last executing test programs: 19.401260968s ago: executing program 0 (id=559): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0xa3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000700), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000042c0)={&(0x7f0000001940)=@generic={0x5, "c71c7f96705ab41ee70cd102f38bac9c84bf873deee3868620071c55d5d45906f259da557ec789007ea052d4664b1e9b64fd3207badfa0796c500773ae1009c80ad430318b737b5053202ebf7d8feb28906603d7bef786532d45ab1b6b8ce670db9a5d9948c0dbd6a387c58b5ae588e8d25eaf60e115013c181e00632577"}, 0x80, 0x0}, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x10, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x2, 0x1c, &(0x7f00000014c0)=ANY=[@ANYBLOB="180800000000000000000000000000b018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000001000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.90752695s ago: executing program 0 (id=563): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40002000) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x334) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000980)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x200480, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) socket$kcm(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async) socketpair(0x22, 0x80000, 0x2, &(0x7f0000000a80)) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000ac0)={'wlan0\x00', @random='\x00\x00\x00\x00\x00 '}) 18.511284701s ago: executing program 1 (id=565): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000280)=@hci={0x1f, 0xd00, 0xe}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) 18.421650153s ago: executing program 3 (id=567): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)="d80000001e0081064e81f782db44b904000e080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4000044) r1 = perf_event_open(&(0x7f0000001a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a80)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x7, 0xc, &(0x7f0000001b80)=ANY=[@ANYRESDEC, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001bc0)='!\\]\x94\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001c80), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001d00)='ns/net\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0xb701, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001d80)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001e00)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000001e40)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30f) socketpair(0x1, 0x1, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001ec0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000001f00)) sendmsg$kcm(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0xc00e}, 0x40800) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001fc0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 18.204316368s ago: executing program 2 (id=569): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000001c0)=""/240, 0xf0, 0x0, &(0x7f00000002c0)=""/200, 0xc8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 18.202721168s ago: executing program 1 (id=570): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff5", 0x26}], 0x1}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000001900000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_clone(0x10000000, &(0x7f0000000240), 0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000400)="1dcf31408ee997f05ce24e14799969cbca4adf90b40f8bfcbe976b916fd8127b7291beb0569c3e716ceb0d7681e06c") perf_event_open(0x0, r3, 0xc, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='[\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00"], 0xcfa4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="a656d5ef48e0a2c8580c71f517511f4b321a062fdaf7987a122ca9f0b9095003814e8f9821"], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000400000000000aaf6096da3041ee3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.14643864s ago: executing program 4 (id=571): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000000)="bdd9f627c674757eb43c6fbbdd0d81c805975abb020b7bbc5dd25f88eee8d37ead15791e1fcae651fa2c61e1c545da2856c1cced526da3ecbc95fb2be1597114632f6b3a0af1637e3f5d1e3971ed167504ec705bf4659521a3f49c3fa580366b721de7ab59cd3c6dea8671dc8b7ae0d08a1270bbd158f421945b6da61fed4d55887cd58d14ac2b964e2b31bbc84cfb0952dd9dbf9e302c299c49e4d8112946fd3631b1ed868b2c12b5112fb3a3e2e92ab9a4ff8057ca9d78c04347971aacd5990dde2153e8015f12d626d31f755f5e6cb6e357a31b5f00c9fd30769cf788d3df848cfa8bcc88c549ba", 0xe9}, {&(0x7f00000001c0)="eaacf1142cfcf5968f877138d3780f62f2aecc", 0x13}, {&(0x7f00000016c0)="653fbb5ca9b02b4e06074214e751e57ddb770a2d2157aebb08680680fc6f67f0e75d4381ebcd3ddd1cb015c45904c494c9d83a3e6e195bba7ea1d6b2d5e121fdc8ff29bc7a9f46671eb22b5ad13be44c0dae0a6bdfeda8e99ee4ec813695c3d38fe98d54834b86f08a2f0a119ddf4093784404d71aa172211a7a733349de0767d883d789eec594813db04415791953ad9e7f26ee31ca9386c0afd6d6a5bb0988dff69df45374b5a7a6bde88e50fb930d2970194b62f5e8deb9349793f7d351fd1d1ba9072f455ec574a0765b56a686ef190c05641c775479", 0xd8}, {&(0x7f00000017c0)="569b84b32abd63d158e18d85dbe5230f6ad8fab8a75c1c35ed59d970b3361a8cc17dc397bd135739cbc2f796d4363decb7b3286598d1054514859e45e5fd5e90f315da01dac6534de709c3834113093e53307ea777c433a5bbf1b98bf0d5a48d10d2a42a4f207083c2f2c140f17b048ba80203e7cbcd5b3959d241a21c3d6994f9448f15da74d42380e9942a17a47cf26d4a3c2d1d8e92f40810e01ee5797818de8f4bf5bab2970eeb2914ced403dfbf4e5b9fa0d4542bf07a76ab5a", 0xbc}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x9, 0x43a5bd76, 0xb, 0x9, 0x6, 0xc, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x4d, 0x0, 0xfcd8) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x2000000, 0x8dde, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0x4, 0xf9}, 0x806, 0xc8, 0x22, 0x4, 0x400, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x40002100) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1000000004000000080000000500de"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000840)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8, 0x10, &(0x7f0000001440), 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 18.14615088s ago: executing program 0 (id=572): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x80}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b90103600033f0000000000081", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0xe) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="c9f7b98600"/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.099088241s ago: executing program 2 (id=573): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000a40)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="379b", 0x2}], 0x1}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000a00)={&(0x7f0000000080), 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/123, 0x7b}, {&(0x7f0000000840)=""/28, 0x1c}], 0x5, &(0x7f0000000900)=""/221, 0xdd}, 0x121) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000a40)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="379b", 0x2}], 0x1}, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) recvmsg$kcm(r5, &(0x7f0000000a00)={&(0x7f0000000080), 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/123, 0x7b}, {&(0x7f0000000840)=""/28, 0x1c}], 0x5, &(0x7f0000000900)=""/221, 0xdd}, 0x121) (async) 17.689343732s ago: executing program 2 (id=574): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, &(0x7f00000007c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f00000000c0), 0xb9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90724fc60", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000900)}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x25, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000185800000b000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001811", @ANYBLOB="0000000000000000b7020000000000008500000000348614"], 0x0, 0xf0000000, 0x7f, &(0x7f00000001c0)=""/127, 0x41100, 0xc, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x10, 0xfffffff7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x0, 0x1, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0]}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x489f}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89b1, &(0x7f0000000040)={'macvtap0\x00', @random="00009e0c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00'}, 0x94) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000180)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 17.216149284s ago: executing program 4 (id=575): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0xa3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000700), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000042c0)={&(0x7f0000001940)=@generic={0x5, "c71c7f96705ab41ee70cd102f38bac9c84bf873deee3868620071c55d5d45906f259da557ec789007ea052d4664b1e9b64fd3207badfa0796c500773ae1009c80ad430318b737b5053202ebf7d8feb28906603d7bef786532d45ab1b6b8ce670db9a5d9948c0dbd6a387c58b5ae588e8d25eaf60e115013c181e00632577"}, 0x80, 0x0}, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x10, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x2, 0x1c, &(0x7f00000014c0)=ANY=[@ANYBLOB="180800000000000000000000000000d018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000001000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.094393657s ago: executing program 1 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000680)={r1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000}, 0x48) 17.031048748s ago: executing program 0 (id=577): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x121000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0xed6, 0x437f}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x4, 0xa, 0x6, 0x4, 0x0, 0x3, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x4}, 0x4000, 0x5, 0x2, 0x4, 0xfffffffffffffffb, 0x40, 0x1, 0x0, 0x1b, 0x0, 0x4}) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1e, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, &(0x7f0000000c80)="000000000000000002", 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.009597539s ago: executing program 3 (id=578): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x108c, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001d00"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f5009500040000000100"], 0x0, 0x10000000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000780)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='io.stat\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_devices(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="80fd"], 0x3) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, &(0x7f0000000300)=""/106, 0x6a}, 0x40000001) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) 16.99024641s ago: executing program 2 (id=579): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x5, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0xfffffffffffffc4a, 0x13, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000164000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="000000b702000014000000b7030000000000008500000083000000bf090000000000005509e600000000009500000000000000181100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f0000000780)="b800000500000000", &(0x7f00000007c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000002c0), 0x12) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) (async, rerun: 32) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x40, 0x0, 0x0, 0x80, 0x0, 0x100, 0x12006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r1, 0xa) (async, rerun: 32) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000a80)='GPL\x00'}, 0x80) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000ac0)={r7, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000b40)={0x0, 0xfffffffe, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)='%pI4 \x00'}, 0x20) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) (rerun: 32) r11 = socket$kcm(0x15, 0x5, 0x0) close(r11) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89a0, 0x0) 16.551175611s ago: executing program 1 (id=580): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)="0000ffff", 0x0, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000080)={'wg1\x00', @random="0200cb697efb"}) (async) socket$kcm(0x29, 0x5, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 16.550747251s ago: executing program 4 (id=581): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x100000a, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 16.414811185s ago: executing program 3 (id=582): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x1, 0x2, 0x8, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x54, 0x3, 0x0, [{@empty, 0x2ad1c39b}, {@broadcast, 0x2}, {@multicast2, 0x5d9fb956}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x40}, {@multicast2, 0x5}, {@empty, 0x4}]}, @generic={0x88, 0x5, "5c89e1"}, @end]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x7}, @noop, @timestamp_addr={0x44, 0x4c, 0x76, 0x1, 0x9, [{@multicast1, 0xe}, {@rand_addr=0x64010102, 0x8000}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0x4}, {@local, 0xffff0000}, {@remote, 0x9}, {@empty, 0x9}, {@multicast1, 0x5}]}, @cipso={0x86, 0x12, 0x2, [{0x0, 0xc, "8ff06fb29cb8388b7698"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}], 0x178}, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000017000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e80), 0x200000, 0x10, &(0x7f0000000ec0), 0x143}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.316086367s ago: executing program 4 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x15, 0x1c, &(0x7f0000001700)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.988569266s ago: executing program 1 (id=584): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x100002}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000400e6000e8a8fff00"/23, @ANYRES32, @ANYBLOB="00000000000000000000000011319cf079421f7c", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/19], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x4) close(0x3) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x80000000, 0x0, 0x1, 0xfd6, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 15.928046827s ago: executing program 2 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 15.585840746s ago: executing program 2 (id=586): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff5", 0x26}], 0x1}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000001900000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_clone(0x10000000, &(0x7f0000000240), 0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000400)="1dcf31408ee997f05ce24e14799969cbca4adf90b40f8bfcbe976b916fd8127b7291beb0569c3e716ceb0d7681e06c") perf_event_open(0x0, r3, 0xc, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='[\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00"], 0xcfa4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="a656d5ef48e0a2c8580c71f517511f4b321a062fdaf7987a122ca9f0b9095003814e8f9821"], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000400000000000aaf6096da3041ee3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.531082667s ago: executing program 0 (id=587): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000000)="bdd9f627c674757eb43c6fbbdd0d81c805975abb020b7bbc5dd25f88eee8d37ead15791e1fcae651fa2c61e1c545da2856c1cced526da3ecbc95fb2be1597114632f6b3a0af1637e3f5d1e3971ed167504ec705bf4659521a3f49c3fa580366b721de7ab59cd3c6dea8671dc8b7ae0d08a1270bbd158f421945b6da61fed4d55887cd58d14ac2b964e2b31bbc84cfb0952dd9dbf9e302c299c49e4d8112946fd3631b1ed868b2c12b5112fb3a3e2e92ab9a4ff8057ca9d78c04347971aacd5990dde2153e8015f12d626d31f755f5e6cb6e357a31b5f00c9fd30769cf788d3df848cfa8bcc88c549ba", 0xe9}, {&(0x7f00000001c0)="eaacf1142cfcf5968f877138d3780f62f2aecc", 0x13}, {&(0x7f00000016c0)="653fbb5ca9b02b4e06074214e751e57ddb770a2d2157aebb08680680fc6f67f0e75d4381ebcd3ddd1cb015c45904c494c9d83a3e6e195bba7ea1d6b2d5e121fdc8ff29bc7a9f46671eb22b5ad13be44c0dae0a6bdfeda8e99ee4ec813695c3d38fe98d54834b86f08a2f0a119ddf4093784404d71aa172211a7a733349de0767d883d789eec594813db04415791953ad9e7f26ee31ca9386c0afd6d6a5bb0988dff69df45374b5a7a6bde88e50fb930d2970194b62f5e8deb9349793f7d351fd1d1ba9072f455ec574a0765b56a686ef190c05641c775479", 0xd8}, {&(0x7f00000017c0)="569b84b32abd63d158e18d85dbe5230f6ad8fab8a75c1c35ed59d970b3361a8cc17dc397bd135739cbc2f796d4363decb7b3286598d1054514859e45e5fd5e90f315da01dac6534de709c3834113093e53307ea777c433a5bbf1b98bf0d5a48d10d2a42a4f207083c2f2c140f17b048ba80203e7cbcd5b3959d241a21c3d6994f9448f15da74d42380e9942a17a47cf26d4a3c2d1d8e92f40810e01ee5797818de8f4bf5bab2970eeb2914ced403dfbf4e5b9fa0d4542bf07a76ab5a", 0xbc}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x9, 0x43a5bd76, 0xb, 0x9, 0x6, 0xc, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x4d, 0x0, 0xfcd8) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x2000000, 0x8dde, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0x4, 0xf9}, 0x806, 0xc8, 0x22, 0x4, 0x400, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x40002100) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1000000004000000080000000500de"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000840)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000030000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8, 0x10, &(0x7f0000001440), 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 15.530584367s ago: executing program 1 (id=588): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x0, 0x2, 0x5, 0x0, 0x9f, 0x22001, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x63, 0x1}, 0x100c1, 0x0, 0x100, 0x4, 0x0, 0x7fff, 0x4b1a, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xf, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14}, 0x94) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffda4) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f00000002c0)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000300)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xe}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18cf000054a60701000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000007c0)={'sit0\x00', @random="4f33e363a4b1"}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 15.359365412s ago: executing program 3 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7, 0x5, 0x9, 0x7, 0x0, 0x1, 0x7a5d4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x4, @perf_config_ext={0xa, 0x40}, 0x2, 0x576b, 0x5, 0x65928a1d8092fbca, 0x6, 0x6, 0x7, 0x0, 0x24, 0x0, 0x40fc}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000100)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24000000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000200)) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) 15.341207152s ago: executing program 4 (id=590): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="ad9846280bc8ce3cb86af17634ec18b1ce0190e8a3d013416c5bb98247f68d57069067a9dacbe31efb25e469ab2237f8e3ac12b72166", 0x36}, {&(0x7f00000000c0)="4bd1ae6f2e58035507bdd76bda341b75e3c86b8e7b983f4f55b687b58c59a865ea4d76765f25e5b43805d7d7941e240ae1e81ba4a91ad74a8b4c0bbae9b30362d0591f0efb38cc2ac00c57335a10c9d8fbd1eb7c91c59a8c69229ca9f074e94904d427f1683dac2635515a00ebe8b7a4d32de049a67d5a6767376da2496c1fd3ebb6f4514b3aa65a19f2b5d73f4cdde0214fdc2611cc9d2a677e6f3483114ea8aaafa045a151b08b0608d27b9cf5f0d40ee9696efecfdb9f1c390774feecd3c101be8e110cc247495d8b8d7d04920a33c70aed", 0xd3}, {&(0x7f0000000200)="b7088b4bb648963f60a3fec7bcbacf116536d51cd11baecb63677b19eb4a6ea3b8068e834a0de7028f81065cdf2d74be5e03d134664bac1a13951a032724030b1e78f781b029f33871fbf4838577f840af740619577a93461d9ffd088c83241d4543b401", 0x64}, {&(0x7f0000000280)="491fb18a9e7fac667918dc1c3dde5e03df3660423429c85cdf7c82179847b9ee6afc384468ef4928e8da8e99a17f085ccc17a6f3", 0x34}, {&(0x7f00000002c0)="e7c943536e0aa8b09168", 0xa}, {&(0x7f0000000400)="a426eb288c0d60e458a1da2714146a14cab13da53d43a04f76a581", 0x1b}], 0x6, &(0x7f00000004c0)="f0645c1f1c5e2a0d7be696d9b2e147ef07bd09c038b50d45da785e2c209bc8abae97352149ed68781b84524ee69bafb6e78e23e9558eef3d92e6a74d986bc3a2158d5f9e3c954d8ef1904015249a9ffa52fca289fa8629648ad48f7b21568b9bf29926a3f1dc8930c789c024b10170b32e511978a423bb58f9b92276d5feeb6b6aa4bdcf0e3ab9b7be208c79f730f1dbed6ab8728f", 0x95, 0x40000}, 0x410) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000160081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 15.087282289s ago: executing program 3 (id=591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000540)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\x00\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.079745399s ago: executing program 4 (id=592): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x108c, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001d00"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f5009500040000000100"], 0x0, 0x10000000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000780)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='io.stat\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_devices(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="80fd"], 0x3) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, &(0x7f0000000300)=""/106, 0x6a}, 0x40000001) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) 15.05854916s ago: executing program 0 (id=593): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x100000a, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 15.05714209s ago: executing program 3 (id=594): r0 = perf_event_open$cgroup(&(0x7f0000000740)={0x2, 0x80, 0xa, 0x5b, 0x0, 0x6, 0x0, 0x31, 0x41, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd85, 0x4, @perf_config_ext={0x8, 0x3}, 0x180, 0x6, 0x10000, 0x6, 0x8000000000000001, 0x58, 0xd155, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000007c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)="490294ffa18077d36f07518a562f053e3e47fab02a3af661592f4ff6d646b6ba482ec52d99af540067d880e50126c3deae8f1707fe481f222c318b5bfd21a57e60327f59a96f8a0992f21863f12dd0766b3445f1a1fdd6543de426e9cf04cfab0e3b48d78253d12a7ad547007dd90e5fcc73197358f88164e219d618f3419574ee348012d1a9ad8809970127e0c8eb3f207d5cb51482945350dcabdee0b51e93e15eb0b3ee855be173c26a16f5d143e05ce260980e7ea0133a6a6ca1124c94ab461b2d598672dc37500467282181ddfa8a495ae7ba3cd9f449052e25257bb2aa5d9be7859bdcb7d82f67f0", 0xeb}, {&(0x7f0000000940)="3a2b81dbbdfda859d0d4661adc6152709da5cdfb013d76e11378b6a34289911d92d8f3a5532c572fdcaeda4c8236bed1e4fafd55d82f446bf917aae27f5b0c8da7e4ba629397fc53f4319d77621137266123b68453365ddf4d768cb2e5c006b5f2145928bf12c3a90a3daa67b39b816d", 0x70}, {&(0x7f00000009c0)="10e7ed8c01b018c97e1385b6b05181225b6922189d98ea788600c7b8e50b09567c93162f589994e27edde8668c28df15ecdd3b2c0d577a21108b4bda1554673c4452691f2ab3f39df1713e02f3a6ad2a946e0012f82aecd1096b09857704cd41f527bb94347a8799c1489e4c0b0f8e71812835c13cafccd886b148771e35ea57557f9893d22cf369fb7e016673b2cec71c942d99c5c69fa3fbb4e3511d5dfa80b8634786a6d41a7c1ee71fa5918a63347afb3ad8bd0fbfdd030744ba5fef81d3bcf6325482f5a712e08bc263c6fa00840aa2da55d74d109ebaa9d5ecf48431fcfd71695f505bfae1ec388fc91094b0c2d41e97197cb1", 0xf6}], 0x3, &(0x7f0000000c80)=[{0x78, 0x88, 0x6, "933b7c7a44fcf20aca86ac0502f1c0122882630a471975eacc6d6a99b0e78903d16c9dffc3f96c01ee7cc4b9996e84925e4f7ac5c66ddada0a0b0a8912944687abb717e96d3a747d79ab8bbf9c8236f467f67ef1d8c3da4143d19eb5e8726bf154"}, {0x58, 0x110, 0x3, "5a6980b415995da070d93bdfe17ffdc3f193fadf6fc5b863daae9111625d5668b30a941b27257dcf14d95eb68507932d78cf83b2f4a739610d12aab595febadde0"}, {0x90, 0x112, 0x2, "61d381acb5f560c4442c28c6985a79ca2ea4b06e2d763fad4006b03e1671589c6c903db70db07c778fdbe4452720050cbafb19c22f24c114be4e8a0066b562abc31294792cf467b9852c62cdde4295e16a1b80916fea57c6c632b0dbae81a95adb20047d21990eedc7748277735124fc437e8556c59e3b76250ba3274fa07a"}], 0x160}, 0x40) (rerun: 64) r1 = socket$kcm(0x2, 0x5, 0x0) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x102) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) (async, rerun: 32) r2 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x400}) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600150003000012080004004300000007001600a400034020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000003c0)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/196, 0xc4}], 0x1}, 0x10000) (async, rerun: 64) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="f0cd", 0x2}], 0x1}, 0x40) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 32 (id=593): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x100000a, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 74.700867][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.711588][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720899][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.741740][ T4185] device veth1_macvtap entered promiscuous mode [ 74.751071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.759985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.769973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.781550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.792236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.819286][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.831070][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.842827][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.855313][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.868080][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.892861][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.904470][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.916485][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.927776][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.937969][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.949775][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.961079][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.978730][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.990316][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.001805][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.014286][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.026343][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.038046][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.052069][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.060085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.071381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.081477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.091202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.100142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.109003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.135843][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.145961][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.154947][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.164582][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.181586][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.193187][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.201692][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.206355][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.212978][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.230408][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.240650][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.251848][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.263149][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.275524][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.288499][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.300996][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.310405][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.321118][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.330308][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.354332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.366903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.377003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.387846][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.399482][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.411526][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.422490][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.433710][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.445049][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.455721][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.467097][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.479026][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.504263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.515930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.538197][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.547706][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.557830][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.568136][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.595634][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 75.603915][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 75.620106][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 75.628078][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 75.634387][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 75.661887][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.699888][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.709896][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.743342][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.775468][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.810329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.840017][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.858961][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.866446][ T469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.883864][ T469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.892238][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.905638][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.925549][ T469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.940963][ T469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.962538][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.994215][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.030338][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.057088][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.078505][ T469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.091442][ T469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.138499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.138761][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.162170][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.175186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.284083][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.309600][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.373108][ T4324] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.575036][ C1] hrtimer: interrupt took 43700 ns [ 76.588991][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.611755][ T4330] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 76.655192][ T4330] device veth1_macvtap left promiscuous mode [ 76.913051][ T4334] device sit0 entered promiscuous mode [ 77.210178][ T4329] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 77.464673][ T4340] netlink: 399 bytes leftover after parsing attributes in process `syz.2.7'. [ 78.037887][ T4353] device sit0 entered promiscuous mode [ 78.441083][ T4352] netlink: 'syz.2.8': attribute type 39 has an invalid length. [ 78.540534][ T4363] device sit0 entered promiscuous mode [ 78.724905][ T4364] device sit0 entered promiscuous mode [ 78.831454][ T4371] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.932634][ T4365] netlink: 'syz.4.10': attribute type 39 has an invalid length. [ 78.982399][ T4357] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.032592][ T4371] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 79.272417][ T4374] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14'. [ 79.332075][ T4374] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 79.344640][ T4374] CPU: 0 PID: 4374 Comm: syz.0.14 Not tainted syzkaller #0 [ 79.352282][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.364152][ T4374] Call Trace: [ 79.367988][ T4374] [ 79.371026][ T4374] dump_stack_lvl+0x188/0x250 [ 79.375907][ T4374] ? show_regs_print_info+0x20/0x20 [ 79.381805][ T4374] ? load_image+0x410/0x410 [ 79.387394][ T4374] sysfs_warn_dup+0x8a/0xa0 [ 79.392452][ T4374] sysfs_do_create_link_sd+0xc0/0x110 [ 79.398374][ T4374] device_add+0x83b/0x1050 [ 79.403191][ T4374] wiphy_register+0x1e74/0x2c40 [ 79.408349][ T4374] ? cfg80211_event_work+0x40/0x40 [ 79.413702][ T4374] ? minstrel_ht_alloc+0x807/0x980 [ 79.419087][ T4374] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 79.425174][ T4374] ieee80211_register_hw+0x2a03/0x3a60 [ 79.431016][ T4374] ? ieee80211_register_hw+0xa91/0x3a60 [ 79.436574][ T4374] ? ieee80211_tasklet_handler+0x20/0x20 [ 79.443091][ T4374] ? rcu_is_watching+0x11/0xa0 [ 79.447948][ T4374] ? hrtimer_init+0x10c/0x220 [ 79.452659][ T4374] mac80211_hwsim_new_radio+0x209d/0x4050 [ 79.458574][ T4374] hwsim_new_radio_nl+0xa7d/0xc50 [ 79.463805][ T4374] genl_rcv_msg+0xd0b/0xfa0 [ 79.468371][ T4374] ? genl_bind+0x370/0x370 [ 79.472888][ T4374] ? swake_up_one+0x6d/0x130 [ 79.477693][ T4374] ? verify_lock_unused+0x140/0x140 [ 79.482910][ T4374] ? rcu_preempt_deferred_qs_irqrestore+0x855/0xbd0 [ 79.489753][ T4374] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 79.496133][ T4374] netlink_rcv_skb+0x1e9/0x430 [ 79.501026][ T4374] ? genl_bind+0x370/0x370 [ 79.505645][ T4374] ? netlink_ack+0xb10/0xb10 [ 79.510542][ T4374] ? down_read+0x1aa/0x2e0 [ 79.515085][ T4374] genl_rcv+0x24/0x40 [ 79.519540][ T4374] netlink_unicast+0x78f/0x940 [ 79.524867][ T4374] netlink_sendmsg+0x8ba/0xbe0 [ 79.530092][ T4374] ? netlink_getsockopt+0x570/0x570 [ 79.535299][ T4374] ? aa_sock_msg_perm+0x94/0x150 [ 79.540610][ T4374] ? apparmor_socket_sendmsg+0x88/0x230 [ 79.546661][ T4374] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 79.552261][ T4374] ? security_socket_sendmsg+0x7c/0xa0 [ 79.558073][ T4374] ? netlink_getsockopt+0x570/0x570 [ 79.564145][ T4374] ____sys_sendmsg+0x5be/0x8f0 [ 79.569980][ T4374] ? __sys_sendmsg_sock+0x30/0x30 [ 79.575122][ T4374] ? import_iovec+0x6f/0xa0 [ 79.579839][ T4374] ___sys_sendmsg+0x236/0x2e0 [ 79.584645][ T4374] ? __sys_sendmsg+0x290/0x290 [ 79.589976][ T4374] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 79.596807][ T4374] __se_sys_sendmsg+0x1b7/0x2a0 [ 79.601975][ T4374] ? __x64_sys_sendmsg+0x80/0x80 [ 79.607115][ T4374] ? syscall_enter_from_user_mode+0x2a/0x70 [ 79.613822][ T4374] do_syscall_64+0x4c/0xa0 [ 79.618408][ T4374] ? clear_bhb_loop+0x30/0x80 [ 79.623137][ T4374] ? clear_bhb_loop+0x30/0x80 [ 79.627915][ T4374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.633900][ T4374] RIP: 0033:0x7f1d66740559 [ 79.638774][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.660097][ T4374] RSP: 002b:00007f1d64997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.668628][ T4374] RAX: ffffffffffffffda RBX: 00007f1d669c6fa0 RCX: 00007f1d66740559 [ 79.676623][ T4374] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 79.684774][ T4374] RBP: 00007f1d667d7b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.693593][ T4374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.702062][ T4374] R13: 00007f1d669c7038 R14: 00007f1d669c6fa0 R15: 00007ffea2706aa8 [ 79.710891][ T4374] [ 79.819428][ T4378] netlink: 'syz.1.15': attribute type 40 has an invalid length. [ 79.847938][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.930019][ T4380] device sit0 left promiscuous mode [ 80.357913][ T4386] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17'. [ 80.455675][ T4384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.577650][ T4381] device sit0 entered promiscuous mode [ 80.913901][ T4382] netlink: 'syz.3.16': attribute type 39 has an invalid length. [ 80.996318][ T4386] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 81.011723][ T4386] CPU: 0 PID: 4386 Comm: syz.0.17 Not tainted syzkaller #0 [ 81.022179][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.035561][ T4386] Call Trace: [ 81.040280][ T4386] [ 81.044478][ T4386] dump_stack_lvl+0x188/0x250 [ 81.051504][ T4386] ? show_regs_print_info+0x20/0x20 [ 81.058986][ T4386] ? load_image+0x410/0x410 [ 81.067514][ T4386] sysfs_warn_dup+0x8a/0xa0 [ 81.073187][ T4386] sysfs_do_create_link_sd+0xc0/0x110 [ 81.081456][ T4386] device_add+0x83b/0x1050 [ 81.089510][ T4386] wiphy_register+0x1e74/0x2c40 [ 81.095706][ T4386] ? cfg80211_event_work+0x40/0x40 [ 81.102387][ T4386] ? minstrel_ht_alloc+0x807/0x980 [ 81.108851][ T4386] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 81.116918][ T4386] ieee80211_register_hw+0x2a03/0x3a60 [ 81.123275][ T4386] ? ieee80211_register_hw+0xa91/0x3a60 [ 81.130786][ T4386] ? ieee80211_tasklet_handler+0x20/0x20 [ 81.138757][ T4386] ? rcu_is_watching+0x11/0xa0 [ 81.145649][ T4386] ? hrtimer_init+0x10c/0x220 [ 81.151488][ T4386] mac80211_hwsim_new_radio+0x209d/0x4050 [ 81.158262][ T4386] hwsim_new_radio_nl+0xa7d/0xc50 [ 81.165768][ T4386] genl_rcv_msg+0xd0b/0xfa0 [ 81.170859][ T4386] ? genl_bind+0x370/0x370 [ 81.176917][ T4386] ? mark_lock+0x94/0x320 [ 81.183218][ T4386] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.191684][ T4386] ? lock_chain_count+0x20/0x20 [ 81.198517][ T4386] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 81.207926][ T4386] ? lockdep_hardirqs_on+0x94/0x140 [ 81.214144][ T4386] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 81.221060][ T4386] ? netlink_rcv_skb+0x1c8/0x430 [ 81.227136][ T4386] netlink_rcv_skb+0x1e9/0x430 [ 81.232488][ T4386] ? genl_bind+0x370/0x370 [ 81.237923][ T4386] ? netlink_ack+0xb10/0xb10 [ 81.243332][ T4386] ? down_read+0x1aa/0x2e0 [ 81.249359][ T4386] genl_rcv+0x24/0x40 [ 81.253846][ T4386] netlink_unicast+0x78f/0x940 [ 81.262014][ T4386] netlink_sendmsg+0x8ba/0xbe0 [ 81.267884][ T4386] ? netlink_getsockopt+0x570/0x570 [ 81.275439][ T4386] ? audit_tree_destroy_watch+0x20/0x20 [ 81.284198][ T4386] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.289990][ T4386] ? security_socket_sendmsg+0x7c/0xa0 [ 81.296304][ T4386] ? netlink_getsockopt+0x570/0x570 [ 81.302369][ T4386] ____sys_sendmsg+0x5be/0x8f0 [ 81.308496][ T4386] ? __sys_sendmsg_sock+0x30/0x30 [ 81.316036][ T4386] ? ___sys_sendmsg+0x21b/0x2e0 [ 81.322741][ T4386] ___sys_sendmsg+0x236/0x2e0 [ 81.328612][ T4386] ? __sys_sendmsg+0x290/0x290 [ 81.334444][ T4386] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 81.341319][ T4386] __se_sys_sendmsg+0x1b7/0x2a0 [ 81.347976][ T4386] ? __x64_sys_sendmsg+0x80/0x80 [ 81.353232][ T4386] ? syscall_enter_from_user_mode+0x2a/0x70 [ 81.359599][ T4386] do_syscall_64+0x4c/0xa0 [ 81.364469][ T4386] ? clear_bhb_loop+0x30/0x80 [ 81.369425][ T4386] ? clear_bhb_loop+0x30/0x80 [ 81.375136][ T4386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.381439][ T4386] RIP: 0033:0x7f1d66740559 [ 81.386159][ T4386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.406951][ T4386] RSP: 002b:00007f1d64997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.415817][ T4386] RAX: ffffffffffffffda RBX: 00007f1d669c6fa0 RCX: 00007f1d66740559 [ 81.424601][ T4386] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 81.433596][ T4386] RBP: 00007f1d667d7b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.442477][ T4386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.454544][ T4386] R13: 00007f1d669c7038 R14: 00007f1d669c6fa0 R15: 00007ffea2706aa8 [ 81.463748][ T4386] [ 81.635709][ T4369] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.514405][ T4420] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.25'. [ 82.610040][ T1344] cfg80211: failed to load regulatory.db [ 82.960276][ T4420] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 83.015780][ T4420] CPU: 0 PID: 4420 Comm: syz.0.25 Not tainted syzkaller #0 [ 83.023586][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.036764][ T4420] Call Trace: [ 83.040960][ T4420] [ 83.044795][ T4420] dump_stack_lvl+0x188/0x250 [ 83.050294][ T4420] ? show_regs_print_info+0x20/0x20 [ 83.056568][ T4420] ? load_image+0x410/0x410 [ 83.061637][ T4420] sysfs_warn_dup+0x8a/0xa0 [ 83.067380][ T4420] sysfs_do_create_link_sd+0xc0/0x110 [ 83.075680][ T4420] device_add+0x83b/0x1050 [ 83.080419][ T4420] wiphy_register+0x1e74/0x2c40 [ 83.086474][ T4420] ? cfg80211_event_work+0x40/0x40 [ 83.092115][ T4420] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 83.099732][ T4420] ieee80211_register_hw+0x2a03/0x3a60 [ 83.105410][ T4420] ? ieee80211_register_hw+0xa91/0x3a60 [ 83.111457][ T4420] ? ieee80211_tasklet_handler+0x20/0x20 [ 83.117889][ T4420] ? rcu_is_watching+0x11/0xa0 [ 83.122880][ T4420] ? hrtimer_init+0x10c/0x220 [ 83.128264][ T4420] mac80211_hwsim_new_radio+0x209d/0x4050 [ 83.134847][ T4420] hwsim_new_radio_nl+0xa7d/0xc50 [ 83.140844][ T4420] genl_rcv_msg+0xd0b/0xfa0 [ 83.145530][ T4420] ? genl_bind+0x370/0x370 [ 83.150348][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 83.156931][ T4420] ? lock_chain_count+0x20/0x20 [ 83.163024][ T4420] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.170014][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 83.176519][ T4420] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.182912][ T4420] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 83.191010][ T4420] ? lock_acquire+0x209/0x400 [ 83.196135][ T4420] netlink_rcv_skb+0x1e9/0x430 [ 83.201827][ T4420] ? genl_bind+0x370/0x370 [ 83.206548][ T4420] ? netlink_ack+0xb10/0xb10 [ 83.211610][ T4420] ? down_read+0x1aa/0x2e0 [ 83.216321][ T4420] genl_rcv+0x24/0x40 [ 83.220436][ T4420] netlink_unicast+0x78f/0x940 [ 83.225505][ T4420] netlink_sendmsg+0x8ba/0xbe0 [ 83.230805][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 83.236688][ T4420] ? netlink_getsockopt+0x570/0x570 [ 83.244568][ T4420] ? security_socket_sendmsg+0x6c/0xa0 [ 83.250870][ T4420] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 83.257039][ T4420] ? security_socket_sendmsg+0x7c/0xa0 [ 83.262994][ T4420] ? netlink_getsockopt+0x570/0x570 [ 83.270319][ T4420] ____sys_sendmsg+0x5be/0x8f0 [ 83.276250][ T4420] ? __sys_sendmsg_sock+0x30/0x30 [ 83.282417][ T4420] ? import_iovec+0x6f/0xa0 [ 83.288079][ T4420] ___sys_sendmsg+0x236/0x2e0 [ 83.293499][ T4420] ? __sys_sendmsg+0x290/0x290 [ 83.298577][ T4420] __se_sys_sendmsg+0x1b7/0x2a0 [ 83.304368][ T4420] ? __x64_sys_sendmsg+0x80/0x80 [ 83.310059][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 83.316568][ T4420] do_syscall_64+0x4c/0xa0 [ 83.322017][ T4420] ? clear_bhb_loop+0x30/0x80 [ 83.327275][ T4420] ? clear_bhb_loop+0x30/0x80 [ 83.332264][ T4420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.339002][ T4420] RIP: 0033:0x7f1d66740559 [ 83.344091][ T4420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.364990][ T4420] RSP: 002b:00007f1d64997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.374284][ T4420] RAX: ffffffffffffffda RBX: 00007f1d669c6fa0 RCX: 00007f1d66740559 [ 83.382292][ T4420] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 83.390931][ T4420] RBP: 00007f1d667d7b20 R08: 0000000000000000 R09: 0000000000000000 [ 83.399022][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.410305][ T4420] R13: 00007f1d669c7038 R14: 00007f1d669c6fa0 R15: 00007ffea2706aa8 [ 83.419205][ T4420] [ 83.841876][ T4433] netlink: 14 bytes leftover after parsing attributes in process `syz.3.26'. [ 83.932695][ T4433] device hsr_slave_0 left promiscuous mode [ 83.996608][ T4433] device hsr_slave_1 left promiscuous mode [ 84.305466][ T4443] netlink: 209608 bytes leftover after parsing attributes in process `syz.2.27'. [ 84.461815][ T4452] netlink: 399 bytes leftover after parsing attributes in process `syz.4.29'. [ 85.039450][ T4455] netlink: 128 bytes leftover after parsing attributes in process `syz.2.27'. [ 85.081907][ T4455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.107802][ T4470] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.33'. [ 85.181059][ T4466] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 85.202605][ T4466] device veth1_macvtap left promiscuous mode [ 85.250761][ T4472] device sit0 left promiscuous mode [ 85.303388][ T4455] syz.2.27 (4455) used greatest stack depth: 19984 bytes left [ 85.422973][ T4470] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 85.773635][ T4484] device sit0 left promiscuous mode [ 86.506905][ T4486] device sit0 entered promiscuous mode [ 87.315672][ T4514] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40'. [ 87.597605][ T4514] device hsr_slave_0 left promiscuous mode [ 87.693689][ T4514] device hsr_slave_1 left promiscuous mode [ 87.794214][ T4522] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.42'. [ 87.972739][ T4522] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 88.445261][ T4537] netlink: 209608 bytes leftover after parsing attributes in process `syz.0.45'. [ 88.629462][ T4540] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.46'. [ 88.850398][ T4543] device sit0 entered promiscuous mode [ 89.878813][ T4540] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 89.908783][ T4540] CPU: 1 PID: 4540 Comm: syz.2.46 Not tainted syzkaller #0 [ 89.916913][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.928183][ T4540] Call Trace: [ 89.932157][ T4540] [ 89.935708][ T4540] dump_stack_lvl+0x188/0x250 [ 89.941504][ T4540] ? show_regs_print_info+0x20/0x20 [ 89.947572][ T4540] ? load_image+0x410/0x410 [ 89.953105][ T4540] sysfs_warn_dup+0x8a/0xa0 [ 89.958346][ T4540] sysfs_do_create_link_sd+0xc0/0x110 [ 89.964377][ T4540] device_add+0x83b/0x1050 [ 89.969717][ T4540] wiphy_register+0x1e74/0x2c40 [ 89.975715][ T4540] ? cfg80211_event_work+0x40/0x40 [ 89.981750][ T4540] ? minstrel_ht_alloc+0x807/0x980 [ 89.988816][ T4540] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 89.995802][ T4540] ieee80211_register_hw+0x2a03/0x3a60 [ 90.003092][ T4540] ? ieee80211_register_hw+0xa91/0x3a60 [ 90.011136][ T4540] ? ieee80211_tasklet_handler+0x20/0x20 [ 90.018438][ T4540] ? rcu_is_watching+0x11/0xa0 [ 90.025033][ T4540] ? hrtimer_init+0x10c/0x220 [ 90.031187][ T4540] mac80211_hwsim_new_radio+0x209d/0x4050 [ 90.037719][ T4540] hwsim_new_radio_nl+0xa7d/0xc50 [ 90.044914][ T4540] genl_rcv_msg+0xd0b/0xfa0 [ 90.051374][ T4540] ? genl_bind+0x370/0x370 [ 90.056047][ T4540] ? mark_lock+0x94/0x320 [ 90.061488][ T4540] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.069333][ T4540] ? lock_chain_count+0x20/0x20 [ 90.075811][ T4540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 90.083068][ T4540] ? lockdep_hardirqs_on+0x94/0x140 [ 90.088757][ T4540] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 90.095341][ T4540] netlink_rcv_skb+0x1e9/0x430 [ 90.100714][ T4540] ? genl_bind+0x370/0x370 [ 90.106070][ T4540] ? netlink_ack+0xb10/0xb10 [ 90.110993][ T4540] ? down_read+0x1aa/0x2e0 [ 90.115456][ T4540] genl_rcv+0x24/0x40 [ 90.119686][ T4540] netlink_unicast+0x78f/0x940 [ 90.126263][ T4540] netlink_sendmsg+0x8ba/0xbe0 [ 90.131078][ T4540] ? lockdep_hardirqs_on+0x94/0x140 [ 90.136400][ T4540] ? netlink_getsockopt+0x570/0x570 [ 90.141717][ T4540] ? netlink_getsockopt+0x570/0x570 [ 90.147544][ T4540] ? netlink_getsockopt+0x570/0x570 [ 90.153052][ T4540] ____sys_sendmsg+0x5be/0x8f0 [ 90.157848][ T4540] ? __sys_sendmsg_sock+0x30/0x30 [ 90.163849][ T4540] ? import_iovec+0x6f/0xa0 [ 90.168460][ T4540] ___sys_sendmsg+0x236/0x2e0 [ 90.173167][ T4540] ? __sys_sendmsg+0x290/0x290 [ 90.177955][ T4540] __se_sys_sendmsg+0x1b7/0x2a0 [ 90.182889][ T4540] ? __x64_sys_sendmsg+0x80/0x80 [ 90.188039][ T4540] ? syscall_enter_from_user_mode+0x2a/0x70 [ 90.194044][ T4540] do_syscall_64+0x4c/0xa0 [ 90.198487][ T4540] ? clear_bhb_loop+0x30/0x80 [ 90.203168][ T4540] ? clear_bhb_loop+0x30/0x80 [ 90.207845][ T4540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.214383][ T4540] RIP: 0033:0x7f8cf8345559 [ 90.219406][ T4540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.240186][ T4540] RSP: 002b:00007f8cf659c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.248727][ T4540] RAX: ffffffffffffffda RBX: 00007f8cf85cbfa0 RCX: 00007f8cf8345559 [ 90.256719][ T4540] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 90.264917][ T4540] RBP: 00007f8cf83dcb20 R08: 0000000000000000 R09: 0000000000000000 [ 90.273174][ T4540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.281412][ T4540] R13: 00007f8cf85cc038 R14: 00007f8cf85cbfa0 R15: 00007ffd42615cd8 [ 90.289753][ T4540] [ 90.304719][ T4544] netlink: 'syz.1.47': attribute type 39 has an invalid length. [ 90.743502][ T4581] netlink: 140 bytes leftover after parsing attributes in process `syz.0.55'. [ 91.320077][ T4588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.57'. [ 91.356233][ T4588] device hsr_slave_0 left promiscuous mode [ 91.409000][ T4588] device hsr_slave_1 left promiscuous mode [ 91.487115][ T4594] netlink: 209608 bytes leftover after parsing attributes in process `syz.4.58'. [ 91.628614][ T4594] netlink: 128 bytes leftover after parsing attributes in process `syz.4.58'. [ 91.651557][ T4594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.704263][ T4600] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.61'. [ 91.787485][ T4600] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 91.845300][ T4600] CPU: 1 PID: 4600 Comm: syz.3.61 Not tainted syzkaller #0 [ 91.853487][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.864837][ T4600] Call Trace: [ 91.869371][ T4600] [ 91.872695][ T4600] dump_stack_lvl+0x188/0x250 [ 91.877609][ T4600] ? show_regs_print_info+0x20/0x20 [ 91.884279][ T4600] ? load_image+0x410/0x410 [ 91.889741][ T4600] sysfs_warn_dup+0x8a/0xa0 [ 91.895088][ T4600] sysfs_do_create_link_sd+0xc0/0x110 [ 91.901202][ T4600] device_add+0x83b/0x1050 [ 91.906446][ T4600] wiphy_register+0x1e74/0x2c40 [ 91.912180][ T4600] ? cfg80211_event_work+0x40/0x40 [ 91.917689][ T4600] ? minstrel_ht_alloc+0x807/0x980 [ 91.922866][ T4600] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 91.930696][ T4600] ieee80211_register_hw+0x2a03/0x3a60 [ 91.936664][ T4600] ? ieee80211_register_hw+0xa91/0x3a60 [ 91.942818][ T4600] ? ieee80211_tasklet_handler+0x20/0x20 [ 91.949292][ T4600] ? debug_init+0x20/0x1d0 [ 91.953914][ T4600] ? hrtimer_init+0x3e/0x220 [ 91.961070][ T4600] ? memset_erms+0x6/0x10 [ 91.966305][ T4600] ? hrtimer_init+0x10c/0x220 [ 91.971521][ T4600] mac80211_hwsim_new_radio+0x209d/0x4050 [ 91.977349][ T4600] hwsim_new_radio_nl+0xa7d/0xc50 [ 91.982970][ T4600] genl_rcv_msg+0xd0b/0xfa0 [ 91.987994][ T4600] ? genl_bind+0x370/0x370 [ 91.992818][ T4600] ? __dev_queue_xmit+0x1b64/0x2e50 [ 91.998546][ T4600] ? verify_lock_unused+0x140/0x140 [ 92.005627][ T4600] ? mark_lock+0x94/0x320 [ 92.012303][ T4600] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 92.020274][ T4600] ? lock_chain_count+0x20/0x20 [ 92.026878][ T4600] netlink_rcv_skb+0x1e9/0x430 [ 92.033126][ T4600] ? genl_bind+0x370/0x370 [ 92.038378][ T4600] ? netlink_ack+0xb10/0xb10 [ 92.044290][ T4600] ? down_read+0x15e/0x2e0 [ 92.051059][ T4600] ? down_read+0x1aa/0x2e0 [ 92.057115][ T4600] genl_rcv+0x24/0x40 [ 92.061410][ T4600] netlink_unicast+0x78f/0x940 [ 92.066842][ T4600] netlink_sendmsg+0x8ba/0xbe0 [ 92.071923][ T4600] ? lockdep_hardirqs_on+0x94/0x140 [ 92.077544][ T4600] ? netlink_getsockopt+0x570/0x570 [ 92.086784][ T4600] ? bpf_lsm_socket_accept+0x10/0x10 [ 92.093355][ T4600] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 92.098948][ T4600] ? security_socket_sendmsg+0x7c/0xa0 [ 92.105299][ T4600] ? netlink_getsockopt+0x570/0x570 [ 92.110887][ T4600] ____sys_sendmsg+0x5be/0x8f0 [ 92.116146][ T4600] ? __sys_sendmsg_sock+0x30/0x30 [ 92.121666][ T4600] ? import_iovec+0x6f/0xa0 [ 92.128050][ T4600] ___sys_sendmsg+0x236/0x2e0 [ 92.133473][ T4600] ? __sys_sendmsg+0x290/0x290 [ 92.139151][ T4600] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 92.147932][ T4600] __se_sys_sendmsg+0x1b7/0x2a0 [ 92.153355][ T4600] ? __x64_sys_sendmsg+0x80/0x80 [ 92.158717][ T4600] ? syscall_enter_from_user_mode+0x2a/0x70 [ 92.165899][ T4600] do_syscall_64+0x4c/0xa0 [ 92.171379][ T4600] ? clear_bhb_loop+0x30/0x80 [ 92.176586][ T4600] ? clear_bhb_loop+0x30/0x80 [ 92.181473][ T4600] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.187923][ T4600] RIP: 0033:0x7fb087fec559 [ 92.193063][ T4600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.217843][ T4600] RSP: 002b:00007fb086243028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.230876][ T4600] RAX: ffffffffffffffda RBX: 00007fb088272fa0 RCX: 00007fb087fec559 [ 92.240721][ T4600] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 92.251898][ T4600] RBP: 00007fb088083b20 R08: 0000000000000000 R09: 0000000000000000 [ 92.261184][ T4600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.271934][ T4600] R13: 00007fb088273038 R14: 00007fb088272fa0 R15: 00007ffc55cbf718 [ 92.282160][ T4600] [ 94.320620][ T4669] device sit0 left promiscuous mode [ 95.100890][ T4675] device sit0 entered promiscuous mode [ 95.213142][ T4680] netlink: 'syz.2.81': attribute type 39 has an invalid length. [ 96.054923][ T4709] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 96.081461][ T4709] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.88'. [ 96.553635][ T4731] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.98'. [ 96.597603][ T4731] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 96.831251][ T4739] netlink: 'syz.3.101': attribute type 3 has an invalid length. [ 96.856422][ T4739] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 96.912286][ T4739] netlink: 128 bytes leftover after parsing attributes in process `syz.3.101'. [ 97.565577][ T4770] device sit0 left promiscuous mode [ 98.118222][ T4776] device sit0 entered promiscuous mode [ 98.290913][ T4781] netlink: 'syz.0.110': attribute type 39 has an invalid length. [ 99.404870][ T4802] netlink: 'syz.4.120': attribute type 3 has an invalid length. [ 99.439896][ T4802] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 99.643488][ T4814] netlink: 'syz.3.124': attribute type 4 has an invalid length. [ 99.663990][ T4814] netlink: 128 bytes leftover after parsing attributes in process `syz.3.124'. [ 100.224945][ T4831] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 100.275243][ T4831] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.132'. [ 100.667401][ T4844] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 100.750834][ T4863] Zero length message leads to an empty skb [ 101.414535][ T4844] device veth0_vlan left promiscuous mode [ 101.431990][ T4844] device veth0_vlan entered promiscuous mode [ 101.457298][ T4844] team0: Device veth0_vlan failed to register rx_handler [ 101.549133][ T4844] syz.3.134 (4844) used greatest stack depth: 19328 bytes left [ 101.741339][ T4886] tc_dump_action: action bad kind [ 101.798598][ T4885] device sit0 left promiscuous mode [ 101.960837][ T4885] device sit0 entered promiscuous mode [ 102.267056][ T4893] netlink: 'syz.3.143': attribute type 39 has an invalid length. [ 103.743956][ T4943] device sit0 left promiscuous mode [ 106.354500][ T5066] device sit0 entered promiscuous mode [ 106.964001][ T5079] netlink: 'syz.4.179': attribute type 39 has an invalid length. [ 109.019379][ T5158] netlink: 'syz.1.197': attribute type 21 has an invalid length. [ 110.064549][ T5188] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.202'. [ 110.306729][ T5188] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 110.323221][ T5188] CPU: 0 PID: 5188 Comm: syz.4.202 Not tainted syzkaller #0 [ 110.331098][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.342011][ T5188] Call Trace: [ 110.345608][ T5188] [ 110.349962][ T5188] dump_stack_lvl+0x188/0x250 [ 110.356253][ T5188] ? show_regs_print_info+0x20/0x20 [ 110.364199][ T5188] ? load_image+0x410/0x410 [ 110.371129][ T5188] sysfs_warn_dup+0x8a/0xa0 [ 110.379280][ T5188] sysfs_do_create_link_sd+0xc0/0x110 [ 110.386473][ T5188] device_add+0x83b/0x1050 [ 110.391746][ T5188] wiphy_register+0x1e74/0x2c40 [ 110.397848][ T5188] ? cfg80211_event_work+0x40/0x40 [ 110.406123][ T5188] ? minstrel_ht_alloc+0x807/0x980 [ 110.411824][ T5188] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 110.419185][ T5188] ieee80211_register_hw+0x2a03/0x3a60 [ 110.426398][ T5188] ? ieee80211_register_hw+0xa91/0x3a60 [ 110.433110][ T5188] ? ieee80211_tasklet_handler+0x20/0x20 [ 110.440721][ T5188] ? rcu_is_watching+0x11/0xa0 [ 110.446322][ T5188] ? hrtimer_init+0x10c/0x220 [ 110.452656][ T5188] mac80211_hwsim_new_radio+0x209d/0x4050 [ 110.460678][ T5188] hwsim_new_radio_nl+0xa7d/0xc50 [ 110.467299][ T5188] genl_rcv_msg+0xd0b/0xfa0 [ 110.473707][ T5188] ? genl_bind+0x370/0x370 [ 110.478800][ T5188] ? __dev_queue_xmit+0x1b64/0x2e50 [ 110.486041][ T5188] ? verify_lock_unused+0x140/0x140 [ 110.491979][ T5188] ? perf_trace_lock_acquire+0xed/0x3f0 [ 110.498909][ T5188] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 110.507255][ T5188] ? dev_queue_xmit+0x20/0x20 [ 110.512271][ T5188] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 110.519105][ T5188] netlink_rcv_skb+0x1e9/0x430 [ 110.524763][ T5188] ? genl_bind+0x370/0x370 [ 110.531854][ T5188] ? netlink_ack+0xb10/0xb10 [ 110.537014][ T5188] ? down_read+0x1aa/0x2e0 [ 110.542487][ T5188] genl_rcv+0x24/0x40 [ 110.547210][ T5188] netlink_unicast+0x78f/0x940 [ 110.553503][ T5188] netlink_sendmsg+0x8ba/0xbe0 [ 110.559345][ T5188] ? netlink_getsockopt+0x570/0x570 [ 110.566816][ T5188] ? aa_sock_msg_perm+0x94/0x150 [ 110.572988][ T5188] ? apparmor_socket_sendmsg+0x88/0x230 [ 110.579775][ T5188] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 110.586816][ T5188] ? security_socket_sendmsg+0x7c/0xa0 [ 110.594876][ T5188] ? netlink_getsockopt+0x570/0x570 [ 110.602722][ T5188] ____sys_sendmsg+0x5be/0x8f0 [ 110.608362][ T5188] ? __sys_sendmsg_sock+0x30/0x30 [ 110.614464][ T5188] ? import_iovec+0x6f/0xa0 [ 110.619214][ T5188] ___sys_sendmsg+0x236/0x2e0 [ 110.624507][ T5188] ? __sys_sendmsg+0x290/0x290 [ 110.629637][ T5188] __se_sys_sendmsg+0x1b7/0x2a0 [ 110.634941][ T5188] ? __x64_sys_sendmsg+0x80/0x80 [ 110.641074][ T5188] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.647409][ T5188] ? lockdep_hardirqs_on+0x94/0x140 [ 110.653189][ T5188] do_syscall_64+0x4c/0xa0 [ 110.658234][ T5188] ? clear_bhb_loop+0x30/0x80 [ 110.665121][ T5188] ? clear_bhb_loop+0x30/0x80 [ 110.671235][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.678325][ T5188] RIP: 0033:0x7f8773d24559 [ 110.683201][ T5188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.710785][ T5188] RSP: 002b:00007f8771f7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.720914][ T5188] RAX: ffffffffffffffda RBX: 00007f8773faafa0 RCX: 00007f8773d24559 [ 110.730071][ T5188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 110.738424][ T5188] RBP: 00007f8773dbbb20 R08: 0000000000000000 R09: 0000000000000000 [ 110.748737][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.757265][ T5188] R13: 00007f8773fab038 R14: 00007f8773faafa0 R15: 00007ffc763f6ef8 [ 110.766835][ T5188] [ 111.692661][ T5215] netlink: 14 bytes leftover after parsing attributes in process `syz.4.212'. [ 112.025862][ T5215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.091811][ T5215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.093972][ T5214] netlink: 'syz.4.212': attribute type 3 has an invalid length. [ 112.117183][ T5214] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.212'. [ 112.160187][ T5215] bond0 (unregistering): Released all slaves [ 112.241636][ T5218] netlink: 14 bytes leftover after parsing attributes in process `syz.4.212'. [ 112.558711][ T5229] netlink: 'syz.1.216': attribute type 21 has an invalid length. [ 112.652747][ T5239] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.726929][ T5242] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.221'. [ 112.827769][ T5244] netlink: 'syz.0.220': attribute type 20 has an invalid length. [ 113.003641][ T5242] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 113.029587][ T5242] CPU: 1 PID: 5242 Comm: syz.4.221 Not tainted syzkaller #0 [ 113.039300][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.052558][ T5242] Call Trace: [ 113.056582][ T5242] [ 113.060801][ T5242] dump_stack_lvl+0x188/0x250 [ 113.067386][ T5242] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.075562][ T5242] ? show_regs_print_info+0x20/0x20 [ 113.084507][ T5242] ? load_image+0x410/0x410 [ 113.091149][ T5242] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.098918][ T5242] ? sysfs_warn_dup+0x61/0xa0 [ 113.105747][ T5242] sysfs_warn_dup+0x8a/0xa0 [ 113.112022][ T5242] sysfs_do_create_link_sd+0xc0/0x110 [ 113.119894][ T5242] device_add+0x83b/0x1050 [ 113.125296][ T5242] wiphy_register+0x1e74/0x2c40 [ 113.131117][ T5242] ? cfg80211_event_work+0x40/0x40 [ 113.137776][ T5242] ? ieee80211_register_hw+0x2891/0x3a60 [ 113.144943][ T5242] ? ieee80211_register_hw+0x2729/0x3a60 [ 113.151744][ T5242] ? kasan_check_range+0x8a/0x290 [ 113.157390][ T5242] ieee80211_register_hw+0x2a03/0x3a60 [ 113.164402][ T5242] ? ieee80211_register_hw+0xa91/0x3a60 [ 113.171422][ T5242] ? ieee80211_tasklet_handler+0x20/0x20 [ 113.177503][ T5242] ? hrtimer_init+0xbe/0x220 [ 113.182365][ T5242] ? hrtimer_init+0x10c/0x220 [ 113.188298][ T5242] mac80211_hwsim_new_radio+0x209d/0x4050 [ 113.195849][ T5242] hwsim_new_radio_nl+0xa7d/0xc50 [ 113.202794][ T5242] genl_rcv_msg+0xd0b/0xfa0 [ 113.208069][ T5242] ? genl_bind+0x370/0x370 [ 113.212820][ T5242] ? mark_lock+0x94/0x320 [ 113.218172][ T5242] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.226640][ T5242] ? lock_chain_count+0x20/0x20 [ 113.234076][ T5242] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.243316][ T5242] ? lockdep_hardirqs_on+0x94/0x140 [ 113.250327][ T5242] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 113.258399][ T5242] netlink_rcv_skb+0x1e9/0x430 [ 113.264232][ T5242] ? genl_bind+0x370/0x370 [ 113.269400][ T5242] ? netlink_ack+0xb10/0xb10 [ 113.274511][ T5242] ? down_read+0x1aa/0x2e0 [ 113.279600][ T5242] genl_rcv+0x24/0x40 [ 113.284061][ T5242] netlink_unicast+0x78f/0x940 [ 113.289752][ T5242] netlink_sendmsg+0x8ba/0xbe0 [ 113.296716][ T5242] ? netlink_getsockopt+0x570/0x570 [ 113.303303][ T5242] ? aa_sock_msg_perm+0x94/0x150 [ 113.310318][ T5242] ? apparmor_socket_sendmsg+0x88/0x230 [ 113.317923][ T5242] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 113.324927][ T5242] ? security_socket_sendmsg+0x7c/0xa0 [ 113.332218][ T5242] ? netlink_getsockopt+0x570/0x570 [ 113.338193][ T5242] ____sys_sendmsg+0x5be/0x8f0 [ 113.343866][ T5242] ? __sys_sendmsg_sock+0x30/0x30 [ 113.350879][ T5242] ? import_iovec+0x6f/0xa0 [ 113.356870][ T5242] ___sys_sendmsg+0x236/0x2e0 [ 113.363166][ T5242] ? __sys_sendmsg+0x290/0x290 [ 113.368665][ T5242] ? trace_event_raw_event_lock+0x250/0x250 [ 113.375974][ T5242] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 113.383300][ T5242] __se_sys_sendmsg+0x1b7/0x2a0 [ 113.389254][ T5242] ? __x64_sys_sendmsg+0x80/0x80 [ 113.395286][ T5242] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 113.402783][ T5242] ? lockdep_hardirqs_on+0x94/0x140 [ 113.408729][ T5242] do_syscall_64+0x4c/0xa0 [ 113.413484][ T5242] ? clear_bhb_loop+0x30/0x80 [ 113.418927][ T5242] ? clear_bhb_loop+0x30/0x80 [ 113.426571][ T5242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.433836][ T5242] RIP: 0033:0x7f8773d24559 [ 113.438493][ T5242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.462773][ T5242] RSP: 002b:00007f8771f7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.472785][ T5242] RAX: ffffffffffffffda RBX: 00007f8773faafa0 RCX: 00007f8773d24559 [ 113.483383][ T5242] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 113.495177][ T5242] RBP: 00007f8773dbbb20 R08: 0000000000000000 R09: 0000000000000000 [ 113.505959][ T5242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.515580][ T5242] R13: 00007f8773fab038 R14: 00007f8773faafa0 R15: 00007ffc763f6ef8 [ 113.524882][ T5242] [ 113.555630][ T5240] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.713393][ T5261] netlink: 'syz.4.227': attribute type 10 has an invalid length. [ 114.258672][ T5272] netlink: 72 bytes leftover after parsing attributes in process `syz.0.231'. [ 115.612312][ T5282] netlink: 'syz.2.233': attribute type 39 has an invalid length. [ 115.690193][ T5271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.197406][ T5308] netlink: 'syz.3.239': attribute type 22 has an invalid length. [ 116.215181][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 116.977131][ T5331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.064219][ T5322] delete_channel: no stack [ 117.481414][ T5345] netlink: 149380 bytes leftover after parsing attributes in process `syz.2.252'. [ 117.889417][ T5368] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.258'. [ 118.163412][ T5361] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.385200][ T5371] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.259'. [ 118.433850][ T5379] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.262'. [ 118.593668][ T5383] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 119.188205][ T5383] team0: Port device geneve1 added [ 119.700991][ T5405] bridge0: port 3(batadv0) entered blocking state [ 119.750543][ T5405] bridge0: port 3(batadv0) entered disabled state [ 119.928038][ T5405] device batadv0 entered promiscuous mode [ 119.941052][ T469] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 119.951396][ T469] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 119.960013][ T5408] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.969280][ T5405] bridge0: port 3(batadv0) entered blocking state [ 119.987789][ T5405] bridge0: port 3(batadv0) entered forwarding state [ 120.213229][ T5415] device lo entered promiscuous mode [ 120.250781][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.476885][ T5427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.273'. [ 120.787219][ T5434] netlink: 'syz.0.276': attribute type 7 has an invalid length. [ 121.366497][ T5434] netlink: 'syz.0.276': attribute type 6 has an invalid length. [ 121.803015][ T5444] netlink: 144 bytes leftover after parsing attributes in process `syz.0.279'. [ 122.258027][ T5466] netlink: 'syz.4.286': attribute type 2 has an invalid length. [ 122.365270][ T5466] netlink: 'syz.4.286': attribute type 8 has an invalid length. [ 122.376181][ T5466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.286'. [ 122.977469][ T5472] netlink: 'syz.0.288': attribute type 21 has an invalid length. [ 125.421774][ T5536] netlink: 'syz.2.306': attribute type 21 has an invalid length. [ 125.668841][ T5546] netlink: 'syz.0.310': attribute type 9 has an invalid length. [ 125.718549][ T5546] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.310'. [ 125.953484][ T5553] netlink: 'syz.0.310': attribute type 3 has an invalid length. [ 126.016798][ T5561] netlink: 'syz.2.314': attribute type 3 has an invalid length. [ 126.037610][ T5561] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.314'. [ 126.046657][ T5553] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.310'. [ 126.089883][ T5552] netlink: 149380 bytes leftover after parsing attributes in process `syz.4.311'. [ 126.177554][ T5552] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 126.465920][ T5572] netlink: 14 bytes leftover after parsing attributes in process `syz.2.316'. [ 126.822412][ T5572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.009559][ T5572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.079373][ T5572] bond0 (unregistering): Released all slaves [ 127.117201][ T5569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.316'. [ 127.297272][ T5569] team0: Port device team_slave_0 removed [ 127.372555][ T5590] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.323'. [ 127.501730][ T5590] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 127.545224][ T5590] CPU: 1 PID: 5590 Comm: syz.4.323 Not tainted syzkaller #0 [ 127.552944][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.563672][ T5590] Call Trace: [ 127.567172][ T5590] [ 127.571164][ T5590] dump_stack_lvl+0x188/0x250 [ 127.576084][ T5590] ? show_regs_print_info+0x20/0x20 [ 127.581602][ T5590] ? load_image+0x410/0x410 [ 127.586871][ T5590] ? _printk+0x1/0x130 [ 127.591879][ T5590] sysfs_warn_dup+0x8a/0xa0 [ 127.596945][ T5590] sysfs_do_create_link_sd+0xc0/0x110 [ 127.604495][ T5590] device_add+0x83b/0x1050 [ 127.609638][ T5590] wiphy_register+0x1e74/0x2c40 [ 127.616069][ T5590] ? cfg80211_event_work+0x40/0x40 [ 127.621684][ T5590] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.628126][ T5590] ieee80211_register_hw+0x2a03/0x3a60 [ 127.633912][ T5590] ? ieee80211_register_hw+0xa91/0x3a60 [ 127.640193][ T5590] ? ieee80211_tasklet_handler+0x20/0x20 [ 127.648002][ T5590] ? rcu_is_watching+0x11/0xa0 [ 127.653102][ T5590] ? hrtimer_init+0x10c/0x220 [ 127.658919][ T5590] mac80211_hwsim_new_radio+0x209d/0x4050 [ 127.665094][ T5590] hwsim_new_radio_nl+0xa7d/0xc50 [ 127.671767][ T5590] genl_rcv_msg+0xd0b/0xfa0 [ 127.676700][ T5590] ? genl_bind+0x370/0x370 [ 127.681253][ T5590] ? verify_lock_unused+0x140/0x140 [ 127.687469][ T5590] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.694195][ T5590] ? lock_chain_count+0x20/0x20 [ 127.699629][ T5590] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.707206][ T5590] ? lockdep_hardirqs_on+0x94/0x140 [ 127.712807][ T5590] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 127.720174][ T5590] netlink_rcv_skb+0x1e9/0x430 [ 127.728196][ T5590] ? genl_bind+0x370/0x370 [ 127.733917][ T5590] ? netlink_ack+0xb10/0xb10 [ 127.739965][ T5590] ? down_read+0x1aa/0x2e0 [ 127.744972][ T5590] genl_rcv+0x24/0x40 [ 127.749448][ T5590] netlink_unicast+0x78f/0x940 [ 127.755126][ T5590] netlink_sendmsg+0x8ba/0xbe0 [ 127.761403][ T5590] ? netlink_getsockopt+0x570/0x570 [ 127.770734][ T5590] ? audit_tree_destroy_watch+0x20/0x20 [ 127.778681][ T5590] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 127.786488][ T5590] ? security_socket_sendmsg+0x7c/0xa0 [ 127.792875][ T5590] ? netlink_getsockopt+0x570/0x570 [ 127.798461][ T5590] ____sys_sendmsg+0x5be/0x8f0 [ 127.803928][ T5590] ? __sys_sendmsg_sock+0x30/0x30 [ 127.810126][ T5590] ? import_iovec+0x6f/0xa0 [ 127.815050][ T5590] ___sys_sendmsg+0x236/0x2e0 [ 127.820349][ T5590] ? __sys_sendmsg+0x290/0x290 [ 127.826534][ T5590] __se_sys_sendmsg+0x1b7/0x2a0 [ 127.832940][ T5590] ? __x64_sys_sendmsg+0x80/0x80 [ 127.839201][ T5590] ? syscall_enter_from_user_mode+0x2a/0x70 [ 127.846500][ T5590] do_syscall_64+0x4c/0xa0 [ 127.852199][ T5590] ? clear_bhb_loop+0x30/0x80 [ 127.857553][ T5590] ? clear_bhb_loop+0x30/0x80 [ 127.862929][ T5590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.869231][ T5590] RIP: 0033:0x7f8773d24559 [ 127.873940][ T5590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.896476][ T5590] RSP: 002b:00007f8771f7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.905861][ T5590] RAX: ffffffffffffffda RBX: 00007f8773faafa0 RCX: 00007f8773d24559 [ 127.914180][ T5590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 127.922620][ T5590] RBP: 00007f8773dbbb20 R08: 0000000000000000 R09: 0000000000000000 [ 127.932109][ T5590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.940654][ T5590] R13: 00007f8773fab038 R14: 00007f8773faafa0 R15: 00007ffc763f6ef8 [ 127.949025][ T5590] [ 129.414687][ T5619] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 133.007701][ T5619] team0: Port device geneve1 added [ 133.343289][ T5675] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.344'. [ 133.436085][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.442984][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.618707][ T5675] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 133.668380][ T5675] CPU: 0 PID: 5675 Comm: syz.2.344 Not tainted syzkaller #0 [ 133.675913][ T5675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.686370][ T5675] Call Trace: [ 133.689762][ T5675] [ 133.692723][ T5675] dump_stack_lvl+0x188/0x250 [ 133.697695][ T5675] ? show_regs_print_info+0x20/0x20 [ 133.703113][ T5675] ? load_image+0x410/0x410 [ 133.708021][ T5675] sysfs_warn_dup+0x8a/0xa0 [ 133.712576][ T5675] sysfs_do_create_link_sd+0xc0/0x110 [ 133.718319][ T5675] device_add+0x83b/0x1050 [ 133.722889][ T5675] wiphy_register+0x1e74/0x2c40 [ 133.727997][ T5675] ? cfg80211_event_work+0x40/0x40 [ 133.733424][ T5675] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 133.739827][ T5675] ieee80211_register_hw+0x2a03/0x3a60 [ 133.745417][ T5675] ? ieee80211_register_hw+0xa91/0x3a60 [ 133.751125][ T5675] ? ieee80211_tasklet_handler+0x20/0x20 [ 133.756876][ T5675] ? rcu_is_watching+0x11/0xa0 [ 133.761763][ T5675] ? hrtimer_init+0x10c/0x220 [ 133.766640][ T5675] mac80211_hwsim_new_radio+0x209d/0x4050 [ 133.772588][ T5675] hwsim_new_radio_nl+0xa7d/0xc50 [ 133.778128][ T5675] genl_rcv_msg+0xd0b/0xfa0 [ 133.783210][ T5675] ? genl_bind+0x370/0x370 [ 133.787957][ T5675] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 133.795542][ T5675] ? lock_chain_count+0x20/0x20 [ 133.800834][ T5675] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 133.807290][ T5675] ? lockdep_hardirqs_on+0x94/0x140 [ 133.813062][ T5675] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 133.819867][ T5675] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 133.826657][ T5675] ? lock_acquire+0x209/0x400 [ 133.831607][ T5675] netlink_rcv_skb+0x1e9/0x430 [ 133.837061][ T5675] ? genl_bind+0x370/0x370 [ 133.843168][ T5675] ? netlink_ack+0xb10/0xb10 [ 133.848644][ T5675] ? down_read+0x1aa/0x2e0 [ 133.854161][ T5675] genl_rcv+0x24/0x40 [ 133.858535][ T5675] netlink_unicast+0x78f/0x940 [ 133.864548][ T5675] netlink_sendmsg+0x8ba/0xbe0 [ 133.871003][ T5675] ? lockdep_hardirqs_on+0x94/0x140 [ 133.877919][ T5675] ? netlink_getsockopt+0x570/0x570 [ 133.884052][ T5675] ? aa_sock_msg_perm+0x94/0x150 [ 133.889258][ T5675] ? apparmor_socket_sendmsg+0x88/0x230 [ 133.895566][ T5675] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 133.901423][ T5675] ? security_socket_sendmsg+0x7c/0xa0 [ 133.906984][ T5675] ? netlink_getsockopt+0x570/0x570 [ 133.912822][ T5675] ____sys_sendmsg+0x5be/0x8f0 [ 133.918038][ T5675] ? __sys_sendmsg_sock+0x30/0x30 [ 133.923389][ T5675] ? import_iovec+0x6f/0xa0 [ 133.928880][ T5675] ___sys_sendmsg+0x236/0x2e0 [ 133.934218][ T5675] ? __sys_sendmsg+0x290/0x290 [ 133.940507][ T5675] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 133.947692][ T5675] __se_sys_sendmsg+0x1b7/0x2a0 [ 133.952783][ T5675] ? __x64_sys_sendmsg+0x80/0x80 [ 133.958869][ T5675] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 133.965463][ T5675] ? lockdep_hardirqs_on+0x94/0x140 [ 133.971064][ T5675] do_syscall_64+0x4c/0xa0 [ 133.976215][ T5675] ? clear_bhb_loop+0x30/0x80 [ 133.981120][ T5675] ? clear_bhb_loop+0x30/0x80 [ 133.986114][ T5675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.992316][ T5675] RIP: 0033:0x7f8cf8345559 [ 133.997090][ T5675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.017265][ T5675] RSP: 002b:00007f8cf659c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.026424][ T5675] RAX: ffffffffffffffda RBX: 00007f8cf85cbfa0 RCX: 00007f8cf8345559 [ 134.034944][ T5675] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 134.044170][ T5675] RBP: 00007f8cf83dcb20 R08: 0000000000000000 R09: 0000000000000000 [ 134.052640][ T5675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.061086][ T5675] R13: 00007f8cf85cc038 R14: 00007f8cf85cbfa0 R15: 00007ffd42615cd8 [ 134.069467][ T5675] [ 134.536875][ T5710] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 134.581225][ T5710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.351'. [ 134.608046][ T5710] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 134.656983][ T5710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.792759][ T5718] netlink: 'syz.4.354': attribute type 3 has an invalid length. [ 134.823369][ T5718] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.354'. [ 135.397545][ T5744] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.360'. [ 135.411790][ T5746] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 135.447147][ T5746] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.361'. [ 135.823377][ T5744] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 135.849448][ T5744] CPU: 0 PID: 5744 Comm: syz.1.360 Not tainted syzkaller #0 [ 135.857077][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.867686][ T5744] Call Trace: [ 135.871796][ T5744] [ 135.875022][ T5744] dump_stack_lvl+0x188/0x250 [ 135.879969][ T5744] ? show_regs_print_info+0x20/0x20 [ 135.885304][ T5744] ? load_image+0x410/0x410 [ 135.889888][ T5744] sysfs_warn_dup+0x8a/0xa0 [ 135.894995][ T5744] sysfs_do_create_link_sd+0xc0/0x110 [ 135.900676][ T5744] device_add+0x83b/0x1050 [ 135.905358][ T5744] wiphy_register+0x1e74/0x2c40 [ 135.910371][ T5744] ? cfg80211_event_work+0x40/0x40 [ 135.915513][ T5744] ? minstrel_ht_alloc+0x807/0x980 [ 135.920769][ T5744] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 135.926860][ T5744] ieee80211_register_hw+0x2a03/0x3a60 [ 135.932439][ T5744] ? ieee80211_register_hw+0xa91/0x3a60 [ 135.938220][ T5744] ? ieee80211_tasklet_handler+0x20/0x20 [ 135.944139][ T5744] ? rcu_is_watching+0x11/0xa0 [ 135.948937][ T5744] ? hrtimer_init+0x10c/0x220 [ 135.953811][ T5744] mac80211_hwsim_new_radio+0x209d/0x4050 [ 135.959663][ T5744] hwsim_new_radio_nl+0xa7d/0xc50 [ 135.964741][ T5744] genl_rcv_msg+0xd0b/0xfa0 [ 135.969362][ T5744] ? genl_bind+0x370/0x370 [ 135.973805][ T5744] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.979916][ T5744] ? lock_chain_count+0x20/0x20 [ 135.985122][ T5744] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 135.991666][ T5744] ? lockdep_hardirqs_on+0x94/0x140 [ 135.996896][ T5744] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 136.003801][ T5744] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 136.010818][ T5744] ? lock_acquire+0x209/0x400 [ 136.016037][ T5744] netlink_rcv_skb+0x1e9/0x430 [ 136.021030][ T5744] ? genl_bind+0x370/0x370 [ 136.025725][ T5744] ? netlink_ack+0xb10/0xb10 [ 136.031527][ T5744] ? down_read+0x1aa/0x2e0 [ 136.036435][ T5744] genl_rcv+0x24/0x40 [ 136.040538][ T5744] netlink_unicast+0x78f/0x940 [ 136.045505][ T5744] netlink_sendmsg+0x8ba/0xbe0 [ 136.050299][ T5744] ? netlink_getsockopt+0x570/0x570 [ 136.055629][ T5744] ? audit_tree_destroy_watch+0x20/0x20 [ 136.061706][ T5744] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 136.067438][ T5744] ? security_socket_sendmsg+0x7c/0xa0 [ 136.073211][ T5744] ? netlink_getsockopt+0x570/0x570 [ 136.079008][ T5744] ____sys_sendmsg+0x5be/0x8f0 [ 136.084162][ T5744] ? __sys_sendmsg_sock+0x30/0x30 [ 136.089382][ T5744] ? import_iovec+0x6f/0xa0 [ 136.094343][ T5744] ___sys_sendmsg+0x236/0x2e0 [ 136.099440][ T5744] ? __sys_sendmsg+0x290/0x290 [ 136.104461][ T5744] ? trace_event_raw_event_lock+0x250/0x250 [ 136.110784][ T5744] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 136.117673][ T5744] __se_sys_sendmsg+0x1b7/0x2a0 [ 136.122752][ T5744] ? __x64_sys_sendmsg+0x80/0x80 [ 136.128002][ T5744] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.135255][ T5744] ? lockdep_hardirqs_on+0x94/0x140 [ 136.140865][ T5744] do_syscall_64+0x4c/0xa0 [ 136.145504][ T5744] ? clear_bhb_loop+0x30/0x80 [ 136.150302][ T5744] ? clear_bhb_loop+0x30/0x80 [ 136.155096][ T5744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.161018][ T5744] RIP: 0033:0x7f3b868fc559 [ 136.165839][ T5744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.186406][ T5744] RSP: 002b:00007f3b84b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.195288][ T5744] RAX: ffffffffffffffda RBX: 00007f3b86b82fa0 RCX: 00007f3b868fc559 [ 136.203378][ T5744] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 136.211467][ T5744] RBP: 00007f3b86993b20 R08: 0000000000000000 R09: 0000000000000000 [ 136.219922][ T5744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.228585][ T5744] R13: 00007f3b86b83038 R14: 00007f3b86b82fa0 R15: 00007ffccab3b898 [ 136.236995][ T5744] [ 136.291804][ T5755] syz.2.362 uses obsolete (PF_INET,SOCK_PACKET) [ 136.667183][ T5763] device sit0 left promiscuous mode [ 137.184215][ T5777] device sit0 entered promiscuous mode [ 137.326130][ T5780] netlink: 'syz.1.365': attribute type 39 has an invalid length. [ 137.650382][ T5801] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.375'. [ 138.337819][ T5801] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 138.346912][ T5801] CPU: 0 PID: 5801 Comm: syz.1.375 Not tainted syzkaller #0 [ 138.354733][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.365255][ T5801] Call Trace: [ 138.368565][ T5801] [ 138.371694][ T5801] dump_stack_lvl+0x188/0x250 [ 138.376586][ T5801] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.382892][ T5801] ? show_regs_print_info+0x20/0x20 [ 138.388129][ T5801] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.394624][ T5801] ? dump_stack+0x5/0x20 [ 138.398929][ T5801] sysfs_warn_dup+0x8a/0xa0 [ 138.403553][ T5801] sysfs_do_create_link_sd+0xc0/0x110 [ 138.409214][ T5801] device_add+0x83b/0x1050 [ 138.413766][ T5801] wiphy_register+0x1e74/0x2c40 [ 138.418673][ T5801] ? cfg80211_event_work+0x40/0x40 [ 138.423837][ T5801] ? _dev_printk+0x1/0x180 [ 138.428377][ T5801] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 138.436090][ T5801] ieee80211_register_hw+0x2a03/0x3a60 [ 138.442038][ T5801] ? ieee80211_register_hw+0xa91/0x3a60 [ 138.447721][ T5801] ? ieee80211_tasklet_handler+0x20/0x20 [ 138.453486][ T5801] ? rcu_is_watching+0x11/0xa0 [ 138.458278][ T5801] ? hrtimer_init+0x10c/0x220 [ 138.463274][ T5801] mac80211_hwsim_new_radio+0x209d/0x4050 [ 138.469174][ T5801] hwsim_new_radio_nl+0xa7d/0xc50 [ 138.474627][ T5801] genl_rcv_msg+0xd0b/0xfa0 [ 138.479506][ T5801] ? genl_bind+0x370/0x370 [ 138.483973][ T5801] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.490440][ T5801] ? lock_chain_count+0x20/0x20 [ 138.495877][ T5801] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.502416][ T5801] ? lockdep_hardirqs_on+0x94/0x140 [ 138.508678][ T5801] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.514860][ T5801] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 138.521268][ T5801] ? lock_acquire+0x209/0x400 [ 138.525972][ T5801] netlink_rcv_skb+0x1e9/0x430 [ 138.530846][ T5801] ? genl_bind+0x370/0x370 [ 138.535335][ T5801] ? netlink_ack+0xb10/0xb10 [ 138.540046][ T5801] ? down_read+0x1aa/0x2e0 [ 138.544480][ T5801] genl_rcv+0x24/0x40 [ 138.548655][ T5801] netlink_unicast+0x78f/0x940 [ 138.553719][ T5801] netlink_sendmsg+0x8ba/0xbe0 [ 138.558589][ T5801] ? lockdep_hardirqs_on+0x94/0x140 [ 138.564528][ T5801] ? netlink_getsockopt+0x570/0x570 [ 138.570140][ T5801] ? security_socket_sendmsg+0x56/0xa0 [ 138.576142][ T5801] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 138.581675][ T5801] ? security_socket_sendmsg+0x7c/0xa0 [ 138.587785][ T5801] ? netlink_getsockopt+0x570/0x570 [ 138.593094][ T5801] ____sys_sendmsg+0x5be/0x8f0 [ 138.597895][ T5801] ? __sys_sendmsg_sock+0x30/0x30 [ 138.603555][ T5801] ? import_iovec+0x6f/0xa0 [ 138.608841][ T5801] ___sys_sendmsg+0x236/0x2e0 [ 138.613737][ T5801] ? __sys_sendmsg+0x290/0x290 [ 138.618673][ T5801] __se_sys_sendmsg+0x1b7/0x2a0 [ 138.623672][ T5801] ? __x64_sys_sendmsg+0x80/0x80 [ 138.628862][ T5801] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.634890][ T5801] ? lockdep_hardirqs_on+0x94/0x140 [ 138.640529][ T5801] do_syscall_64+0x4c/0xa0 [ 138.645101][ T5801] ? clear_bhb_loop+0x30/0x80 [ 138.649815][ T5801] ? clear_bhb_loop+0x30/0x80 [ 138.654534][ T5801] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.660544][ T5801] RIP: 0033:0x7f3b868fc559 [ 138.665149][ T5801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.686279][ T5801] RSP: 002b:00007f3b84b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.695833][ T5801] RAX: ffffffffffffffda RBX: 00007f3b86b82fa0 RCX: 00007f3b868fc559 [ 138.705027][ T5801] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 138.715474][ T5801] RBP: 00007f3b86993b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.724014][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.733278][ T5801] R13: 00007f3b86b83038 R14: 00007f3b86b82fa0 R15: 00007ffccab3b898 [ 138.741665][ T5801] [ 138.989731][ T5821] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.214841][ T5818] device syzkaller0 entered promiscuous mode [ 139.573307][ T5847] device sit0 entered promiscuous mode [ 139.980308][ T5860] delete_channel: no stack [ 140.014179][ T5860] delete_channel: no stack [ 140.025958][ T5852] netlink: 'syz.0.385': attribute type 39 has an invalid length. [ 140.364651][ T5864] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.391'. [ 140.509460][ T5864] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 140.555337][ T5864] CPU: 0 PID: 5864 Comm: syz.1.391 Not tainted syzkaller #0 [ 140.562772][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.573417][ T5864] Call Trace: [ 140.576839][ T5864] [ 140.579797][ T5864] dump_stack_lvl+0x188/0x250 [ 140.585318][ T5864] ? show_regs_print_info+0x20/0x20 [ 140.591005][ T5864] ? load_image+0x410/0x410 [ 140.596054][ T5864] sysfs_warn_dup+0x8a/0xa0 [ 140.601679][ T5864] sysfs_do_create_link_sd+0xc0/0x110 [ 140.607551][ T5864] device_add+0x83b/0x1050 [ 140.612299][ T5864] wiphy_register+0x1e74/0x2c40 [ 140.617412][ T5864] ? cfg80211_event_work+0x40/0x40 [ 140.622782][ T5864] ? minstrel_ht_alloc+0x807/0x980 [ 140.628596][ T5864] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 140.635112][ T5864] ieee80211_register_hw+0x2a03/0x3a60 [ 140.640727][ T5864] ? ieee80211_register_hw+0xa91/0x3a60 [ 140.646800][ T5864] ? ieee80211_tasklet_handler+0x20/0x20 [ 140.652500][ T5864] ? rcu_is_watching+0x11/0xa0 [ 140.657613][ T5864] ? hrtimer_init+0x10c/0x220 [ 140.662731][ T5864] mac80211_hwsim_new_radio+0x209d/0x4050 [ 140.668733][ T5864] hwsim_new_radio_nl+0xa7d/0xc50 [ 140.674363][ T5864] genl_rcv_msg+0xd0b/0xfa0 [ 140.679185][ T5864] ? genl_bind+0x370/0x370 [ 140.684028][ T5864] ? mark_lock+0x94/0x320 [ 140.689249][ T5864] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.695749][ T5864] ? lock_chain_count+0x20/0x20 [ 140.701384][ T5864] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 140.708282][ T5864] ? lockdep_hardirqs_on+0x94/0x140 [ 140.714238][ T5864] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 140.720956][ T5864] netlink_rcv_skb+0x1e9/0x430 [ 140.725947][ T5864] ? genl_bind+0x370/0x370 [ 140.730405][ T5864] ? netlink_ack+0xb10/0xb10 [ 140.735499][ T5864] ? preempt_count_add+0xc2/0x190 [ 140.740576][ T5864] ? down_read+0x1aa/0x2e0 [ 140.745565][ T5864] genl_rcv+0x24/0x40 [ 140.749672][ T5864] netlink_unicast+0x78f/0x940 [ 140.754758][ T5864] netlink_sendmsg+0x8ba/0xbe0 [ 140.760065][ T5864] ? lockdep_hardirqs_on+0x94/0x140 [ 140.765721][ T5864] ? netlink_getsockopt+0x570/0x570 [ 140.770991][ T5864] ? aa_sock_msg_perm+0x94/0x150 [ 140.775998][ T5864] ? apparmor_socket_sendmsg+0x88/0x230 [ 140.781817][ T5864] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 140.787547][ T5864] ? security_socket_sendmsg+0x7c/0xa0 [ 140.793745][ T5864] ? netlink_getsockopt+0x570/0x570 [ 140.799072][ T5864] ____sys_sendmsg+0x5be/0x8f0 [ 140.803962][ T5864] ? __sys_sendmsg_sock+0x30/0x30 [ 140.809114][ T5864] ? import_iovec+0x6f/0xa0 [ 140.814376][ T5864] ___sys_sendmsg+0x236/0x2e0 [ 140.819465][ T5864] ? __sys_sendmsg+0x290/0x290 [ 140.824917][ T5864] ? trace_event_raw_event_lock+0x250/0x250 [ 140.830939][ T5864] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 140.837365][ T5864] __se_sys_sendmsg+0x1b7/0x2a0 [ 140.842548][ T5864] ? __x64_sys_sendmsg+0x80/0x80 [ 140.848148][ T5864] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.854883][ T5864] ? lockdep_hardirqs_on+0x94/0x140 [ 140.860616][ T5864] do_syscall_64+0x4c/0xa0 [ 140.865081][ T5864] ? clear_bhb_loop+0x30/0x80 [ 140.869809][ T5864] ? clear_bhb_loop+0x30/0x80 [ 140.874827][ T5864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.881300][ T5864] RIP: 0033:0x7f3b868fc559 [ 140.885754][ T5864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.906296][ T5864] RSP: 002b:00007f3b84b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.915233][ T5864] RAX: ffffffffffffffda RBX: 00007f3b86b82fa0 RCX: 00007f3b868fc559 [ 140.923328][ T5864] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 140.931613][ T5864] RBP: 00007f3b86993b20 R08: 0000000000000000 R09: 0000000000000000 [ 140.939727][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.947906][ T5864] R13: 00007f3b86b83038 R14: 00007f3b86b82fa0 R15: 00007ffccab3b898 [ 140.955935][ T5864] [ 141.981904][ T5897] device sit0 left promiscuous mode [ 142.314454][ T5894] device sit0 entered promiscuous mode [ 143.010298][ T5917] device sit0 left promiscuous mode [ 143.635230][ T5919] device sit0 entered promiscuous mode [ 143.710565][ T5913] device syzkaller0 entered promiscuous mode [ 143.722269][ T5922] netlink: 'syz.4.404': attribute type 39 has an invalid length. [ 144.082271][ T26] audit: type=1800 audit(1792716446.897:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.406" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 144.082534][ T5926] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 144.120227][ T5937] netlink: 72 bytes leftover after parsing attributes in process `syz.4.409'. [ 144.259891][ T5932] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.408'. [ 144.285788][ T5926] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 144.375464][ T5926] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 144.774719][ T5926] syz.1.406 (5926) used greatest stack depth: 17168 bytes left [ 145.805161][ T5965] device sit0 left promiscuous mode [ 145.892008][ T5932] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 145.984268][ T5932] CPU: 1 PID: 5932 Comm: syz.0.408 Not tainted syzkaller #0 [ 145.991891][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.003120][ T5932] Call Trace: [ 146.007223][ T5932] [ 146.010625][ T5932] dump_stack_lvl+0x188/0x250 [ 146.015998][ T5932] ? show_regs_print_info+0x20/0x20 [ 146.021840][ T5932] ? load_image+0x410/0x410 [ 146.026506][ T5932] sysfs_warn_dup+0x8a/0xa0 [ 146.031500][ T5932] sysfs_do_create_link_sd+0xc0/0x110 [ 146.037106][ T5932] device_add+0x83b/0x1050 [ 146.041844][ T5932] wiphy_register+0x1e74/0x2c40 [ 146.047209][ T5932] ? cfg80211_event_work+0x40/0x40 [ 146.053301][ T5932] ? minstrel_ht_alloc+0x807/0x980 [ 146.058688][ T5932] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 146.066297][ T5932] ieee80211_register_hw+0x2a03/0x3a60 [ 146.073358][ T5932] ? ieee80211_register_hw+0xa91/0x3a60 [ 146.081194][ T5932] ? ieee80211_tasklet_handler+0x20/0x20 [ 146.088064][ T5932] ? rcu_is_watching+0x11/0xa0 [ 146.093521][ T5932] ? hrtimer_init+0x10c/0x220 [ 146.099174][ T5932] mac80211_hwsim_new_radio+0x209d/0x4050 [ 146.106407][ T5932] hwsim_new_radio_nl+0xa7d/0xc50 [ 146.114250][ T5932] genl_rcv_msg+0xd0b/0xfa0 [ 146.119729][ T5932] ? genl_bind+0x370/0x370 [ 146.124744][ T5932] ? __dev_queue_xmit+0x1b64/0x2e50 [ 146.130490][ T5932] ? verify_lock_unused+0x140/0x140 [ 146.137045][ T5932] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 146.145380][ T5932] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.153538][ T5932] netlink_rcv_skb+0x1e9/0x430 [ 146.159126][ T5932] ? genl_bind+0x370/0x370 [ 146.164786][ T5932] ? netlink_ack+0xb10/0xb10 [ 146.170511][ T5932] ? genl_bind+0x370/0x370 [ 146.178059][ T5932] genl_rcv+0x24/0x40 [ 146.182451][ T5932] netlink_unicast+0x78f/0x940 [ 146.188271][ T5932] netlink_sendmsg+0x8ba/0xbe0 [ 146.193524][ T5932] ? netlink_getsockopt+0x570/0x570 [ 146.198858][ T5932] ? aa_sock_msg_perm+0x94/0x150 [ 146.204356][ T5932] ? apparmor_socket_sendmsg+0x88/0x230 [ 146.211058][ T5932] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 146.217197][ T5932] ? security_socket_sendmsg+0x7c/0xa0 [ 146.222721][ T5932] ? netlink_getsockopt+0x570/0x570 [ 146.229274][ T5932] ____sys_sendmsg+0x5be/0x8f0 [ 146.234292][ T5932] ? __sys_sendmsg_sock+0x30/0x30 [ 146.239788][ T5932] ? import_iovec+0x6f/0xa0 [ 146.244928][ T5932] ___sys_sendmsg+0x236/0x2e0 [ 146.249956][ T5932] ? __sys_sendmsg+0x290/0x290 [ 146.254790][ T5932] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 146.262293][ T5932] __se_sys_sendmsg+0x1b7/0x2a0 [ 146.267881][ T5932] ? __x64_sys_sendmsg+0x80/0x80 [ 146.273023][ T5932] ? syscall_enter_from_user_mode+0x2a/0x70 [ 146.278972][ T5932] do_syscall_64+0x4c/0xa0 [ 146.283796][ T5932] ? clear_bhb_loop+0x30/0x80 [ 146.288644][ T5932] ? clear_bhb_loop+0x30/0x80 [ 146.293813][ T5932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.299847][ T5932] RIP: 0033:0x7f1d66740559 [ 146.304413][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.324554][ T5932] RSP: 002b:00007f1d64997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.333293][ T5932] RAX: ffffffffffffffda RBX: 00007f1d669c6fa0 RCX: 00007f1d66740559 [ 146.341690][ T5932] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 146.350310][ T5932] RBP: 00007f1d667d7b20 R08: 0000000000000000 R09: 0000000000000000 [ 146.360451][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.370221][ T5932] R13: 00007f1d669c7038 R14: 00007f1d669c6fa0 R15: 00007ffea2706aa8 [ 146.380061][ T5932] [ 146.415443][ T5964] netlink: 'syz.4.418': attribute type 39 has an invalid length. [ 146.539756][ T5964] device macvlan0 entered promiscuous mode [ 146.575261][ T5967] netlink: 'syz.4.418': attribute type 2 has an invalid length. [ 146.636212][ T5971] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.419'. [ 146.647930][ T5972] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.419'. [ 146.661137][ T5973] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.419'. [ 146.888979][ T5983] netlink: 830 bytes leftover after parsing attributes in process `syz.0.423'. [ 147.467331][ T6004] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.427'. [ 147.486703][ T6005] device sit0 entered promiscuous mode [ 147.768907][ T6011] netlink: 'syz.3.430': attribute type 39 has an invalid length. [ 147.918236][ T6004] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 147.950477][ T6004] CPU: 0 PID: 6004 Comm: syz.4.427 Not tainted syzkaller #0 [ 147.958578][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.969344][ T6004] Call Trace: [ 147.972785][ T6004] [ 147.975841][ T6004] dump_stack_lvl+0x188/0x250 [ 147.981360][ T6004] ? show_regs_print_info+0x20/0x20 [ 147.986762][ T6004] ? load_image+0x410/0x410 [ 147.991687][ T6004] sysfs_warn_dup+0x8a/0xa0 [ 147.997235][ T6004] sysfs_do_create_link_sd+0xc0/0x110 [ 148.002918][ T6004] device_add+0x83b/0x1050 [ 148.007484][ T6004] wiphy_register+0x1e74/0x2c40 [ 148.012511][ T6004] ? cfg80211_event_work+0x40/0x40 [ 148.017786][ T6004] ? minstrel_ht_alloc+0x807/0x980 [ 148.023206][ T6004] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 148.029929][ T6004] ieee80211_register_hw+0x2a03/0x3a60 [ 148.035618][ T6004] ? ieee80211_register_hw+0xa91/0x3a60 [ 148.041306][ T6004] ? ieee80211_tasklet_handler+0x20/0x20 [ 148.046992][ T6004] ? rcu_is_watching+0x11/0xa0 [ 148.052056][ T6004] ? hrtimer_init+0x10c/0x220 [ 148.056887][ T6004] mac80211_hwsim_new_radio+0x209d/0x4050 [ 148.062757][ T6004] hwsim_new_radio_nl+0xa7d/0xc50 [ 148.068184][ T6004] genl_rcv_msg+0xd0b/0xfa0 [ 148.072917][ T6004] ? genl_bind+0x370/0x370 [ 148.077846][ T6004] ? __dev_queue_xmit+0x1b64/0x2e50 [ 148.083261][ T6004] ? verify_lock_unused+0x140/0x140 [ 148.088862][ T6004] ? dev_queue_xmit+0x20/0x20 [ 148.093867][ T6004] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 148.100970][ T6004] netlink_rcv_skb+0x1e9/0x430 [ 148.106031][ T6004] ? genl_bind+0x370/0x370 [ 148.110583][ T6004] ? netlink_ack+0xb10/0xb10 [ 148.115583][ T6004] ? down_read+0x1aa/0x2e0 [ 148.120271][ T6004] genl_rcv+0x24/0x40 [ 148.124387][ T6004] netlink_unicast+0x78f/0x940 [ 148.129392][ T6004] netlink_sendmsg+0x8ba/0xbe0 [ 148.134465][ T6004] ? netlink_getsockopt+0x570/0x570 [ 148.139795][ T6004] ? aa_sock_msg_perm+0x94/0x150 [ 148.144762][ T6004] ? apparmor_socket_sendmsg+0x88/0x230 [ 148.150332][ T6004] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 148.155743][ T6004] ? security_socket_sendmsg+0x7c/0xa0 [ 148.161342][ T6004] ? netlink_getsockopt+0x570/0x570 [ 148.166688][ T6004] ____sys_sendmsg+0x5be/0x8f0 [ 148.171567][ T6004] ? __sys_sendmsg_sock+0x30/0x30 [ 148.176614][ T6004] ? import_iovec+0x6f/0xa0 [ 148.181309][ T6004] ___sys_sendmsg+0x236/0x2e0 [ 148.186364][ T6004] ? __sys_sendmsg+0x290/0x290 [ 148.191274][ T6004] __se_sys_sendmsg+0x1b7/0x2a0 [ 148.196239][ T6004] ? __x64_sys_sendmsg+0x80/0x80 [ 148.201300][ T6004] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.207621][ T6004] ? lockdep_hardirqs_on+0x94/0x140 [ 148.212883][ T6004] do_syscall_64+0x4c/0xa0 [ 148.217504][ T6004] ? clear_bhb_loop+0x30/0x80 [ 148.222882][ T6004] ? clear_bhb_loop+0x30/0x80 [ 148.227788][ T6004] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.233733][ T6004] RIP: 0033:0x7f8773d24559 [ 148.238958][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.259183][ T6004] RSP: 002b:00007f8771f7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.267881][ T6004] RAX: ffffffffffffffda RBX: 00007f8773faafa0 RCX: 00007f8773d24559 [ 148.276126][ T6004] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000004 [ 148.284194][ T6004] RBP: 00007f8773dbbb20 R08: 0000000000000000 R09: 0000000000000000 [ 148.292280][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.300345][ T6004] R13: 00007f8773fab038 R14: 00007f8773faafa0 R15: 00007ffc763f6ef8 [ 148.308432][ T6004] [ 148.347210][ T6015] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.433'. [ 148.399421][ T6015] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 148.410702][ T6015] CPU: 1 PID: 6015 Comm: syz.0.433 Not tainted syzkaller #0 [ 148.418138][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.428699][ T6015] Call Trace: [ 148.432219][ T6015] [ 148.435178][ T6015] dump_stack_lvl+0x188/0x250 [ 148.440073][ T6015] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 148.446276][ T6015] ? show_regs_print_info+0x20/0x20 [ 148.451711][ T6015] ? load_image+0x410/0x410 [ 148.456854][ T6015] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.463047][ T6015] ? sysfs_warn_dup+0x61/0xa0 [ 148.467830][ T6015] sysfs_warn_dup+0x8a/0xa0 [ 148.472603][ T6015] sysfs_do_create_link_sd+0xc0/0x110 [ 148.478113][ T6015] device_add+0x83b/0x1050 [ 148.482792][ T6015] wiphy_register+0x1e74/0x2c40 [ 148.487901][ T6015] ? cfg80211_event_work+0x40/0x40 [ 148.493035][ T6015] ? minstrel_ht_alloc+0x807/0x980 [ 148.498226][ T6015] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 148.504388][ T6015] ieee80211_register_hw+0x2a03/0x3a60 [ 148.510386][ T6015] ? ieee80211_register_hw+0xa91/0x3a60 [ 148.516041][ T6015] ? ieee80211_tasklet_handler+0x20/0x20 [ 148.521948][ T6015] ? rcu_is_watching+0x11/0xa0 [ 148.527070][ T6015] ? hrtimer_init+0x10c/0x220 [ 148.531843][ T6015] mac80211_hwsim_new_radio+0x209d/0x4050 [ 148.538034][ T6015] hwsim_new_radio_nl+0xa7d/0xc50 [ 148.543120][ T6015] genl_rcv_msg+0xd0b/0xfa0 [ 148.547643][ T6015] ? genl_bind+0x370/0x370 [ 148.552127][ T6015] ? mark_lock+0x94/0x320 [ 148.556861][ T6015] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.563024][ T6015] ? lock_chain_count+0x20/0x20 [ 148.568102][ T6015] ? rcu_is_watching+0x11/0xa0 [ 148.573067][ T6015] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 148.579256][ T6015] ? lockdep_hardirqs_on+0x94/0x140 [ 148.584743][ T6015] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 148.591156][ T6015] ? netlink_rcv_skb+0x1c8/0x430 [ 148.596284][ T6015] netlink_rcv_skb+0x1e9/0x430 [ 148.601486][ T6015] ? genl_bind+0x370/0x370 [ 148.606864][ T6015] ? netlink_ack+0xb10/0xb10 [ 148.611559][ T6015] ? down_read+0x1aa/0x2e0 [ 148.616159][ T6015] genl_rcv+0x24/0x40 [ 148.620143][ T6015] netlink_unicast+0x78f/0x940 [ 148.625011][ T6015] netlink_sendmsg+0x8ba/0xbe0 [ 148.630174][ T6015] ? netlink_getsockopt+0x570/0x570 [ 148.635583][ T6015] ? netlink_getsockopt+0x570/0x570 [ 148.641229][ T6015] ____sys_sendmsg+0x5be/0x8f0 [ 148.646278][ T6015] ? __sys_sendmsg_sock+0x30/0x30 [ 148.651446][ T6015] ? import_iovec+0x6f/0xa0 [ 148.656255][ T6015] ___sys_sendmsg+0x236/0x2e0 [ 148.661430][ T6015] ? __sys_sendmsg+0x290/0x290 [ 148.666350][ T6015] __se_sys_sendmsg+0x1b7/0x2a0 [ 148.671744][ T6015] ? __x64_sys_sendmsg+0x80/0x80 [ 148.677411][ T6015] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.683644][ T6015] ? lockdep_hardirqs_on+0x94/0x140 [ 148.690209][ T6015] do_syscall_64+0x4c/0xa0 [ 148.694924][ T6015] ? clear_bhb_loop+0x30/0x80 [ 148.700044][ T6015] ? clear_bhb_loop+0x30/0x80 [ 148.705399][ T6015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.711967][ T6015] RIP: 0033:0x7f1d66740559 [ 148.717042][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.738001][ T6015] RSP: 002b:00007f1d64997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.746937][ T6015] RAX: ffffffffffffffda RBX: 00007f1d669c6fa0 RCX: 00007f1d66740559 [ 148.756024][ T6015] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 148.764903][ T6015] RBP: 00007f1d667d7b20 R08: 0000000000000000 R09: 0000000000000000 [ 148.773780][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.782303][ T6015] R13: 00007f1d669c7038 R14: 00007f1d669c6fa0 R15: 00007ffea2706aa8 [ 148.791889][ T6015] [ 149.010643][ T6024] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.048213][ T6032] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.436'. [ 149.593487][ T6052] netlink: 'syz.1.443': attribute type 21 has an invalid length. [ 150.287856][ T6065] netlink: 'syz.2.446': attribute type 39 has an invalid length. [ 150.374042][ T6068] device sit0 left promiscuous mode [ 150.458341][ T6072] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.448'. [ 150.797854][ T6072] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 150.828299][ T6072] CPU: 1 PID: 6072 Comm: syz.0.448 Not tainted syzkaller #0 [ 150.836006][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.846814][ T6072] Call Trace: [ 150.850760][ T6072] [ 150.854009][ T6072] dump_stack_lvl+0x188/0x250 [ 150.859157][ T6072] ? show_regs_print_info+0x20/0x20 [ 150.865477][ T6072] ? load_image+0x410/0x410 [ 150.870224][ T6072] sysfs_warn_dup+0x8a/0xa0 [ 150.876139][ T6072] sysfs_do_create_link_sd+0xc0/0x110 [ 150.881956][ T6072] device_add+0x83b/0x1050 [ 150.886818][ T6072] wiphy_register+0x1e74/0x2c40 [ 150.892120][ T6072] ? cfg80211_event_work+0x40/0x40 [ 150.897664][ T6072] ? minstrel_ht_alloc+0x807/0x980 [ 150.903696][ T6072] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 150.911130][ T6072] ieee80211_register_hw+0x2a03/0x3a60 [ 150.916958][ T6072] ? ieee80211_register_hw+0xa91/0x3a60 [ 150.922728][ T6072] ? ieee80211_tasklet_handler+0x20/0x20 [ 150.928553][ T6072] ? rcu_is_watching+0x11/0xa0 [ 150.933822][ T6072] ? hrtimer_init+0x10c/0x220 [ 150.940562][ T6072] mac80211_hwsim_new_radio+0x209d/0x4050 [ 150.947203][ T6072] hwsim_new_radio_nl+0xa7d/0xc50 [ 150.952611][ T6072] genl_rcv_msg+0xd0b/0xfa0 [ 150.957292][ T6072] ? genl_bind+0x370/0x370 [ 150.962029][ T6072] ? verify_lock_unused+0x140/0x140 [ 150.967400][ T6072] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 150.975260][ T6072] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 150.984279][ T6072] netlink_rcv_skb+0x1e9/0x430 [ 150.989589][ T6072] ? genl_bind+0x370/0x370 [ 150.994789][ T6072] ? netlink_ack+0xb10/0xb10 [ 150.999712][ T6072] ? down_read+0x1aa/0x2e0 [ 151.004471][ T6072] genl_rcv+0x24/0x40 [ 151.009138][ T6072] netlink_unicast+0x78f/0x940 [ 151.014327][ T6072] netlink_sendmsg+0x8ba/0xbe0 [ 151.019338][ T6072] ? lockdep_hardirqs_on+0x94/0x140 [ 151.024819][ T6072] ? netlink_getsockopt+0x570/0x570 [ 151.030850][ T6072] ? aa_sock_msg_perm+0x94/0x150 [ 151.036018][ T6072] ? apparmor_socket_sendmsg+0x88/0x230 [ 151.042255][ T6072] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 151.047654][ T6072] ? security_socket_sendmsg+0x7c/0xa0 [ 151.053368][ T6072] ? netlink_getsockopt+0x570/0x570 [ 151.058873][ T6072] ____sys_sendmsg+0x5be/0x8f0 [ 151.063858][ T6072] ? __sys_sendmsg_sock+0x30/0x30 [ 151.069347][ T6072] ? import_iovec+0x6f/0xa0 [ 151.074429][ T6072] ___sys_sendmsg+0x236/0x2e0 [ 151.079668][ T6072] ? __sys_sendmsg+0x290/0x290 [ 151.084841][ T6072] __se_sys_sendmsg+0x1b7/0x2a0 [ 151.090656][ T6072] ? __x64_sys_sendmsg+0x80/0x80 [ 151.096081][ T6072] ? syscall_enter_from_user_mode+0x2a/0x70 [ 151.102263][ T6072] do_syscall_64+0x4c/0xa0 [ 151.106923][ T6072] ? clear_bhb_loop+0x30/0x80 [ 151.111670][ T6072] ? clear_bhb_loop+0x30/0x80 [ 151.116857][ T6072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.123575][ T6072] RIP: 0033:0x7f1d66740559 [ 151.128333][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.149596][ T6072] RSP: 002b:00007f1d64997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.158661][ T6072] RAX: ffffffffffffffda RBX: 00007f1d669c6fa0 RCX: 00007f1d66740559 [ 151.167304][ T6072] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 151.175518][ T6072] RBP: 00007f1d667d7b20 R08: 0000000000000000 R09: 0000000000000000 [ 151.184040][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.192184][ T6072] R13: 00007f1d669c7038 R14: 00007f1d669c6fa0 R15: 00007ffea2706aa8 [ 151.200588][ T6072] [ 151.374844][ T6084] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.452'. [ 151.395543][ T6084] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 151.936790][ T6119] netlink: 56 bytes leftover after parsing attributes in process `syz.1.462'. [ 152.025330][ T6123] sctp: [Deprecated]: syz.1.462 (pid 6123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.025330][ T6123] Use struct sctp_sack_info instead [ 152.080429][ T6114] device sit0 left promiscuous mode [ 152.167154][ T6117] device sit0 entered promiscuous mode [ 152.527133][ T6120] netlink: 'syz.0.460': attribute type 39 has an invalid length. [ 153.050930][ T6144] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.471'. [ 153.067859][ T6143] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.469'. [ 153.146440][ T6148] netlink: 'syz.4.472': attribute type 3 has an invalid length. [ 153.350643][ T6144] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 153.433625][ T6148] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.472'. [ 153.451997][ T6144] CPU: 0 PID: 6144 Comm: syz.3.471 Not tainted syzkaller #0 [ 153.459505][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.469962][ T6144] Call Trace: [ 153.473261][ T6144] [ 153.476242][ T6144] dump_stack_lvl+0x188/0x250 [ 153.481129][ T6144] ? show_regs_print_info+0x20/0x20 [ 153.486818][ T6144] ? load_image+0x410/0x410 [ 153.491390][ T6144] sysfs_warn_dup+0x8a/0xa0 [ 153.496033][ T6144] sysfs_do_create_link_sd+0xc0/0x110 [ 153.501460][ T6144] device_add+0x83b/0x1050 [ 153.505927][ T6144] wiphy_register+0x1e74/0x2c40 [ 153.510941][ T6144] ? cfg80211_event_work+0x40/0x40 [ 153.516271][ T6144] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.522625][ T6144] ieee80211_register_hw+0x2a03/0x3a60 [ 153.528570][ T6144] ? ieee80211_register_hw+0xa91/0x3a60 [ 153.534294][ T6144] ? ieee80211_tasklet_handler+0x20/0x20 [ 153.540273][ T6144] ? debug_init+0x21/0x1d0 [ 153.544741][ T6144] ? hrtimer_init+0x3e/0x220 [ 153.549466][ T6144] ? __memset+0x30/0x30 [ 153.554177][ T6144] ? hrtimer_init+0x10c/0x220 [ 153.559594][ T6144] mac80211_hwsim_new_radio+0x209d/0x4050 [ 153.565525][ T6144] hwsim_new_radio_nl+0xa7d/0xc50 [ 153.571131][ T6144] genl_rcv_msg+0xd0b/0xfa0 [ 153.575976][ T6144] ? genl_bind+0x370/0x370 [ 153.580639][ T6144] ? mark_lock+0x94/0x320 [ 153.585563][ T6144] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.592004][ T6144] ? lock_chain_count+0x20/0x20 [ 153.596988][ T6144] ? rcu_is_watching+0x11/0xa0 [ 153.605174][ T6144] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.614610][ T6144] ? lockdep_hardirqs_on+0x94/0x140 [ 153.620841][ T6144] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 153.627675][ T6144] ? netlink_rcv_skb+0x1c8/0x430 [ 153.632642][ T6144] netlink_rcv_skb+0x1e9/0x430 [ 153.638237][ T6144] ? genl_bind+0x370/0x370 [ 153.643331][ T6144] ? netlink_ack+0xb10/0xb10 [ 153.648061][ T6144] ? down_read+0x1aa/0x2e0 [ 153.652497][ T6144] genl_rcv+0x24/0x40 [ 153.656598][ T6144] netlink_unicast+0x78f/0x940 [ 153.661504][ T6144] netlink_sendmsg+0x8ba/0xbe0 [ 153.666851][ T6144] ? netlink_getsockopt+0x570/0x570 [ 153.672183][ T6144] ? audit_tree_destroy_watch+0x20/0x20 [ 153.677962][ T6144] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 153.683467][ T6144] ? security_socket_sendmsg+0x7c/0xa0 [ 153.689903][ T6144] ? netlink_getsockopt+0x570/0x570 [ 153.695690][ T6144] ____sys_sendmsg+0x5be/0x8f0 [ 153.701814][ T6144] ? __sys_sendmsg_sock+0x30/0x30 [ 153.708241][ T6144] ? import_iovec+0x6f/0xa0 [ 153.713211][ T6144] ___sys_sendmsg+0x236/0x2e0 [ 153.718578][ T6144] ? __sys_sendmsg+0x290/0x290 [ 153.723529][ T6144] ? trace_event_raw_event_lock+0x250/0x250 [ 153.730197][ T6144] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 153.737415][ T6144] __se_sys_sendmsg+0x1b7/0x2a0 [ 153.742853][ T6144] ? __x64_sys_sendmsg+0x80/0x80 [ 153.748479][ T6144] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.755270][ T6144] ? lockdep_hardirqs_on+0x94/0x140 [ 153.760748][ T6144] do_syscall_64+0x4c/0xa0 [ 153.765758][ T6144] ? clear_bhb_loop+0x30/0x80 [ 153.770589][ T6144] ? clear_bhb_loop+0x30/0x80 [ 153.775475][ T6144] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.781413][ T6144] RIP: 0033:0x7fb087fec559 [ 153.786198][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.808057][ T6144] RSP: 002b:00007fb086243028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.818981][ T6144] RAX: ffffffffffffffda RBX: 00007fb088272fa0 RCX: 00007fb087fec559 [ 153.828404][ T6144] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 153.838831][ T6144] RBP: 00007fb088083b20 R08: 0000000000000000 R09: 0000000000000000 [ 153.849763][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.858663][ T6144] R13: 00007fb088273038 R14: 00007fb088272fa0 R15: 00007ffc55cbf718 [ 153.869873][ T6144] [ 155.507127][ T6205] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.553514][ T6208] netlink: 'syz.1.487': attribute type 4 has an invalid length. [ 155.615534][ T6208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.487'. [ 156.041312][ T6222] device syzkaller0 entered promiscuous mode [ 157.207342][ T6248] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.817736][ T6284] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.509'. [ 158.983723][ T6284] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 158.999525][ T6284] CPU: 1 PID: 6284 Comm: syz.1.509 Not tainted syzkaller #0 [ 159.007296][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.017967][ T6284] Call Trace: [ 159.021361][ T6284] [ 159.024401][ T6284] dump_stack_lvl+0x188/0x250 [ 159.030359][ T6284] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.037395][ T6284] ? show_regs_print_info+0x20/0x20 [ 159.042650][ T6284] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 159.049555][ T6284] ? dump_stack+0x5/0x20 [ 159.054396][ T6284] sysfs_warn_dup+0x8a/0xa0 [ 159.059174][ T6284] sysfs_do_create_link_sd+0xc0/0x110 [ 159.064615][ T6284] device_add+0x83b/0x1050 [ 159.069130][ T6284] wiphy_register+0x1e74/0x2c40 [ 159.074593][ T6284] ? cfg80211_event_work+0x40/0x40 [ 159.080486][ T6284] ? minstrel_ht_alloc+0x807/0x980 [ 159.085750][ T6284] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 159.092287][ T6284] ieee80211_register_hw+0x2a03/0x3a60 [ 159.097893][ T6284] ? ieee80211_register_hw+0xa91/0x3a60 [ 159.103838][ T6284] ? ieee80211_tasklet_handler+0x20/0x20 [ 159.109768][ T6284] ? debug_init+0x21/0x1d0 [ 159.114462][ T6284] ? kasan_check_range+0x80/0x290 [ 159.119828][ T6284] ? rcu_is_watching+0x11/0xa0 [ 159.124812][ T6284] ? hrtimer_init+0x10c/0x220 [ 159.129835][ T6284] mac80211_hwsim_new_radio+0x209d/0x4050 [ 159.135642][ T6284] hwsim_new_radio_nl+0xa7d/0xc50 [ 159.140916][ T6284] genl_rcv_msg+0xd0b/0xfa0 [ 159.145472][ T6284] ? genl_bind+0x370/0x370 [ 159.150209][ T6284] ? verify_lock_unused+0x140/0x140 [ 159.155767][ T6284] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 159.163004][ T6284] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 159.170119][ T6284] netlink_rcv_skb+0x1e9/0x430 [ 159.175397][ T6284] ? genl_bind+0x370/0x370 [ 159.180282][ T6284] ? netlink_ack+0xb10/0xb10 [ 159.185211][ T6284] ? down_read+0x1aa/0x2e0 [ 159.190032][ T6284] genl_rcv+0x24/0x40 [ 159.194346][ T6284] netlink_unicast+0x78f/0x940 [ 159.199675][ T6284] netlink_sendmsg+0x8ba/0xbe0 [ 159.204753][ T6284] ? netlink_getsockopt+0x570/0x570 [ 159.210526][ T6284] ? aa_sock_msg_perm+0x94/0x150 [ 159.215773][ T6284] ? apparmor_socket_sendmsg+0x88/0x230 [ 159.221341][ T6284] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.226991][ T6284] ? security_socket_sendmsg+0x7c/0xa0 [ 159.232759][ T6284] ? netlink_getsockopt+0x570/0x570 [ 159.238164][ T6284] ____sys_sendmsg+0x5be/0x8f0 [ 159.243124][ T6284] ? __sys_sendmsg_sock+0x30/0x30 [ 159.248353][ T6284] ? import_iovec+0x6f/0xa0 [ 159.253061][ T6284] ___sys_sendmsg+0x236/0x2e0 [ 159.257926][ T6284] ? __sys_sendmsg+0x290/0x290 [ 159.262737][ T6284] __se_sys_sendmsg+0x1b7/0x2a0 [ 159.267611][ T6284] ? __x64_sys_sendmsg+0x80/0x80 [ 159.272573][ T6284] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.278582][ T6284] ? lockdep_hardirqs_on+0x94/0x140 [ 159.284049][ T6284] do_syscall_64+0x4c/0xa0 [ 159.288903][ T6284] ? clear_bhb_loop+0x30/0x80 [ 159.293584][ T6284] ? clear_bhb_loop+0x30/0x80 [ 159.298467][ T6284] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.304712][ T6284] RIP: 0033:0x7f3b868fc559 [ 159.309149][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.328765][ T6284] RSP: 002b:00007f3b84b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.337366][ T6284] RAX: ffffffffffffffda RBX: 00007f3b86b82fa0 RCX: 00007f3b868fc559 [ 159.345425][ T6284] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 159.353929][ T6284] RBP: 00007f3b86993b20 R08: 0000000000000000 R09: 0000000000000000 [ 159.362906][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.372029][ T6284] R13: 00007f3b86b83038 R14: 00007f3b86b82fa0 R15: 00007ffccab3b898 [ 159.380668][ T6284] [ 159.918884][ T6301] netlink: 'syz.1.515': attribute type 3 has an invalid length. [ 159.975423][ T6301] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.515'. [ 160.114054][ T6313] netlink: 'syz.2.518': attribute type 29 has an invalid length. [ 160.175429][ T6313] netlink: 'syz.2.518': attribute type 29 has an invalid length. [ 160.209457][ T6318] netlink: 'syz.2.518': attribute type 29 has an invalid length. [ 160.665523][ T6333] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.526'. [ 160.847513][ T6333] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 160.875506][ T6333] CPU: 1 PID: 6333 Comm: syz.4.526 Not tainted syzkaller #0 [ 160.883029][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.893291][ T6333] Call Trace: [ 160.897300][ T6333] [ 160.900532][ T6333] dump_stack_lvl+0x188/0x250 [ 160.905605][ T6333] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 160.912173][ T6333] ? show_regs_print_info+0x20/0x20 [ 160.917742][ T6333] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 160.923969][ T6333] sysfs_warn_dup+0x8a/0xa0 [ 160.928512][ T6333] sysfs_do_create_link_sd+0xc0/0x110 [ 160.934036][ T6333] device_add+0x83b/0x1050 [ 160.938526][ T6333] wiphy_register+0x1e74/0x2c40 [ 160.943664][ T6333] ? cfg80211_event_work+0x40/0x40 [ 160.948999][ T6333] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 160.955283][ T6333] ? ieee80211_register_hw+0x2414/0x3a60 [ 160.961088][ T6333] ieee80211_register_hw+0x2a03/0x3a60 [ 160.966688][ T6333] ? ieee80211_register_hw+0xa91/0x3a60 [ 160.972409][ T6333] ? ieee80211_tasklet_handler+0x20/0x20 [ 160.978211][ T6333] ? rcu_is_watching+0x11/0xa0 [ 160.983049][ T6333] ? hrtimer_init+0x10c/0x220 [ 160.987772][ T6333] mac80211_hwsim_new_radio+0x209d/0x4050 [ 160.993728][ T6333] hwsim_new_radio_nl+0xa7d/0xc50 [ 160.998818][ T6333] genl_rcv_msg+0xd0b/0xfa0 [ 161.003487][ T6333] ? genl_bind+0x370/0x370 [ 161.008588][ T6333] ? swake_up_one+0x6d/0x130 [ 161.013309][ T6333] ? verify_lock_unused+0x140/0x140 [ 161.018884][ T6333] ? rcu_preempt_deferred_qs_irqrestore+0x855/0xbd0 [ 161.026012][ T6333] ? perf_trace_lock+0xe4/0x390 [ 161.031304][ T6333] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 161.037787][ T6333] netlink_rcv_skb+0x1e9/0x430 [ 161.043470][ T6333] ? genl_bind+0x370/0x370 [ 161.049087][ T6333] ? netlink_ack+0xb10/0xb10 [ 161.054170][ T6333] ? down_read+0x1aa/0x2e0 [ 161.058881][ T6333] genl_rcv+0x24/0x40 [ 161.063075][ T6333] netlink_unicast+0x78f/0x940 [ 161.067871][ T6333] netlink_sendmsg+0x8ba/0xbe0 [ 161.072729][ T6333] ? lockdep_hardirqs_on+0x94/0x140 [ 161.078332][ T6333] ? netlink_getsockopt+0x570/0x570 [ 161.084179][ T6333] ? aa_sock_msg_perm+0x94/0x150 [ 161.089249][ T6333] ? apparmor_socket_sendmsg+0x88/0x230 [ 161.095264][ T6333] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 161.100997][ T6333] ? security_socket_sendmsg+0x7c/0xa0 [ 161.106554][ T6333] ? netlink_getsockopt+0x570/0x570 [ 161.111950][ T6333] ____sys_sendmsg+0x5be/0x8f0 [ 161.116817][ T6333] ? __sys_sendmsg_sock+0x30/0x30 [ 161.122219][ T6333] ? import_iovec+0x6f/0xa0 [ 161.127011][ T6333] ___sys_sendmsg+0x236/0x2e0 [ 161.132356][ T6333] ? __sys_sendmsg+0x290/0x290 [ 161.137320][ T6333] ? trace_event_raw_event_lock+0x250/0x250 [ 161.143652][ T6333] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 161.150126][ T6333] __se_sys_sendmsg+0x1b7/0x2a0 [ 161.154993][ T6333] ? __x64_sys_sendmsg+0x80/0x80 [ 161.160408][ T6333] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.166762][ T6333] ? lockdep_hardirqs_on+0x94/0x140 [ 161.172037][ T6333] do_syscall_64+0x4c/0xa0 [ 161.176453][ T6333] ? clear_bhb_loop+0x30/0x80 [ 161.181134][ T6333] ? clear_bhb_loop+0x30/0x80 [ 161.185823][ T6333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.191721][ T6333] RIP: 0033:0x7f8773d24559 [ 161.196314][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.216764][ T6333] RSP: 002b:00007f8771f7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.225299][ T6333] RAX: ffffffffffffffda RBX: 00007f8773faafa0 RCX: 00007f8773d24559 [ 161.233369][ T6333] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 161.241606][ T6333] RBP: 00007f8773dbbb20 R08: 0000000000000000 R09: 0000000000000000 [ 161.249951][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.258029][ T6333] R13: 00007f8773fab038 R14: 00007f8773faafa0 R15: 00007ffc763f6ef8 [ 161.266040][ T6333] [ 161.652761][ T6353] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 161.789530][ T6357] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.533'. [ 161.873363][ T6357] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 161.971623][ T6357] CPU: 1 PID: 6357 Comm: syz.2.533 Not tainted syzkaller #0 [ 161.979192][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.990409][ T6357] Call Trace: [ 161.993972][ T6357] [ 161.996919][ T6357] dump_stack_lvl+0x188/0x250 [ 162.001628][ T6357] ? show_regs_print_info+0x20/0x20 [ 162.007100][ T6357] ? load_image+0x410/0x410 [ 162.012000][ T6357] sysfs_warn_dup+0x8a/0xa0 [ 162.016966][ T6357] sysfs_do_create_link_sd+0xc0/0x110 [ 162.022557][ T6357] device_add+0x83b/0x1050 [ 162.027146][ T6357] wiphy_register+0x1e74/0x2c40 [ 162.032113][ T6357] ? cfg80211_event_work+0x40/0x40 [ 162.037256][ T6357] ? minstrel_ht_alloc+0x807/0x980 [ 162.042389][ T6357] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 162.048845][ T6357] ieee80211_register_hw+0x2a03/0x3a60 [ 162.054426][ T6357] ? ieee80211_register_hw+0xa91/0x3a60 [ 162.060741][ T6357] ? ieee80211_tasklet_handler+0x20/0x20 [ 162.066461][ T6357] ? rcu_is_watching+0x11/0xa0 [ 162.071360][ T6357] ? hrtimer_init+0x10c/0x220 [ 162.076553][ T6357] mac80211_hwsim_new_radio+0x209d/0x4050 [ 162.083583][ T6357] hwsim_new_radio_nl+0xa7d/0xc50 [ 162.089304][ T6357] genl_rcv_msg+0xd0b/0xfa0 [ 162.094463][ T6357] ? genl_bind+0x370/0x370 [ 162.099104][ T6357] ? lock_chain_count+0x20/0x20 [ 162.104367][ T6357] ? rcu_is_watching+0x11/0xa0 [ 162.110125][ T6357] ? verify_lock_unused+0x140/0x140 [ 162.115724][ T6357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.122706][ T6357] ? lockdep_hardirqs_on+0x94/0x140 [ 162.128961][ T6357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.135988][ T6357] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 162.143021][ T6357] netlink_rcv_skb+0x1e9/0x430 [ 162.149226][ T6357] ? genl_bind+0x370/0x370 [ 162.154423][ T6357] ? netlink_ack+0xb10/0xb10 [ 162.159318][ T6357] ? down_read+0x1aa/0x2e0 [ 162.164474][ T6357] genl_rcv+0x24/0x40 [ 162.168689][ T6357] netlink_unicast+0x78f/0x940 [ 162.174249][ T6357] netlink_sendmsg+0x8ba/0xbe0 [ 162.179626][ T6357] ? netlink_getsockopt+0x570/0x570 [ 162.185912][ T6357] ? aa_sock_msg_perm+0x94/0x150 [ 162.192561][ T6357] ? apparmor_socket_sendmsg+0x88/0x230 [ 162.198700][ T6357] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 162.204402][ T6357] ? security_socket_sendmsg+0x7c/0xa0 [ 162.211650][ T6357] ? netlink_getsockopt+0x570/0x570 [ 162.217815][ T6357] ____sys_sendmsg+0x5be/0x8f0 [ 162.225111][ T6357] ? __sys_sendmsg_sock+0x30/0x30 [ 162.231543][ T6357] ? import_iovec+0x6f/0xa0 [ 162.236938][ T6357] ___sys_sendmsg+0x236/0x2e0 [ 162.242672][ T6357] ? __sys_sendmsg+0x290/0x290 [ 162.248091][ T6357] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.255012][ T6357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.262544][ T6357] ? lockdep_hardirqs_on+0x94/0x140 [ 162.269491][ T6357] ? __sanitizer_cov_trace_pc+0x37/0x60 [ 162.275491][ T6357] __se_sys_sendmsg+0x1b7/0x2a0 [ 162.280407][ T6357] ? __x64_sys_sendmsg+0x80/0x80 [ 162.285489][ T6357] ? syscall_enter_from_user_mode+0x2a/0x70 [ 162.291897][ T6357] do_syscall_64+0x4c/0xa0 [ 162.296465][ T6357] ? clear_bhb_loop+0x30/0x80 [ 162.301357][ T6357] ? clear_bhb_loop+0x30/0x80 [ 162.306494][ T6357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.312578][ T6357] RIP: 0033:0x7f8cf8345559 [ 162.317546][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.338658][ T6357] RSP: 002b:00007f8cf659c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.350839][ T6357] RAX: ffffffffffffffda RBX: 00007f8cf85cbfa0 RCX: 00007f8cf8345559 [ 162.359571][ T6357] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 162.368842][ T6357] RBP: 00007f8cf83dcb20 R08: 0000000000000000 R09: 0000000000000000 [ 162.377585][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.385943][ T6357] R13: 00007f8cf85cc038 R14: 00007f8cf85cbfa0 R15: 00007ffd42615cd8 [ 162.395762][ T6357] [ 163.473742][ T6404] netlink: 14 bytes leftover after parsing attributes in process `syz.0.547'. [ 163.524353][ T6404] netlink: del zone limit has 4 unknown bytes [ 164.652051][ T6423] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.552'. [ 164.873476][ T6423] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 164.888403][ T6423] CPU: 0 PID: 6423 Comm: syz.0.552 Not tainted syzkaller #0 [ 164.896780][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.907305][ T6423] Call Trace: [ 164.910608][ T6423] [ 164.913570][ T6423] dump_stack_lvl+0x188/0x250 [ 164.918496][ T6423] ? show_regs_print_info+0x20/0x20 [ 164.924216][ T6423] ? load_image+0x410/0x410 [ 164.929289][ T6423] sysfs_warn_dup+0x8a/0xa0 [ 164.934100][ T6423] sysfs_do_create_link_sd+0xc0/0x110 [ 164.940390][ T6423] device_add+0x83b/0x1050 [ 164.944905][ T6423] wiphy_register+0x1e74/0x2c40 [ 164.949938][ T6423] ? cfg80211_event_work+0x40/0x40 [ 164.955347][ T6423] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.961569][ T6423] ieee80211_register_hw+0x2a03/0x3a60 [ 164.967451][ T6423] ? ieee80211_register_hw+0xa91/0x3a60 [ 164.973763][ T6423] ? ieee80211_tasklet_handler+0x20/0x20 [ 164.979605][ T6423] ? rcu_is_watching+0x11/0xa0 [ 164.984485][ T6423] ? hrtimer_init+0x10c/0x220 [ 164.989220][ T6423] mac80211_hwsim_new_radio+0x209d/0x4050 [ 164.996066][ T6423] hwsim_new_radio_nl+0xa7d/0xc50 [ 165.001605][ T6423] genl_rcv_msg+0xd0b/0xfa0 [ 165.006320][ T6423] ? genl_bind+0x370/0x370 [ 165.011864][ T6423] ? mark_lock+0x94/0x320 [ 165.016570][ T6423] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 165.024068][ T6423] ? lock_chain_count+0x20/0x20 [ 165.029715][ T6423] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 165.036128][ T6423] ? lockdep_hardirqs_on+0x94/0x140 [ 165.042473][ T6423] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 165.049023][ T6423] netlink_rcv_skb+0x1e9/0x430 [ 165.054058][ T6423] ? genl_bind+0x370/0x370 [ 165.059789][ T6423] ? netlink_ack+0xb10/0xb10 [ 165.065383][ T6423] ? down_read+0x1aa/0x2e0 [ 165.070348][ T6423] genl_rcv+0x24/0x40 [ 165.074682][ T6423] netlink_unicast+0x78f/0x940 [ 165.079935][ T6423] netlink_sendmsg+0x8ba/0xbe0 [ 165.085714][ T6423] ? netlink_getsockopt+0x570/0x570 [ 165.091191][ T6423] ? aa_sock_msg_perm+0x94/0x150 [ 165.096422][ T6423] ? apparmor_socket_sendmsg+0x88/0x230 [ 165.102456][ T6423] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 165.108047][ T6423] ? security_socket_sendmsg+0x7c/0xa0 [ 165.113815][ T6423] ? netlink_getsockopt+0x570/0x570 [ 165.119563][ T6423] ____sys_sendmsg+0x5be/0x8f0 [ 165.124366][ T6423] ? __sys_sendmsg_sock+0x30/0x30 [ 165.129604][ T6423] ? import_iovec+0x6f/0xa0 [ 165.134570][ T6423] ___sys_sendmsg+0x236/0x2e0 [ 165.139658][ T6423] ? __sys_sendmsg+0x290/0x290 [ 165.144750][ T6423] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 165.151597][ T6423] __se_sys_sendmsg+0x1b7/0x2a0 [ 165.156767][ T6423] ? __x64_sys_sendmsg+0x80/0x80 [ 165.161833][ T6423] ? syscall_enter_from_user_mode+0x2a/0x70 [ 165.168288][ T6423] do_syscall_64+0x4c/0xa0 [ 165.173451][ T6423] ? clear_bhb_loop+0x30/0x80 [ 165.178293][ T6423] ? clear_bhb_loop+0x30/0x80 [ 165.183266][ T6423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.189649][ T6423] RIP: 0033:0x7f1d66740559 [ 165.194092][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.214589][ T6423] RSP: 002b:00007f1d64997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.223695][ T6423] RAX: ffffffffffffffda RBX: 00007f1d669c6fa0 RCX: 00007f1d66740559 [ 165.232127][ T6423] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 165.240389][ T6423] RBP: 00007f1d667d7b20 R08: 0000000000000000 R09: 0000000000000000 [ 165.248381][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.256375][ T6423] R13: 00007f1d669c7038 R14: 00007f1d669c6fa0 R15: 00007ffea2706aa8 [ 165.265154][ T6423] [ 166.290971][ T6461] netlink: 'syz.2.564': attribute type 8 has an invalid length. [ 166.325613][ T6461] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.564'. [ 166.518779][ T6474] netlink: 'syz.3.567': attribute type 9 has an invalid length. [ 166.816098][ T6481] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 166.886625][ T6483] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.570'. [ 166.901222][ T6493] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 166.989277][ T6493] netlink: 156 bytes leftover after parsing attributes in process `syz.4.571'. [ 167.144672][ T6483] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 167.185959][ T6483] CPU: 0 PID: 6483 Comm: syz.1.570 Not tainted syzkaller #0 [ 167.193851][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.204972][ T6483] Call Trace: [ 167.208263][ T6483] [ 167.211215][ T6483] dump_stack_lvl+0x188/0x250 [ 167.216004][ T6483] ? show_regs_print_info+0x20/0x20 [ 167.221209][ T6483] ? load_image+0x410/0x410 [ 167.225719][ T6483] ? _printk+0x1/0x130 [ 167.229874][ T6483] sysfs_warn_dup+0x8a/0xa0 [ 167.234396][ T6483] sysfs_do_create_link_sd+0xc0/0x110 [ 167.240028][ T6483] device_add+0x83b/0x1050 [ 167.245125][ T6483] wiphy_register+0x1e74/0x2c40 [ 167.250546][ T6483] ? cfg80211_event_work+0x40/0x40 [ 167.255835][ T6483] ? minstrel_ht_alloc+0x807/0x980 [ 167.261752][ T6483] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 167.267983][ T6483] ieee80211_register_hw+0x2a03/0x3a60 [ 167.273563][ T6483] ? ieee80211_register_hw+0xa91/0x3a60 [ 167.279131][ T6483] ? ieee80211_tasklet_handler+0x20/0x20 [ 167.284972][ T6483] ? rcu_is_watching+0x11/0xa0 [ 167.289957][ T6483] ? hrtimer_init+0x10c/0x220 [ 167.294742][ T6483] mac80211_hwsim_new_radio+0x209d/0x4050 [ 167.300679][ T6483] hwsim_new_radio_nl+0xa7d/0xc50 [ 167.306041][ T6483] genl_rcv_msg+0xd0b/0xfa0 [ 167.310669][ T6483] ? genl_bind+0x370/0x370 [ 167.315404][ T6483] ? mark_lock+0x94/0x320 [ 167.319767][ T6483] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.325857][ T6483] ? lock_chain_count+0x20/0x20 [ 167.330719][ T6483] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 167.336879][ T6483] ? lockdep_hardirqs_on+0x94/0x140 [ 167.342317][ T6483] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 167.348681][ T6483] netlink_rcv_skb+0x1e9/0x430 [ 167.353644][ T6483] ? genl_bind+0x370/0x370 [ 167.358350][ T6483] ? netlink_ack+0xb10/0xb10 [ 167.363167][ T6483] ? down_read+0x1aa/0x2e0 [ 167.367682][ T6483] genl_rcv+0x24/0x40 [ 167.371969][ T6483] netlink_unicast+0x78f/0x940 [ 167.377203][ T6483] netlink_sendmsg+0x8ba/0xbe0 [ 167.381993][ T6483] ? lockdep_hardirqs_on+0x94/0x140 [ 167.387307][ T6483] ? netlink_getsockopt+0x570/0x570 [ 167.392507][ T6483] ? aa_sock_msg_perm+0x94/0x150 [ 167.398566][ T6483] ? apparmor_socket_sendmsg+0x88/0x230 [ 167.404285][ T6483] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 167.409694][ T6483] ? security_socket_sendmsg+0x7c/0xa0 [ 167.416001][ T6483] ? netlink_getsockopt+0x570/0x570 [ 167.421417][ T6483] ____sys_sendmsg+0x5be/0x8f0 [ 167.426720][ T6483] ? __sys_sendmsg_sock+0x30/0x30 [ 167.432593][ T6483] ? import_iovec+0x6f/0xa0 [ 167.437193][ T6483] ___sys_sendmsg+0x236/0x2e0 [ 167.441973][ T6483] ? __sys_sendmsg+0x290/0x290 [ 167.446752][ T6483] ? rcu_is_watching+0x11/0xa0 [ 167.451711][ T6483] ? __se_sys_sendmsg+0xc8/0x2a0 [ 167.456940][ T6483] __se_sys_sendmsg+0x1b7/0x2a0 [ 167.461885][ T6483] ? __x64_sys_sendmsg+0x80/0x80 [ 167.466907][ T6483] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.473095][ T6483] ? lockdep_hardirqs_on+0x94/0x140 [ 167.478595][ T6483] do_syscall_64+0x4c/0xa0 [ 167.483188][ T6483] ? clear_bhb_loop+0x30/0x80 [ 167.488136][ T6483] ? clear_bhb_loop+0x30/0x80 [ 167.493083][ T6483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.499529][ T6483] RIP: 0033:0x7f3b868fc559 [ 167.504630][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.524792][ T6483] RSP: 002b:00007f3b84b53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.533343][ T6483] RAX: ffffffffffffffda RBX: 00007f3b86b82fa0 RCX: 00007f3b868fc559 [ 167.541622][ T6483] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 167.549597][ T6483] RBP: 00007f3b86993b20 R08: 0000000000000000 R09: 0000000000000000 [ 167.557580][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.565659][ T6483] R13: 00007f3b86b83038 R14: 00007f3b86b82fa0 R15: 00007ffccab3b898 [ 167.573941][ T6483] [ 168.266856][ T6513] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 168.340000][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.395944][ T6530] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.580'. [ 168.460464][ T6513] device bridge_slave_1 left promiscuous mode [ 168.510887][ T6535] netlink: 167456 bytes leftover after parsing attributes in process `syz.3.582'. [ 168.521437][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.422469][ T6556] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 169.474268][ T6556] device macvlan0 entered promiscuous mode [ 169.481971][ T6554] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.586'. [ 169.589506][ T6556] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 169.605325][ T6559] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 169.618617][ T6559] netlink: 156 bytes leftover after parsing attributes in process `syz.0.587'. [ 169.654513][ T6568] device sit0 left promiscuous mode [ 169.782073][ T6554] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 169.895247][ T6554] CPU: 1 PID: 6554 Comm: syz.2.586 Not tainted syzkaller #0 [ 169.903895][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.914819][ T6554] Call Trace: [ 169.918260][ T6554] [ 169.921398][ T6554] dump_stack_lvl+0x188/0x250 [ 169.926596][ T6554] ? show_regs_print_info+0x20/0x20 [ 169.932269][ T6554] ? load_image+0x410/0x410 [ 169.937156][ T6554] sysfs_warn_dup+0x8a/0xa0 [ 169.942224][ T6554] sysfs_do_create_link_sd+0xc0/0x110 [ 169.947737][ T6554] device_add+0x83b/0x1050 [ 169.952300][ T6554] wiphy_register+0x1e74/0x2c40 [ 169.957699][ T6554] ? cfg80211_event_work+0x40/0x40 [ 169.962962][ T6554] ? minstrel_ht_alloc+0x807/0x980 [ 169.968219][ T6554] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 169.974544][ T6554] ieee80211_register_hw+0x2a03/0x3a60 [ 169.980039][ T6554] ? ieee80211_register_hw+0xa91/0x3a60 [ 169.986502][ T6554] ? ieee80211_tasklet_handler+0x20/0x20 [ 169.992423][ T6554] ? rcu_is_watching+0x11/0xa0 [ 169.997484][ T6554] ? hrtimer_init+0x10c/0x220 [ 170.003085][ T6554] mac80211_hwsim_new_radio+0x209d/0x4050 [ 170.010350][ T6554] hwsim_new_radio_nl+0xa7d/0xc50 [ 170.015808][ T6554] genl_rcv_msg+0xd0b/0xfa0 [ 170.020921][ T6554] ? genl_bind+0x370/0x370 [ 170.025669][ T6554] ? __dev_queue_xmit+0x1b64/0x2e50 [ 170.031616][ T6554] ? verify_lock_unused+0x140/0x140 [ 170.037238][ T6554] ? dev_queue_xmit+0x20/0x20 [ 170.042473][ T6554] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 170.049408][ T6554] netlink_rcv_skb+0x1e9/0x430 [ 170.054398][ T6554] ? genl_bind+0x370/0x370 [ 170.059119][ T6554] ? netlink_ack+0xb10/0xb10 [ 170.063826][ T6554] ? down_read+0x1aa/0x2e0 [ 170.068590][ T6554] genl_rcv+0x24/0x40 [ 170.072878][ T6554] netlink_unicast+0x78f/0x940 [ 170.078409][ T6554] netlink_sendmsg+0x8ba/0xbe0 [ 170.083519][ T6554] ? netlink_getsockopt+0x570/0x570 [ 170.090396][ T6554] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.096429][ T6554] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 170.102218][ T6554] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.108838][ T6554] ? security_socket_sendmsg+0x7c/0xa0 [ 170.114748][ T6554] ? netlink_getsockopt+0x570/0x570 [ 170.121039][ T6554] ____sys_sendmsg+0x5be/0x8f0 [ 170.127045][ T6554] ? __sys_sendmsg_sock+0x30/0x30 [ 170.132309][ T6554] ? import_iovec+0x6f/0xa0 [ 170.138164][ T6554] ___sys_sendmsg+0x236/0x2e0 [ 170.143091][ T6554] ? __sys_sendmsg+0x290/0x290 [ 170.148279][ T6554] __se_sys_sendmsg+0x1b7/0x2a0 [ 170.153184][ T6554] ? __x64_sys_sendmsg+0x80/0x80 [ 170.158610][ T6554] ? syscall_enter_from_user_mode+0x2a/0x70 [ 170.164739][ T6554] do_syscall_64+0x4c/0xa0 [ 170.169279][ T6554] ? clear_bhb_loop+0x30/0x80 [ 170.174019][ T6554] ? clear_bhb_loop+0x30/0x80 [ 170.178914][ T6554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.185178][ T6554] RIP: 0033:0x7f8cf8345559 [ 170.190141][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.210764][ T6554] RSP: 002b:00007f8cf659c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.219673][ T6554] RAX: ffffffffffffffda RBX: 00007f8cf85cbfa0 RCX: 00007f8cf8345559 [ 170.228597][ T6554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 170.236947][ T6554] RBP: 00007f8cf83dcb20 R08: 0000000000000000 R09: 0000000000000000 [ 170.245393][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.253391][ T6554] R13: 00007f8cf85cc038 R14: 00007f8cf85cbfa0 R15: 00007ffd42615cd8 [ 170.261836][ T6554] [ 170.450223][ T6580] netlink: 198260 bytes leftover after parsing attributes in process `syz.3.594'. [ 170.500005][ T6580] netlink: zone id is out of range [ 170.516806][ T6580] netlink: zone id is out of range [ 170.543904][ T6580] netlink: zone id is out of range [ 170.559052][ T6580] netlink: zone id is out of range [ 170.574630][ T6580] netlink: zone id is out of range [ 170.590702][ T6580] netlink: zone id is out of range [ 170.607224][ T6580] netlink: zone id is out of range [ 170.632900][ T6580] netlink: zone id is out of range [ 170.640927][ T6580] netlink: zone id is out of range [ 170.652894][ T6580] netlink: zone id is out of range [ 170.685109][ T6558] device sit0 entered promiscuous mode [ 171.309804][ T6566] netlink: 'syz.1.588': attribute type 39 has an invalid length. [ 185.503422][ T6592] rxe_eth0 speed is unknown, defaulting to 1000 [ 185.800433][ T6596] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.469198][ T6599] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.051062][ T6604] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.062380][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 187.102057][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 187.415059][ T6607] rxe_eth0 speed is unknown, defaulting to 1000 [ 187.432133][ T6599] chnl_net:caif_netlink_parms(): no params data found [ 187.515256][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 187.743342][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.752012][ T1111] Bluetooth: hci6: command 0x0409 tx timeout [ 187.765405][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.785491][ T6596] device bridge_slave_0 entered promiscuous mode [ 187.832189][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.852958][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.868073][ T6596] device bridge_slave_1 entered promiscuous mode [ 187.948543][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.957153][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.976143][ T6592] device bridge_slave_0 entered promiscuous mode [ 188.037290][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.044397][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.064287][ T6592] device bridge_slave_1 entered promiscuous mode [ 188.112850][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.201519][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.234826][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.256661][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.276516][ T6599] device bridge_slave_0 entered promiscuous mode [ 188.314610][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.385182][ T1111] Bluetooth: hci7: command 0x0409 tx timeout [ 188.946639][ T1111] Bluetooth: hci8: command 0x0409 tx timeout [ 189.025442][ T1111] Bluetooth: hci9: command 0x0409 tx timeout [ 189.585361][ T1111] Bluetooth: hci5: command 0x041b tx timeout [ 189.825254][ T1111] Bluetooth: hci6: command 0x041b tx timeout [ 190.465395][ T1111] Bluetooth: hci7: command 0x041b tx timeout [ 191.027176][ T4280] Bluetooth: hci8: command 0x041b tx timeout [ 191.115415][ T4280] Bluetooth: hci9: command 0x041b tx timeout [ 191.665241][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 191.825263][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 191.831550][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 191.845046][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 191.905440][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 192.545257][ T4280] Bluetooth: hci7: command 0x040f tx timeout [ 193.115366][ T4280] Bluetooth: hci8: command 0x040f tx timeout [ 193.185262][ T4280] Bluetooth: hci9: command 0x040f tx timeout [ 193.755242][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 193.985974][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 194.625247][ T1111] Bluetooth: hci7: command 0x0419 tx timeout [ 195.185144][ T1111] Bluetooth: hci8: command 0x0419 tx timeout [ 195.265224][ T1111] Bluetooth: hci9: command 0x0419 tx timeout [ 238.865229][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 238.878789][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 248.065282][ T4280] Bluetooth: hci10: command 0x0409 tx timeout [ 248.305117][ T4280] Bluetooth: hci12: command 0x0409 tx timeout [ 248.314739][ T4280] Bluetooth: hci11: command 0x0409 tx timeout [ 249.505577][ T4280] Bluetooth: hci14: command 0x0409 tx timeout [ 249.585226][ T4280] Bluetooth: hci13: command 0x0409 tx timeout [ 250.145259][ T4986] Bluetooth: hci10: command 0x041b tx timeout [ 250.395272][ T4986] Bluetooth: hci11: command 0x041b tx timeout [ 250.405245][ T4986] Bluetooth: hci12: command 0x041b tx timeout [ 251.585313][ T4986] Bluetooth: hci14: command 0x041b tx timeout [ 251.675332][ T4986] Bluetooth: hci13: command 0x041b tx timeout [ 252.225144][ T4986] Bluetooth: hci10: command 0x040f tx timeout [ 252.465708][ T4986] Bluetooth: hci12: command 0x040f tx timeout [ 252.485474][ T4986] Bluetooth: hci11: command 0x040f tx timeout [ 253.665508][ T4986] Bluetooth: hci14: command 0x040f tx timeout [ 253.755332][ T4986] Bluetooth: hci13: command 0x040f tx timeout [ 254.315245][ T4280] Bluetooth: hci10: command 0x0419 tx timeout [ 254.545072][ T4280] Bluetooth: hci11: command 0x0419 tx timeout [ 254.552518][ T4280] Bluetooth: hci12: command 0x0419 tx timeout [ 255.755386][ T4986] Bluetooth: hci14: command 0x0419 tx timeout [ 255.825159][ T4986] Bluetooth: hci13: command 0x0419 tx timeout [ 275.414921][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 275.422015][ C0] rcu: 0-....: (1 GPs behind) idle=0cd/1/0x4000000000000000 softirq=12698/12699 fqs=4930 [ 275.432896][ C0] (t=10500 jiffies g=17697 q=1554) [ 275.438106][ C0] NMI backtrace for cpu 0 [ 275.442462][ C0] CPU: 0 PID: 6572 Comm: syz.4.592 Not tainted syzkaller #0 [ 275.449971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.460037][ C0] Call Trace: [ 275.463323][ C0] [ 275.466169][ C0] dump_stack_lvl+0x188/0x250 [ 275.471140][ C0] ? show_regs_print_info+0x20/0x20 [ 275.476443][ C0] ? load_image+0x410/0x410 [ 275.481318][ C0] ? vprintk_emit+0x150/0x150 [ 275.486097][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 275.491048][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 275.497508][ C0] ? vprintk_emit+0xf9/0x150 [ 275.502438][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 275.508383][ C0] ? _raw_spin_lock+0x40/0x40 [ 275.513245][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 275.519336][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 275.525496][ C0] rcu_dump_cpu_stacks+0x22d/0x380 [ 275.530974][ C0] print_cpu_stall+0x31f/0x5f0 [ 275.535768][ C0] rcu_sched_clock_irq+0x6ec/0x1120 [ 275.541004][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 275.546084][ C0] ? hrtimer_run_queues+0x162/0x400 [ 275.551387][ C0] ? account_process_tick+0x22a/0x3a0 [ 275.556764][ C0] update_process_times+0x193/0x200 [ 275.561967][ C0] tick_sched_timer+0x37d/0x560 [ 275.566916][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 275.572885][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 275.578582][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 275.583895][ C0] hrtimer_interrupt+0x397/0x8b0 [ 275.588931][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 275.595009][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 275.600952][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 275.606954][ C0] RIP: 0010:slab_pre_alloc_hook+0x19/0xc0 [ 275.612898][ C0] Code: 4b 02 e9 e4 fe ff ff e8 b5 cf 42 ff eb 8b 0f 1f 00 55 41 57 41 56 41 54 53 89 cd 49 89 d7 49 89 f6 48 89 fb 23 2d ff 83 ad 0c <89> ef e8 50 ba f6 ff 89 ef e8 49 bb f6 ff f7 c5 00 04 00 00 74 18 [ 275.632675][ C0] RSP: 0018:ffffc90000007968 EFLAGS: 00000202 [ 275.638754][ C0] RAX: ffffffff87e0c364 RBX: ffff88801c5e4140 RCX: 0000000000000a20 [ 275.646802][ C0] RDX: 0000000000000001 RSI: ffffc900000079a0 RDI: ffff88801c5e4140 [ 275.654877][ C0] RBP: 0000000000000a20 R08: ffff88814cfb85ab R09: 1ffff110299f70b5 [ 275.662937][ C0] R10: dffffc0000000000 R11: ffffed10299f70b6 R12: ffff88801c5e4140 [ 275.671021][ C0] R13: 0000000000000a20 R14: ffffc900000079a0 R15: 0000000000000001 [ 275.678995][ C0] ? __alloc_skb+0xf4/0x750 [ 275.683510][ C0] kmem_cache_alloc_node+0x47/0x2c0 [ 275.688699][ C0] ? __alloc_skb+0xf4/0x750 [ 275.693398][ C0] __alloc_skb+0xf4/0x750 [ 275.697805][ C0] aoecmd_cfg+0x282/0x910 [ 275.702321][ C0] ? ktcomplete+0x2a0/0x2a0 [ 275.706855][ C0] ? skbfree+0x340/0x340 [ 275.711259][ C0] call_timer_fn+0x17b/0x540 [ 275.715837][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 275.721977][ C0] ? skbfree+0x340/0x340 [ 275.726222][ C0] ? __run_timers+0x810/0x810 [ 275.730992][ C0] ? skbfree+0x340/0x340 [ 275.735225][ C0] __run_timers+0x56c/0x810 [ 275.739826][ C0] ? detach_timer+0x2b0/0x2b0 [ 275.744774][ C0] run_timer_softirq+0x63/0xf0 [ 275.749540][ C0] handle_softirqs+0x336/0x830 [ 275.754470][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 275.759307][ C0] ? do_softirq+0x210/0x210 [ 275.763896][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 275.769168][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 275.774368][ C0] __irq_exit_rcu+0x13b/0x230 [ 275.779069][ C0] ? irq_exit_rcu+0x20/0x20 [ 275.783665][ C0] irq_exit_rcu+0x5/0x20 [ 275.788035][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 275.793679][ C0] [ 275.796607][ C0] [ 275.799530][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 275.805723][ C0] RIP: 0010:finish_lock_switch+0x12f/0x290 [ 275.811725][ C0] Code: 83 c7 18 be ff ff ff ff e8 be bc 6d 08 85 c0 74 46 4d 85 ff 75 62 0f 1f 44 00 00 48 89 df e8 58 2d 77 08 e8 a3 f2 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c [ 275.831774][ C0] RSP: 0018:ffffc900032ff7b8 EFLAGS: 00000282 [ 275.838076][ C0] RAX: add9429380d81f00 RBX: ffff8880588a0000 RCX: add9429380d81f00 [ 275.846557][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a4b40 [ 275.854849][ C0] RBP: 1ffff110171c7613 R08: ffff8880b8e3b30b R09: 1ffff110171c7661 [ 275.863271][ C0] R10: dffffc0000000000 R11: ffffed10171c7662 R12: 1ffff110171c75c1 [ 275.871551][ C0] R13: dffffc0000000000 R14: ffff8880b8e3ae08 R15: 0000000000000000 [ 275.879691][ C0] finish_task_switch+0x12f/0x650 [ 275.884736][ C0] __schedule+0x11cb/0x4350 [ 275.889384][ C0] ? futex_wait_queue_me+0x16e/0x440 [ 275.894768][ C0] ? release_firmware_map_entry+0x190/0x190 [ 275.900847][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 275.906009][ C0] schedule+0x11b/0x1e0 [ 275.910369][ C0] futex_wait_queue_me+0x22b/0x440 [ 275.915501][ C0] futex_wait+0x256/0x680 [ 275.920020][ C0] ? __lock_acquire+0x13b3/0x7d40 [ 275.925160][ C0] ? do_futex+0x12b0/0x12b0 [ 275.929774][ C0] ? verify_lock_unused+0x140/0x140 [ 275.935160][ C0] ? verify_lock_unused+0x140/0x140 [ 275.940551][ C0] do_futex+0xdc2/0x12b0 [ 275.944793][ C0] ? hrtimer_interrupt+0x4c1/0x8b0 [ 275.949984][ C0] ? ktime_get+0x7b/0x270 [ 275.954400][ C0] ? ktime_get+0x7b/0x270 [ 275.958740][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 275.965078][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 275.970718][ C0] ? futex_exit_release+0x1c0/0x1c0 [ 275.976344][ C0] __se_sys_futex+0x389/0x420 [ 275.981112][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 275.987382][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 275.992161][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 275.997025][ C0] do_syscall_64+0x4c/0xa0 [ 276.001704][ C0] ? clear_bhb_loop+0x30/0x80 [ 276.006755][ C0] ? clear_bhb_loop+0x30/0x80 [ 276.011533][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.017617][ C0] RIP: 0033:0x7f8773d24559 [ 276.022339][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.042038][ C0] RSP: 002b:00007f8771f7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.050667][ C0] RAX: ffffffffffffffda RBX: 00007f8773faafa8 RCX: 00007f8773d24559 [ 276.059151][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8773faafa8 [ 276.067373][ C0] RBP: 00007f8773faafa0 R08: 0000000000000000 R09: 0000000000000000 [ 276.075911][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.084201][ C0] R13: 00007f8773fab038 R14: 00007ffc763f6e10 R15: 00007ffc763f6ef8 [ 276.092571][ C0] [ 276.155447][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.161795][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.785020][ T4989] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10616 jiffies s: 5873 root: 0x1/. [ 276.804950][ T4989] rcu: blocking rcu_node structures (internal RCU debug): [ 276.812513][ T4989] Task dump for CPU 0: [ 276.817021][ T4989] task:syz.4.592 state:R running task stack:26640 pid: 6572 ppid: 4194 flags:0x0000400c [ 276.828032][ T4989] Call Trace: [ 276.831326][ T4989] [ 276.834368][ T4989] ? __schedule+0x11cb/0x4350 [ 276.839140][ T4989] ? futex_wait_queue_me+0x16e/0x440 [ 276.844451][ T4989] ? release_firmware_map_entry+0x190/0x190 [ 276.850498][ T4989] ? __lock_acquire+0x7d40/0x7d40 [ 276.855662][ T4989] ? schedule+0x11b/0x1e0 [ 276.860017][ T4989] ? futex_wait_queue_me+0x22b/0x440 [ 276.865374][ T4989] ? futex_wait+0x256/0x680 [ 276.870070][ T4989] ? __lock_acquire+0x13b3/0x7d40 [ 276.875150][ T4989] ? do_futex+0x12b0/0x12b0 [ 276.879698][ T4989] ? verify_lock_unused+0x140/0x140 [ 276.885006][ T4989] ? verify_lock_unused+0x140/0x140 [ 276.890340][ T4989] ? do_futex+0xdc2/0x12b0 [ 276.894791][ T4989] ? hrtimer_interrupt+0x4c1/0x8b0 [ 276.900067][ T4989] ? ktime_get+0x7b/0x270 [ 276.904528][ T4989] ? ktime_get+0x7b/0x270 [ 276.908922][ T4989] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 276.915626][ T4989] ? ktime_get_real_ts64+0x440/0x440 [ 276.920948][ T4989] ? futex_exit_release+0x1c0/0x1c0 [ 276.926352][ T4989] ? __se_sys_futex+0x389/0x420 [ 276.931408][ T4989] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 276.937509][ T4989] ? __x64_sys_futex+0xf0/0xf0 [ 276.942342][ T4989] ? __x64_sys_futex+0x1d/0xf0 [ 276.947193][ T4989] ? do_syscall_64+0x4c/0xa0 [ 276.951808][ T4989] ? clear_bhb_loop+0x30/0x80 [ 276.956546][ T4989] ? clear_bhb_loop+0x30/0x80 [ 276.961438][ T4989] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.967812][ T4989]