc0/0x110 [ 420.709186][T10796] device_add_class_symlinks+0x1cf/0x240 [ 420.714869][T10796] device_add+0x4f9/0xc40 [ 420.719244][T10796] wiphy_register+0x1d99/0x2ac0 [ 420.724133][T10796] ? lock_chain_count+0x20/0x20 [ 420.729040][T10796] ? cfg80211_event_work+0x40/0x40 [ 420.734199][T10796] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 420.740314][T10796] ieee80211_register_hw+0x2dd8/0x3b30 [ 420.745832][T10796] ? ieee80211_register_hw+0xfc1/0x3b30 [ 420.751419][T10796] ? ieee80211_tasklet_handler+0x20/0x20 [ 420.757089][T10796] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 420.763036][T10796] ? __debug_object_init+0xec/0x450 [ 420.768371][T10796] ? __asan_memset+0x22/0x40 [ 420.773002][T10796] ? __hrtimer_init+0x189/0x270 [ 420.777992][T10796] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 420.783772][T10796] ? mac80211_hwsim_free+0x220/0x220 [ 420.789090][T10796] ? rcu_is_watching+0x15/0xb0 [ 420.794027][T10796] ? kstrndup+0xbd/0x140 [ 420.798321][T10796] hwsim_new_radio_nl+0xdad/0x1a70 [ 420.803490][T10796] ? __nla_validate+0x50/0x50 [ 420.808211][T10796] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 420.814590][T10796] ? __nla_parse+0x40/0x50 [ 420.819041][T10796] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 420.825417][T10796] genl_family_rcv_msg_doit+0x21a/0x310 [ 420.831014][T10796] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 420.836961][T10796] ? bpf_lsm_capable+0x9/0x10 [ 420.841690][T10796] ? security_capable+0x89/0xb0 [ 420.846620][T10796] genl_rcv_msg+0x611/0x7a0 [ 420.851171][T10796] ? genl_bind+0x360/0x360 [ 420.855649][T10796] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 420.862039][T10796] netlink_rcv_skb+0x235/0x4c0 [ 420.866844][T10796] ? genl_bind+0x360/0x360 [ 420.871301][T10796] ? netlink_ack+0x1160/0x1160 [ 420.876115][T10796] ? __lock_acquire+0x7d80/0x7d80 [ 420.881186][T10796] ? down_read+0x1ac/0x2e0 [ 420.885676][T10796] genl_rcv+0x28/0x40 [ 420.889700][T10796] netlink_unicast+0x7b1/0x930 [ 420.894511][T10796] netlink_sendmsg+0x8d0/0xbf0 [ 420.899327][T10796] ? netlink_getsockopt+0x590/0x590 [ 420.904567][T10796] ? aa_sock_msg_perm+0x94/0x150 [ 420.909545][T10796] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 420.914870][T10796] ? security_socket_sendmsg+0x80/0xa0 [ 420.920367][T10796] ? netlink_getsockopt+0x590/0x590 [ 420.925600][T10796] ____sys_sendmsg+0x61b/0x980 [ 420.930409][T10796] ? __asan_memset+0x22/0x40 [ 420.935039][T10796] ? __sys_sendmsg_sock+0x30/0x30 [ 420.940101][T10796] ? __import_iovec+0x5f2/0x850 [ 420.944996][T10796] ? import_iovec+0x73/0xa0 [ 420.949538][T10796] ___sys_sendmsg+0x2a6/0x360 [ 420.954266][T10796] ? __sys_sendmsg+0x2b0/0x2b0 [ 420.959090][T10796] ? ktime_get+0x7f/0x280 [ 420.963486][T10796] __se_sys_sendmsg+0x1d0/0x2c0 [ 420.968374][T10796] ? perf_trace_preemptirq_template+0x269/0x330 [ 420.974658][T10796] ? __x64_sys_sendmsg+0x80/0x80 [ 420.979651][T10796] ? lockdep_hardirqs_on+0x98/0x150 [ 420.984897][T10796] do_syscall_64+0x55/0xb0 [ 420.989349][T10796] ? clear_bhb_loop+0x40/0x90 [ 420.994053][T10796] ? clear_bhb_loop+0x40/0x90 [ 420.998761][T10796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.004698][T10796] RIP: 0033:0x7f352359ce59 [ 421.009141][T10796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.028781][T10796] RSP: 002b:00007f3524509028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.037239][T10796] RAX: ffffffffffffffda RBX: 00007f3523815fa0 RCX: 00007f352359ce59 [ 421.045241][T10796] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 421.053245][T10796] RBP: 00007f3523632e6f R08: 0000000000000000 R09: 0000000000000000 [ 421.061251][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.069255][T10796] R13: 00007f3523816038 R14: 00007f3523815fa0 R15: 00007fff6897f968 [ 421.077304][T10796] [ 421.494059][T10809] tap0: tun_chr_ioctl cmd 35108 [ 421.535042][T10809] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1755'. [ 421.552986][T10809] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.1755'. [ 421.562530][T10809] tipc: Started in network mode [ 421.571205][T10809] tipc: Node identity 1a, cluster identity 106 [ 421.595754][T10809] tipc: Node number set to 26 [ 422.531807][T10834] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1767'. [ 422.604815][T10834] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 422.622867][T10834] CPU: 1 PID: 10834 Comm: syz.2.1767 Not tainted syzkaller #0 [ 422.630444][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.640544][T10834] Call Trace: [ 422.643897][T10834] [ 422.646862][T10834] dump_stack_lvl+0x18c/0x250 [ 422.651585][T10834] ? show_regs_print_info+0x20/0x20 [ 422.656824][T10834] ? load_image+0x420/0x420 [ 422.661371][T10834] sysfs_warn_dup+0x8e/0xa0 [ 422.665908][T10834] sysfs_do_create_link_sd+0xc0/0x110 [ 422.671313][T10834] device_add_class_symlinks+0x1cf/0x240 [ 422.676987][T10834] device_add+0x4f9/0xc40 [ 422.681362][T10834] wiphy_register+0x1d99/0x2ac0 [ 422.686270][T10834] ? cfg80211_event_work+0x40/0x40 [ 422.691458][T10834] ? minstrel_ht_alloc+0x88a/0x990 [ 422.696610][T10834] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 422.702727][T10834] ieee80211_register_hw+0x2dd8/0x3b30 [ 422.708242][T10834] ? ieee80211_register_hw+0xfc1/0x3b30 [ 422.713875][T10834] ? ieee80211_tasklet_handler+0x20/0x20 [ 422.719545][T10834] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 422.725479][T10834] ? __debug_object_init+0xec/0x450 [ 422.730721][T10834] ? __asan_memset+0x22/0x40 [ 422.735347][T10834] ? __hrtimer_init+0x189/0x270 [ 422.740237][T10834] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 422.746012][T10834] ? mac80211_hwsim_free+0x220/0x220 [ 422.751336][T10834] ? rcu_is_watching+0x15/0xb0 [ 422.756134][T10834] ? kstrndup+0xbd/0x140 [ 422.760418][T10834] hwsim_new_radio_nl+0xdad/0x1a70 [ 422.765569][T10834] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 422.771329][T10834] ? mark_lock+0x94/0x320 [ 422.775709][T10834] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 422.782089][T10834] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.788288][T10834] ? lockdep_hardirqs_on+0x98/0x150 [ 422.793537][T10834] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.799751][T10834] genl_family_rcv_msg_doit+0x21a/0x310 [ 422.805339][T10834] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 422.811281][T10834] ? bpf_lsm_capable+0x9/0x10 [ 422.816001][T10834] ? security_capable+0x89/0xb0 [ 422.820904][T10834] genl_rcv_msg+0x611/0x7a0 [ 422.825458][T10834] ? genl_bind+0x360/0x360 [ 422.829909][T10834] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 422.836288][T10834] netlink_rcv_skb+0x235/0x4c0 [ 422.841095][T10834] ? genl_bind+0x360/0x360 [ 422.845550][T10834] ? netlink_ack+0x1160/0x1160 [ 422.850360][T10834] ? __lock_acquire+0x7d80/0x7d80 [ 422.855436][T10834] ? down_read+0x1ac/0x2e0 [ 422.859892][T10834] genl_rcv+0x28/0x40 [ 422.863908][T10834] netlink_unicast+0x7b1/0x930 [ 422.868710][T10834] netlink_sendmsg+0x8d0/0xbf0 [ 422.873513][T10834] ? netlink_getsockopt+0x590/0x590 [ 422.878759][T10834] ? netlink_getsockopt+0x590/0x590 [ 422.883998][T10834] ____sys_sendmsg+0x61b/0x980 [ 422.888809][T10834] ? __asan_memset+0x22/0x40 [ 422.893441][T10834] ? __sys_sendmsg_sock+0x30/0x30 [ 422.898493][T10834] ? __import_iovec+0x5f2/0x850 [ 422.903415][T10834] ? import_iovec+0x73/0xa0 [ 422.907949][T10834] ___sys_sendmsg+0x2a6/0x360 [ 422.912676][T10834] ? __sys_sendmsg+0x2b0/0x2b0 [ 422.917507][T10834] ? ktime_get+0x7f/0x280 [ 422.921897][T10834] __se_sys_sendmsg+0x1d0/0x2c0 [ 422.926786][T10834] ? perf_trace_preemptirq_template+0x269/0x330 [ 422.933076][T10834] ? __x64_sys_sendmsg+0x80/0x80 [ 422.938072][T10834] ? lockdep_hardirqs_on+0x98/0x150 [ 422.943312][T10834] do_syscall_64+0x55/0xb0 [ 422.947760][T10834] ? clear_bhb_loop+0x40/0x90 [ 422.952470][T10834] ? clear_bhb_loop+0x40/0x90 [ 422.957186][T10834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.963120][T10834] RIP: 0033:0x7f2f5e79ce59 [ 422.967571][T10834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.987309][T10834] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.995763][T10834] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 423.003768][T10834] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 423.011770][T10834] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 423.019775][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.027775][T10834] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 423.035823][T10834] [ 423.561526][T10851] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1774'. [ 424.898938][T10892] netlink: 'syz.0.1788': attribute type 5 has an invalid length. [ 426.542331][T10918] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1797'. [ 426.699140][T10918] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 426.726977][T10918] CPU: 0 PID: 10918 Comm: syz.2.1797 Not tainted syzkaller #0 [ 426.734629][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.744745][T10918] Call Trace: [ 426.748073][T10918] [ 426.751055][T10918] dump_stack_lvl+0x18c/0x250 [ 426.755800][T10918] ? show_regs_print_info+0x20/0x20 [ 426.761055][T10918] ? load_image+0x420/0x420 [ 426.765632][T10918] sysfs_warn_dup+0x8e/0xa0 [ 426.770197][T10918] sysfs_do_create_link_sd+0xc0/0x110 [ 426.775631][T10918] device_add_class_symlinks+0x1cf/0x240 [ 426.781335][T10918] device_add+0x4f9/0xc40 [ 426.785742][T10918] wiphy_register+0x1d99/0x2ac0 [ 426.790765][T10918] ? cfg80211_event_work+0x40/0x40 [ 426.795938][T10918] ? minstrel_ht_alloc+0x88a/0x990 [ 426.801114][T10918] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 426.807282][T10918] ieee80211_register_hw+0x2dd8/0x3b30 [ 426.812802][T10918] ? ieee80211_register_hw+0xfc1/0x3b30 [ 426.818398][T10918] ? ieee80211_tasklet_handler+0x20/0x20 [ 426.824077][T10918] ? __hrtimer_init+0xe0/0x270 [ 426.828889][T10918] ? __hrtimer_init+0xe0/0x270 [ 426.833702][T10918] ? __hrtimer_init+0x189/0x270 [ 426.838613][T10918] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 426.844402][T10918] ? mac80211_hwsim_free+0x220/0x220 [ 426.849744][T10918] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 426.855081][T10918] hwsim_new_radio_nl+0xdad/0x1a70 [ 426.860243][T10918] ? __nla_validate+0x50/0x50 [ 426.865004][T10918] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 426.871383][T10918] ? __nla_parse+0x40/0x50 [ 426.875838][T10918] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 426.882214][T10918] genl_family_rcv_msg_doit+0x21a/0x310 [ 426.887803][T10918] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 426.893743][T10918] ? bpf_lsm_capable+0x9/0x10 [ 426.898458][T10918] ? security_capable+0x89/0xb0 [ 426.903353][T10918] genl_rcv_msg+0x611/0x7a0 [ 426.907982][T10918] ? genl_bind+0x360/0x360 [ 426.912426][T10918] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 426.918805][T10918] netlink_rcv_skb+0x235/0x4c0 [ 426.923607][T10918] ? genl_bind+0x360/0x360 [ 426.928057][T10918] ? netlink_ack+0x1160/0x1160 [ 426.932877][T10918] ? __lock_acquire+0x7d80/0x7d80 [ 426.937956][T10918] ? down_read+0x1ac/0x2e0 [ 426.942514][T10918] genl_rcv+0x28/0x40 [ 426.946535][T10918] netlink_unicast+0x7b1/0x930 [ 426.951340][T10918] netlink_sendmsg+0x8d0/0xbf0 [ 426.956140][T10918] ? lockdep_hardirqs_on+0x98/0x150 [ 426.961389][T10918] ? netlink_getsockopt+0x590/0x590 [ 426.966628][T10918] ? netlink_getsockopt+0x590/0x590 [ 426.971952][T10918] ? netlink_getsockopt+0x590/0x590 [ 426.977226][T10918] ____sys_sendmsg+0x61b/0x980 [ 426.982041][T10918] ? __asan_memset+0x22/0x40 [ 426.986678][T10918] ? __sys_sendmsg_sock+0x30/0x30 [ 426.991740][T10918] ? __import_iovec+0x5f2/0x850 [ 426.996631][T10918] ? import_iovec+0x73/0xa0 [ 427.001169][T10918] ___sys_sendmsg+0x2a6/0x360 [ 427.005896][T10918] ? __sys_sendmsg+0x2b0/0x2b0 [ 427.010765][T10918] __se_sys_sendmsg+0x1d0/0x2c0 [ 427.015663][T10918] ? __x64_sys_sendmsg+0x80/0x80 [ 427.020662][T10918] do_syscall_64+0x55/0xb0 [ 427.025121][T10918] ? clear_bhb_loop+0x40/0x90 [ 427.029827][T10918] ? clear_bhb_loop+0x40/0x90 [ 427.034540][T10918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.040478][T10918] RIP: 0033:0x7f2f5e79ce59 [ 427.044928][T10918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.064574][T10918] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.073025][T10918] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 427.081037][T10918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 427.089045][T10918] RBP: 00007f2f5e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 427.097051][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.105060][T10918] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 427.113099][T10918] [ 427.395358][T10925] netlink: 'syz.1.1800': attribute type 25 has an invalid length. [ 427.433871][T10925] netlink: 'syz.1.1800': attribute type 9 has an invalid length. [ 427.755555][T10942] netlink: 'syz.2.1807': attribute type 4 has an invalid length. [ 427.781813][T10942] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1807'. [ 428.030795][T10950] netlink: 'syz.2.1811': attribute type 39 has an invalid length. [ 428.161010][T10952] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1812'. [ 428.175769][T10956] sctp: [Deprecated]: syz.2.1811 (pid 10956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.175769][T10956] Use struct sctp_sack_info instead [ 428.796866][T10952] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 428.806355][T10952] CPU: 0 PID: 10952 Comm: syz.0.1812 Not tainted syzkaller #0 [ 428.813893][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.824002][T10952] Call Trace: [ 428.827338][T10952] [ 428.830320][T10952] dump_stack_lvl+0x18c/0x250 [ 428.835073][T10952] ? show_regs_print_info+0x20/0x20 [ 428.840340][T10952] ? load_image+0x420/0x420 [ 428.844919][T10952] sysfs_warn_dup+0x8e/0xa0 [ 428.849492][T10952] sysfs_do_create_link_sd+0xc0/0x110 [ 428.854917][T10952] device_add_class_symlinks+0x1cf/0x240 [ 428.860605][T10952] device_add+0x4f9/0xc40 [ 428.865011][T10952] wiphy_register+0x1d99/0x2ac0 [ 428.869958][T10952] ? cfg80211_event_work+0x40/0x40 [ 428.875149][T10952] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 428.881293][T10952] ieee80211_register_hw+0x2dd8/0x3b30 [ 428.886816][T10952] ? ieee80211_register_hw+0xfc1/0x3b30 [ 428.892394][T10952] ? ieee80211_tasklet_handler+0x20/0x20 [ 428.898084][T10952] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 428.904006][T10952] ? __debug_object_init+0xec/0x450 [ 428.909234][T10952] ? __asan_memset+0x22/0x40 [ 428.913868][T10952] ? __hrtimer_init+0x189/0x270 [ 428.918787][T10952] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 428.924606][T10952] ? mac80211_hwsim_free+0x220/0x220 [ 428.929950][T10952] ? rcu_is_watching+0x15/0xb0 [ 428.934775][T10952] ? kstrndup+0xbd/0x140 [ 428.939092][T10952] hwsim_new_radio_nl+0xdad/0x1a70 [ 428.944264][T10952] ? __nla_validate+0x50/0x50 [ 428.948981][T10952] ? lock_chain_count+0x20/0x20 [ 428.953960][T10952] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 428.960326][T10952] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 428.966534][T10952] ? __nla_parse+0x45/0x50 [ 428.971005][T10952] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 428.977376][T10952] genl_family_rcv_msg_doit+0x21a/0x310 [ 428.983069][T10952] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 428.989023][T10952] ? bpf_lsm_capable+0x9/0x10 [ 428.993759][T10952] ? security_capable+0x89/0xb0 [ 428.998657][T10952] genl_rcv_msg+0x611/0x7a0 [ 429.003201][T10952] ? genl_bind+0x360/0x360 [ 429.007646][T10952] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 429.014011][T10952] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.020206][T10952] ? lockdep_hardirqs_on+0x98/0x150 [ 429.025463][T10952] netlink_rcv_skb+0x235/0x4c0 [ 429.030265][T10952] ? genl_bind+0x360/0x360 [ 429.034718][T10952] ? netlink_ack+0x1160/0x1160 [ 429.039530][T10952] ? __lock_acquire+0x7d80/0x7d80 [ 429.044587][T10952] ? net_generic+0x1e/0x240 [ 429.049118][T10952] ? down_read+0x1ac/0x2e0 [ 429.053569][T10952] genl_rcv+0x28/0x40 [ 429.057583][T10952] netlink_unicast+0x7b1/0x930 [ 429.062381][T10952] netlink_sendmsg+0x8d0/0xbf0 [ 429.067206][T10952] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 429.073055][T10952] ? netlink_getsockopt+0x590/0x590 [ 429.078288][T10952] ? aa_sock_msg_perm+0x94/0x150 [ 429.083264][T10952] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.088603][T10952] ? security_socket_sendmsg+0x80/0xa0 [ 429.094114][T10952] ? netlink_getsockopt+0x590/0x590 [ 429.099357][T10952] ____sys_sendmsg+0x61b/0x980 [ 429.104165][T10952] ? __asan_memset+0x22/0x40 [ 429.108792][T10952] ? __sys_sendmsg_sock+0x30/0x30 [ 429.113845][T10952] ? __import_iovec+0x5f2/0x850 [ 429.118734][T10952] ? import_iovec+0x73/0xa0 [ 429.123268][T10952] ___sys_sendmsg+0x2a6/0x360 [ 429.127982][T10952] ? __sys_sendmsg+0x2b0/0x2b0 [ 429.132825][T10952] __se_sys_sendmsg+0x1d0/0x2c0 [ 429.137712][T10952] ? __x64_sys_sendmsg+0x80/0x80 [ 429.142714][T10952] ? syscall_enter_from_user_mode+0x2e/0x80 [ 429.148653][T10952] do_syscall_64+0x55/0xb0 [ 429.153108][T10952] ? clear_bhb_loop+0x40/0x90 [ 429.157812][T10952] ? clear_bhb_loop+0x40/0x90 [ 429.162533][T10952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.168474][T10952] RIP: 0033:0x7fcbc179ce59 [ 429.172927][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.192571][T10952] RSP: 002b:00007fcbc266d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.201027][T10952] RAX: ffffffffffffffda RBX: 00007fcbc1a15fa0 RCX: 00007fcbc179ce59 [ 429.209029][T10952] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 429.217033][T10952] RBP: 00007fcbc1832e6f R08: 0000000000000000 R09: 0000000000000000 [ 429.225047][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.233050][T10952] R13: 00007fcbc1a16038 R14: 00007fcbc1a15fa0 R15: 00007ffcaa53e578 [ 429.241154][T10952] [ 429.516617][T10967] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 429.991812][T10984] netlink: 'syz.0.1824': attribute type 10 has an invalid length. [ 430.000059][T10984] team0: Device wg1 is up. Set it down before adding it as a team port [ 430.299545][T10988] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1825'. [ 430.386944][T10988] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 430.424792][T10988] CPU: 1 PID: 10988 Comm: syz.1.1825 Not tainted syzkaller #0 [ 430.432353][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.442540][T10988] Call Trace: [ 430.445875][T10988] [ 430.448858][T10988] dump_stack_lvl+0x18c/0x250 [ 430.453606][T10988] ? show_regs_print_info+0x20/0x20 [ 430.458847][T10988] ? load_image+0x420/0x420 [ 430.463396][T10988] sysfs_warn_dup+0x8e/0xa0 [ 430.467936][T10988] sysfs_do_create_link_sd+0xc0/0x110 [ 430.473337][T10988] device_add_class_symlinks+0x1cf/0x240 [ 430.479046][T10988] device_add+0x4f9/0xc40 [ 430.483421][T10988] wiphy_register+0x1d99/0x2ac0 [ 430.488303][T10988] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 430.493989][T10988] ? cfg80211_event_work+0x40/0x40 [ 430.499142][T10988] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 430.505250][T10988] ieee80211_register_hw+0x2dd8/0x3b30 [ 430.510773][T10988] ? ieee80211_register_hw+0xfc1/0x3b30 [ 430.516368][T10988] ? ieee80211_tasklet_handler+0x20/0x20 [ 430.522033][T10988] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 430.527968][T10988] ? __debug_object_init+0xec/0x450 [ 430.533205][T10988] ? __asan_memset+0x22/0x40 [ 430.537828][T10988] ? __hrtimer_init+0x189/0x270 [ 430.542715][T10988] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 430.548495][T10988] ? mac80211_hwsim_free+0x220/0x220 [ 430.553818][T10988] ? hwsim_new_radio_nl+0xc34/0x1a70 [ 430.559137][T10988] hwsim_new_radio_nl+0xdad/0x1a70 [ 430.564290][T10988] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 430.570139][T10988] ? mark_lock+0x94/0x320 [ 430.574506][T10988] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 430.580867][T10988] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.587064][T10988] ? lockdep_hardirqs_on+0x98/0x150 [ 430.592417][T10988] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.598623][T10988] genl_family_rcv_msg_doit+0x21a/0x310 [ 430.604214][T10988] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 430.610147][T10988] ? bpf_lsm_capable+0x9/0x10 [ 430.614866][T10988] ? security_capable+0x89/0xb0 [ 430.619775][T10988] genl_rcv_msg+0x611/0x7a0 [ 430.624315][T10988] ? genl_bind+0x360/0x360 [ 430.628798][T10988] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 430.635171][T10988] netlink_rcv_skb+0x235/0x4c0 [ 430.639967][T10988] ? genl_bind+0x360/0x360 [ 430.644439][T10988] ? netlink_ack+0x1160/0x1160 [ 430.649241][T10988] ? __lock_acquire+0x7d80/0x7d80 [ 430.654303][T10988] ? net_generic+0x1e/0x240 [ 430.658839][T10988] ? down_read+0x1ac/0x2e0 [ 430.663290][T10988] genl_rcv+0x28/0x40 [ 430.667303][T10988] netlink_unicast+0x7b1/0x930 [ 430.672107][T10988] netlink_sendmsg+0x8d0/0xbf0 [ 430.676897][T10988] ? lockdep_hardirqs_on+0x98/0x150 [ 430.682138][T10988] ? netlink_getsockopt+0x590/0x590 [ 430.687372][T10988] ? aa_sock_msg_perm+0x94/0x150 [ 430.692345][T10988] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 430.697663][T10988] ? security_socket_sendmsg+0x80/0xa0 [ 430.703148][T10988] ? netlink_getsockopt+0x590/0x590 [ 430.708390][T10988] ____sys_sendmsg+0x61b/0x980 [ 430.713198][T10988] ? __asan_memset+0x22/0x40 [ 430.717825][T10988] ? __sys_sendmsg_sock+0x30/0x30 [ 430.722886][T10988] ? __import_iovec+0x5f2/0x850 [ 430.727777][T10988] ? import_iovec+0x73/0xa0 [ 430.732311][T10988] ___sys_sendmsg+0x2a6/0x360 [ 430.737025][T10988] ? __sys_sendmsg+0x2b0/0x2b0 [ 430.741865][T10988] __se_sys_sendmsg+0x1d0/0x2c0 [ 430.746747][T10988] ? __x64_sys_sendmsg+0x80/0x80 [ 430.751736][T10988] ? syscall_enter_from_user_mode+0x2e/0x80 [ 430.757680][T10988] do_syscall_64+0x55/0xb0 [ 430.762133][T10988] ? clear_bhb_loop+0x40/0x90 [ 430.766834][T10988] ? clear_bhb_loop+0x40/0x90 [ 430.771537][T10988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.777467][T10988] RIP: 0033:0x7f1a22d9ce59 [ 430.781914][T10988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.801555][T10988] RSP: 002b:00007f1a23ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.810002][T10988] RAX: ffffffffffffffda RBX: 00007f1a23015fa0 RCX: 00007f1a22d9ce59 [ 430.818001][T10988] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 430.825996][T10988] RBP: 00007f1a22e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 430.834003][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.842014][T10988] R13: 00007f1a23016038 R14: 00007f1a23015fa0 R15: 00007ffdbdd24e48 [ 430.850060][T10988] [ 431.562405][T11017] netlink: 'syz.2.1832': attribute type 3 has an invalid length. [ 431.570742][T11017] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1832'. [ 431.766182][T11018] netlink: 'syz.0.1833': attribute type 10 has an invalid length. [ 431.777484][T11018] ipvlan1: entered promiscuous mode [ 431.799450][T11018] team0: Device ipvlan1 failed to register rx_handler [ 446.064595][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.077430][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.086520][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.098445][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.107134][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 446.120207][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.768348][ T5792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 447.777957][ T5792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 447.788987][ T5792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.798203][ T5792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.808884][ T5792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 447.819983][ T5792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.984663][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 447.997921][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 448.007710][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 448.017727][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 448.027388][ T5784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 448.036601][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 448.074367][ T5784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 448.084221][ T5784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 448.092593][ T5784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 448.102214][ T5784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 448.110208][ T5784] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 448.123160][ T5784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 448.192911][ T5792] Bluetooth: hci4: command tx timeout [ 449.872929][ T5792] Bluetooth: hci5: command tx timeout [ 450.123009][ T5792] Bluetooth: hci6: command tx timeout [ 450.204064][ T5792] Bluetooth: hci7: command tx timeout [ 450.276399][ T5792] Bluetooth: hci4: command tx timeout [ 451.952857][ T5792] Bluetooth: hci5: command tx timeout [ 452.193072][ T5792] Bluetooth: hci6: command tx timeout [ 452.272889][ T5792] Bluetooth: hci7: command tx timeout [ 452.352922][ T5792] Bluetooth: hci4: command tx timeout [ 454.042864][ T5792] Bluetooth: hci5: command tx timeout [ 454.273072][ T5792] Bluetooth: hci6: command tx timeout [ 454.352992][ T5792] Bluetooth: hci7: command tx timeout [ 454.452698][ T5792] Bluetooth: hci4: command tx timeout [ 456.112792][ T5792] Bluetooth: hci5: command tx timeout [ 456.352973][ T5792] Bluetooth: hci6: command tx timeout [ 456.432899][ T5792] Bluetooth: hci7: command tx timeout [ 505.541396][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.548059][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.243899][ T5784] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 507.253710][ T5784] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 507.261801][ T5784] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 507.277760][ T5784] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.286890][ T5784] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 507.295905][ T5784] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 508.766097][ T5792] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 508.776657][ T5792] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 508.785357][ T5792] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 508.793921][ T5792] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 508.802730][ T5792] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 508.810565][ T5792] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 508.923933][ T5787] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 508.937187][ T5787] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 508.952250][ T5787] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 508.963832][ T5787] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 508.972287][ T5787] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 508.984147][ T5787] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 508.992100][ T5787] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 509.002323][ T5787] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 509.010229][ T5787] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 509.022698][ T5787] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 509.034317][ T5787] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 509.042206][ T5787] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 509.403009][ T5787] Bluetooth: hci8: command tx timeout [ 510.843090][ T5787] Bluetooth: hci9: command tx timeout [ 511.072899][ T5787] Bluetooth: hci10: command tx timeout [ 511.152944][ T5787] Bluetooth: hci11: command tx timeout [ 511.483074][ T5787] Bluetooth: hci8: command tx timeout [ 512.923008][ T5787] Bluetooth: hci9: command tx timeout [ 513.153003][ T5787] Bluetooth: hci10: command tx timeout [ 513.232964][ T5787] Bluetooth: hci11: command tx timeout [ 513.552762][ T5787] Bluetooth: hci8: command tx timeout [ 514.992911][ T5787] Bluetooth: hci9: command tx timeout [ 515.232902][ T5787] Bluetooth: hci10: command tx timeout [ 515.313064][ T5787] Bluetooth: hci11: command tx timeout [ 515.635169][ T5787] Bluetooth: hci8: command tx timeout [ 517.082872][ T5787] Bluetooth: hci9: command tx timeout [ 517.322949][ T5787] Bluetooth: hci10: command tx timeout [ 517.402828][ T5787] Bluetooth: hci11: command tx timeout [ 536.502655][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 536.509310][ C0] rcu: 0-....: (1 GPs behind) idle=6a54/1/0x4000000000000000 softirq=37222/37223 fqs=3646 [ 536.520330][ C0] rcu: hardirqs softirqs csw/system [ 536.526754][ C0] rcu: number: 1473540 0 0 [ 536.533217][ C0] rcu: cputime: 16828 35660 53 ==> 52490(ms) [ 536.541089][ C0] rcu: (t=10500 jiffies g=48897 q=1628 ncpus=2) [ 536.547481][ C0] CPU: 0 PID: 11011 Comm: syz.2.1832 Not tainted syzkaller #0 [ 536.554947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.565014][ C0] RIP: 0010:__ipv6_chk_addr_and_flags+0x2fc/0x6b0 [ 536.571448][ C0] Code: a6 f8 4c 8b 33 4d 85 f6 74 61 49 8d 9e c8 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 b7 bd a6 f8 48 8b 1b <48> 89 de 48 81 e6 00 00 04 00 31 ff e8 73 4d 4e f8 48 89 d8 48 25 [ 536.591341][ C0] RSP: 0018:ffffc90000007710 EFLAGS: 00000246 [ 536.597439][ C0] RAX: 1ffff110042db019 RBX: 00000000010a8020 RCX: 0000000000000100 [ 536.605874][ C0] RDX: ffff88802ffb8000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.613872][ C0] RBP: ffff88805cec5400 R08: dffffc0000000000 R09: 1ffffffff22378a0 [ 536.621869][ C0] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: dffffc0000000000 [ 536.629865][ C0] R13: 0000000000000000 R14: ffff8880216d8000 R15: ffff88805c9c06b0 [ 536.637863][ C0] FS: 00007f2f5f6046c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 536.646996][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.653607][ C0] CR2: 0000000100000000 CR3: 000000005111b000 CR4: 00000000003506f0 [ 536.661887][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.669902][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 536.677911][ C0] Call Trace: [ 536.681223][ C0] [ 536.684100][ C0] ? __ipv6_chk_addr_and_flags+0xc3/0x6b0 [ 536.689860][ C0] ipv6_chk_addr+0x3a/0x50 [ 536.694306][ C0] icmp6_send+0x452/0x1b60 [ 536.698753][ C0] ? icmp6_send+0x236/0x1b60 [ 536.703385][ C0] ? icmpv6_push_pending_frames+0x3f0/0x3f0 [ 536.709313][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 536.715330][ C0] ? lock_chain_count+0x20/0x20 [ 536.720225][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 536.725465][ C0] ? ip6_negative_advice+0x310/0x310 [ 536.730816][ C0] ? ip6_link_failure+0x20/0x4c0 [ 536.735786][ C0] ? ip6_negative_advice+0x310/0x310 [ 536.741102][ C0] ip6_link_failure+0x3b/0x4c0 [ 536.745896][ C0] ? ip6_negative_advice+0x310/0x310 [ 536.751233][ C0] ndisc_error_report+0x112/0x160 [ 536.756296][ C0] neigh_invalidate+0x23b/0x460 [ 536.761193][ C0] neigh_timer_handler+0x911/0xff0 [ 536.766334][ C0] call_timer_fn+0x189/0x540 [ 536.770946][ C0] ? neigh_release+0x80/0x80 [ 536.775564][ C0] ? call_timer_fn+0xd2/0x540 [ 536.780266][ C0] ? __run_timers+0x810/0x810 [ 536.784978][ C0] ? neigh_release+0x80/0x80 [ 536.789601][ C0] __run_timers+0x570/0x810 [ 536.794143][ C0] ? detach_timer+0x2b0/0x2b0 [ 536.799211][ C0] ? lock_chain_count+0x20/0x20 [ 536.804099][ C0] run_timer_softirq+0x67/0xf0 [ 536.808894][ C0] handle_softirqs+0x27d/0x820 [ 536.813712][ C0] ? read_tsc+0x9/0x20 [ 536.817822][ C0] ? ktime_get+0x24b/0x280 [ 536.822290][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 536.827083][ C0] ? do_softirq+0x1a0/0x1a0 [ 536.831624][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 536.837031][ C0] __irq_exit_rcu+0xd3/0x190 [ 536.841650][ C0] ? irq_exit_rcu+0x20/0x20 [ 536.846193][ C0] irq_exit_rcu+0x9/0x20 [ 536.850460][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 536.856131][ C0] [ 536.859094][ C0] [ 536.862049][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.868068][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 536.873995][ C0] Code: 75 11 e8 2c 00 0b 00 48 85 db 75 16 e8 22 00 0b 00 eb 15 e8 1b 00 0b 00 e8 06 f3 07 09 48 85 db 74 ea e8 0c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 536.893659][ C0] RSP: 0018:ffffc9000bf2fa00 EFLAGS: 00000246 [ 536.899758][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 536.907751][ C0] RDX: ffffc9000d83c000 RSI: 0000000000002697 RDI: 0000000000002698 [ 536.915749][ C0] RBP: ffffc9000bf2fad0 R08: ffffffff911bc5ff R09: 1ffffffff22378bf [ 536.923746][ C0] R10: dffffc0000000000 R11: fffffbfff22378c0 R12: 1ffff920017e5f44 [ 536.931748][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920017e5f65 [ 536.939765][ C0] ? event_function+0x300/0x300 [ 536.944656][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 536.950412][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 536.956167][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 536.961409][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 536.967077][ C0] smp_call_function_single+0x36d/0x5a0 [ 536.972660][ C0] ? event_function+0x300/0x300 [ 536.977556][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 536.983740][ C0] ? event_function+0x300/0x300 [ 536.988640][ C0] perf_install_in_context+0x5bb/0x920 [ 536.994134][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 536.999292][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 537.005312][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 537.010561][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 537.015792][ C0] ? perf_event__header_size+0x165/0x220 [ 537.021469][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 537.027234][ C0] ? __fget_files+0x28/0x460 [ 537.031868][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 537.037548][ C0] ? lock_chain_count+0x20/0x20 [ 537.042437][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 537.047669][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 537.053331][ C0] do_syscall_64+0x55/0xb0 [ 537.057781][ C0] ? clear_bhb_loop+0x40/0x90 [ 537.062483][ C0] ? clear_bhb_loop+0x40/0x90 [ 537.067188][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.073124][ C0] RIP: 0033:0x7f2f5e79ce59 [ 537.077582][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.097308][ C0] RSP: 002b:00007f2f5f604028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 537.105756][ C0] RAX: ffffffffffffffda RBX: 00007f2f5ea15fa0 RCX: 00007f2f5e79ce59 [ 537.113758][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 537.121762][ C0] RBP: 00007f2f5e832e6f R08: 0000000000000009 R09: 0000000000000000 [ 537.129765][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 537.137764][ C0] R13: 00007f2f5ea16038 R14: 00007f2f5ea15fa0 R15: 00007fffe61e82a8 [ 537.145909][ C0]