last executing test programs:

6.758235566s ago: executing program 0 (id=1147):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)

6.542966063s ago: executing program 0 (id=1149):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xf, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4157, 0x2, @perf_bp={0x0, 0x2}, 0xc4, 0xcdd, 0x4, 0x4, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000005000000030000000000000805000000000000000000006a0000000004000000050000000f0000000300000002000004050000000800000003000000060000000000000002000000060000000e00000000000009010000000b0000000000000b00000000000000000300000d0000000009000000010000ff070000030000000d00000003000000015f10300000"], &(0x7f0000000140)=""/129, 0xa1, 0x81, 0x0, 0x9, 0x10000}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x81, 0x4, 0x0, 0x800, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r3, 0x5, 0x0, 0x2, 0xa}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r4, 0xffffffff, '\x00', r7, r8, 0x0, 0x1, 0x5}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r10 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)

5.599703834s ago: executing program 0 (id=1154):
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x5, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000180000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x7056242da07ec53f, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a00100000000280000312", 0x2d}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x22, &(0x7f0000001700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)

4.920195336s ago: executing program 0 (id=1157):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a806c8c6f94f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"})

4.313722766s ago: executing program 0 (id=1162):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28)
socketpair(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000500), 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50)
close(r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r5, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r6}, 0xc)
sendmsg$kcm(r4, 0x0, 0x0)
socketpair(0x1e, 0x80000, 0xd, &(0x7f0000000180))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000780)="5c00edff11006bab9a3fe3d86e17aaa3462b2616cc0e883a29ac3dda0b046b876c1d004838d537e70019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a000000", 0x5f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)

3.398081027s ago: executing program 3 (id=1168):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4102, 0x1006}], 0x1}, 0x2002)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200000000000000000000000001500"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c09000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000140)=ANY=[], 0x0}, 0x94)
recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000280)=""/39, 0x27}, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x44000)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32], 0xffdd)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d", 0x84}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.565664065s ago: executing program 3 (id=1172):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000005000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a1337ffcac7b3227933659327b536c3576a1bff0a25001bff6d9af9f1d06e76da4798c2"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a806c8c6f94f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"})

2.332811033s ago: executing program 3 (id=1176):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="d8000000180001004e81f782db4cb904021d0800fe000405e81556a10a000f000200142603600e12080005007f370401a802400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000002db7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6e8929559e399e1f4824b43370e97039264bc7bb600"/216, 0xd8}], 0x1}, 0x20000018)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0xfe33)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x28, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0xc, 0x0, 0xa, 0xffff}, @ldst={0x3, 0x3, 0x4, 0x0, 0x8, 0x4, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8002}, @tail_call, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
close(r3)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}], 0x1}, 0x4000000)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33)
r5 = gettid()
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r5, 0xa, r1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6)
r7 = getpid()
perf_event_open(0x0, r7, 0x8, r1, 0x1)

2.303728803s ago: executing program 2 (id=1177):
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x5, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000180000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x7056242da07ec53f, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a00100000000280000312", 0x2d}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x22, &(0x7f0000001700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)

1.700169594s ago: executing program 1 (id=1178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0)

1.699812643s ago: executing program 2 (id=1179):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x5, 0x2, 0x5, 0x0, 0xa, 0x20038, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffffffffff7f, 0x2e18a4f0}, 0x1800, 0x8000000000000000, 0xa0b7, 0x0, 0x5, 0x100, 0x4, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2001}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000010007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0xb)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0)
ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000007000000004e000000000000001fd3c50000cd7dd97292637800000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23)

1.669914744s ago: executing program 3 (id=1180):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f00000002c0)=@raw=[@ldst={0x6, 0x3, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}, @generic={0xf4, 0x8, 0x8, 0x0, 0x9}, @alu={0x4, 0x1, 0x6, 0x5, 0x0, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfdf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @generic={0x9, 0x5, 0xa, 0xe, 0x3}, @exit], &(0x7f0000000400)='syzkaller\x00', 0xc49, 0x0, 0x0, 0x82100, 0x8, '\x00', r7, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x2, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

1.481250281s ago: executing program 1 (id=1181):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d3f020a000000040000a1180002000000000084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100030300080000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x4000)
close(0xffffffffffffffff)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047440, &(0x7f0000001200))
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x12, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x1}], &(0x7f0000000340)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r2], 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954343370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x2300, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000))

1.001536646s ago: executing program 3 (id=1182):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0xffffffffffffff39)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x7b, &(0x7f0000000000)=r8, 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000008000021922100000100000011590039", @ANYRES32=r8, @ANYRES64, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES8=0x0], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="184600000000000000000000000000008510000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000d2f485", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183100000100000000000000000000000f770000fcffffff85000000ab0000001835000004000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018640000010000000000000007000000"], &(0x7f0000000740)='GPL\x00', 0x7, 0xae, &(0x7f0000000780)=""/174, 0x41000, 0x12, '\x00', r4, @fallback=0x29, r5, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x0, 0xff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000009c0)=[{0x1, 0x1, 0xd, 0x6}, {0x0, 0x4, 0x3, 0x4}, {0x5, 0x5, 0x9, 0xb}], 0x10, 0x9}, 0x94)
sendmsg$inet(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)='5', 0x1}], 0x1}, 0x8041)
recvmsg(r10, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r9, &(0x7f0000000340), 0x0}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4)
ioctl$SIOCSIFHWADDR(r12, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"})

998.046317ms ago: executing program 0 (id=1190):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28)
socketpair(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000500), 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x1, 0x0, 0x1, 0x10000}, 0x50)
close(r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r5, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r6}, 0xc)
sendmsg$kcm(r4, 0x0, 0x0)
socketpair(0x1e, 0x80000, 0xd, &(0x7f0000000180))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000780)="5c00edff11006bab9a3fe3d86e17aaa3462b2616cc0e883a29ac3dda0b046b876c1d004838d537e70019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a000000", 0x5f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)

997.784037ms ago: executing program 2 (id=1183):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)

774.461784ms ago: executing program 1 (id=1184):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000035000bfbd15a806c8c6f94f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"})

699.598516ms ago: executing program 2 (id=1185):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='((!)')
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[], 0x0, 0xfffffffffffffe3d}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, 0x0)
r3 = openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080))

632.147149ms ago: executing program 1 (id=1186):
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x5, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000180000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x7056242da07ec53f, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a00100000000280000312", 0x2d}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x22, &(0x7f0000001700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)

530.987862ms ago: executing program 1 (id=1187):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r2, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r6)
recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x6, 0xffffffff, 0x0, 0x20, r4, 0x4, '\x00', r5, r6, 0x0, 0x0, 0x5, 0x3}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
socket$kcm(0x25, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

529.935353ms ago: executing program 2 (id=1196):
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x5, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000180000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x7056242da07ec53f, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a00100000000280000312", 0x2d}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="020000"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x22, &(0x7f0000001700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)

7.18683ms ago: executing program 3 (id=1188):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f00000002c0)=@raw=[@ldst={0x6, 0x3, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}, @generic={0xf4, 0x8, 0x8, 0x0, 0x9}, @alu={0x4, 0x1, 0x6, 0x5, 0x0, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfdf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @generic={0x9, 0x5, 0xa, 0xe, 0x3}, @exit], &(0x7f0000000400)='syzkaller\x00', 0xc49, 0xae, &(0x7f0000000680)=""/174, 0x82100, 0x8, '\x00', r6, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x2, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

958.35µs ago: executing program 1 (id=1198):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f00000002c0)=@raw=[@ldst={0x6, 0x3, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}, @generic={0xf4, 0x8, 0x8, 0x0, 0x9}, @alu={0x4, 0x1, 0x6, 0x5, 0x0, 0xfffffffffffffffc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfdf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @generic={0x9, 0x5, 0xa, 0xe, 0x3}, @exit], &(0x7f0000000400)='syzkaller\x00', 0xc49, 0xae, &(0x7f0000000680)=""/174, 0x82100, 0x8, '\x00', r7, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x2, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

0s ago: executing program 2 (id=1189):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="d8000000180001004e81f782db4cb904021d0800fe000405e81556a10a000f000200142603600e12080005007f370401a802400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000002db7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6e8929559e399e1f4824b43370e97039264bc7bb600"/216, 0xd8}], 0x1}, 0x20000018)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[], 0xfe33)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x28, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0xc, 0x0, 0xa, 0xffff}, @ldst={0x3, 0x3, 0x4, 0x0, 0x8, 0x4, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8002}, @tail_call, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8, 0x4}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
close(r3)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, &(0x7f0000000580)="bca13f58108937270789108abef62fc69699d33b5b5ef0def2fb77dbb117902c28122e2f2fb8ac793c47db676efd92aeacef4f223cdb490d7eaa0860b0f1abaaad5a58cd7e5855b48a7272e2854fda05f41a005d555f788cac0ce588812f48ec13a49b934fcfa64f4862f43adc0335ee9a202360de774f6123ff", 0x7, r3, 0x4}, 0x38)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}], 0x1}, 0x4000000)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33)
r5 = gettid()
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x10, 0x5, 0x0, 0x72, 0x0, 0x8, 0x4009, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0x200, 0x0, 0x4, 0x5, 0xfffffffffffffffb, 0x2, 0xfffd, 0x0, 0x7fff, 0x0, 0x6}, r5, 0xa, r1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6)
r7 = getpid()
perf_event_open(0x0, r7, 0x8, r1, 0x1)

kernel console output (not intermixed with test programs):

85]  genl_rcv+0x28/0x40
[  212.706089][ T8685]  netlink_unicast+0x751/0x8d0
[  212.710862][ T8685]  netlink_sendmsg+0x8d0/0xbf0
[  212.715633][ T8685]  ? netlink_getsockopt+0x590/0x590
[  212.720836][ T8685]  ? aa_sock_msg_perm+0x94/0x150
[  212.725779][ T8685]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  212.731069][ T8685]  ? security_socket_sendmsg+0x80/0xa0
[  212.736527][ T8685]  ? netlink_getsockopt+0x590/0x590
[  212.741731][ T8685]  ____sys_sendmsg+0x5ba/0x960
[  212.746507][ T8685]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.752669][ T8685]  ? __asan_memset+0x22/0x40
[  212.757263][ T8685]  ? __sys_sendmsg_sock+0x30/0x30
[  212.762286][ T8685]  ? __import_iovec+0x5f2/0x850
[  212.767148][ T8685]  ? import_iovec+0x73/0xa0
[  212.771650][ T8685]  ___sys_sendmsg+0x2a6/0x360
[  212.776341][ T8685]  ? __sys_sendmsg+0x2a0/0x2a0
[  212.781129][ T8685]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  212.787394][ T8685]  __se_sys_sendmsg+0x1c2/0x2b0
[  212.792246][ T8685]  ? __x64_sys_sendmsg+0x80/0x80
[  212.797198][ T8685]  ? lockdep_hardirqs_on+0x98/0x150
[  212.802403][ T8685]  do_syscall_64+0x55/0xb0
[  212.806933][ T8685]  ? clear_bhb_loop+0x40/0x90
[  212.811623][ T8685]  ? clear_bhb_loop+0x40/0x90
[  212.816312][ T8685]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  212.822218][ T8685] RIP: 0033:0x7f3510d9ce59
[  212.826638][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.846245][ T8685] RSP: 002b:00007f3511c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.854670][ T8685] RAX: ffffffffffffffda RBX: 00007f3511015fa0 RCX: 00007f3510d9ce59
[  212.862640][ T8685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  212.870609][ T8685] RBP: 00007f3510e32d6f R08: 0000000000000000 R09: 0000000000000000
[  212.878578][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.886548][ T8685] R13: 00007f3511016038 R14: 00007f3511015fa0 R15: 00007ffc34fd4fd8
[  212.894541][ T8685]  </TASK>
[  213.003292][ T8689] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  213.012027][ T8689] CPU: 0 PID: 8689 Comm: syz.0.1069 Not tainted syzkaller #0
[  213.019445][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  213.029538][ T8689] Call Trace:
[  213.032840][ T8689]  <TASK>
[  213.035792][ T8689]  dump_stack_lvl+0x18c/0x250
[  213.040510][ T8689]  ? show_regs_print_info+0x20/0x20
[  213.045742][ T8689]  ? load_image+0x420/0x420
[  213.050292][ T8689]  sysfs_warn_dup+0x8e/0xa0
[  213.054835][ T8689]  sysfs_do_create_link_sd+0xc0/0x110
[  213.060254][ T8689]  device_add_class_symlinks+0x1cf/0x240
[  213.065937][ T8689]  device_add+0x507/0xc50
[  213.070318][ T8689]  wiphy_register+0x1dad/0x2ae0
[  213.075234][ T8689]  ? cfg80211_event_work+0x40/0x40
[  213.080382][ T8689]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  213.086455][ T8689]  ieee80211_register_hw+0x3464/0x4250
[  213.091931][ T8689]  ? ieee80211_tasklet_handler+0x20/0x20
[  213.097585][ T8689]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  213.103486][ T8689]  ? __debug_object_init+0xec/0x450
[  213.108686][ T8689]  ? __asan_memset+0x22/0x40
[  213.113276][ T8689]  ? __hrtimer_init+0x186/0x270
[  213.118138][ T8689]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  213.123906][ T8689]  ? mac80211_hwsim_free+0x220/0x220
[  213.129212][ T8689]  ? rcu_is_watching+0x15/0xb0
[  213.133995][ T8689]  ? kstrndup+0xbd/0x140
[  213.138258][ T8689]  hwsim_new_radio_nl+0xdc9/0x1a90
[  213.143383][ T8689]  ? __nla_validate+0x50/0x50
[  213.148166][ T8689]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  213.154567][ T8689]  ? __nla_parse+0x40/0x50
[  213.159012][ T8689]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  213.165372][ T8689]  genl_family_rcv_msg_doit+0x211/0x310
[  213.170956][ T8689]  ? end_current_label_crit_section+0x170/0x170
[  213.177240][ T8689]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  213.183136][ T8689]  ? bpf_lsm_capable+0x9/0x10
[  213.187812][ T8689]  ? security_capable+0x89/0xb0
[  213.192706][ T8689]  genl_rcv_msg+0x619/0x7a0
[  213.197216][ T8689]  ? genl_bind+0x360/0x360
[  213.201630][ T8689]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  213.207608][ T8689]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  213.213947][ T8689]  ? ref_tracker_free+0x690/0x840
[  213.219011][ T8689]  netlink_rcv_skb+0x241/0x4d0
[  213.223778][ T8689]  ? genl_bind+0x360/0x360
[  213.228192][ T8689]  ? netlink_ack+0x1180/0x1180
[  213.232971][ T8689]  ? down_read+0x1ac/0x2e0
[  213.237387][ T8689]  genl_rcv+0x28/0x40
[  213.241367][ T8689]  netlink_unicast+0x751/0x8d0
[  213.246136][ T8689]  netlink_sendmsg+0x8d0/0xbf0
[  213.250900][ T8689]  ? netlink_getsockopt+0x590/0x590
[  213.256097][ T8689]  ? aa_sock_msg_perm+0x94/0x150
[  213.261052][ T8689]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  213.266354][ T8689]  ? security_socket_sendmsg+0x80/0xa0
[  213.271824][ T8689]  ? netlink_getsockopt+0x590/0x590
[  213.277020][ T8689]  ____sys_sendmsg+0x5ba/0x960
[  213.281788][ T8689]  ? __asan_memset+0x22/0x40
[  213.286373][ T8689]  ? __sys_sendmsg_sock+0x30/0x30
[  213.291388][ T8689]  ? __import_iovec+0x5f2/0x850
[  213.296235][ T8689]  ? import_iovec+0x73/0xa0
[  213.300730][ T8689]  ___sys_sendmsg+0x2a6/0x360
[  213.305407][ T8689]  ? __sys_sendmsg+0x2a0/0x2a0
[  213.310180][ T8689]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  213.316542][ T8689]  __se_sys_sendmsg+0x1c2/0x2b0
[  213.321407][ T8689]  ? hrtimer_interrupt+0x7bb/0x9c0
[  213.326518][ T8689]  ? __x64_sys_sendmsg+0x80/0x80
[  213.331463][ T8689]  ? lockdep_hardirqs_on+0x98/0x150
[  213.336666][ T8689]  do_syscall_64+0x55/0xb0
[  213.341080][ T8689]  ? clear_bhb_loop+0x40/0x90
[  213.345753][ T8689]  ? clear_bhb_loop+0x40/0x90
[  213.350423][ T8689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  213.356325][ T8689] RIP: 0033:0x7f0ce639ce59
[  213.360761][ T8689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.380385][ T8689] RSP: 002b:00007f0ce7213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.388834][ T8689] RAX: ffffffffffffffda RBX: 00007f0ce6615fa0 RCX: 00007f0ce639ce59
[  213.396811][ T8689] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  213.404779][ T8689] RBP: 00007f0ce6432d6f R08: 0000000000000000 R09: 0000000000000000
[  213.412749][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.420715][ T8689] R13: 00007f0ce6616038 R14: 00007f0ce6615fa0 R15: 00007ffe3dd460b8
[  213.428704][ T8689]  </TASK>
[  213.578509][ T8695] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  213.600792][ T8695] CPU: 1 PID: 8695 Comm: syz.3.1072 Not tainted syzkaller #0
[  213.608248][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  213.618340][ T8695] Call Trace:
[  213.621650][ T8695]  <TASK>
[  213.624605][ T8695]  dump_stack_lvl+0x18c/0x250
[  213.629303][ T8695]  ? show_regs_print_info+0x20/0x20
[  213.634511][ T8695]  ? load_image+0x420/0x420
[  213.639058][ T8695]  sysfs_warn_dup+0x8e/0xa0
[  213.643601][ T8695]  sysfs_do_create_link_sd+0xc0/0x110
[  213.649026][ T8695]  device_add_class_symlinks+0x1cf/0x240
[  213.654712][ T8695]  device_add+0x507/0xc50
[  213.659092][ T8695]  wiphy_register+0x1dad/0x2ae0
[  213.664010][ T8695]  ? cfg80211_event_work+0x40/0x40
[  213.669159][ T8695]  ? minstrel_ht_alloc+0x88a/0x990
[  213.674316][ T8695]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  213.680435][ T8695]  ieee80211_register_hw+0x3464/0x4250
[  213.685966][ T8695]  ? ieee80211_tasklet_handler+0x20/0x20
[  213.691632][ T8695]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  213.697557][ T8695]  ? __debug_object_init+0xec/0x450
[  213.702803][ T8695]  ? __asan_memset+0x22/0x40
[  213.707437][ T8695]  ? __hrtimer_init+0x186/0x270
[  213.712332][ T8695]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  213.718117][ T8695]  ? mac80211_hwsim_free+0x220/0x220
[  213.723448][ T8695]  ? rcu_is_watching+0x15/0xb0
[  213.728259][ T8695]  ? kstrndup+0xbd/0x140
[  213.732547][ T8695]  hwsim_new_radio_nl+0xdc9/0x1a90
[  213.737700][ T8695]  ? __nla_validate+0x50/0x50
[  213.742427][ T8695]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  213.748820][ T8695]  ? __nla_parse+0x40/0x50
[  213.753276][ T8695]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  213.759657][ T8695]  genl_family_rcv_msg_doit+0x211/0x310
[  213.765255][ T8695]  ? end_current_label_crit_section+0x170/0x170
[  213.771552][ T8695]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  213.777506][ T8695]  ? bpf_lsm_capable+0x9/0x10
[  213.782232][ T8695]  ? security_capable+0x89/0xb0
[  213.787139][ T8695]  genl_rcv_msg+0x619/0x7a0
[  213.791680][ T8695]  ? genl_bind+0x360/0x360
[  213.796110][ T8695]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  213.802097][ T8695]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  213.808448][ T8695]  ? ref_tracker_free+0x690/0x840
[  213.813483][ T8695]  netlink_rcv_skb+0x241/0x4d0
[  213.818250][ T8695]  ? genl_bind+0x360/0x360
[  213.822664][ T8695]  ? netlink_ack+0x1180/0x1180
[  213.827434][ T8695]  ? __lock_acquire+0x7d40/0x7d40
[  213.832491][ T8695]  ? down_read+0x1ac/0x2e0
[  213.836918][ T8695]  genl_rcv+0x28/0x40
[  213.840923][ T8695]  netlink_unicast+0x751/0x8d0
[  213.845728][ T8695]  netlink_sendmsg+0x8d0/0xbf0
[  213.850520][ T8695]  ? netlink_getsockopt+0x590/0x590
[  213.855752][ T8695]  ? kasan_check_range+0x97/0x290
[  213.860784][ T8695]  ? aa_sock_msg_perm+0x94/0x150
[  213.865737][ T8695]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  213.871033][ T8695]  ? security_socket_sendmsg+0x80/0xa0
[  213.876504][ T8695]  ? netlink_getsockopt+0x590/0x590
[  213.881758][ T8695]  ____sys_sendmsg+0x5ba/0x960
[  213.886530][ T8695]  ? __asan_memset+0x22/0x40
[  213.891130][ T8695]  ? __sys_sendmsg_sock+0x30/0x30
[  213.896187][ T8695]  ? __import_iovec+0x5f2/0x850
[  213.901068][ T8695]  ? import_iovec+0x73/0xa0
[  213.905586][ T8695]  ___sys_sendmsg+0x2a6/0x360
[  213.910280][ T8695]  ? __sys_sendmsg+0x2a0/0x2a0
[  213.915065][ T8695]  ? debug_mutex_init+0x38/0x70
[  213.919962][ T8695]  __se_sys_sendmsg+0x1c2/0x2b0
[  213.924880][ T8695]  ? __x64_sys_sendmsg+0x80/0x80
[  213.929871][ T8695]  ? lockdep_hardirqs_on+0x98/0x150
[  213.935121][ T8695]  do_syscall_64+0x55/0xb0
[  213.939563][ T8695]  ? clear_bhb_loop+0x40/0x90
[  213.944252][ T8695]  ? clear_bhb_loop+0x40/0x90
[  213.948961][ T8695]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  213.954883][ T8695] RIP: 0033:0x7f3510d9ce59
[  213.959298][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.967499][ T3428] wlan1: Creating new IBSS network, BSSID 6e:6e:ed:02:1e:a3
[  213.978892][ T8695] RSP: 002b:00007f3511c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.978920][ T8695] RAX: ffffffffffffffda RBX: 00007f3511015fa0 RCX: 00007f3510d9ce59
[  213.978936][ T8695] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  213.978949][ T8695] RBP: 00007f3510e32d6f R08: 0000000000000000 R09: 0000000000000000
[  213.978961][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.978972][ T8695] R13: 00007f3511016038 R14: 00007f3511015fa0 R15: 00007ffc34fd4fd8
[  213.979010][ T8695]  </TASK>
[  213.997162][ T7601] wlan1: Trigger new scan to find an IBSS to join
[  214.024888][ T8701] netlink: 'syz.0.1074': attribute type 21 has an invalid length.
[  214.252359][ T8711] tun0: tun_chr_ioctl cmd 1074025678
[  214.266772][ T8711] tun0: group set to 0
[  214.313216][ T8715] netlink: 'syz.3.1077': attribute type 9 has an invalid length.
[  214.358913][ T8715] netlink: 'syz.3.1077': attribute type 10 has an invalid length.
[  214.371912][ T8714] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  214.382646][ T8714] CPU: 0 PID: 8714 Comm: syz.1.1078 Not tainted syzkaller #0
[  214.389586][ T8717] netlink: 'syz.0.1079': attribute type 29 has an invalid length.
[  214.390042][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  214.390058][ T8714] Call Trace:
[  214.390066][ T8714]  <TASK>
[  214.390077][ T8714]  dump_stack_lvl+0x18c/0x250
[  214.418855][ T8714]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  214.425046][ T8714]  ? show_regs_print_info+0x20/0x20
[  214.430246][ T8714]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  214.436419][ T8714]  sysfs_warn_dup+0x8e/0xa0
[  214.440925][ T8714]  sysfs_do_create_link_sd+0xc0/0x110
[  214.446294][ T8714]  device_add_class_symlinks+0x1cf/0x240
[  214.451929][ T8714]  device_add+0x507/0xc50
[  214.456261][ T8714]  wiphy_register+0x1dad/0x2ae0
[  214.461121][ T8714]  ? cfg80211_event_work+0x40/0x40
[  214.466222][ T8714]  ? minstrel_ht_alloc+0x88a/0x990
[  214.471329][ T8714]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  214.477390][ T8714]  ieee80211_register_hw+0x3464/0x4250
[  214.482869][ T8714]  ? ieee80211_tasklet_handler+0x20/0x20
[  214.488614][ T8714]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  214.494523][ T8714]  ? __debug_object_init+0xec/0x450
[  214.499720][ T8714]  ? __asan_memset+0x22/0x40
[  214.504303][ T8714]  ? __hrtimer_init+0x186/0x270
[  214.509143][ T8714]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  214.514873][ T8714]  ? mac80211_hwsim_free+0x220/0x220
[  214.520147][ T8714]  ? rcu_is_watching+0x15/0xb0
[  214.524923][ T8714]  ? kstrndup+0xbd/0x140
[  214.529164][ T8714]  hwsim_new_radio_nl+0xdc9/0x1a90
[  214.534278][ T8714]  ? __nla_validate+0x50/0x50
[  214.538987][ T8714]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  214.545366][ T8714]  ? __nla_parse+0x40/0x50
[  214.549814][ T8714]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  214.556165][ T8714]  genl_family_rcv_msg_doit+0x211/0x310
[  214.561790][ T8714]  ? end_current_label_crit_section+0x170/0x170
[  214.568070][ T8714]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  214.573965][ T8714]  ? bpf_lsm_capable+0x9/0x10
[  214.578639][ T8714]  ? security_capable+0x89/0xb0
[  214.583486][ T8714]  genl_rcv_msg+0x619/0x7a0
[  214.587997][ T8714]  ? genl_bind+0x360/0x360
[  214.592404][ T8714]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  214.598405][ T8714]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  214.604744][ T8714]  ? ref_tracker_free+0x690/0x840
[  214.609826][ T8714]  netlink_rcv_skb+0x241/0x4d0
[  214.614618][ T8714]  ? genl_bind+0x360/0x360
[  214.619053][ T8714]  ? netlink_ack+0x1180/0x1180
[  214.623840][ T8714]  ? __lock_acquire+0x7d40/0x7d40
[  214.628894][ T8714]  ? down_read+0x1ac/0x2e0
[  214.633327][ T8714]  genl_rcv+0x28/0x40
[  214.637315][ T8714]  netlink_unicast+0x751/0x8d0
[  214.642090][ T8714]  netlink_sendmsg+0x8d0/0xbf0
[  214.646862][ T8714]  ? netlink_getsockopt+0x590/0x590
[  214.652068][ T8714]  ? aa_sock_msg_perm+0x94/0x150
[  214.657012][ T8714]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  214.662295][ T8714]  ? security_socket_sendmsg+0x80/0xa0
[  214.667759][ T8714]  ? netlink_getsockopt+0x590/0x590
[  214.673395][ T8714]  ____sys_sendmsg+0x5ba/0x960
[  214.678173][ T8714]  ? __asan_memset+0x22/0x40
[  214.682768][ T8714]  ? __sys_sendmsg_sock+0x30/0x30
[  214.687790][ T8714]  ? __import_iovec+0x5f2/0x850
[  214.692646][ T8714]  ? import_iovec+0x73/0xa0
[  214.697150][ T8714]  ___sys_sendmsg+0x2a6/0x360
[  214.701835][ T8714]  ? __sys_sendmsg+0x2a0/0x2a0
[  214.706644][ T8714]  __se_sys_sendmsg+0x1c2/0x2b0
[  214.711500][ T8714]  ? __x64_sys_sendmsg+0x80/0x80
[  214.716459][ T8714]  ? lockdep_hardirqs_on+0x98/0x150
[  214.721666][ T8714]  do_syscall_64+0x55/0xb0
[  214.726085][ T8714]  ? clear_bhb_loop+0x40/0x90
[  214.730757][ T8714]  ? clear_bhb_loop+0x40/0x90
[  214.735434][ T8714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.741330][ T8714] RIP: 0033:0x7f2af0b9ce59
[  214.745746][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.765354][ T8714] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.773776][ T8714] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  214.781752][ T8714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  214.789738][ T8714] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  214.797729][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.805706][ T8714] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  214.813692][ T8714]  </TASK>
[  214.855669][ T8717] netlink: 'syz.0.1079': attribute type 29 has an invalid length.
[  214.884892][ T8718] netlink: 'syz.0.1079': attribute type 29 has an invalid length.
[  214.908041][ T8719] netlink: 'syz.0.1079': attribute type 29 has an invalid length.
[  215.013033][   T49] wlan1: Trigger new scan to find an IBSS to join
[  215.050516][ T8725] __nla_validate_parse: 10 callbacks suppressed
[  215.050535][ T8725] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1081'.
[  215.126457][ T8725] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.144562][ T8725] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1081'.
[  215.327371][ T8732] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1083'.
[  215.372195][ T8732] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  215.381475][ T8732] CPU: 0 PID: 8732 Comm: syz.1.1083 Not tainted syzkaller #0
[  215.388939][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  215.399064][ T8732] Call Trace:
[  215.402361][ T8732]  <TASK>
[  215.405319][ T8732]  dump_stack_lvl+0x18c/0x250
[  215.410034][ T8732]  ? show_regs_print_info+0x20/0x20
[  215.415274][ T8732]  ? load_image+0x420/0x420
[  215.419838][ T8732]  sysfs_warn_dup+0x8e/0xa0
[  215.424381][ T8732]  sysfs_do_create_link_sd+0xc0/0x110
[  215.429789][ T8732]  device_add_class_symlinks+0x1cf/0x240
[  215.435474][ T8732]  device_add+0x507/0xc50
[  215.439849][ T8732]  wiphy_register+0x1dad/0x2ae0
[  215.444769][ T8732]  ? cfg80211_event_work+0x40/0x40
[  215.450008][ T8732]  ? minstrel_ht_alloc+0x88a/0x990
[  215.455154][ T8732]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  215.461267][ T8732]  ieee80211_register_hw+0x3464/0x4250
[  215.466793][ T8732]  ? ieee80211_tasklet_handler+0x20/0x20
[  215.472463][ T8732]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  215.478399][ T8732]  ? __debug_object_init+0xec/0x450
[  215.483638][ T8732]  ? __asan_memset+0x22/0x40
[  215.488269][ T8732]  ? __hrtimer_init+0x186/0x270
[  215.493160][ T8732]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  215.498948][ T8732]  ? mac80211_hwsim_free+0x220/0x220
[  215.504276][ T8732]  ? kstrndup+0xbd/0x140
[  215.508571][ T8732]  hwsim_new_radio_nl+0xdc9/0x1a90
[  215.513731][ T8732]  ? __nla_validate+0x50/0x50
[  215.518446][ T8732]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  215.524803][ T8732]  ? __nla_parse+0x40/0x50
[  215.529224][ T8732]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  215.535561][ T8732]  genl_family_rcv_msg_doit+0x211/0x310
[  215.541133][ T8732]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  215.547031][ T8732]  ? lockdep_hardirqs_on+0x98/0x150
[  215.552253][ T8732]  ? genl_rcv_msg+0x5f6/0x7a0
[  215.556956][ T8732]  genl_rcv_msg+0x619/0x7a0
[  215.561462][ T8732]  ? genl_bind+0x360/0x360
[  215.565877][ T8732]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  215.571861][ T8732]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  215.578196][ T8732]  ? ref_tracker_free+0x690/0x840
[  215.583224][ T8732]  netlink_rcv_skb+0x241/0x4d0
[  215.587993][ T8732]  ? genl_bind+0x360/0x360
[  215.592410][ T8732]  ? netlink_ack+0x1180/0x1180
[  215.597179][ T8732]  ? __lock_acquire+0x7d40/0x7d40
[  215.602204][ T8732]  ? down_read+0x1ac/0x2e0
[  215.606619][ T8732]  genl_rcv+0x28/0x40
[  215.610600][ T8732]  netlink_unicast+0x751/0x8d0
[  215.615387][ T8732]  netlink_sendmsg+0x8d0/0xbf0
[  215.620156][ T8732]  ? lockdep_hardirqs_on+0x98/0x150
[  215.625375][ T8732]  ? netlink_getsockopt+0x590/0x590
[  215.630572][ T8732]  ? security_socket_sendmsg+0x45/0xa0
[  215.636040][ T8732]  ? security_socket_sendmsg+0x80/0xa0
[  215.641516][ T8732]  ? netlink_getsockopt+0x590/0x590
[  215.646717][ T8732]  ____sys_sendmsg+0x5ba/0x960
[  215.651483][ T8732]  ? __asan_memset+0x22/0x40
[  215.656086][ T8732]  ? __sys_sendmsg_sock+0x30/0x30
[  215.661125][ T8732]  ? __import_iovec+0x5f2/0x850
[  215.666007][ T8732]  ? import_iovec+0x73/0xa0
[  215.670529][ T8732]  ___sys_sendmsg+0x2a6/0x360
[  215.675205][ T8732]  ? __sys_sendmsg+0x2a0/0x2a0
[  215.679994][ T8732]  __se_sys_sendmsg+0x1c2/0x2b0
[  215.684846][ T8732]  ? __x64_sys_sendmsg+0x80/0x80
[  215.689796][ T8732]  ? lockdep_hardirqs_on+0x98/0x150
[  215.694998][ T8732]  do_syscall_64+0x55/0xb0
[  215.699416][ T8732]  ? clear_bhb_loop+0x40/0x90
[  215.704100][ T8732]  ? clear_bhb_loop+0x40/0x90
[  215.708780][ T8732]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.714672][ T8732] RIP: 0033:0x7f2af0b9ce59
[  215.719085][ T8732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.738703][ T8732] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.747120][ T8732] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  215.755091][ T8732] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  215.763072][ T8732] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  215.771060][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.779041][ T8732] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  215.787023][ T8732]  </TASK>
[  215.821828][ T8737] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1084'.
[  216.052093][ T8743] validate_nla: 1 callbacks suppressed
[  216.052130][ T8743] netlink: 'syz.0.1087': attribute type 21 has an invalid length.
[  216.110559][ T8745] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1087'.
[  216.318377][ T8751] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1089'.
[  216.388967][ T8751] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  216.400354][ T8751] CPU: 1 PID: 8751 Comm: syz.2.1089 Not tainted syzkaller #0
[  216.407800][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  216.417888][ T8751] Call Trace:
[  216.421198][ T8751]  <TASK>
[  216.424176][ T8751]  dump_stack_lvl+0x18c/0x250
[  216.428910][ T8751]  ? show_regs_print_info+0x20/0x20
[  216.434159][ T8751]  ? load_image+0x420/0x420
[  216.438719][ T8751]  sysfs_warn_dup+0x8e/0xa0
[  216.443259][ T8751]  sysfs_do_create_link_sd+0xc0/0x110
[  216.448674][ T8751]  device_add_class_symlinks+0x1cf/0x240
[  216.454367][ T8751]  device_add+0x507/0xc50
[  216.458741][ T8751]  wiphy_register+0x1dad/0x2ae0
[  216.463627][ T8751]  ? cfg80211_event_work+0x40/0x40
[  216.468763][ T8751]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  216.474845][ T8751]  ieee80211_register_hw+0x3464/0x4250
[  216.480322][ T8751]  ? ieee80211_tasklet_handler+0x20/0x20
[  216.485968][ T8751]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  216.491881][ T8751]  ? __debug_object_init+0xec/0x450
[  216.497093][ T8751]  ? __asan_memset+0x22/0x40
[  216.501688][ T8751]  ? __hrtimer_init+0x186/0x270
[  216.506550][ T8751]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  216.512294][ T8751]  ? mac80211_hwsim_free+0x220/0x220
[  216.517583][ T8751]  ? rcu_is_watching+0x15/0xb0
[  216.522352][ T8751]  ? kstrndup+0xbd/0x140
[  216.526606][ T8751]  hwsim_new_radio_nl+0xdc9/0x1a90
[  216.531725][ T8751]  ? __nla_validate+0x50/0x50
[  216.536414][ T8751]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  216.542757][ T8751]  ? __nla_parse+0x40/0x50
[  216.547173][ T8751]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  216.553516][ T8751]  genl_family_rcv_msg_doit+0x211/0x310
[  216.559070][ T8751]  ? end_current_label_crit_section+0x170/0x170
[  216.565320][ T8751]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  216.571228][ T8751]  ? bpf_lsm_capable+0x9/0x10
[  216.575909][ T8751]  ? security_capable+0x89/0xb0
[  216.580768][ T8751]  genl_rcv_msg+0x619/0x7a0
[  216.585286][ T8751]  ? genl_bind+0x360/0x360
[  216.589704][ T8751]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  216.595684][ T8751]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  216.602019][ T8751]  ? ref_tracker_free+0x690/0x840
[  216.607057][ T8751]  netlink_rcv_skb+0x241/0x4d0
[  216.611824][ T8751]  ? genl_bind+0x360/0x360
[  216.616244][ T8751]  ? netlink_ack+0x1180/0x1180
[  216.621017][ T8751]  ? __lock_acquire+0x7d40/0x7d40
[  216.626049][ T8751]  ? down_read+0x1ac/0x2e0
[  216.630468][ T8751]  genl_rcv+0x28/0x40
[  216.634453][ T8751]  netlink_unicast+0x751/0x8d0
[  216.639232][ T8751]  netlink_sendmsg+0x8d0/0xbf0
[  216.644016][ T8751]  ? netlink_getsockopt+0x590/0x590
[  216.649219][ T8751]  ? aa_sock_msg_perm+0x94/0x150
[  216.654166][ T8751]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  216.659460][ T8751]  ? security_socket_sendmsg+0x80/0xa0
[  216.664920][ T8751]  ? netlink_getsockopt+0x590/0x590
[  216.670118][ T8751]  ____sys_sendmsg+0x5ba/0x960
[  216.674890][ T8751]  ? __asan_memset+0x22/0x40
[  216.679485][ T8751]  ? __sys_sendmsg_sock+0x30/0x30
[  216.684508][ T8751]  ? __import_iovec+0x5f2/0x850
[  216.689366][ T8751]  ? import_iovec+0x73/0xa0
[  216.693872][ T8751]  ___sys_sendmsg+0x2a6/0x360
[  216.698559][ T8751]  ? __sys_sendmsg+0x2a0/0x2a0
[  216.703365][ T8751]  __se_sys_sendmsg+0x1c2/0x2b0
[  216.708220][ T8751]  ? __x64_sys_sendmsg+0x80/0x80
[  216.713161][ T8751]  ? lockdep_hardirqs_on+0x98/0x150
[  216.718385][ T8751]  ? __x64_sys_sendmsg+0x53/0x80
[  216.723327][ T8751]  do_syscall_64+0x55/0xb0
[  216.727742][ T8751]  ? clear_bhb_loop+0x40/0x90
[  216.732416][ T8751]  ? clear_bhb_loop+0x40/0x90
[  216.737092][ T8751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.742988][ T8751] RIP: 0033:0x7f001ed9ce59
[  216.747403][ T8751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.767016][ T8751] RSP: 002b:00007f001fbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.775432][ T8751] RAX: ffffffffffffffda RBX: 00007f001f015fa0 RCX: 00007f001ed9ce59
[  216.783402][ T8751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  216.791370][ T8751] RBP: 00007f001ee32d6f R08: 0000000000000000 R09: 0000000000000000
[  216.799335][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.807301][ T8751] R13: 00007f001f016038 R14: 00007f001f015fa0 R15: 00007ffd9ba47918
[  216.815288][ T8751]  </TASK>
[  216.899695][ T8756] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  216.927263][ T8756] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1091'.
[  216.933903][ T3428] wlan1: Trigger new scan to find an IBSS to join
[  217.107858][ T8762] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1093'.
[  217.208514][ T8766] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1095'.
[  217.219126][ T8764] tun0: tun_chr_ioctl cmd 1074025678
[  217.227228][ T8764] tun0: group set to 0
[  217.232840][ T8766] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  217.248695][ T8766] CPU: 1 PID: 8766 Comm: syz.1.1095 Not tainted syzkaller #0
[  217.256133][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  217.266200][ T8766] Call Trace:
[  217.269487][ T8766]  <TASK>
[  217.272411][ T8766]  dump_stack_lvl+0x18c/0x250
[  217.277093][ T8766]  ? show_regs_print_info+0x20/0x20
[  217.282288][ T8766]  ? load_image+0x420/0x420
[  217.286818][ T8766]  sysfs_warn_dup+0x8e/0xa0
[  217.291341][ T8766]  sysfs_do_create_link_sd+0xc0/0x110
[  217.296715][ T8766]  device_add_class_symlinks+0x1cf/0x240
[  217.302377][ T8766]  device_add+0x507/0xc50
[  217.306748][ T8766]  wiphy_register+0x1dad/0x2ae0
[  217.311637][ T8766]  ? cfg80211_event_work+0x40/0x40
[  217.316756][ T8766]  ? minstrel_ht_alloc+0x88a/0x990
[  217.321881][ T8766]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  217.327964][ T8766]  ieee80211_register_hw+0x3464/0x4250
[  217.333445][ T8766]  ? ieee80211_tasklet_handler+0x20/0x20
[  217.339078][ T8766]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  217.344981][ T8766]  ? __debug_object_init+0xec/0x450
[  217.350190][ T8766]  ? __asan_memset+0x22/0x40
[  217.354789][ T8766]  ? __hrtimer_init+0x186/0x270
[  217.359643][ T8766]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  217.365386][ T8766]  ? mac80211_hwsim_free+0x220/0x220
[  217.370673][ T8766]  ? rcu_is_watching+0x15/0xb0
[  217.375441][ T8766]  ? kstrndup+0xbd/0x140
[  217.379695][ T8766]  hwsim_new_radio_nl+0xdc9/0x1a90
[  217.384818][ T8766]  ? __nla_validate+0x50/0x50
[  217.389505][ T8766]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  217.395846][ T8766]  ? __nla_parse+0x40/0x50
[  217.400264][ T8766]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  217.406783][ T8766]  genl_family_rcv_msg_doit+0x211/0x310
[  217.412338][ T8766]  ? end_current_label_crit_section+0x170/0x170
[  217.418613][ T8766]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  217.424540][ T8766]  ? bpf_lsm_capable+0x9/0x10
[  217.429251][ T8766]  ? security_capable+0x89/0xb0
[  217.434118][ T8766]  genl_rcv_msg+0x619/0x7a0
[  217.438653][ T8766]  ? genl_bind+0x360/0x360
[  217.443076][ T8766]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  217.449063][ T8766]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  217.455403][ T8766]  ? lock_chain_count+0x20/0x20
[  217.460259][ T8766]  ? ref_tracker_free+0x690/0x840
[  217.465297][ T8766]  netlink_rcv_skb+0x241/0x4d0
[  217.470088][ T8766]  ? genl_bind+0x360/0x360
[  217.474544][ T8766]  ? netlink_ack+0x1180/0x1180
[  217.479334][ T8766]  ? __lock_acquire+0x7d40/0x7d40
[  217.484375][ T8766]  ? down_read+0x1ac/0x2e0
[  217.488807][ T8766]  genl_rcv+0x28/0x40
[  217.492801][ T8766]  netlink_unicast+0x751/0x8d0
[  217.497584][ T8766]  netlink_sendmsg+0x8d0/0xbf0
[  217.502388][ T8766]  ? netlink_getsockopt+0x590/0x590
[  217.507591][ T8766]  ? aa_sock_msg_perm+0x94/0x150
[  217.512533][ T8766]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  217.517821][ T8766]  ? security_socket_sendmsg+0x80/0xa0
[  217.523279][ T8766]  ? netlink_getsockopt+0x590/0x590
[  217.528479][ T8766]  ____sys_sendmsg+0x5ba/0x960
[  217.533260][ T8766]  ? __asan_memset+0x22/0x40
[  217.537862][ T8766]  ? __sys_sendmsg_sock+0x30/0x30
[  217.542889][ T8766]  ? __import_iovec+0x5f2/0x850
[  217.547744][ T8766]  ? import_iovec+0x73/0xa0
[  217.552253][ T8766]  ___sys_sendmsg+0x2a6/0x360
[  217.556939][ T8766]  ? __sys_sendmsg+0x2a0/0x2a0
[  217.561722][ T8766]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  217.568018][ T8766]  __se_sys_sendmsg+0x1c2/0x2b0
[  217.572878][ T8766]  ? __x64_sys_sendmsg+0x80/0x80
[  217.577833][ T8766]  ? lockdep_hardirqs_on+0x98/0x150
[  217.583040][ T8766]  do_syscall_64+0x55/0xb0
[  217.587455][ T8766]  ? clear_bhb_loop+0x40/0x90
[  217.592128][ T8766]  ? clear_bhb_loop+0x40/0x90
[  217.596806][ T8766]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.602705][ T8766] RIP: 0033:0x7f2af0b9ce59
[  217.607120][ T8766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.626729][ T8766] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.635150][ T8766] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  217.643125][ T8766] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  217.651103][ T8766] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  217.659075][ T8766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.667047][ T8766] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  217.675120][ T8766]  </TASK>
[  217.708937][ T8768] netlink: 'syz.2.1097': attribute type 21 has an invalid length.
[  217.755440][ T8770] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1097'.
[  217.990208][ T8778] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  218.001661][ T8778] CPU: 1 PID: 8778 Comm: syz.2.1099 Not tainted syzkaller #0
[  218.009099][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  218.019192][ T8778] Call Trace:
[  218.022512][ T8778]  <TASK>
[  218.025471][ T8778]  dump_stack_lvl+0x18c/0x250
[  218.030201][ T8778]  ? show_regs_print_info+0x20/0x20
[  218.035455][ T8778]  ? load_image+0x420/0x420
[  218.040004][ T8778]  sysfs_warn_dup+0x8e/0xa0
[  218.044553][ T8778]  sysfs_do_create_link_sd+0xc0/0x110
[  218.049973][ T8778]  device_add_class_symlinks+0x1cf/0x240
[  218.055653][ T8778]  device_add+0x507/0xc50
[  218.060007][ T8778]  wiphy_register+0x1dad/0x2ae0
[  218.064885][ T8778]  ? cfg80211_event_work+0x40/0x40
[  218.070004][ T8778]  ? minstrel_ht_alloc+0x88a/0x990
[  218.075129][ T8778]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  218.081211][ T8778]  ieee80211_register_hw+0x3464/0x4250
[  218.086701][ T8778]  ? ieee80211_tasklet_handler+0x20/0x20
[  218.092337][ T8778]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  218.098244][ T8778]  ? __debug_object_init+0xec/0x450
[  218.103453][ T8778]  ? __asan_memset+0x22/0x40
[  218.108053][ T8778]  ? __hrtimer_init+0x186/0x270
[  218.112910][ T8778]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  218.118654][ T8778]  ? mac80211_hwsim_free+0x220/0x220
[  218.123950][ T8778]  ? hwsim_new_radio_nl+0xdb9/0x1a90
[  218.129249][ T8778]  hwsim_new_radio_nl+0xdc9/0x1a90
[  218.134370][ T8778]  ? __nla_validate+0x50/0x50
[  218.139070][ T8778]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  218.145502][ T8778]  ? __nla_parse+0x40/0x50
[  218.149923][ T8778]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  218.156263][ T8778]  genl_family_rcv_msg_doit+0x211/0x310
[  218.161824][ T8778]  ? end_current_label_crit_section+0x170/0x170
[  218.168076][ T8778]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  218.173983][ T8778]  ? bpf_lsm_capable+0x9/0x10
[  218.178669][ T8778]  ? security_capable+0x89/0xb0
[  218.183531][ T8778]  genl_rcv_msg+0x619/0x7a0
[  218.188043][ T8778]  ? genl_bind+0x360/0x360
[  218.192462][ T8778]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  218.198799][ T8778]  ? kasan_check_range+0x1b1/0x290
[  218.203923][ T8778]  netlink_rcv_skb+0x241/0x4d0
[  218.208690][ T8778]  ? genl_bind+0x360/0x360
[  218.213114][ T8778]  ? netlink_ack+0x1180/0x1180
[  218.217891][ T8778]  ? __lock_acquire+0x7d40/0x7d40
[  218.222934][ T8778]  ? down_read+0x1ac/0x2e0
[  218.227356][ T8778]  genl_rcv+0x28/0x40
[  218.231340][ T8778]  netlink_unicast+0x751/0x8d0
[  218.236121][ T8778]  netlink_sendmsg+0x8d0/0xbf0
[  218.240891][ T8778]  ? netlink_getsockopt+0x590/0x590
[  218.246097][ T8778]  ? netlink_getsockopt+0x590/0x590
[  218.251298][ T8778]  ____sys_sendmsg+0x5ba/0x960
[  218.256076][ T8778]  ? __asan_memset+0x22/0x40
[  218.260677][ T8778]  ? __sys_sendmsg_sock+0x30/0x30
[  218.265704][ T8778]  ? __import_iovec+0x5f2/0x850
[  218.270571][ T8778]  ? import_iovec+0x73/0xa0
[  218.275082][ T8778]  ___sys_sendmsg+0x2a6/0x360
[  218.279783][ T8778]  ? __sys_sendmsg+0x2a0/0x2a0
[  218.284608][ T8778]  __se_sys_sendmsg+0x1c2/0x2b0
[  218.289466][ T8778]  ? __x64_sys_sendmsg+0x80/0x80
[  218.294422][ T8778]  ? lockdep_hardirqs_on+0x98/0x150
[  218.299632][ T8778]  do_syscall_64+0x55/0xb0
[  218.304054][ T8778]  ? clear_bhb_loop+0x40/0x90
[  218.308734][ T8778]  ? clear_bhb_loop+0x40/0x90
[  218.313415][ T8778]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.319320][ T8778] RIP: 0033:0x7f001ed9ce59
[  218.323739][ T8778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.343355][ T8778] RSP: 002b:00007f001fbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.351803][ T8778] RAX: ffffffffffffffda RBX: 00007f001f015fa0 RCX: 00007f001ed9ce59
[  218.359780][ T8778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  218.367753][ T8778] RBP: 00007f001ee32d6f R08: 0000000000000000 R09: 0000000000000000
[  218.375724][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.383692][ T8778] R13: 00007f001f016038 R14: 00007f001f015fa0 R15: 00007ffd9ba47918
[  218.391681][ T8778]  </TASK>
[  218.461146][ T8776] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  218.493830][ T8776] CPU: 1 PID: 8776 Comm: syz.1.1107 Not tainted syzkaller #0
[  218.501281][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  218.511371][ T8776] Call Trace:
[  218.514667][ T8776]  <TASK>
[  218.517611][ T8776]  dump_stack_lvl+0x18c/0x250
[  218.522323][ T8776]  ? show_regs_print_info+0x20/0x20
[  218.527549][ T8776]  ? load_image+0x420/0x420
[  218.532084][ T8776]  sysfs_warn_dup+0x8e/0xa0
[  218.536610][ T8776]  sysfs_do_create_link_sd+0xc0/0x110
[  218.542007][ T8776]  device_add_class_symlinks+0x1cf/0x240
[  218.547675][ T8776]  device_add+0x507/0xc50
[  218.552030][ T8776]  wiphy_register+0x1dad/0x2ae0
[  218.556926][ T8776]  ? cfg80211_event_work+0x40/0x40
[  218.562054][ T8776]  ? minstrel_ht_alloc+0x88a/0x990
[  218.567202][ T8776]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  218.573294][ T8776]  ieee80211_register_hw+0x3464/0x4250
[  218.578795][ T8776]  ? ieee80211_tasklet_handler+0x20/0x20
[  218.584441][ T8776]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  218.590371][ T8776]  ? __debug_object_init+0xec/0x450
[  218.595594][ T8776]  ? __asan_memset+0x22/0x40
[  218.600207][ T8776]  ? __hrtimer_init+0x186/0x270
[  218.605074][ T8776]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  218.610836][ T8776]  ? mac80211_hwsim_free+0x220/0x220
[  218.616131][ T8776]  ? rcu_is_watching+0x15/0xb0
[  218.620912][ T8776]  ? kstrndup+0xbd/0x140
[  218.625179][ T8776]  hwsim_new_radio_nl+0xdc9/0x1a90
[  218.630327][ T8776]  ? __nla_validate+0x50/0x50
[  218.635030][ T8776]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  218.641387][ T8776]  ? __nla_parse+0x40/0x50
[  218.645856][ T8776]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  218.652211][ T8776]  genl_family_rcv_msg_doit+0x211/0x310
[  218.657778][ T8776]  ? end_current_label_crit_section+0x170/0x170
[  218.664043][ T8776]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  218.669964][ T8776]  ? bpf_lsm_capable+0x9/0x10
[  218.674658][ T8776]  ? security_capable+0x89/0xb0
[  218.679537][ T8776]  genl_rcv_msg+0x619/0x7a0
[  218.684067][ T8776]  ? genl_bind+0x360/0x360
[  218.688495][ T8776]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  218.694490][ T8776]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  218.700835][ T8776]  ? ref_tracker_free+0x690/0x840
[  218.705893][ T8776]  netlink_rcv_skb+0x241/0x4d0
[  218.710676][ T8776]  ? genl_bind+0x360/0x360
[  218.715109][ T8776]  ? netlink_ack+0x1180/0x1180
[  218.719897][ T8776]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.726085][ T8776]  ? down_read+0x1ac/0x2e0
[  218.730520][ T8776]  genl_rcv+0x28/0x40
[  218.734519][ T8776]  netlink_unicast+0x751/0x8d0
[  218.739310][ T8776]  netlink_sendmsg+0x8d0/0xbf0
[  218.744099][ T8776]  ? netlink_getsockopt+0x590/0x590
[  218.749311][ T8776]  ? aa_sock_msg_perm+0x94/0x150
[  218.754268][ T8776]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  218.759569][ T8776]  ? security_socket_sendmsg+0x80/0xa0
[  218.765045][ T8776]  ? netlink_getsockopt+0x590/0x590
[  218.770259][ T8776]  ____sys_sendmsg+0x5ba/0x960
[  218.775042][ T8776]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.781226][ T8776]  ? __asan_memset+0x22/0x40
[  218.785830][ T8776]  ? __sys_sendmsg_sock+0x30/0x30
[  218.790864][ T8776]  ? __import_iovec+0x5f2/0x850
[  218.795739][ T8776]  ? import_iovec+0x73/0xa0
[  218.800254][ T8776]  ___sys_sendmsg+0x2a6/0x360
[  218.804951][ T8776]  ? __sys_sendmsg+0x2a0/0x2a0
[  218.809752][ T8776]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  218.816468][ T8776]  __se_sys_sendmsg+0x1c2/0x2b0
[  218.821331][ T8776]  ? hrtimer_interrupt+0x7bb/0x9c0
[  218.826456][ T8776]  ? __x64_sys_sendmsg+0x80/0x80
[  218.831423][ T8776]  ? lockdep_hardirqs_on+0x98/0x150
[  218.836648][ T8776]  do_syscall_64+0x55/0xb0
[  218.841174][ T8776]  ? clear_bhb_loop+0x40/0x90
[  218.845859][ T8776]  ? clear_bhb_loop+0x40/0x90
[  218.850550][ T8776]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.856458][ T8776] RIP: 0033:0x7f2af0b9ce59
[  218.860884][ T8776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.880510][ T8776] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.889204][ T8776] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  218.897193][ T8776] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  218.905179][ T8776] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  218.913162][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.921143][ T8776] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  218.929155][ T8776]  </TASK>
[  218.955488][ T7601] wlan1: Trigger new scan to find an IBSS to join
[  219.004258][   T49] wlan1: Trigger new scan to find an IBSS to join
[  219.013229][ T7601] wlan1: Creating new IBSS network, BSSID b2:74:ea:9e:b4:95
[  219.144672][ T8788] netlink: 'syz.1.1103': attribute type 15 has an invalid length.
[  219.229194][ T8788] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  219.340759][ T8794] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  219.364920][ T8794] CPU: 0 PID: 8794 Comm: syz.3.1105 Not tainted syzkaller #0
[  219.372366][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  219.382450][ T8794] Call Trace:
[  219.385752][ T8794]  <TASK>
[  219.388703][ T8794]  dump_stack_lvl+0x18c/0x250
[  219.393411][ T8794]  ? show_regs_print_info+0x20/0x20
[  219.398636][ T8794]  ? load_image+0x420/0x420
[  219.403179][ T8794]  sysfs_warn_dup+0x8e/0xa0
[  219.407710][ T8794]  sysfs_do_create_link_sd+0xc0/0x110
[  219.413105][ T8794]  device_add_class_symlinks+0x1cf/0x240
[  219.418786][ T8794]  device_add+0x507/0xc50
[  219.423143][ T8794]  wiphy_register+0x1dad/0x2ae0
[  219.428029][ T8794]  ? cfg80211_event_work+0x40/0x40
[  219.433160][ T8794]  ? minstrel_ht_alloc+0x88a/0x990
[  219.438276][ T8794]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  219.444360][ T8794]  ieee80211_register_hw+0x3464/0x4250
[  219.449887][ T8794]  ? ieee80211_tasklet_handler+0x20/0x20
[  219.455569][ T8794]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  219.461520][ T8794]  ? __debug_object_init+0xec/0x450
[  219.466769][ T8794]  ? __asan_memset+0x22/0x40
[  219.471395][ T8794]  ? __hrtimer_init+0x186/0x270
[  219.476289][ T8794]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  219.482075][ T8794]  ? mac80211_hwsim_free+0x220/0x220
[  219.487403][ T8794]  ? rcu_is_watching+0x15/0xb0
[  219.492196][ T8794]  ? kstrndup+0xbd/0x140
[  219.496521][ T8794]  hwsim_new_radio_nl+0xdc9/0x1a90
[  219.501650][ T8794]  ? __nla_validate+0x50/0x50
[  219.506339][ T8794]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  219.512679][ T8794]  ? __nla_parse+0x40/0x50
[  219.517101][ T8794]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  219.523441][ T8794]  genl_family_rcv_msg_doit+0x211/0x310
[  219.528997][ T8794]  ? end_current_label_crit_section+0x170/0x170
[  219.535254][ T8794]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  219.541157][ T8794]  ? bpf_lsm_capable+0x9/0x10
[  219.545836][ T8794]  ? security_capable+0x89/0xb0
[  219.550698][ T8794]  genl_rcv_msg+0x619/0x7a0
[  219.555210][ T8794]  ? genl_bind+0x360/0x360
[  219.559626][ T8794]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  219.565955][ T8794]  ? lockdep_hardirqs_on+0x98/0x150
[  219.571161][ T8794]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  219.577329][ T8794]  netlink_rcv_skb+0x241/0x4d0
[  219.582102][ T8794]  ? genl_bind+0x360/0x360
[  219.586527][ T8794]  ? netlink_ack+0x1180/0x1180
[  219.591302][ T8794]  ? __lock_acquire+0x7d40/0x7d40
[  219.596335][ T8794]  ? down_read+0x1ac/0x2e0
[  219.600756][ T8794]  genl_rcv+0x28/0x40
[  219.604740][ T8794]  netlink_unicast+0x751/0x8d0
[  219.609517][ T8794]  netlink_sendmsg+0x8d0/0xbf0
[  219.614284][ T8794]  ? lockdep_hardirqs_on+0x98/0x150
[  219.619486][ T8794]  ? netlink_getsockopt+0x590/0x590
[  219.624694][ T8794]  ? netlink_getsockopt+0x590/0x590
[  219.629898][ T8794]  ____sys_sendmsg+0x5ba/0x960
[  219.634674][ T8794]  ? __asan_memset+0x22/0x40
[  219.639265][ T8794]  ? __sys_sendmsg_sock+0x30/0x30
[  219.644290][ T8794]  ? __import_iovec+0x5f2/0x850
[  219.649153][ T8794]  ? import_iovec+0x73/0xa0
[  219.653680][ T8794]  ___sys_sendmsg+0x2a6/0x360
[  219.658392][ T8794]  ? __sys_sendmsg+0x2a0/0x2a0
[  219.663207][ T8794]  __se_sys_sendmsg+0x1c2/0x2b0
[  219.668063][ T8794]  ? __x64_sys_sendmsg+0x80/0x80
[  219.673018][ T8794]  ? lockdep_hardirqs_on+0x98/0x150
[  219.678223][ T8794]  do_syscall_64+0x55/0xb0
[  219.682641][ T8794]  ? clear_bhb_loop+0x40/0x90
[  219.687317][ T8794]  ? clear_bhb_loop+0x40/0x90
[  219.691992][ T8794]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.697891][ T8794] RIP: 0033:0x7f3510d9ce59
[  219.702304][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.721909][ T8794] RSP: 002b:00007f3511c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.730326][ T8794] RAX: ffffffffffffffda RBX: 00007f3511015fa0 RCX: 00007f3510d9ce59
[  219.738295][ T8794] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  219.746261][ T8794] RBP: 00007f3510e32d6f R08: 0000000000000000 R09: 0000000000000000
[  219.754227][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.762195][ T8794] R13: 00007f3511016038 R14: 00007f3511015fa0 R15: 00007ffc34fd4fd8
[  219.770179][ T8794]  </TASK>
[  219.932316][ T8801] netlink: 'syz.2.1108': attribute type 21 has an invalid length.
[  219.936969][ T8799] netlink: 'syz.1.1106': attribute type 9 has an invalid length.
[  219.990157][ T8799] netlink: 'syz.1.1106': attribute type 10 has an invalid length.
[  220.101466][ T8810] netlink: 'syz.2.1109': attribute type 29 has an invalid length.
[  220.126250][ T8808] netlink: 'syz.0.1118': attribute type 21 has an invalid length.
[  220.135232][ T8810] netlink: 'syz.2.1109': attribute type 29 has an invalid length.
[  220.156489][ T8812] __nla_validate_parse: 8 callbacks suppressed
[  220.156508][ T8812] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1118'.
[  220.182412][ T8810] netlink: 'syz.2.1109': attribute type 29 has an invalid length.
[  220.296131][ T3428] wlan1: Creating new IBSS network, BSSID 32:73:9b:57:ab:12
[  220.391275][ T8814] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1112'.
[  220.424554][ T8814] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  220.433127][ T8814] CPU: 0 PID: 8814 Comm: syz.0.1112 Not tainted syzkaller #0
[  220.440546][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  220.450613][ T8814] Call Trace:
[  220.453897][ T8814]  <TASK>
[  220.456839][ T8814]  dump_stack_lvl+0x18c/0x250
[  220.461531][ T8814]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  220.467694][ T8814]  ? show_regs_print_info+0x20/0x20
[  220.472895][ T8814]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  220.479069][ T8814]  sysfs_warn_dup+0x8e/0xa0
[  220.483571][ T8814]  sysfs_do_create_link_sd+0xc0/0x110
[  220.488955][ T8814]  device_add_class_symlinks+0x1cf/0x240
[  220.494606][ T8814]  device_add+0x507/0xc50
[  220.498949][ T8814]  wiphy_register+0x1dad/0x2ae0
[  220.503835][ T8814]  ? cfg80211_event_work+0x40/0x40
[  220.508970][ T8814]  ? minstrel_ht_alloc+0x88a/0x990
[  220.514100][ T8814]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  220.520173][ T8814]  ieee80211_register_hw+0x3464/0x4250
[  220.525654][ T8814]  ? ieee80211_tasklet_handler+0x20/0x20
[  220.531284][ T8814]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  220.537188][ T8814]  ? __debug_object_init+0xec/0x450
[  220.542396][ T8814]  ? __asan_memset+0x22/0x40
[  220.546991][ T8814]  ? __hrtimer_init+0x186/0x270
[  220.551843][ T8814]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  220.557585][ T8814]  ? mac80211_hwsim_free+0x220/0x220
[  220.562870][ T8814]  ? rcu_is_watching+0x15/0xb0
[  220.567637][ T8814]  ? kstrndup+0xbd/0x140
[  220.571890][ T8814]  hwsim_new_radio_nl+0xdc9/0x1a90
[  220.577016][ T8814]  ? mark_lock+0x94/0x320
[  220.581351][ T8814]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  220.587686][ T8814]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  220.593851][ T8814]  ? lockdep_hardirqs_on+0x98/0x150
[  220.599053][ T8814]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  220.605229][ T8814]  genl_family_rcv_msg_doit+0x211/0x310
[  220.610785][ T8814]  ? end_current_label_crit_section+0x170/0x170
[  220.617056][ T8814]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  220.622987][ T8814]  ? bpf_lsm_capable+0x9/0x10
[  220.627678][ T8814]  ? security_capable+0x89/0xb0
[  220.632552][ T8814]  genl_rcv_msg+0x619/0x7a0
[  220.637068][ T8814]  ? genl_bind+0x360/0x360
[  220.641485][ T8814]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  220.647823][ T8814]  ? mark_lock+0x94/0x320
[  220.652163][ T8814]  netlink_rcv_skb+0x241/0x4d0
[  220.656930][ T8814]  ? genl_bind+0x360/0x360
[  220.661349][ T8814]  ? netlink_ack+0x1180/0x1180
[  220.666122][ T8814]  ? down_read+0x54/0x2e0
[  220.670453][ T8814]  ? preempt_count_add+0x9e/0x1a0
[  220.675490][ T8814]  ? down_read+0x1ac/0x2e0
[  220.679913][ T8814]  genl_rcv+0x28/0x40
[  220.683897][ T8814]  netlink_unicast+0x751/0x8d0
[  220.688670][ T8814]  netlink_sendmsg+0x8d0/0xbf0
[  220.693435][ T8814]  ? lockdep_hardirqs_on+0x98/0x150
[  220.698642][ T8814]  ? netlink_getsockopt+0x590/0x590
[  220.703841][ T8814]  ? aa_sock_msg_perm+0x94/0x150
[  220.708788][ T8814]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  220.714076][ T8814]  ? security_socket_sendmsg+0x80/0xa0
[  220.719537][ T8814]  ? netlink_getsockopt+0x590/0x590
[  220.724738][ T8814]  ____sys_sendmsg+0x5ba/0x960
[  220.729510][ T8814]  ? __asan_memset+0x22/0x40
[  220.734109][ T8814]  ? __sys_sendmsg_sock+0x30/0x30
[  220.739130][ T8814]  ? __import_iovec+0x5f2/0x850
[  220.743986][ T8814]  ? import_iovec+0x73/0xa0
[  220.748492][ T8814]  ___sys_sendmsg+0x2a6/0x360
[  220.753175][ T8814]  ? __sys_sendmsg+0x2a0/0x2a0
[  220.757959][ T8814]  ? debug_mutex_init+0x38/0x70
[  220.762830][ T8814]  __se_sys_sendmsg+0x1c2/0x2b0
[  220.767683][ T8814]  ? __x64_sys_sendmsg+0x80/0x80
[  220.772634][ T8814]  ? lockdep_hardirqs_on+0x98/0x150
[  220.777839][ T8814]  do_syscall_64+0x55/0xb0
[  220.782252][ T8814]  ? clear_bhb_loop+0x40/0x90
[  220.786925][ T8814]  ? clear_bhb_loop+0x40/0x90
[  220.791597][ T8814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  220.797496][ T8814] RIP: 0033:0x7f0ce639ce59
[  220.801918][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.821537][ T8814] RSP: 002b:00007f0ce7213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.829958][ T8814] RAX: ffffffffffffffda RBX: 00007f0ce6615fa0 RCX: 00007f0ce639ce59
[  220.837929][ T8814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  220.845900][ T8814] RBP: 00007f0ce6432d6f R08: 0000000000000000 R09: 0000000000000000
[  220.853868][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.861833][ T8814] R13: 00007f0ce6616038 R14: 00007f0ce6615fa0 R15: 00007ffe3dd460b8
[  220.869818][ T8814]  </TASK>
[  220.947372][ T8819] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1113'.
[  221.029806][ T8819] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  221.046153][ T8819] CPU: 1 PID: 8819 Comm: syz.2.1113 Not tainted syzkaller #0
[  221.053585][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  221.063670][ T8819] Call Trace:
[  221.066974][ T8819]  <TASK>
[  221.069920][ T8819]  dump_stack_lvl+0x18c/0x250
[  221.074615][ T8819]  ? show_regs_print_info+0x20/0x20
[  221.079821][ T8819]  ? load_image+0x420/0x420
[  221.084363][ T8819]  sysfs_warn_dup+0x8e/0xa0
[  221.088880][ T8819]  sysfs_do_create_link_sd+0xc0/0x110
[  221.094257][ T8819]  device_add_class_symlinks+0x1cf/0x240
[  221.099902][ T8819]  device_add+0x507/0xc50
[  221.104245][ T8819]  wiphy_register+0x1dad/0x2ae0
[  221.109119][ T8819]  ? cfg80211_event_work+0x40/0x40
[  221.114237][ T8819]  ? minstrel_ht_alloc+0x88a/0x990
[  221.119367][ T8819]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  221.125447][ T8819]  ieee80211_register_hw+0x3464/0x4250
[  221.130930][ T8819]  ? ieee80211_tasklet_handler+0x20/0x20
[  221.136564][ T8819]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  221.142468][ T8819]  ? __debug_object_init+0xec/0x450
[  221.147679][ T8819]  ? __asan_memset+0x22/0x40
[  221.152276][ T8819]  ? __hrtimer_init+0x186/0x270
[  221.157134][ T8819]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  221.162877][ T8819]  ? mac80211_hwsim_free+0x220/0x220
[  221.168162][ T8819]  ? rcu_is_watching+0x15/0xb0
[  221.172931][ T8819]  ? kstrndup+0xbd/0x140
[  221.177186][ T8819]  hwsim_new_radio_nl+0xdc9/0x1a90
[  221.182315][ T8819]  ? __nla_validate+0x50/0x50
[  221.187018][ T8819]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  221.193359][ T8819]  ? __nla_parse+0x40/0x50
[  221.197781][ T8819]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  221.204119][ T8819]  genl_family_rcv_msg_doit+0x211/0x310
[  221.209673][ T8819]  ? end_current_label_crit_section+0x170/0x170
[  221.215925][ T8819]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  221.221832][ T8819]  ? bpf_lsm_capable+0x9/0x10
[  221.226515][ T8819]  ? security_capable+0x89/0xb0
[  221.231383][ T8819]  genl_rcv_msg+0x619/0x7a0
[  221.235898][ T8819]  ? genl_bind+0x360/0x360
[  221.240321][ T8819]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  221.246303][ T8819]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  221.252638][ T8819]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  221.258456][ T8819]  netlink_rcv_skb+0x241/0x4d0
[  221.263228][ T8819]  ? genl_bind+0x360/0x360
[  221.267651][ T8819]  ? netlink_ack+0x1180/0x1180
[  221.272429][ T8819]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.278686][ T8819]  ? down_read+0x1ac/0x2e0
[  221.283113][ T8819]  genl_rcv+0x28/0x40
[  221.287099][ T8819]  netlink_unicast+0x751/0x8d0
[  221.291871][ T8819]  netlink_sendmsg+0x8d0/0xbf0
[  221.296648][ T8819]  ? netlink_getsockopt+0x590/0x590
[  221.301850][ T8819]  ? aa_sock_msg_perm+0x94/0x150
[  221.306796][ T8819]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  221.312084][ T8819]  ? security_socket_sendmsg+0x80/0xa0
[  221.317546][ T8819]  ? netlink_getsockopt+0x590/0x590
[  221.322751][ T8819]  ____sys_sendmsg+0x5ba/0x960
[  221.327529][ T8819]  ? __asan_memset+0x22/0x40
[  221.332128][ T8819]  ? __sys_sendmsg_sock+0x30/0x30
[  221.337151][ T8819]  ? __import_iovec+0x5f2/0x850
[  221.342014][ T8819]  ? import_iovec+0x73/0xa0
[  221.346521][ T8819]  ___sys_sendmsg+0x2a6/0x360
[  221.351206][ T8819]  ? __sys_sendmsg+0x2a0/0x2a0
[  221.355998][ T8819]  ? trace_call_bpf+0xc3/0x6c0
[  221.360773][ T8819]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  221.367042][ T8819]  __se_sys_sendmsg+0x1c2/0x2b0
[  221.371905][ T8819]  ? __x64_sys_sendmsg+0x80/0x80
[  221.376859][ T8819]  ? lockdep_hardirqs_on+0x98/0x150
[  221.382067][ T8819]  do_syscall_64+0x55/0xb0
[  221.386486][ T8819]  ? clear_bhb_loop+0x40/0x90
[  221.391164][ T8819]  ? clear_bhb_loop+0x40/0x90
[  221.395842][ T8819]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  221.401745][ T8819] RIP: 0033:0x7f001ed9ce59
[  221.406165][ T8819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.425778][ T8819] RSP: 002b:00007f001fbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.434196][ T8819] RAX: ffffffffffffffda RBX: 00007f001f015fa0 RCX: 00007f001ed9ce59
[  221.442169][ T8819] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  221.450172][ T8819] RBP: 00007f001ee32d6f R08: 0000000000000000 R09: 0000000000000000
[  221.458150][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.466122][ T8819] R13: 00007f001f016038 R14: 00007f001f015fa0 R15: 00007ffd9ba47918
[  221.474199][ T8819]  </TASK>
[  221.617072][ T8825] validate_nla: 1 callbacks suppressed
[  221.617091][ T8825] netlink: 'syz.2.1116': attribute type 15 has an invalid length.
[  221.631628][ T8825] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1116'.
[  221.711873][ T8825] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  221.754652][ T8825] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1116'.
[  221.824470][ T8829] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1119'.
[  221.961255][ T8833] netlink: 'syz.2.1128': attribute type 15 has an invalid length.
[  221.973929][ T8835] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1120'.
[  221.978617][ T8833] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1128'.
[  222.013747][ T8835] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  222.022357][ T8835] CPU: 0 PID: 8835 Comm: syz.0.1120 Not tainted syzkaller #0
[  222.029771][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  222.039841][ T8835] Call Trace:
[  222.043138][ T8835]  <TASK>
[  222.046094][ T8835]  dump_stack_lvl+0x18c/0x250
[  222.050803][ T8835]  ? show_regs_print_info+0x20/0x20
[  222.056026][ T8835]  ? load_image+0x420/0x420
[  222.060561][ T8835]  sysfs_warn_dup+0x8e/0xa0
[  222.065080][ T8835]  sysfs_do_create_link_sd+0xc0/0x110
[  222.070464][ T8835]  device_add_class_symlinks+0x1cf/0x240
[  222.076114][ T8835]  device_add+0x507/0xc50
[  222.080459][ T8835]  wiphy_register+0x1dad/0x2ae0
[  222.085335][ T8835]  ? cfg80211_event_work+0x40/0x40
[  222.090454][ T8835]  ? minstrel_ht_alloc+0x88a/0x990
[  222.095574][ T8835]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  222.101654][ T8835]  ieee80211_register_hw+0x3464/0x4250
[  222.107144][ T8835]  ? ieee80211_tasklet_handler+0x20/0x20
[  222.112779][ T8835]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  222.118687][ T8835]  ? __debug_object_init+0xec/0x450
[  222.123899][ T8835]  ? __asan_memset+0x22/0x40
[  222.128495][ T8835]  ? __hrtimer_init+0x186/0x270
[  222.133351][ T8835]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  222.139099][ T8835]  ? mac80211_hwsim_free+0x220/0x220
[  222.144391][ T8835]  ? rcu_is_watching+0x15/0xb0
[  222.149163][ T8835]  ? kstrndup+0xbd/0x140
[  222.153417][ T8835]  hwsim_new_radio_nl+0xdc9/0x1a90
[  222.158541][ T8835]  ? __nla_validate+0x50/0x50
[  222.163228][ T8835]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  222.169571][ T8835]  ? __nla_parse+0x40/0x50
[  222.173999][ T8835]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  222.180337][ T8835]  genl_family_rcv_msg_doit+0x211/0x310
[  222.185890][ T8835]  ? end_current_label_crit_section+0x170/0x170
[  222.192138][ T8835]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  222.198043][ T8835]  ? bpf_lsm_capable+0x9/0x10
[  222.202726][ T8835]  ? security_capable+0x89/0xb0
[  222.207590][ T8835]  genl_rcv_msg+0x619/0x7a0
[  222.212108][ T8835]  ? genl_bind+0x360/0x360
[  222.216597][ T8835]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  222.222944][ T8835]  netlink_rcv_skb+0x241/0x4d0
[  222.227714][ T8835]  ? genl_bind+0x360/0x360
[  222.232136][ T8835]  ? netlink_ack+0x1180/0x1180
[  222.236998][ T8835]  ? __lock_acquire+0x7d40/0x7d40
[  222.242038][ T8835]  ? down_read+0x1ac/0x2e0
[  222.246467][ T8835]  genl_rcv+0x28/0x40
[  222.250456][ T8835]  netlink_unicast+0x751/0x8d0
[  222.255231][ T8835]  netlink_sendmsg+0x8d0/0xbf0
[  222.259999][ T8835]  ? lockdep_hardirqs_on+0x98/0x150
[  222.265220][ T8835]  ? netlink_getsockopt+0x590/0x590
[  222.270427][ T8835]  ? security_socket_sendmsg+0x45/0xa0
[  222.275892][ T8835]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  222.281181][ T8835]  ? security_socket_sendmsg+0x80/0xa0
[  222.286641][ T8835]  ? netlink_getsockopt+0x590/0x590
[  222.291847][ T8835]  ____sys_sendmsg+0x5ba/0x960
[  222.296632][ T8835]  ? __asan_memset+0x22/0x40
[  222.301662][ T8835]  ? __sys_sendmsg_sock+0x30/0x30
[  222.306688][ T8835]  ? __import_iovec+0x5f2/0x850
[  222.311554][ T8835]  ? import_iovec+0x73/0xa0
[  222.316061][ T8835]  ___sys_sendmsg+0x2a6/0x360
[  222.320749][ T8835]  ? __sys_sendmsg+0x2a0/0x2a0
[  222.325523][ T8835]  ? perf_trace_preemptirq_template+0xac/0x330
[  222.331715][ T8835]  __se_sys_sendmsg+0x1c2/0x2b0
[  222.336573][ T8835]  ? __x64_sys_sendmsg+0x80/0x80
[  222.341525][ T8835]  ? lockdep_hardirqs_on+0x98/0x150
[  222.346736][ T8835]  do_syscall_64+0x55/0xb0
[  222.351157][ T8835]  ? clear_bhb_loop+0x40/0x90
[  222.355837][ T8835]  ? clear_bhb_loop+0x40/0x90
[  222.360516][ T8835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.366421][ T8835] RIP: 0033:0x7f0ce639ce59
[  222.370841][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.390448][ T8835] RSP: 002b:00007f0ce7213028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.398872][ T8835] RAX: ffffffffffffffda RBX: 00007f0ce6615fa0 RCX: 00007f0ce639ce59
[  222.406844][ T8835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  222.414821][ T8835] RBP: 00007f0ce6432d6f R08: 0000000000000000 R09: 0000000000000000
[  222.422790][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.430767][ T8835] R13: 00007f0ce6616038 R14: 00007f0ce6615fa0 R15: 00007ffe3dd460b8
[  222.438754][ T8835]  </TASK>
[  222.480361][ T8833] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  222.517283][ T8833] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1128'.
[  222.674076][ T8838] netlink: 'syz.3.1122': attribute type 21 has an invalid length.
[  222.714645][ T8844] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1122'.
[  222.799377][ T8846] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  222.808083][ T8846] CPU: 1 PID: 8846 Comm: syz.2.1124 Not tainted syzkaller #0
[  222.815507][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  222.825573][ T8846] Call Trace:
[  222.828853][ T8846]  <TASK>
[  222.831786][ T8846]  dump_stack_lvl+0x18c/0x250
[  222.836474][ T8846]  ? show_regs_print_info+0x20/0x20
[  222.841673][ T8846]  ? load_image+0x420/0x420
[  222.846184][ T8846]  sysfs_warn_dup+0x8e/0xa0
[  222.850686][ T8846]  sysfs_do_create_link_sd+0xc0/0x110
[  222.856077][ T8846]  device_add_class_symlinks+0x1cf/0x240
[  222.861747][ T8846]  device_add+0x507/0xc50
[  222.866102][ T8846]  wiphy_register+0x1dad/0x2ae0
[  222.870977][ T8846]  ? cfg80211_event_work+0x40/0x40
[  222.876087][ T8846]  ? minstrel_ht_alloc+0x88a/0x990
[  222.881204][ T8846]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  222.887283][ T8846]  ieee80211_register_hw+0x3464/0x4250
[  222.892765][ T8846]  ? ieee80211_tasklet_handler+0x20/0x20
[  222.898400][ T8846]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  222.904306][ T8846]  ? __debug_object_init+0xec/0x450
[  222.909517][ T8846]  ? __asan_memset+0x22/0x40
[  222.914114][ T8846]  ? __hrtimer_init+0x186/0x270
[  222.918968][ T8846]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  222.924709][ T8846]  ? mac80211_hwsim_free+0x220/0x220
[  222.929998][ T8846]  ? rcu_is_watching+0x15/0xb0
[  222.934767][ T8846]  ? kstrndup+0xbd/0x140
[  222.939020][ T8846]  hwsim_new_radio_nl+0xdc9/0x1a90
[  222.944136][ T8846]  ? __nla_validate+0x50/0x50
[  222.948836][ T8846]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  222.955174][ T8846]  ? __nla_parse+0x40/0x50
[  222.959593][ T8846]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  222.965936][ T8846]  genl_family_rcv_msg_doit+0x211/0x310
[  222.971491][ T8846]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  222.977384][ T8846]  ? lockdep_hardirqs_on+0x98/0x150
[  222.982599][ T8846]  ? genl_rcv_msg+0x5f6/0x7a0
[  222.987287][ T8846]  genl_rcv_msg+0x619/0x7a0
[  222.991802][ T8846]  ? genl_bind+0x360/0x360
[  222.996218][ T8846]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  223.002199][ T8846]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  223.008540][ T8846]  ? ref_tracker_free+0x690/0x840
[  223.013575][ T8846]  netlink_rcv_skb+0x241/0x4d0
[  223.018344][ T8846]  ? genl_bind+0x360/0x360
[  223.022762][ T8846]  ? netlink_ack+0x1180/0x1180
[  223.027539][ T8846]  ? __lock_acquire+0x7d40/0x7d40
[  223.032569][ T8846]  ? down_read+0x1ac/0x2e0
[  223.036993][ T8846]  genl_rcv+0x28/0x40
[  223.040975][ T8846]  netlink_unicast+0x751/0x8d0
[  223.045749][ T8846]  netlink_sendmsg+0x8d0/0xbf0
[  223.050512][ T8846]  ? lockdep_hardirqs_on+0x98/0x150
[  223.055720][ T8846]  ? netlink_getsockopt+0x590/0x590
[  223.060923][ T8846]  ? aa_sock_msg_perm+0x94/0x150
[  223.065873][ T8846]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  223.071164][ T8846]  ? security_socket_sendmsg+0x80/0xa0
[  223.076620][ T8846]  ? netlink_getsockopt+0x590/0x590
[  223.081821][ T8846]  ____sys_sendmsg+0x5ba/0x960
[  223.086593][ T8846]  ? __asan_memset+0x22/0x40
[  223.091186][ T8846]  ? __sys_sendmsg_sock+0x30/0x30
[  223.096211][ T8846]  ? __import_iovec+0x5f2/0x850
[  223.101071][ T8846]  ? import_iovec+0x73/0xa0
[  223.105577][ T8846]  ___sys_sendmsg+0x2a6/0x360
[  223.110263][ T8846]  ? __sys_sendmsg+0x2a0/0x2a0
[  223.115066][ T8846]  __se_sys_sendmsg+0x1c2/0x2b0
[  223.119920][ T8846]  ? __x64_sys_sendmsg+0x80/0x80
[  223.124869][ T8846]  ? lockdep_hardirqs_on+0x98/0x150
[  223.130073][ T8846]  do_syscall_64+0x55/0xb0
[  223.134492][ T8846]  ? clear_bhb_loop+0x40/0x90
[  223.139163][ T8846]  ? clear_bhb_loop+0x40/0x90
[  223.143839][ T8846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.149736][ T8846] RIP: 0033:0x7f001ed9ce59
[  223.154152][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.173770][ T8846] RSP: 002b:00007f001fbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.182186][ T8846] RAX: ffffffffffffffda RBX: 00007f001f015fa0 RCX: 00007f001ed9ce59
[  223.190163][ T8846] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  223.198133][ T8846] RBP: 00007f001ee32d6f R08: 0000000000000000 R09: 0000000000000000
[  223.206103][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.214071][ T8846] R13: 00007f001f016038 R14: 00007f001f015fa0 R15: 00007ffd9ba47918
[  223.222057][ T8846]  </TASK>
[  223.232858][ T3428] wlan1: Trigger new scan to find an IBSS to join
[  223.466888][ T8851] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  223.502876][ T8851] CPU: 1 PID: 8851 Comm: syz.1.1126 Not tainted syzkaller #0
[  223.510315][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  223.520406][ T8851] Call Trace:
[  223.523709][ T8851]  <TASK>
[  223.526657][ T8851]  dump_stack_lvl+0x18c/0x250
[  223.531385][ T8851]  ? show_regs_print_info+0x20/0x20
[  223.536618][ T8851]  ? load_image+0x420/0x420
[  223.541167][ T8851]  sysfs_warn_dup+0x8e/0xa0
[  223.545712][ T8851]  sysfs_do_create_link_sd+0xc0/0x110
[  223.551113][ T8851]  device_add_class_symlinks+0x1cf/0x240
[  223.556750][ T8851]  device_add+0x507/0xc50
[  223.561095][ T8851]  wiphy_register+0x1dad/0x2ae0
[  223.565961][ T8851]  ? cfg80211_event_work+0x40/0x40
[  223.571071][ T8851]  ? minstrel_ht_alloc+0x88a/0x990
[  223.576213][ T8851]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  223.582334][ T8851]  ieee80211_register_hw+0x3464/0x4250
[  223.587865][ T8851]  ? ieee80211_tasklet_handler+0x20/0x20
[  223.593538][ T8851]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  223.599474][ T8851]  ? __debug_object_init+0xec/0x450
[  223.604694][ T8851]  ? __asan_memset+0x22/0x40
[  223.609293][ T8851]  ? __hrtimer_init+0x186/0x270
[  223.614148][ T8851]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  223.619888][ T8851]  ? mac80211_hwsim_free+0x220/0x220
[  223.625174][ T8851]  ? rcu_is_watching+0x15/0xb0
[  223.629946][ T8851]  ? kstrndup+0xbd/0x140
[  223.634197][ T8851]  hwsim_new_radio_nl+0xdc9/0x1a90
[  223.639323][ T8851]  ? __nla_validate+0x50/0x50
[  223.644012][ T8851]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  223.650351][ T8851]  ? __nla_parse+0x40/0x50
[  223.654771][ T8851]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  223.661109][ T8851]  genl_family_rcv_msg_doit+0x211/0x310
[  223.666662][ T8851]  ? end_current_label_crit_section+0x170/0x170
[  223.672911][ T8851]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  223.678815][ T8851]  ? bpf_lsm_capable+0x9/0x10
[  223.683502][ T8851]  ? security_capable+0x89/0xb0
[  223.688362][ T8851]  genl_rcv_msg+0x619/0x7a0
[  223.692875][ T8851]  ? genl_bind+0x360/0x360
[  223.697290][ T8851]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  223.703623][ T8851]  ? lockdep_hardirqs_on+0x98/0x150
[  223.708837][ T8851]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  223.715006][ T8851]  netlink_rcv_skb+0x241/0x4d0
[  223.719770][ T8851]  ? genl_bind+0x360/0x360
[  223.724190][ T8851]  ? netlink_ack+0x1180/0x1180
[  223.728969][ T8851]  ? __lock_acquire+0x7d40/0x7d40
[  223.733999][ T8851]  ? down_read+0x1ac/0x2e0
[  223.738421][ T8851]  genl_rcv+0x28/0x40
[  223.742402][ T8851]  netlink_unicast+0x751/0x8d0
[  223.747173][ T8851]  netlink_sendmsg+0x8d0/0xbf0
[  223.751948][ T8851]  ? netlink_getsockopt+0x590/0x590
[  223.757146][ T8851]  ? aa_sock_msg_perm+0x94/0x150
[  223.762094][ T8851]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  223.767387][ T8851]  ? security_socket_sendmsg+0x80/0xa0
[  223.772846][ T8851]  ? netlink_getsockopt+0x590/0x590
[  223.778049][ T8851]  ____sys_sendmsg+0x5ba/0x960
[  223.782823][ T8851]  ? __asan_memset+0x22/0x40
[  223.787419][ T8851]  ? __sys_sendmsg_sock+0x30/0x30
[  223.792443][ T8851]  ? __import_iovec+0x5f2/0x850
[  223.797301][ T8851]  ? import_iovec+0x73/0xa0
[  223.801803][ T8851]  ___sys_sendmsg+0x2a6/0x360
[  223.806487][ T8851]  ? __sys_sendmsg+0x2a0/0x2a0
[  223.811290][ T8851]  __se_sys_sendmsg+0x1c2/0x2b0
[  223.816167][ T8851]  ? __x64_sys_sendmsg+0x80/0x80
[  223.821150][ T8851]  ? lockdep_hardirqs_on+0x98/0x150
[  223.826374][ T8851]  do_syscall_64+0x55/0xb0
[  223.830794][ T8851]  ? clear_bhb_loop+0x40/0x90
[  223.835469][ T8851]  ? clear_bhb_loop+0x40/0x90
[  223.840142][ T8851]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.846042][ T8851] RIP: 0033:0x7f2af0b9ce59
[  223.850456][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.870062][ T8851] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.878481][ T8851] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  223.886455][ T8851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  223.894426][ T8851] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  223.902394][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.910362][ T8851] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  223.918353][ T8851]  </TASK>
[  224.148295][ T8866] netlink: 'syz.0.1133': attribute type 15 has an invalid length.
[  224.219306][ T8862] netlink: 'syz.1.1131': attribute type 29 has an invalid length.
[  224.231908][ T8862] netlink: 'syz.1.1131': attribute type 29 has an invalid length.
[  224.253364][ T8866] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  224.297856][ T8862] netlink: 'syz.1.1131': attribute type 29 has an invalid length.
[  224.312562][ T8868] netlink: 'syz.3.1134': attribute type 21 has an invalid length.
[  224.370564][ T8869] netlink: 'syz.1.1131': attribute type 29 has an invalid length.
[  224.628094][ T8879] netlink: 'syz.0.1143': attribute type 15 has an invalid length.
[  224.729664][ T8879] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  224.902063][ T8885] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  224.923751][ T3428] wlan1: Trigger new scan to find an IBSS to join
[  224.929306][ T8885] CPU: 1 PID: 8885 Comm: syz.1.1138 Not tainted syzkaller #0
[  224.937601][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  224.947686][ T8885] Call Trace:
[  224.950996][ T8885]  <TASK>
[  224.953955][ T8885]  dump_stack_lvl+0x18c/0x250
[  224.958682][ T8885]  ? show_regs_print_info+0x20/0x20
[  224.963925][ T8885]  ? load_image+0x420/0x420
[  224.968470][ T8885]  sysfs_warn_dup+0x8e/0xa0
[  224.972994][ T8885]  sysfs_do_create_link_sd+0xc0/0x110
[  224.978402][ T8885]  device_add_class_symlinks+0x1cf/0x240
[  224.984071][ T8885]  device_add+0x507/0xc50
[  224.988434][ T8885]  wiphy_register+0x1dad/0x2ae0
[  224.993328][ T8885]  ? cfg80211_event_work+0x40/0x40
[  224.998455][ T8885]  ? minstrel_ht_alloc+0x88a/0x990
[  225.003590][ T8885]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  225.009683][ T8885]  ieee80211_register_hw+0x3464/0x4250
[  225.015187][ T8885]  ? ieee80211_tasklet_handler+0x20/0x20
[  225.020839][ T8885]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  225.026755][ T8885]  ? __debug_object_init+0xec/0x450
[  225.031976][ T8885]  ? __asan_memset+0x22/0x40
[  225.036582][ T8885]  ? __hrtimer_init+0x186/0x270
[  225.041451][ T8885]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  225.047215][ T8885]  ? mac80211_hwsim_free+0x220/0x220
[  225.052516][ T8885]  ? rcu_is_watching+0x15/0xb0
[  225.057294][ T8885]  ? kstrndup+0xbd/0x140
[  225.061569][ T8885]  hwsim_new_radio_nl+0xdc9/0x1a90
[  225.066703][ T8885]  ? __nla_validate+0x50/0x50
[  225.071404][ T8885]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  225.077762][ T8885]  ? __nla_parse+0x40/0x50
[  225.082193][ T8885]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  225.088566][ T8885]  genl_family_rcv_msg_doit+0x211/0x310
[  225.094148][ T8885]  ? end_current_label_crit_section+0x170/0x170
[  225.100423][ T8885]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  225.106343][ T8885]  ? bpf_lsm_capable+0x9/0x10
[  225.111038][ T8885]  ? security_capable+0x89/0xb0
[  225.115916][ T8885]  genl_rcv_msg+0x619/0x7a0
[  225.120443][ T8885]  ? genl_bind+0x360/0x360
[  225.124871][ T8885]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  225.131219][ T8885]  ? lockdep_hardirqs_on+0x98/0x150
[  225.136440][ T8885]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  225.142620][ T8885]  netlink_rcv_skb+0x241/0x4d0
[  225.147401][ T8885]  ? genl_bind+0x360/0x360
[  225.151831][ T8885]  ? netlink_ack+0x1180/0x1180
[  225.156619][ T8885]  ? __lock_acquire+0x7d40/0x7d40
[  225.161666][ T8885]  ? down_read+0x1ac/0x2e0
[  225.166104][ T8885]  genl_rcv+0x28/0x40
[  225.170102][ T8885]  netlink_unicast+0x751/0x8d0
[  225.174892][ T8885]  netlink_sendmsg+0x8d0/0xbf0
[  225.179675][ T8885]  ? netlink_getsockopt+0x590/0x590
[  225.184896][ T8885]  ? aa_sock_msg_perm+0x94/0x150
[  225.189856][ T8885]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  225.195157][ T8885]  ? security_socket_sendmsg+0x80/0xa0
[  225.200632][ T8885]  ? netlink_getsockopt+0x590/0x590
[  225.206456][ T8885]  ____sys_sendmsg+0x5ba/0x960
[  225.211247][ T8885]  ? __asan_memset+0x22/0x40
[  225.215858][ T8885]  ? __sys_sendmsg_sock+0x30/0x30
[  225.220891][ T8885]  ? __import_iovec+0x5f2/0x850
[  225.225763][ T8885]  ? import_iovec+0x73/0xa0
[  225.230279][ T8885]  ___sys_sendmsg+0x2a6/0x360
[  225.234985][ T8885]  ? __sys_sendmsg+0x2a0/0x2a0
[  225.239813][ T8885]  __se_sys_sendmsg+0x1c2/0x2b0
[  225.244691][ T8885]  ? __x64_sys_sendmsg+0x80/0x80
[  225.249664][ T8885]  ? lockdep_hardirqs_on+0x98/0x150
[  225.254887][ T8885]  do_syscall_64+0x55/0xb0
[  225.259315][ T8885]  ? clear_bhb_loop+0x40/0x90
[  225.264013][ T8885]  ? clear_bhb_loop+0x40/0x90
[  225.268699][ T8885]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.274612][ T8885] RIP: 0033:0x7f2af0b9ce59
[  225.279037][ T8885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.298655][ T8885] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.307082][ T8885] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  225.315064][ T8885] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  225.323053][ T8885] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  225.331032][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.339014][ T8885] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  225.347013][ T8885]  </TASK>
[  225.395880][ T8887] __nla_validate_parse: 10 callbacks suppressed
[  225.395924][ T8887] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1139'.
[  225.445944][ T8887] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  225.454931][ T8887] CPU: 0 PID: 8887 Comm: syz.2.1139 Not tainted syzkaller #0
[  225.462346][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  225.472434][ T8887] Call Trace:
[  225.475741][ T8887]  <TASK>
[  225.478699][ T8887]  dump_stack_lvl+0x18c/0x250
[  225.483415][ T8887]  ? show_regs_print_info+0x20/0x20
[  225.488645][ T8887]  ? load_image+0x420/0x420
[  225.493196][ T8887]  sysfs_warn_dup+0x8e/0xa0
[  225.497736][ T8887]  sysfs_do_create_link_sd+0xc0/0x110
[  225.503144][ T8887]  device_add_class_symlinks+0x1cf/0x240
[  225.508818][ T8887]  device_add+0x507/0xc50
[  225.513188][ T8887]  wiphy_register+0x1dad/0x2ae0
[  225.518100][ T8887]  ? cfg80211_event_work+0x40/0x40
[  225.523249][ T8887]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  225.529449][ T8887]  ? rtnl_unlock+0x9/0x10
[  225.533815][ T8887]  ieee80211_register_hw+0x3464/0x4250
[  225.539327][ T8887]  ? ieee80211_tasklet_handler+0x20/0x20
[  225.544977][ T8887]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  225.550882][ T8887]  ? __debug_object_init+0xec/0x450
[  225.556100][ T8887]  ? __asan_memset+0x22/0x40
[  225.560686][ T8887]  ? __hrtimer_init+0x186/0x270
[  225.565546][ T8887]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  225.571296][ T8887]  ? mac80211_hwsim_free+0x220/0x220
[  225.576572][ T8887]  ? rcu_is_watching+0x15/0xb0
[  225.581338][ T8887]  ? kstrndup+0xbd/0x140
[  225.585615][ T8887]  hwsim_new_radio_nl+0xdc9/0x1a90
[  225.590775][ T8887]  ? __nla_validate+0x50/0x50
[  225.595481][ T8887]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  225.601842][ T8887]  ? __nla_parse+0x40/0x50
[  225.606305][ T8887]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  225.612635][ T8887]  genl_family_rcv_msg_doit+0x211/0x310
[  225.618189][ T8887]  ? end_current_label_crit_section+0x170/0x170
[  225.624436][ T8887]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  225.630328][ T8887]  ? bpf_lsm_capable+0x9/0x10
[  225.635002][ T8887]  ? security_capable+0x89/0xb0
[  225.639854][ T8887]  genl_rcv_msg+0x619/0x7a0
[  225.644382][ T8887]  ? genl_bind+0x360/0x360
[  225.648790][ T8887]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  225.654765][ T8887]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  225.661090][ T8887]  ? ref_tracker_free+0x690/0x840
[  225.666139][ T8887]  netlink_rcv_skb+0x241/0x4d0
[  225.670919][ T8887]  ? genl_bind+0x360/0x360
[  225.675334][ T8887]  ? netlink_ack+0x1180/0x1180
[  225.680097][ T8887]  ? __lock_acquire+0x7d40/0x7d40
[  225.685122][ T8887]  ? down_read+0x1ac/0x2e0
[  225.689532][ T8887]  genl_rcv+0x28/0x40
[  225.693516][ T8887]  netlink_unicast+0x751/0x8d0
[  225.698292][ T8887]  netlink_sendmsg+0x8d0/0xbf0
[  225.703060][ T8887]  ? netlink_getsockopt+0x590/0x590
[  225.708256][ T8887]  ? aa_sock_msg_perm+0x94/0x150
[  225.713190][ T8887]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  225.718473][ T8887]  ? security_socket_sendmsg+0x80/0xa0
[  225.723930][ T8887]  ? netlink_getsockopt+0x590/0x590
[  225.729137][ T8887]  ____sys_sendmsg+0x5ba/0x960
[  225.733914][ T8887]  ? __asan_memset+0x22/0x40
[  225.738514][ T8887]  ? __sys_sendmsg_sock+0x30/0x30
[  225.743545][ T8887]  ? __import_iovec+0x5f2/0x850
[  225.748399][ T8887]  ? import_iovec+0x73/0xa0
[  225.752898][ T8887]  ___sys_sendmsg+0x2a6/0x360
[  225.757573][ T8887]  ? __sys_sendmsg+0x2a0/0x2a0
[  225.762347][ T8887]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  225.768604][ T8887]  __se_sys_sendmsg+0x1c2/0x2b0
[  225.773453][ T8887]  ? hrtimer_interrupt+0x7bb/0x9c0
[  225.778559][ T8887]  ? __x64_sys_sendmsg+0x80/0x80
[  225.783508][ T8887]  ? lockdep_hardirqs_on+0x98/0x150
[  225.788716][ T8887]  do_syscall_64+0x55/0xb0
[  225.793127][ T8887]  ? clear_bhb_loop+0x40/0x90
[  225.797795][ T8887]  ? clear_bhb_loop+0x40/0x90
[  225.802475][ T8887]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.808386][ T8887] RIP: 0033:0x7f001ed9ce59
[  225.812795][ T8887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.832403][ T8887] RSP: 002b:00007f001fbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.840817][ T8887] RAX: ffffffffffffffda RBX: 00007f001f015fa0 RCX: 00007f001ed9ce59
[  225.848874][ T8887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  225.856863][ T8887] RBP: 00007f001ee32d6f R08: 0000000000000000 R09: 0000000000000000
[  225.864853][ T8887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.872843][ T8887] R13: 00007f001f016038 R14: 00007f001f015fa0 R15: 00007ffd9ba47918
[  225.880828][ T8887]  </TASK>
[  225.924710][ T8892] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1141'.
[  225.949198][ T8892] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  225.974544][ T8892] CPU: 1 PID: 8892 Comm: syz.1.1141 Not tainted syzkaller #0
[  225.981987][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  225.992076][ T8892] Call Trace:
[  225.995392][ T8892]  <TASK>
[  225.998353][ T8892]  dump_stack_lvl+0x18c/0x250
[  226.003078][ T8892]  ? show_regs_print_info+0x20/0x20
[  226.008323][ T8892]  ? load_image+0x420/0x420
[  226.012882][ T8892]  sysfs_warn_dup+0x8e/0xa0
[  226.017425][ T8892]  sysfs_do_create_link_sd+0xc0/0x110
[  226.022840][ T8892]  device_add_class_symlinks+0x1cf/0x240
[  226.028521][ T8892]  device_add+0x507/0xc50
[  226.032897][ T8892]  wiphy_register+0x1dad/0x2ae0
[  226.037807][ T8892]  ? cfg80211_event_work+0x40/0x40
[  226.042962][ T8892]  ? minstrel_ht_alloc+0x88a/0x990
[  226.048116][ T8892]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  226.054236][ T8892]  ieee80211_register_hw+0x3464/0x4250
[  226.059771][ T8892]  ? ieee80211_tasklet_handler+0x20/0x20
[  226.065443][ T8892]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  226.071373][ T8892]  ? __debug_object_init+0xec/0x450
[  226.076607][ T8892]  ? __asan_memset+0x22/0x40
[  226.081220][ T8892]  ? __hrtimer_init+0x186/0x270
[  226.086087][ T8892]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  226.091839][ T8892]  ? mac80211_hwsim_free+0x220/0x220
[  226.097128][ T8892]  ? rcu_is_watching+0x15/0xb0
[  226.101898][ T8892]  ? kstrndup+0xbd/0x140
[  226.106156][ T8892]  hwsim_new_radio_nl+0xdc9/0x1a90
[  226.111299][ T8892]  ? __nla_validate+0x50/0x50
[  226.116007][ T8892]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  226.122365][ T8892]  ? __nla_parse+0x40/0x50
[  226.126794][ T8892]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  226.133140][ T8892]  genl_family_rcv_msg_doit+0x211/0x310
[  226.138701][ T8892]  ? end_current_label_crit_section+0x170/0x170
[  226.144962][ T8892]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  226.150867][ T8892]  ? bpf_lsm_capable+0x9/0x10
[  226.155558][ T8892]  ? security_capable+0x89/0xb0
[  226.160421][ T8892]  genl_rcv_msg+0x619/0x7a0
[  226.164939][ T8892]  ? genl_bind+0x360/0x360
[  226.169365][ T8892]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  226.175697][ T8892]  ? ref_tracker_free+0x690/0x840
[  226.180735][ T8892]  netlink_rcv_skb+0x241/0x4d0
[  226.185504][ T8892]  ? genl_bind+0x360/0x360
[  226.189924][ T8892]  ? netlink_ack+0x1180/0x1180
[  226.194702][ T8892]  ? __lock_acquire+0x7d40/0x7d40
[  226.199738][ T8892]  ? down_read+0x1ac/0x2e0
[  226.204167][ T8892]  genl_rcv+0x28/0x40
[  226.208152][ T8892]  netlink_unicast+0x751/0x8d0
[  226.212926][ T8892]  netlink_sendmsg+0x8d0/0xbf0
[  226.217705][ T8892]  ? netlink_getsockopt+0x590/0x590
[  226.222907][ T8892]  ? aa_sock_msg_perm+0x94/0x150
[  226.227857][ T8892]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  226.233147][ T8892]  ? security_socket_sendmsg+0x80/0xa0
[  226.238615][ T8892]  ? netlink_getsockopt+0x590/0x590
[  226.243821][ T8892]  ____sys_sendmsg+0x5ba/0x960
[  226.248593][ T8892]  ? __asan_memset+0x22/0x40
[  226.253188][ T8892]  ? __sys_sendmsg_sock+0x30/0x30
[  226.258216][ T8892]  ? __import_iovec+0x5f2/0x850
[  226.263078][ T8892]  ? import_iovec+0x73/0xa0
[  226.267583][ T8892]  ___sys_sendmsg+0x2a6/0x360
[  226.272269][ T8892]  ? __sys_sendmsg+0x2a0/0x2a0
[  226.277055][ T8892]  ? debug_mutex_init+0x38/0x70
[  226.281932][ T8892]  __se_sys_sendmsg+0x1c2/0x2b0
[  226.286796][ T8892]  ? __x64_sys_sendmsg+0x80/0x80
[  226.291753][ T8892]  ? lockdep_hardirqs_on+0x98/0x150
[  226.296966][ T8892]  do_syscall_64+0x55/0xb0
[  226.301381][ T8892]  ? clear_bhb_loop+0x40/0x90
[  226.306054][ T8892]  ? clear_bhb_loop+0x40/0x90
[  226.310728][ T8892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.316628][ T8892] RIP: 0033:0x7f2af0b9ce59
[  226.321043][ T8892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.340664][ T8892] RSP: 002b:00007f2af199d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.349080][ T8892] RAX: ffffffffffffffda RBX: 00007f2af0e16090 RCX: 00007f2af0b9ce59
[  226.357053][ T8892] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  226.365028][ T8892] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  226.372998][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.380971][ T8892] R13: 00007f2af0e16128 R14: 00007f2af0e16090 R15: 00007ffce25a0818
[  226.388963][ T8892]  </TASK>
[  226.511786][ T8896] team0: Port device wlan1 added
[  226.637795][ T8904] validate_nla: 3 callbacks suppressed
[  226.637824][ T8904] netlink: 'syz.1.1145': attribute type 21 has an invalid length.
[  226.742905][ T8904] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1145'.
[  226.928466][ T4791] wlan1: Trigger new scan to find an IBSS to join
[  226.935060][ T7601] wlan1: Trigger new scan to find an IBSS to join
[  226.972621][ T8913] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1147'.
[  226.989692][ T8912] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1148'.
[  227.030070][ T8912] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  227.039321][ T8912] CPU: 1 PID: 8912 Comm: syz.1.1148 Not tainted syzkaller #0
[  227.046741][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  227.056827][ T8912] Call Trace:
[  227.060138][ T8912]  <TASK>
[  227.063088][ T8912]  dump_stack_lvl+0x18c/0x250
[  227.067802][ T8912]  ? show_regs_print_info+0x20/0x20
[  227.073035][ T8912]  ? load_image+0x420/0x420
[  227.077582][ T8912]  sysfs_warn_dup+0x8e/0xa0
[  227.082118][ T8912]  sysfs_do_create_link_sd+0xc0/0x110
[  227.087526][ T8912]  device_add_class_symlinks+0x1cf/0x240
[  227.093202][ T8912]  device_add+0x507/0xc50
[  227.097575][ T8912]  wiphy_register+0x1dad/0x2ae0
[  227.102474][ T8912]  ? cfg80211_event_work+0x40/0x40
[  227.107606][ T8912]  ? minstrel_ht_alloc+0x88a/0x990
[  227.112744][ T8912]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  227.118839][ T8912]  ieee80211_register_hw+0x3464/0x4250
[  227.124347][ T8912]  ? ieee80211_tasklet_handler+0x20/0x20
[  227.129997][ T8912]  ? lockdep_hardirqs_on+0x98/0x150
[  227.135218][ T8912]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  227.141413][ T8912]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  227.147177][ T8912]  ? mac80211_hwsim_free+0x220/0x220
[  227.152476][ T8912]  ? rcu_is_watching+0x15/0xb0
[  227.157259][ T8912]  ? kstrndup+0xbd/0x140
[  227.161527][ T8912]  hwsim_new_radio_nl+0xdc9/0x1a90
[  227.166656][ T8912]  ? mark_lock+0x94/0x320
[  227.170999][ T8912]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  227.177008][ T8912]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  227.183351][ T8912]  ? lockdep_hardirqs_on+0x98/0x150
[  227.188573][ T8912]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  227.194759][ T8912]  ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290
[  227.201112][ T8912]  genl_family_rcv_msg_doit+0x211/0x310
[  227.206676][ T8912]  ? end_current_label_crit_section+0x170/0x170
[  227.212938][ T8912]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  227.218854][ T8912]  ? bpf_lsm_capable+0x9/0x10
[  227.223557][ T8912]  ? security_capable+0x89/0xb0
[  227.228431][ T8912]  genl_rcv_msg+0x619/0x7a0
[  227.232955][ T8912]  ? genl_bind+0x360/0x360
[  227.237383][ T8912]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  227.243376][ T8912]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  227.249730][ T8912]  ? ref_tracker_free+0x690/0x840
[  227.254788][ T8912]  netlink_rcv_skb+0x241/0x4d0
[  227.259575][ T8912]  ? genl_bind+0x360/0x360
[  227.264008][ T8912]  ? netlink_ack+0x1180/0x1180
[  227.268794][ T8912]  ? __lock_acquire+0x7d40/0x7d40
[  227.273852][ T8912]  ? down_read+0x1ac/0x2e0
[  227.278290][ T8912]  genl_rcv+0x28/0x40
[  227.282284][ T8912]  netlink_unicast+0x751/0x8d0
[  227.287069][ T8912]  netlink_sendmsg+0x8d0/0xbf0
[  227.291842][ T8912]  ? lockdep_hardirqs_on+0x98/0x150
[  227.297103][ T8912]  ? netlink_getsockopt+0x590/0x590
[  227.302321][ T8912]  ? aa_sock_msg_perm+0x94/0x150
[  227.307281][ T8912]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  227.312585][ T8912]  ? security_socket_sendmsg+0x80/0xa0
[  227.318057][ T8912]  ? netlink_getsockopt+0x590/0x590
[  227.323269][ T8912]  ____sys_sendmsg+0x5ba/0x960
[  227.328056][ T8912]  ? __asan_memset+0x22/0x40
[  227.332660][ T8912]  ? __sys_sendmsg_sock+0x30/0x30
[  227.337694][ T8912]  ? __import_iovec+0x5f2/0x850
[  227.342564][ T8912]  ? import_iovec+0x73/0xa0
[  227.347082][ T8912]  ___sys_sendmsg+0x2a6/0x360
[  227.351874][ T8912]  ? __sys_sendmsg+0x2a0/0x2a0
[  227.356711][ T8912]  __se_sys_sendmsg+0x1c2/0x2b0
[  227.361580][ T8912]  ? __x64_sys_sendmsg+0x80/0x80
[  227.366551][ T8912]  ? lockdep_hardirqs_on+0x98/0x150
[  227.371768][ T8912]  do_syscall_64+0x55/0xb0
[  227.376285][ T8912]  ? clear_bhb_loop+0x40/0x90
[  227.380968][ T8912]  ? clear_bhb_loop+0x40/0x90
[  227.385653][ T8912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.391560][ T8912] RIP: 0033:0x7f2af0b9ce59
[  227.395984][ T8912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.415606][ T8912] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.424033][ T8912] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  227.432014][ T8912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  227.439991][ T8912] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  227.447975][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.455954][ T8912] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  227.463954][ T8912]  </TASK>
[  227.547744][ T8915] netlink: 'syz.0.1149': attribute type 10 has an invalid length.
[  227.629038][ T8915] team0: Device wg1 is of different type
[  227.713203][ T8919] netlink: 'syz.1.1150': attribute type 15 has an invalid length.
[  227.722631][ T8919] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1150'.
[  227.747579][ T8921] netlink: 'syz.3.1152': attribute type 29 has an invalid length.
[  227.765666][ T8919] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  227.780445][ T8921] netlink: 'syz.3.1152': attribute type 29 has an invalid length.
[  227.807232][ T8919] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1150'.
[  227.821544][ T8922] netlink: 'syz.3.1152': attribute type 29 has an invalid length.
[  227.846801][ T8921] netlink: 'syz.3.1152': attribute type 29 has an invalid length.
[  228.045565][ T8929] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1155'.
[  228.068247][ T8929] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  228.076618][ T8929] CPU: 0 PID: 8929 Comm: syz.2.1155 Not tainted syzkaller #0
[  228.084024][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  228.094082][ T8929] Call Trace:
[  228.097363][ T8929]  <TASK>
[  228.100294][ T8929]  dump_stack_lvl+0x18c/0x250
[  228.104988][ T8929]  ? show_regs_print_info+0x20/0x20
[  228.110186][ T8929]  ? load_image+0x420/0x420
[  228.114699][ T8929]  sysfs_warn_dup+0x8e/0xa0
[  228.119219][ T8929]  sysfs_do_create_link_sd+0xc0/0x110
[  228.124595][ T8929]  device_add_class_symlinks+0x1cf/0x240
[  228.130237][ T8929]  device_add+0x507/0xc50
[  228.134577][ T8929]  wiphy_register+0x1dad/0x2ae0
[  228.139543][ T8929]  ? cfg80211_event_work+0x40/0x40
[  228.144658][ T8929]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.150834][ T8929]  ieee80211_register_hw+0x3464/0x4250
[  228.156320][ T8929]  ? ieee80211_tasklet_handler+0x20/0x20
[  228.161954][ T8929]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  228.167858][ T8929]  ? __debug_object_init+0xec/0x450
[  228.173063][ T8929]  ? __asan_memset+0x22/0x40
[  228.177656][ T8929]  ? __hrtimer_init+0x186/0x270
[  228.182511][ T8929]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  228.188257][ T8929]  ? mac80211_hwsim_free+0x220/0x220
[  228.193548][ T8929]  ? rcu_is_watching+0x15/0xb0
[  228.198320][ T8929]  ? kstrndup+0xbd/0x140
[  228.202575][ T8929]  hwsim_new_radio_nl+0xdc9/0x1a90
[  228.207687][ T8929]  ? mark_lock+0x94/0x320
[  228.212019][ T8929]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  228.218006][ T8929]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  228.224336][ T8929]  ? lockdep_hardirqs_on+0x98/0x150
[  228.229541][ T8929]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.235708][ T8929]  ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290
[  228.242052][ T8929]  genl_family_rcv_msg_doit+0x211/0x310
[  228.247602][ T8929]  ? end_current_label_crit_section+0x170/0x170
[  228.253938][ T8929]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  228.259838][ T8929]  ? bpf_lsm_capable+0x9/0x10
[  228.264522][ T8929]  ? security_capable+0x89/0xb0
[  228.269386][ T8929]  genl_rcv_msg+0x619/0x7a0
[  228.273901][ T8929]  ? genl_bind+0x360/0x360
[  228.278317][ T8929]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  228.284309][ T8929]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  228.290642][ T8929]  ? ref_tracker_free+0x690/0x840
[  228.295678][ T8929]  netlink_rcv_skb+0x241/0x4d0
[  228.300443][ T8929]  ? genl_bind+0x360/0x360
[  228.304866][ T8929]  ? netlink_ack+0x1180/0x1180
[  228.309638][ T8929]  ? __lock_acquire+0x7d40/0x7d40
[  228.314673][ T8929]  ? down_read+0x1ac/0x2e0
[  228.319091][ T8929]  genl_rcv+0x28/0x40
[  228.323074][ T8929]  netlink_unicast+0x751/0x8d0
[  228.327846][ T8929]  netlink_sendmsg+0x8d0/0xbf0
[  228.332614][ T8929]  ? netlink_getsockopt+0x590/0x590
[  228.337837][ T8929]  ? aa_sock_msg_perm+0x94/0x150
[  228.342779][ T8929]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  228.348065][ T8929]  ? security_socket_sendmsg+0x80/0xa0
[  228.353519][ T8929]  ? netlink_getsockopt+0x590/0x590
[  228.358715][ T8929]  ____sys_sendmsg+0x5ba/0x960
[  228.363485][ T8929]  ? __asan_memset+0x22/0x40
[  228.368077][ T8929]  ? __sys_sendmsg_sock+0x30/0x30
[  228.373094][ T8929]  ? __import_iovec+0x5f2/0x850
[  228.377948][ T8929]  ? import_iovec+0x73/0xa0
[  228.382455][ T8929]  ___sys_sendmsg+0x2a6/0x360
[  228.387138][ T8929]  ? __sys_sendmsg+0x2a0/0x2a0
[  228.391949][ T8929]  __se_sys_sendmsg+0x1c2/0x2b0
[  228.396808][ T8929]  ? __x64_sys_sendmsg+0x80/0x80
[  228.401755][ T8929]  ? lockdep_hardirqs_on+0x98/0x150
[  228.406961][ T8929]  do_syscall_64+0x55/0xb0
[  228.411377][ T8929]  ? clear_bhb_loop+0x40/0x90
[  228.416055][ T8929]  ? clear_bhb_loop+0x40/0x90
[  228.420728][ T8929]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.426625][ T8929] RIP: 0033:0x7f001ed9ce59
[  228.431038][ T8929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.450652][ T8929] RSP: 002b:00007f001fbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  228.459068][ T8929] RAX: ffffffffffffffda RBX: 00007f001f015fa0 RCX: 00007f001ed9ce59
[  228.467039][ T8929] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  228.475010][ T8929] RBP: 00007f001ee32d6f R08: 0000000000000000 R09: 0000000000000000
[  228.483068][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.491038][ T8929] R13: 00007f001f016038 R14: 00007f001f015fa0 R15: 00007ffd9ba47918
[  228.499025][ T8929]  </TASK>
[  228.539905][ T8926] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1153'.
[  228.572719][ T8926] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  228.584505][ T8926] CPU: 1 PID: 8926 Comm: syz.3.1153 Not tainted syzkaller #0
[  228.591939][ T8926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  228.602022][ T8926] Call Trace:
[  228.605332][ T8926]  <TASK>
[  228.608286][ T8926]  dump_stack_lvl+0x18c/0x250
[  228.613003][ T8926]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.619206][ T8926]  ? show_regs_print_info+0x20/0x20
[  228.624445][ T8926]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.630651][ T8926]  ? dump_stack+0x9/0x20
[  228.634934][ T8926]  sysfs_warn_dup+0x8e/0xa0
[  228.639469][ T8926]  sysfs_do_create_link_sd+0xc0/0x110
[  228.644872][ T8926]  device_add_class_symlinks+0x1cf/0x240
[  228.650550][ T8926]  device_add+0x507/0xc50
[  228.655016][ T8926]  wiphy_register+0x1dad/0x2ae0
[  228.659899][ T8926]  ? cfg80211_event_work+0x40/0x40
[  228.665038][ T8926]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.671224][ T8926]  ? rtnl_unlock+0x9/0x10
[  228.675563][ T8926]  ieee80211_register_hw+0x3464/0x4250
[  228.681041][ T8926]  ? ieee80211_tasklet_handler+0x20/0x20
[  228.686675][ T8926]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  228.692576][ T8926]  ? __debug_object_init+0xec/0x450
[  228.697788][ T8926]  ? __asan_memset+0x22/0x40
[  228.702384][ T8926]  ? __hrtimer_init+0x186/0x270
[  228.707237][ T8926]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  228.712979][ T8926]  ? mac80211_hwsim_free+0x220/0x220
[  228.718263][ T8926]  ? rcu_is_watching+0x15/0xb0
[  228.723028][ T8926]  ? kstrndup+0xbd/0x140
[  228.727280][ T8926]  hwsim_new_radio_nl+0xdc9/0x1a90
[  228.732398][ T8926]  ? __nla_validate+0x50/0x50
[  228.737085][ T8926]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  228.743434][ T8926]  ? __nla_parse+0x40/0x50
[  228.747882][ T8926]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  228.754229][ T8926]  genl_family_rcv_msg_doit+0x211/0x310
[  228.759791][ T8926]  ? end_current_label_crit_section+0x170/0x170
[  228.766045][ T8926]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  228.771947][ T8926]  ? bpf_lsm_capable+0x9/0x10
[  228.776628][ T8926]  ? security_capable+0x89/0xb0
[  228.781488][ T8926]  genl_rcv_msg+0x619/0x7a0
[  228.785998][ T8926]  ? genl_bind+0x360/0x360
[  228.790413][ T8926]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  228.796759][ T8926]  netlink_rcv_skb+0x241/0x4d0
[  228.801524][ T8926]  ? genl_bind+0x360/0x360
[  228.805943][ T8926]  ? netlink_ack+0x1180/0x1180
[  228.810712][ T8926]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  228.816881][ T8926]  ? down_read+0x1ac/0x2e0
[  228.821299][ T8926]  genl_rcv+0x28/0x40
[  228.825284][ T8926]  netlink_unicast+0x751/0x8d0
[  228.830055][ T8926]  netlink_sendmsg+0x8d0/0xbf0
[  228.835144][ T8926]  ? netlink_getsockopt+0x590/0x590
[  228.840349][ T8926]  ? perf_trace_preemptirq_template+0xac/0x330
[  228.846534][ T8926]  ? aa_sock_msg_perm+0x94/0x150
[  228.851492][ T8926]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  228.856792][ T8926]  ? security_socket_sendmsg+0x80/0xa0
[  228.862253][ T8926]  ? netlink_getsockopt+0x590/0x590
[  228.867460][ T8926]  ____sys_sendmsg+0x5ba/0x960
[  228.872232][ T8926]  ? __asan_memset+0x22/0x40
[  228.876823][ T8926]  ? __sys_sendmsg_sock+0x30/0x30
[  228.881853][ T8926]  ? __import_iovec+0x5f2/0x850
[  228.886730][ T8926]  ? import_iovec+0x73/0xa0
[  228.891234][ T8926]  ___sys_sendmsg+0x2a6/0x360
[  228.895916][ T8926]  ? __sys_sendmsg+0x2a0/0x2a0
[  228.900718][ T8926]  __se_sys_sendmsg+0x1c2/0x2b0
[  228.905578][ T8926]  ? __x64_sys_sendmsg+0x80/0x80
[  228.910528][ T8926]  ? lockdep_hardirqs_on+0x98/0x150
[  228.915733][ T8926]  do_syscall_64+0x55/0xb0
[  228.920152][ T8926]  ? clear_bhb_loop+0x40/0x90
[  228.924827][ T8926]  ? clear_bhb_loop+0x40/0x90
[  228.929501][ T8926]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.935396][ T8926] RIP: 0033:0x7f3510d9ce59
[  228.939808][ T8926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.959421][ T8926] RSP: 002b:00007f3511c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  228.967836][ T8926] RAX: ffffffffffffffda RBX: 00007f3511015fa0 RCX: 00007f3510d9ce59
[  228.975803][ T8926] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  228.983770][ T8926] RBP: 00007f3510e32d6f R08: 0000000000000000 R09: 0000000000000000
[  228.991742][ T8926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.999708][ T8926] R13: 00007f3511016038 R14: 00007f3511015fa0 R15: 00007ffc34fd4fd8
[  229.007701][ T8926]  </TASK>
[  229.069489][ T3428] wlan1: Trigger new scan to find an IBSS to join
[  229.105893][ T8939] netlink: 'syz.2.1158': attribute type 21 has an invalid length.
[  229.173415][ T8943] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1158'.
[  229.335134][ T8946] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  229.361797][ T8946] CPU: 0 PID: 8946 Comm: syz.2.1160 Not tainted syzkaller #0
[  229.369238][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  229.379314][ T8946] Call Trace:
[  229.382606][ T8946]  <TASK>
[  229.385548][ T8946]  dump_stack_lvl+0x18c/0x250
[  229.390252][ T8946]  ? show_regs_print_info+0x20/0x20
[  229.395482][ T8946]  ? load_image+0x420/0x420
[  229.400031][ T8946]  sysfs_warn_dup+0x8e/0xa0
[  229.404571][ T8946]  sysfs_do_create_link_sd+0xc0/0x110
[  229.409967][ T8946]  device_add_class_symlinks+0x1cf/0x240
[  229.415632][ T8946]  device_add+0x507/0xc50
[  229.419994][ T8946]  wiphy_register+0x1dad/0x2ae0
[  229.424875][ T8946]  ? cfg80211_event_work+0x40/0x40
[  229.429988][ T8946]  ? minstrel_ht_alloc+0x88a/0x990
[  229.435104][ T8946]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  229.441176][ T8946]  ieee80211_register_hw+0x3464/0x4250
[  229.446654][ T8946]  ? ieee80211_tasklet_handler+0x20/0x20
[  229.452298][ T8946]  ? __asan_memset+0x22/0x40
[  229.456893][ T8946]  ? __hrtimer_init+0x186/0x270
[  229.461745][ T8946]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  229.467487][ T8946]  ? mac80211_hwsim_free+0x220/0x220
[  229.472770][ T8946]  ? rcu_is_watching+0x15/0xb0
[  229.477536][ T8946]  ? kstrndup+0xbd/0x140
[  229.481786][ T8946]  hwsim_new_radio_nl+0xdc9/0x1a90
[  229.486906][ T8946]  ? __nla_validate+0x50/0x50
[  229.491594][ T8946]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  229.497930][ T8946]  ? __nla_parse+0x40/0x50
[  229.502342][ T8946]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  229.508673][ T8946]  genl_family_rcv_msg_doit+0x211/0x310
[  229.514236][ T8946]  ? end_current_label_crit_section+0x170/0x170
[  229.520488][ T8946]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  229.526389][ T8946]  ? bpf_lsm_capable+0x9/0x10
[  229.531064][ T8946]  ? security_capable+0x89/0xb0
[  229.535923][ T8946]  genl_rcv_msg+0x619/0x7a0
[  229.540430][ T8946]  ? genl_bind+0x360/0x360
[  229.544931][ T8946]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  229.551271][ T8946]  netlink_rcv_skb+0x241/0x4d0
[  229.556042][ T8946]  ? genl_bind+0x360/0x360
[  229.560458][ T8946]  ? netlink_ack+0x1180/0x1180
[  229.565230][ T8946]  ? __lock_acquire+0x7d40/0x7d40
[  229.570268][ T8946]  ? down_read+0x1ac/0x2e0
[  229.574719][ T8946]  genl_rcv+0x28/0x40
[  229.578704][ T8946]  netlink_unicast+0x751/0x8d0
[  229.583470][ T8946]  netlink_sendmsg+0x8d0/0xbf0
[  229.588232][ T8946]  ? lockdep_hardirqs_on+0x98/0x150
[  229.593436][ T8946]  ? netlink_getsockopt+0x590/0x590
[  229.598634][ T8946]  ? aa_sock_msg_perm+0x94/0x150
[  229.603570][ T8946]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  229.608855][ T8946]  ? security_socket_sendmsg+0x80/0xa0
[  229.614315][ T8946]  ? netlink_getsockopt+0x590/0x590
[  229.619517][ T8946]  ____sys_sendmsg+0x5ba/0x960
[  229.624319][ T8946]  ? __asan_memset+0x22/0x40
[  229.628909][ T8946]  ? __sys_sendmsg_sock+0x30/0x30
[  229.633952][ T8946]  ? __import_iovec+0x5f2/0x850
[  229.638807][ T8946]  ? import_iovec+0x73/0xa0
[  229.643320][ T8946]  ___sys_sendmsg+0x2a6/0x360
[  229.647998][ T8946]  ? __sys_sendmsg+0x2a0/0x2a0
[  229.652777][ T8946]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  229.659038][ T8946]  __se_sys_sendmsg+0x1c2/0x2b0
[  229.663889][ T8946]  ? hrtimer_interrupt+0x7bb/0x9c0
[  229.668998][ T8946]  ? __x64_sys_sendmsg+0x80/0x80
[  229.673945][ T8946]  ? lockdep_hardirqs_on+0x98/0x150
[  229.679146][ T8946]  do_syscall_64+0x55/0xb0
[  229.683558][ T8946]  ? clear_bhb_loop+0x40/0x90
[  229.688225][ T8946]  ? clear_bhb_loop+0x40/0x90
[  229.692902][ T8946]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  229.698795][ T8946] RIP: 0033:0x7f001ed9ce59
[  229.703207][ T8946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.722811][ T8946] RSP: 002b:00007f001fbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.731258][ T8946] RAX: ffffffffffffffda RBX: 00007f001f015fa0 RCX: 00007f001ed9ce59
[  229.739226][ T8946] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  229.747193][ T8946] RBP: 00007f001ee32d6f R08: 0000000000000000 R09: 0000000000000000
[  229.755162][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.763146][ T8946] R13: 00007f001f016038 R14: 00007f001f015fa0 R15: 00007ffd9ba47918
[  229.771133][ T8946]  </TASK>
[  229.809560][ T8951] netlink: 'syz.0.1162': attribute type 10 has an invalid length.
[  229.879778][ T8949] netlink: 'syz.0.1162': attribute type 9 has an invalid length.
[  230.005287][ T8955] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  230.373902][ T8971] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  230.383159][ T8971] CPU: 0 PID: 8971 Comm: syz.1.1170 Not tainted syzkaller #0
[  230.390579][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  230.400638][ T8971] Call Trace:
[  230.403920][ T8971]  <TASK>
[  230.406841][ T8971]  dump_stack_lvl+0x18c/0x250
[  230.411609][ T8971]  ? show_regs_print_info+0x20/0x20
[  230.416804][ T8971]  ? load_image+0x420/0x420
[  230.421312][ T8971]  sysfs_warn_dup+0x8e/0xa0
[  230.425816][ T8971]  sysfs_do_create_link_sd+0xc0/0x110
[  230.431184][ T8971]  device_add_class_symlinks+0x1cf/0x240
[  230.436839][ T8971]  device_add+0x507/0xc50
[  230.441205][ T8971]  wiphy_register+0x1dad/0x2ae0
[  230.446160][ T8971]  ? cfg80211_event_work+0x40/0x40
[  230.451270][ T8971]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  230.457434][ T8971]  ieee80211_register_hw+0x3464/0x4250
[  230.462909][ T8971]  ? ieee80211_tasklet_handler+0x20/0x20
[  230.468541][ T8971]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  230.474439][ T8971]  ? __debug_object_init+0xec/0x450
[  230.479638][ T8971]  ? __asan_memset+0x22/0x40
[  230.484243][ T8971]  ? __hrtimer_init+0x186/0x270
[  230.489130][ T8971]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  230.494887][ T8971]  ? mac80211_hwsim_free+0x220/0x220
[  230.500180][ T8971]  ? rcu_is_watching+0x15/0xb0
[  230.504962][ T8971]  ? kstrndup+0xbd/0x140
[  230.509208][ T8971]  hwsim_new_radio_nl+0xdc9/0x1a90
[  230.514331][ T8971]  ? __nla_validate+0x50/0x50
[  230.519028][ T8971]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  230.525388][ T8971]  ? __nla_parse+0x40/0x50
[  230.529802][ T8971]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  230.536153][ T8971]  genl_family_rcv_msg_doit+0x211/0x310
[  230.541722][ T8971]  ? end_current_label_crit_section+0x170/0x170
[  230.547967][ T8971]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  230.553865][ T8971]  ? bpf_lsm_capable+0x9/0x10
[  230.558553][ T8971]  ? security_capable+0x89/0xb0
[  230.563414][ T8971]  genl_rcv_msg+0x619/0x7a0
[  230.567917][ T8971]  ? genl_bind+0x360/0x360
[  230.572326][ T8971]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  230.578648][ T8971]  ? lockdep_hardirqs_on+0x98/0x150
[  230.583859][ T8971]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  230.590048][ T8971]  netlink_rcv_skb+0x241/0x4d0
[  230.594809][ T8971]  ? genl_bind+0x360/0x360
[  230.599220][ T8971]  ? netlink_ack+0x1180/0x1180
[  230.604073][ T8971]  ? __lock_acquire+0x7d40/0x7d40
[  230.609101][ T8971]  ? down_read+0x1ac/0x2e0
[  230.613521][ T8971]  genl_rcv+0x28/0x40
[  230.617498][ T8971]  netlink_unicast+0x751/0x8d0
[  230.622265][ T8971]  netlink_sendmsg+0x8d0/0xbf0
[  230.627041][ T8971]  ? netlink_getsockopt+0x590/0x590
[  230.632237][ T8971]  ? aa_sock_msg_perm+0x94/0x150
[  230.637178][ T8971]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  230.642461][ T8971]  ? security_socket_sendmsg+0x80/0xa0
[  230.647915][ T8971]  ? netlink_getsockopt+0x590/0x590
[  230.653113][ T8971]  ____sys_sendmsg+0x5ba/0x960
[  230.657891][ T8971]  ? __asan_memset+0x22/0x40
[  230.662493][ T8971]  ? __sys_sendmsg_sock+0x30/0x30
[  230.667529][ T8971]  ? __import_iovec+0x5f2/0x850
[  230.672377][ T8971]  ? import_iovec+0x73/0xa0
[  230.676892][ T8971]  ___sys_sendmsg+0x2a6/0x360
[  230.681575][ T8971]  ? __sys_sendmsg+0x2a0/0x2a0
[  230.686411][ T8971]  __se_sys_sendmsg+0x1c2/0x2b0
[  230.691278][ T8971]  ? __x64_sys_sendmsg+0x80/0x80
[  230.696227][ T8971]  ? lockdep_hardirqs_on+0x98/0x150
[  230.701427][ T8971]  do_syscall_64+0x55/0xb0
[  230.705836][ T8971]  ? clear_bhb_loop+0x40/0x90
[  230.710504][ T8971]  ? clear_bhb_loop+0x40/0x90
[  230.715170][ T8971]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  230.721058][ T8971] RIP: 0033:0x7f2af0b9ce59
[  230.725486][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.745102][ T8971] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.753538][ T8971] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  230.761531][ T8971] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  230.769501][ T8971] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  230.777470][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.785448][ T8971] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  230.793475][ T8971]  </TASK>
[  230.835497][ T8972] __nla_validate_parse: 6 callbacks suppressed
[  230.835515][ T8972] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.1168'.
[  230.972397][ T8974] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1171'.
[  231.136561][ T8980] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1173'.
[  231.218291][ T8983] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1175'.
[  231.251224][ T8983] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  231.277788][ T8983] CPU: 0 PID: 8983 Comm: syz.1.1175 Not tainted syzkaller #0
[  231.285246][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  231.295332][ T8983] Call Trace:
[  231.298642][ T8983]  <TASK>
[  231.301595][ T8983]  dump_stack_lvl+0x18c/0x250
[  231.306296][ T8983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.313530][ T8983]  ? show_regs_print_info+0x20/0x20
[  231.318751][ T8983]  ? load_image+0x420/0x420
[  231.323262][ T8983]  ? sysfs_warn_dup+0x65/0xa0
[  231.327943][ T8983]  sysfs_warn_dup+0x8e/0xa0
[  231.332446][ T8983]  sysfs_do_create_link_sd+0xc0/0x110
[  231.337823][ T8983]  device_add_class_symlinks+0x1cf/0x240
[  231.343465][ T8983]  device_add+0x507/0xc50
[  231.347804][ T8983]  wiphy_register+0x1dad/0x2ae0
[  231.352681][ T8983]  ? cfg80211_event_work+0x40/0x40
[  231.357802][ T8983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.363979][ T8983]  ieee80211_register_hw+0x3464/0x4250
[  231.369461][ T8983]  ? ieee80211_tasklet_handler+0x20/0x20
[  231.375093][ T8983]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  231.380996][ T8983]  ? __debug_object_init+0xec/0x450
[  231.386209][ T8983]  ? __asan_memset+0x22/0x40
[  231.390812][ T8983]  ? __hrtimer_init+0x186/0x270
[  231.395672][ T8983]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  231.401419][ T8983]  ? mac80211_hwsim_free+0x220/0x220
[  231.406710][ T8983]  ? rcu_is_watching+0x15/0xb0
[  231.411477][ T8983]  ? kstrndup+0xbd/0x140
[  231.415733][ T8983]  hwsim_new_radio_nl+0xdc9/0x1a90
[  231.420853][ T8983]  ? __nla_validate+0x50/0x50
[  231.425540][ T8983]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  231.431887][ T8983]  ? __nla_parse+0x40/0x50
[  231.436307][ T8983]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  231.442645][ T8983]  genl_family_rcv_msg_doit+0x211/0x310
[  231.448194][ T8983]  ? end_current_label_crit_section+0x170/0x170
[  231.454441][ T8983]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  231.460345][ T8983]  ? bpf_lsm_capable+0x9/0x10
[  231.465026][ T8983]  ? security_capable+0x89/0xb0
[  231.469890][ T8983]  genl_rcv_msg+0x619/0x7a0
[  231.474404][ T8983]  ? genl_bind+0x360/0x360
[  231.478820][ T8983]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  231.484800][ T8983]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  231.491133][ T8983]  ? ref_tracker_free+0x690/0x840
[  231.496171][ T8983]  netlink_rcv_skb+0x241/0x4d0
[  231.500942][ T8983]  ? genl_bind+0x360/0x360
[  231.505361][ T8983]  ? netlink_ack+0x1180/0x1180
[  231.510136][ T8983]  ? __lock_acquire+0x7d40/0x7d40
[  231.515169][ T8983]  ? down_read+0x1ac/0x2e0
[  231.519593][ T8983]  genl_rcv+0x28/0x40
[  231.523584][ T8983]  netlink_unicast+0x751/0x8d0
[  231.528360][ T8983]  netlink_sendmsg+0x8d0/0xbf0
[  231.533135][ T8983]  ? netlink_getsockopt+0x590/0x590
[  231.538337][ T8983]  ? aa_sock_msg_perm+0x94/0x150
[  231.543277][ T8983]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  231.548572][ T8983]  ? security_socket_sendmsg+0x80/0xa0
[  231.554030][ T8983]  ? netlink_getsockopt+0x590/0x590
[  231.559234][ T8983]  ____sys_sendmsg+0x5ba/0x960
[  231.564002][ T8983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.570192][ T8983]  ? __asan_memset+0x22/0x40
[  231.574786][ T8983]  ? __sys_sendmsg_sock+0x30/0x30
[  231.579811][ T8983]  ? __import_iovec+0x5f2/0x850
[  231.584682][ T8983]  ? import_iovec+0x73/0xa0
[  231.589191][ T8983]  ___sys_sendmsg+0x2a6/0x360
[  231.593880][ T8983]  ? __sys_sendmsg+0x2a0/0x2a0
[  231.598691][ T8983]  __se_sys_sendmsg+0x1c2/0x2b0
[  231.603553][ T8983]  ? __x64_sys_sendmsg+0x80/0x80
[  231.608506][ T8983]  ? lockdep_hardirqs_on+0x98/0x150
[  231.613715][ T8983]  do_syscall_64+0x55/0xb0
[  231.618133][ T8983]  ? clear_bhb_loop+0x40/0x90
[  231.622804][ T8983]  ? clear_bhb_loop+0x40/0x90
[  231.627480][ T8983]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.633379][ T8983] RIP: 0033:0x7f2af0b9ce59
[  231.637799][ T8983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.657408][ T8983] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.665825][ T8983] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  231.673797][ T8983] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  231.681764][ T8983] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  231.689731][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.697698][ T8983] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  231.705686][ T8983]  </TASK>
[  231.724605][ T8985] validate_nla: 14 callbacks suppressed
[  231.724622][ T8985] netlink: 'syz.3.1176': attribute type 15 has an invalid length.
[  231.742171][ T8985] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1176'.
[  231.772747][ T8989] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  231.816244][ T8985] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1176'.
[  231.999911][ T8995] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1180'.
[  232.023991][ T8995] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  232.032220][ T8995] CPU: 0 PID: 8995 Comm: syz.3.1180 Not tainted syzkaller #0
[  232.039624][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  232.049703][ T8995] Call Trace:
[  232.052993][ T8995]  <TASK>
[  232.055917][ T8995]  dump_stack_lvl+0x18c/0x250
[  232.060594][ T8995]  ? show_regs_print_info+0x20/0x20
[  232.065783][ T8995]  ? load_image+0x420/0x420
[  232.070308][ T8995]  sysfs_warn_dup+0x8e/0xa0
[  232.074836][ T8995]  sysfs_do_create_link_sd+0xc0/0x110
[  232.080237][ T8995]  device_add_class_symlinks+0x1cf/0x240
[  232.085905][ T8995]  device_add+0x507/0xc50
[  232.090273][ T8995]  wiphy_register+0x1dad/0x2ae0
[  232.095174][ T8995]  ? cfg80211_event_work+0x40/0x40
[  232.100302][ T8995]  ? minstrel_ht_alloc+0x88a/0x990
[  232.105420][ T8995]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  232.111485][ T8995]  ieee80211_register_hw+0x3464/0x4250
[  232.116983][ T8995]  ? ieee80211_tasklet_handler+0x20/0x20
[  232.122654][ T8995]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  232.128588][ T8995]  ? __debug_object_init+0xec/0x450
[  232.133818][ T8995]  ? __asan_memset+0x22/0x40
[  232.138418][ T8995]  ? __hrtimer_init+0x186/0x270
[  232.143273][ T8995]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  232.149045][ T8995]  ? mac80211_hwsim_free+0x220/0x220
[  232.154363][ T8995]  ? rcu_is_watching+0x15/0xb0
[  232.159165][ T8995]  ? kstrndup+0xbd/0x140
[  232.163439][ T8995]  hwsim_new_radio_nl+0xdc9/0x1a90
[  232.168589][ T8995]  ? __nla_validate+0x50/0x50
[  232.173264][ T8995]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  232.179631][ T8995]  ? __nla_parse+0x40/0x50
[  232.184058][ T8995]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  232.190408][ T8995]  genl_family_rcv_msg_doit+0x211/0x310
[  232.195949][ T8995]  ? end_current_label_crit_section+0x170/0x170
[  232.202203][ T8995]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  232.208099][ T8995]  ? bpf_lsm_capable+0x9/0x10
[  232.212781][ T8995]  ? security_capable+0x89/0xb0
[  232.217653][ T8995]  genl_rcv_msg+0x619/0x7a0
[  232.222170][ T8995]  ? genl_bind+0x360/0x360
[  232.226587][ T8995]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  232.232554][ T8995]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  232.238883][ T8995]  ? ref_tracker_free+0x690/0x840
[  232.243909][ T8995]  netlink_rcv_skb+0x241/0x4d0
[  232.248665][ T8995]  ? genl_bind+0x360/0x360
[  232.253070][ T8995]  ? netlink_ack+0x1180/0x1180
[  232.257831][ T8995]  ? __lock_acquire+0x7d40/0x7d40
[  232.262876][ T8995]  ? down_read+0x1ac/0x2e0
[  232.264243][ T9000] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1181'.
[  232.267310][ T8995]  genl_rcv+0x28/0x40
[  232.267340][ T8995]  netlink_unicast+0x751/0x8d0
[  232.267373][ T8995]  netlink_sendmsg+0x8d0/0xbf0
[  232.289965][ T8995]  ? lockdep_hardirqs_on+0x98/0x150
[  232.295198][ T8995]  ? netlink_getsockopt+0x590/0x590
[  232.300393][ T8995]  ? aa_sock_msg_perm+0x94/0x150
[  232.305329][ T8995]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  232.310608][ T8995]  ? security_socket_sendmsg+0x80/0xa0
[  232.316057][ T8995]  ? netlink_getsockopt+0x590/0x590
[  232.321249][ T8995]  ____sys_sendmsg+0x5ba/0x960
[  232.326017][ T8995]  ? __asan_memset+0x22/0x40
[  232.330612][ T8995]  ? __sys_sendmsg_sock+0x30/0x30
[  232.335647][ T8995]  ? __import_iovec+0x5f2/0x850
[  232.340509][ T8995]  ? import_iovec+0x73/0xa0
[  232.345013][ T8995]  ___sys_sendmsg+0x2a6/0x360
[  232.349699][ T8995]  ? __sys_sendmsg+0x2a0/0x2a0
[  232.354513][ T8995]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  232.360773][ T8995]  __se_sys_sendmsg+0x1c2/0x2b0
[  232.365628][ T8995]  ? __x64_sys_sendmsg+0x80/0x80
[  232.370574][ T8995]  ? lockdep_hardirqs_on+0x98/0x150
[  232.375777][ T8995]  do_syscall_64+0x55/0xb0
[  232.380190][ T8995]  ? clear_bhb_loop+0x40/0x90
[  232.384862][ T8995]  ? clear_bhb_loop+0x40/0x90
[  232.389537][ T8995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  232.395431][ T8995] RIP: 0033:0x7f3510d9ce59
[  232.399848][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.419458][ T8995] RSP: 002b:00007f3511c88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.427874][ T8995] RAX: ffffffffffffffda RBX: 00007f3511015fa0 RCX: 00007f3510d9ce59
[  232.435841][ T8995] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  232.443807][ T8995] RBP: 00007f3510e32d6f R08: 0000000000000000 R09: 0000000000000000
[  232.451771][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.459739][ T8995] R13: 00007f3511016038 R14: 00007f3511015fa0 R15: 00007ffc34fd4fd8
[  232.467724][ T8995]  </TASK>
[  232.509632][ T8998] netlink: 'syz.1.1181': attribute type 21 has an invalid length.
[  232.624399][ T9003] netlink: 'syz.3.1182': attribute type 10 has an invalid length.
[  232.692633][ T9007] netlink: 'syz.0.1190': attribute type 9 has an invalid length.
[  232.701819][ T9007] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1190'.
[  232.744534][ T9003] team0: Port device wlan1 added
[  232.752507][ T9007] netlink: 'syz.0.1190': attribute type 10 has an invalid length.
[  232.778561][ T9005] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1183'.
[  232.938058][ T7601] wlan1: Trigger new scan to find an IBSS to join
[  233.004527][ T1144] wlan1: Trigger new scan to find an IBSS to join
[  233.179111][ T9020] netlink: 'syz.1.1187': attribute type 9 has an invalid length.
[  233.625756][ T9027] netlink: 'syz.2.1189': attribute type 15 has an invalid length.
[  233.651780][ T9024] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  233.660767][ T9024] CPU: 0 PID: 9024 Comm: syz.1.1198 Not tainted syzkaller #0
[  233.668225][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  233.678309][ T9024] Call Trace:
[  233.681596][ T9024]  <TASK>
[  233.684524][ T9024]  dump_stack_lvl+0x18c/0x250
[  233.689199][ T9024]  ? show_regs_print_info+0x20/0x20
[  233.694391][ T9024]  ? load_image+0x420/0x420
[  233.698893][ T9024]  sysfs_warn_dup+0x8e/0xa0
[  233.703388][ T9024]  sysfs_do_create_link_sd+0xc0/0x110
[  233.708752][ T9024]  device_add_class_symlinks+0x1cf/0x240
[  233.714402][ T9024]  device_add+0x507/0xc50
[  233.718784][ T9024]  wiphy_register+0x1dad/0x2ae0
[  233.723693][ T9024]  ? cfg80211_event_work+0x40/0x40
[  233.728832][ T9024]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.735010][ T9024]  ieee80211_register_hw+0x3464/0x4250
[  233.740480][ T9024]  ? ieee80211_tasklet_handler+0x20/0x20
[  233.746110][ T9024]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  233.751997][ T9024]  ? __debug_object_init+0xec/0x450
[  233.757192][ T9024]  ? __asan_memset+0x22/0x40
[  233.761787][ T9024]  ? __hrtimer_init+0x186/0x270
[  233.766649][ T9024]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  233.772408][ T9024]  ? mac80211_hwsim_free+0x220/0x220
[  233.777708][ T9024]  ? rcu_is_watching+0x15/0xb0
[  233.782492][ T9024]  ? kstrndup+0xbd/0x140
[  233.786742][ T9024]  hwsim_new_radio_nl+0xdc9/0x1a90
[  233.791852][ T9024]  ? __nla_validate+0x50/0x50
[  233.796535][ T9024]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  233.802870][ T9024]  ? __nla_parse+0x40/0x50
[  233.807282][ T9024]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  233.813615][ T9024]  genl_family_rcv_msg_doit+0x211/0x310
[  233.819175][ T9024]  ? end_current_label_crit_section+0x170/0x170
[  233.825503][ T9024]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  233.831405][ T9024]  ? bpf_lsm_capable+0x9/0x10
[  233.836080][ T9024]  ? security_capable+0x89/0xb0
[  233.840935][ T9024]  genl_rcv_msg+0x619/0x7a0
[  233.845442][ T9024]  ? genl_bind+0x360/0x360
[  233.849856][ T9024]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  233.855852][ T9024]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  233.862175][ T9024]  ? ref_tracker_free+0x690/0x840
[  233.867229][ T9024]  netlink_rcv_skb+0x241/0x4d0
[  233.872017][ T9024]  ? genl_bind+0x360/0x360
[  233.876453][ T9024]  ? netlink_ack+0x1180/0x1180
[  233.881221][ T9024]  ? __lock_acquire+0x7d40/0x7d40
[  233.886250][ T9024]  ? down_read+0x1ac/0x2e0
[  233.890665][ T9024]  genl_rcv+0x28/0x40
[  233.894645][ T9024]  netlink_unicast+0x751/0x8d0
[  233.899410][ T9024]  netlink_sendmsg+0x8d0/0xbf0
[  233.904175][ T9024]  ? netlink_getsockopt+0x590/0x590
[  233.909369][ T9024]  ? aa_sock_msg_perm+0x94/0x150
[  233.914318][ T9024]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  233.919635][ T9024]  ? security_socket_sendmsg+0x80/0xa0
[  233.925095][ T9024]  ? netlink_getsockopt+0x590/0x590
[  233.930295][ T9024]  ____sys_sendmsg+0x5ba/0x960
[  233.935064][ T9024]  ? __asan_memset+0x22/0x40
[  233.939649][ T9024]  ? __sys_sendmsg_sock+0x30/0x30
[  233.944664][ T9024]  ? __import_iovec+0x5f2/0x850
[  233.949515][ T9024]  ? import_iovec+0x73/0xa0
[  233.954011][ T9024]  ___sys_sendmsg+0x2a6/0x360
[  233.958686][ T9024]  ? __sys_sendmsg+0x2a0/0x2a0
[  233.963480][ T9024]  __se_sys_sendmsg+0x1c2/0x2b0
[  233.968349][ T9024]  ? __x64_sys_sendmsg+0x80/0x80
[  233.973348][ T9024]  ? lockdep_hardirqs_on+0x98/0x150
[  233.978574][ T9024]  do_syscall_64+0x55/0xb0
[  233.982987][ T9024]  ? clear_bhb_loop+0x40/0x90
[  233.987654][ T9024]  ? clear_bhb_loop+0x40/0x90
[  233.992323][ T9024]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.998221][ T9024] RIP: 0033:0x7f2af0b9ce59
[  234.002649][ T9024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.022270][ T9024] RSP: 002b:00007f2af19be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.030710][ T9024] RAX: ffffffffffffffda RBX: 00007f2af0e15fa0 RCX: 00007f2af0b9ce59
[  234.038693][ T9024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  234.046679][ T9024] RBP: 00007f2af0c32d6f R08: 0000000000000000 R09: 0000000000000000
[  234.054644][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.062607][ T9024] R13: 00007f2af0e16038 R14: 00007f2af0e15fa0 R15: 00007ffce25a0818
[  234.070620][ T9024]  </TASK>
[  234.077281][ T4791] wlan1: Trigger new scan to find an IBSS to join
[  234.088357][ T1144] wlan1: Creating new IBSS network, BSSID 1e:07:4b:12:7c:2e
[  234.109353][ T3428] wlan1: Creating new IBSS network, BSSID 16:1d:ed:64:dd:98
[  234.120760][ T7601] ------------[ cut here ]------------
[  234.126606][ T7601] WARNING: CPU: 0 PID: 7601 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440
[  234.127657][ T9027] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  234.136557][ T7601] Modules linked in:
[  234.136620][ T7601] CPU: 0 PID: 7601 Comm: kworker/u4:12 Not tainted syzkaller #0
[  234.136642][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  234.136657][ T7601] Workqueue: cfg80211 cfg80211_event_work
[  234.136687][ T7601] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  234.136715][ T7601] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 c1 9e f7 0f 0b eb bb e8 9e c1 9e f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 c1 9e f7 0f 0b e9 e0 fd ff ff e8
[  234.136733][ T7601] RSP: 0018:ffffc900032e7a20 EFLAGS: 00010293
[  234.136753][ T7601] RAX: ffffffff89e869f2 RBX: dffffc0000000000 RCX: ffff88802a855a00
[  234.136769][ T7601] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20
[  234.136784][ T7601] RBP: ffffc900032e7af8 R08: ffffffff911cd56f R09: 1ffffffff2239aad
[  234.136798][ T7601] R10: dffffc0000000000 R11: fffffbfff2239aae R12: ffff88805d158d10
[  234.136812][ T7601] R13: 1ffff9200065cf4c R14: ffff88805d323618 R15: 000000000000001f
[  234.136826][ T7601] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  234.136844][ T7601] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.136859][ T7601] CR2: 00007f2af0bea540 CR3: 000000002f2db000 CR4: 00000000003506f0
[  234.136877][ T7601] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  234.136891][ T7601] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  234.136905][ T7601] Call Trace:
[  234.136915][ T7601]  <TASK>
[  234.136925][ T7601]  ? mutex_lock_nested+0x20/0x20
[  234.136954][ T7601]  ? trace_rdev_return_void+0x1c0/0x1c0
[  234.136993][ T7601]  cfg80211_process_wdev_events+0x3bc/0x550
[  234.137031][ T7601]  cfg80211_process_rdev_events+0xa1/0x110
[  234.137060][ T7601]  cfg80211_event_work+0x2f/0x40
[  234.137082][ T7601]  ? process_scheduled_works+0x96f/0x15d0
[  234.137105][ T7601]  process_scheduled_works+0xa5d/0x15d0
[  234.137158][ T7601]  ? worker_attach_to_pool+0x380/0x380
[  234.137188][ T7601]  ? assign_work+0x3d2/0x5d0
[  234.137218][ T7601]  worker_thread+0xa55/0xfc0
[  234.137243][ T7601]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  234.137269][ T7601]  ? _raw_spin_unlock+0x40/0x40
[  234.137291][ T7601]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  234.137350][ T7601]  kthread+0x2fa/0x390
[  234.137369][ T7601]  ? pr_cont_work+0x560/0x560
[  234.137391][ T7601]  ? kthread_blkcg+0xd0/0xd0
[  234.161587][ T9030] ieee80211 !!ô!: Selected rate control algorithm 'minstrel_ht'
[  234.168101][ T7601]  ret_from_fork+0x48/0x80
[  234.168132][ T7601]  ? kthread_blkcg+0xd0/0xd0
[  234.168152][ T7601]  ret_from_fork_asm+0x11/0x20
[  234.168192][ T7601]  </TASK>
[  234.168205][ T7601] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  234.168216][ T7601] CPU: 0 PID: 7601 Comm: kworker/u4:12 Not tainted syzkaller #0
[  234.168233][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  234.168245][ T7601] Workqueue: cfg80211 cfg80211_event_work
[  234.168267][ T7601] Call Trace:
[  234.168274][ T7601]  <TASK>
[  234.168281][ T7601]  dump_stack_lvl+0x18c/0x250
[  234.168305][ T7601]  ? show_regs_print_info+0x20/0x20
[  234.168332][ T7601]  ? load_image+0x420/0x420
[  234.168362][ T7601]  panic+0x2dc/0x730
[  234.168392][ T7601]  ? bpf_jit_dump+0xd0/0xd0
[  234.168425][ T7601]  ? ret_from_fork_asm+0x11/0x20
[  234.168450][ T7601]  __warn+0x2e0/0x470
[  234.168471][ T7601]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  234.168497][ T7601]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  234.168518][ T7601]  report_bug+0x2be/0x4f0
[  234.168538][ T7601]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  234.168561][ T7601]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  234.168583][ T7601]  ? __cfg80211_ibss_joined+0x3d4/0x440
[  234.168605][ T7601]  handle_bug+0xcf/0x120
[  234.168625][ T7601]  exc_invalid_op+0x1a/0x50
[  234.168644][ T7601]  asm_exc_invalid_op+0x1a/0x20
[  234.168665][ T7601] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440
[  234.168689][ T7601] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 c1 9e f7 0f 0b eb bb e8 9e c1 9e f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 c1 9e f7 0f 0b e9 e0 fd ff ff e8
[  234.168703][ T7601] RSP: 0018:ffffc900032e7a20 EFLAGS: 00010293
[  234.168718][ T7601] RAX: ffffffff89e869f2 RBX: dffffc0000000000 RCX: ffff88802a855a00
[  234.168732][ T7601] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20
[  234.168743][ T7601] RBP: ffffc900032e7af8 R08: ffffffff911cd56f R09: 1ffffffff2239aad
[  234.168756][ T7601] R10: dffffc0000000000 R11: fffffbfff2239aae R12: ffff88805d158d10
[  234.168769][ T7601] R13: 1ffff9200065cf4c R14: ffff88805d323618 R15: 000000000000001f
[  234.168790][ T7601]  ? __cfg80211_ibss_joined+0x3d2/0x440
[  234.168820][ T7601]  ? mutex_lock_nested+0x20/0x20
[  234.168845][ T7601]  ? trace_rdev_return_void+0x1c0/0x1c0
[  234.168879][ T7601]  cfg80211_process_wdev_events+0x3bc/0x550
[  234.168913][ T7601]  cfg80211_process_rdev_events+0xa1/0x110
[  234.168938][ T7601]  cfg80211_event_work+0x2f/0x40
[  234.168957][ T7601]  ? process_scheduled_works+0x96f/0x15d0
[  234.168977][ T7601]  process_scheduled_works+0xa5d/0x15d0
[  234.169027][ T7601]  ? worker_attach_to_pool+0x380/0x380
[  234.169055][ T7601]  ? assign_work+0x3d2/0x5d0
[  234.169081][ T7601]  worker_thread+0xa55/0xfc0
[  234.169102][ T7601]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  234.169125][ T7601]  ? _raw_spin_unlock+0x40/0x40
[  234.169144][ T7601]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  234.169187][ T7601]  kthread+0x2fa/0x390
[  234.169202][ T7601]  ? pr_cont_work+0x560/0x560
[  234.169222][ T7601]  ? kthread_blkcg+0xd0/0xd0
[  234.169239][ T7601]  ret_from_fork+0x48/0x80
[  234.169256][ T7601]  ? kthread_blkcg+0xd0/0xd0
[  234.169273][ T7601]  ret_from_fork_asm+0x11/0x20
[  234.169310][ T7601]  </TASK>
[  234.174188][ T7601] Kernel Offset: disabled