last executing test programs: 1m38.980833749s ago: executing program 2 (id=1795): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) 1m38.607735941s ago: executing program 2 (id=1798): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x23, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0xc4618c598d6df3a5, 0xe1ae, 0xfffffffd, 0x0, 0x2, 0x40000000, 0x3, 0x0, 0x900, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1m38.384105698s ago: executing program 0 (id=1800): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x23, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b9ff03", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0xc4618c598d6df3a5, 0xe1ae, 0xfffffffd, 0x0, 0x2, 0x40000000, 0x3, 0x0, 0x900, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1m38.351290009s ago: executing program 3 (id=1801): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008084) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c000000000028"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0) 1m38.31422991s ago: executing program 2 (id=1802): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000080cb20c2422ce6ed64eb000100"/37], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0xc0045878, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 1m38.236715613s ago: executing program 1 (id=1803): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0xfdef}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x1) 1m38.217979343s ago: executing program 0 (id=1804): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4d, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa0", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000800)={0x2, 0x80, 0x6, 0x8, 0x2, 0x2, 0x0, 0xf2, 0x60101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x2}, 0x2002, 0x8, 0x5, 0x3, 0x4, 0x0, 0x10, 0x0, 0x1, 0x0, 0x6}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x100000, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0xc, 0x8}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1, 0xffffffffffffffff}, 0x4) sendmsg(r10, &(0x7f00000045c0)={0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000000700)="0ca83022daf035803bf35ac4926702d178671e5939f74617186f61c9f32586dad3ffe609009944826616c15f1bece41f63ecdddc407d2be5b2ea8b57d7ecdc3b5916e518879958ae9bab806cb6570aa8560e360a3f6d8b710881a571627eb54e51c02008d126022c4b4c4610eef3e7bf255dd7902d059627934d82eba7edc8be21005d1a00af3a2ae1e66b047cfc549c3b4608eb211e537bcab5205703403a4d3836cc3e6a551ba08c0069eed98a5c26e37ae6", 0xb3}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="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", 0xff}, {&(0x7f0000004140)="8e9b77d1a30c0ed205646cbfde6c0305ab13dae851727456ebbc9d092a9ec18683df54ec39990ade0cb34fb68483a1accc03a6445cb3f17d0aca70844d5639e19ed28f4aa901f558c33803d7ea5bdfa4854e76953fd54cc4f5261c9f328aef3fa96fa6df31580de73986eded09227d8133556d976569f649c44ef2ee845228bf1c4885d47191c11ba416bbd0a4e948e2bd4f07159dbea53a01c972d8f4ba603f2df613b8e7fe8fdaf151d8fb6f39747cd47db116c7c2fc9b2fff0e7da9d892771f5e83a990fb", 0xc6}], 0x4, &(0x7f0000004280)=[{0xb0, 0xff, 0x40, "5a1098595e2f82208622a282220c953ec1a05379b0e54fa5b74db255fd4d9843d25917139646c32950bd6c3967a9c8419f18f8c7181119ed4450ba126768564d3db7f83cdc1ce32c62c792d145c4988a98e3b38c413fe6db669bd61dd4ed51c253662043181a1b0bd518254d21d5955c5c34692e051bc9aaf686e7d888da9775f93d6e1e431634d61f3f48d611ac1f26da696d4eeb620da1ac802e20dbc7eca2"}, {0x38, 0x101, 0x685, "a9bc98719194c7d6cc141867670416b594e2eb4e782ed1e28bb7f3c8750a3cb17b1f"}, {0xe0, 0x8c, 0xfffffffd, "4ad39e07bae91a26725bdefc420ccefdc66cbae35b4082204c438d10d79372927f591b3a90bd7c6eb458ab3594e1fce4d902afd79ce1f9eb92c00b9fcc4eebdaec6825a3f43ed3b2d02c3c34c038888ba20d5aa3dd1a1799210263955900a9981bb5ece66816efd5d00e71af4d09b4432c5cd66987aeeb8f27b031f41a00114dfe0dfc8afa80a23ea5fed9ed0acedcfef5a2cb6832e3f180de3e263dbcbc1583505a7da483cb42d28a02f5a1da25ea5bb1fafd919b30552aebf58dac6233040e75c80085ad0dcba7f997b9"}, {0xa0, 0x107, 0x2, "ef9c5f375a196a514905d7a5ff3de3e1a63c66d4ba7513d36cfa59b246bbf55453f262f7f6dceee144ddabd339b2c13277f12050ff6869b880c18039e23907fe03ae691860e03025022916829bdd4ca477e498db1de87759ba51c19a95f6dadfcbbf46e18c4c6696d40ef2f791e9ae6776d24ac48e2f45134922698b0330e89f8f6ed2c04ed615c63758"}, {0x98, 0x118, 0x6, "5f50a34baf4a2a49165646f701704d05532ff8d1f08cd64fc19b970adb289c757656e941cc550e9a9651cfe412933984692729ab770843a7bee36b812baa0a91f72b6a8d77ce7deba6a7bb5b7c081fef6e2f57686df6301f498496744ebd9669d2d0f4473950d8fbc68a54eccd50e3c115a28fa2a7509f59bbc462a5f31da17a0105"}, {0x38, 0x101, 0x1, "4fc57f7d099095521b430c05d26d955fc2a2dec40597886f1065b973c0dce18026"}], 0x338}, 0x20040040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r9}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x22, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x8001}, [@exit, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xc07}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x41}, @map_idx={0x18, 0x7}, @jmp={0x5, 0x0, 0x7, 0x5, 0x5, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000440)='GPL\x00', 0xd3, 0x7f, &(0x7f0000000600)=""/127, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x6, 0x80, 0x1}, 0x10, 0x2ac9f, r12, 0x0, 0x0, &(0x7f0000000700)}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12, r8}, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x89b1, &(0x7f00000002c0)={'bond0\x00'}) 1m38.143541895s ago: executing program 3 (id=1805): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x1ff, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c031a02000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000340), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x9, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x6e, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x7c}}, @fwd={0x3}, @volatile={0x2}, @union={0xe, 0x2, 0x0, 0x5, 0x1, 0xe1, [{0xd, 0x3, 0x80000001}, {0x10, 0x2, 0x9}]}]}, {0x0, [0x30, 0x0, 0x0, 0x5f, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000e00)=""/157, 0x85, 0x9d, 0x1, 0x40000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r7}, &(0x7f0000001300), &(0x7f0000001340)=r2}, 0x20) r10 = socket$kcm(0xa, 0x6, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r10, 0x29, 0x22, &(0x7f0000000100)=r11, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1f, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32, @ANYBLOB="00000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x2, 0x1, 0x1, 0x8, 0x2, 0xc, 0xfffffffffffffffc}, @map_fd={0x18, 0x7, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0xcd, 0xf7, &(0x7f0000000880)=""/247, 0x41100, 0x51, '\x00', r8, 0x17, r9, 0x8, &(0x7f0000000f00)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x3548, r11, 0x6, 0x0, &(0x7f0000000f40)=[{0x4, 0x1, 0x7, 0xa}, {0x5, 0x1, 0x3}, {0x2, 0x5, 0x6, 0x3}, {0x0, 0x4, 0x9}, {0x5, 0x4, 0x5, 0x6}, {0x3, 0x1, 0x1, 0x8}], 0x10, 0x8}, 0x94) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) 1m38.035659439s ago: executing program 2 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) 1m37.873747734s ago: executing program 1 (id=1807): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0x10d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd59, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8c5f8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1211fd16dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546003a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331df"], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x7, &(0x7f00000007c0)=""/7, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20010) close(r0) 1m37.222316304s ago: executing program 1 (id=1808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x2, 0x10}, 0xc) sendmsg$kcm(r2, 0x0, 0x0) 1m36.492483877s ago: executing program 3 (id=1809): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m36.40082563s ago: executing program 2 (id=1810): r0 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x19, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES32=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) sendmsg$sock(r0, &(0x7f00000016c0)={&(0x7f00000003c0)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000600)="82", 0x1}], 0x1}, 0x890) 1m36.39990365s ago: executing program 0 (id=1811): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) 1m36.38730251s ago: executing program 1 (id=1812): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x23, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b9ff03", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0xc4618c598d6df3a5, 0xe1ae, 0xfffffffd, 0x0, 0x2, 0x40000000, 0x3, 0x0, 0x900, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1m35.881725316s ago: executing program 0 (id=1813): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008084) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c000000000028"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0) 1m35.720459011s ago: executing program 3 (id=1814): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000080cb20c2422ce6ed64eb000100"/37], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0xc0045878, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000000000653a522e86ca87767925ab474656e896b18f0926203ada5de98f294dda49b68436b7caf114bd5be03aa0f1ac1f7c2536438f6182b95d7d9cb38bc263147024d8a3c9d616aeaebbff0b7f157dfd15a8524d836ca78e6f4e14de33511fae16195e379984071c2bf61d83db07e4e0afbe7004a5b90aec2f3b5fee7ce1466becfcea3cdf58a6f7069ddf0096a6fc1071d35551b120598a3f", 0xca}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 1m35.43910952s ago: executing program 2 (id=1815): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000032c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='}\x00'/16], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @multicast1}, 0x5, 0x0, 0x0, 0x2}}, 0x80, 0x0}, 0x20048010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0xffffffffffffff76, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x100}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="d8000000290081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000801a80016000800034003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000c5e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb79104005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4023f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cade81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4090) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "4494a5"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x46, 0x2, 0x1}, 0x28) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x10040850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x1) 1m35.43875321s ago: executing program 3 (id=1816): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x0, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808200000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m35.43821382s ago: executing program 0 (id=1817): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000200)=[{0x20, 0x11, 0x6, "bd890798368e5384d14d"}], 0x20}, 0x8050) socketpair(0x1, 0x1, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000060000000400", @ANYRES64=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000002c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90924fc60", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e120800090000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) 1m35.386066842s ago: executing program 1 (id=1818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200005c94000000000000000000008500000013000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@union={0xa, 0x2, 0x0, 0x5, 0x1, 0x7ff, [{0xf, 0x3, 0x5}, {0x0, 0x1, 0xc8fd230}]}]}, {0x0, [0x61]}}, &(0x7f00000004c0)=""/176, 0x3f, 0xb0, 0x0, 0x5d}, 0x28) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x5}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0xc}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x8, 0x3, 0x4, 0x29, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0xf}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x4, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7deec1aa, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x4d, &(0x7f0000000340)=""/77, 0x40f00, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000a00)=[{0x3, 0x1, 0x8}, {0x1, 0x3, 0x2, 0x8}, {0x2, 0x5, 0xf, 0x5}], 0x10, 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f6ffffffb704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.172803988s ago: executing program 3 (id=1819): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d04000000000000000000001004"], 0x0, 0x52}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a724, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xc7}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) 1m34.998653974s ago: executing program 0 (id=1820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x2, 0x10}, 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 0s ago: executing program 1 (id=1821): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 2: 0000000000000000 [ 370.533681][T10077] R13: 00007f6e74816038 R14: 00007f6e74815fa0 R15: 00007ffcb1697138 [ 370.541711][T10077] [ 370.648012][T10082] netlink: 'syz.2.1421': attribute type 29 has an invalid length. [ 370.703726][T10082] netlink: 'syz.2.1421': attribute type 29 has an invalid length. [ 371.059697][T10089] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 371.074289][T10089] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1424'. [ 371.411671][T10098] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1428'. [ 371.500165][T10101] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1430'. [ 371.516959][T10101] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 371.547381][T10101] CPU: 1 PID: 10101 Comm: syz.2.1430 Not tainted syzkaller #0 [ 371.554959][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.565075][T10101] Call Trace: [ 371.568406][T10101] [ 371.571397][T10101] dump_stack_lvl+0x18c/0x250 [ 371.576198][T10101] ? show_regs_print_info+0x20/0x20 [ 371.581472][T10101] ? load_image+0x420/0x420 [ 371.586044][T10101] sysfs_warn_dup+0x8e/0xa0 [ 371.590602][T10101] sysfs_do_create_link_sd+0xc0/0x110 [ 371.596037][T10101] device_add_class_symlinks+0x1cf/0x240 [ 371.601775][T10101] device_add+0x507/0xc50 [ 371.606176][T10101] wiphy_register+0x1dad/0x2ae0 [ 371.611112][T10101] ? cfg80211_event_work+0x40/0x40 [ 371.616295][T10101] ? minstrel_ht_alloc+0x88a/0x990 [ 371.621480][T10101] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 371.627634][T10101] ieee80211_register_hw+0x3464/0x4250 [ 371.633188][T10101] ? ieee80211_tasklet_handler+0x20/0x20 [ 371.638882][T10101] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 371.644868][T10101] ? __debug_object_init+0xec/0x450 [ 371.650154][T10101] ? __asan_memset+0x22/0x40 [ 371.654816][T10101] ? __hrtimer_init+0x186/0x270 [ 371.659733][T10101] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 371.665547][T10101] ? mac80211_hwsim_free+0x220/0x220 [ 371.670886][T10101] ? rcu_is_watching+0x15/0xb0 [ 371.675704][T10101] ? kstrndup+0xbd/0x140 [ 371.680119][T10101] hwsim_new_radio_nl+0xdc9/0x1a90 [ 371.685311][T10101] ? __nla_validate+0x50/0x50 [ 371.690076][T10101] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 371.696493][T10101] ? __nla_parse+0x40/0x50 [ 371.700994][T10101] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 371.707400][T10101] genl_family_rcv_msg_doit+0x211/0x310 [ 371.713024][T10101] ? end_current_label_crit_section+0x170/0x170 [ 371.719344][T10101] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 371.725312][T10101] ? bpf_lsm_capable+0x9/0x10 [ 371.730060][T10101] ? security_capable+0x89/0xb0 [ 371.734994][T10101] genl_rcv_msg+0x619/0x7a0 [ 371.739571][T10101] ? genl_bind+0x360/0x360 [ 371.744048][T10101] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 371.750443][T10101] ? ref_tracker_free+0x690/0x840 [ 371.755579][T10101] netlink_rcv_skb+0x241/0x4d0 [ 371.760415][T10101] ? genl_bind+0x360/0x360 [ 371.764896][T10101] ? netlink_ack+0x1180/0x1180 [ 371.769749][T10101] ? __lock_acquire+0x7d40/0x7d40 [ 371.774843][T10101] ? down_read+0x1ac/0x2e0 [ 371.779336][T10101] genl_rcv+0x28/0x40 [ 371.783384][T10101] netlink_unicast+0x751/0x8d0 [ 371.788220][T10101] netlink_sendmsg+0x8d0/0xbf0 [ 371.793061][T10101] ? netlink_getsockopt+0x590/0x590 [ 371.798323][T10101] ? aa_sock_msg_perm+0x94/0x150 [ 371.803336][T10101] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 371.808697][T10101] ? security_socket_sendmsg+0x80/0xa0 [ 371.814223][T10101] ? netlink_getsockopt+0x590/0x590 [ 371.819497][T10101] ____sys_sendmsg+0x5ba/0x960 [ 371.824342][T10101] ? __asan_memset+0x22/0x40 [ 371.829000][T10101] ? __sys_sendmsg_sock+0x30/0x30 [ 371.834091][T10101] ? __import_iovec+0x5f2/0x850 [ 371.839015][T10101] ? import_iovec+0x73/0xa0 [ 371.843583][T10101] ___sys_sendmsg+0x2a6/0x360 [ 371.848335][T10101] ? __sys_sendmsg+0x2a0/0x2a0 [ 371.853199][T10101] ? __lock_acquire+0x7d40/0x7d40 [ 371.858312][T10101] __se_sys_sendmsg+0x1c2/0x2b0 [ 371.863230][T10101] ? __x64_sys_sendmsg+0x80/0x80 [ 371.868257][T10101] ? lockdep_hardirqs_on+0x98/0x150 [ 371.873533][T10101] do_syscall_64+0x55/0xb0 [ 371.878010][T10101] ? clear_bhb_loop+0x40/0x90 [ 371.882744][T10101] ? clear_bhb_loop+0x40/0x90 [ 371.887475][T10101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.893626][T10101] RIP: 0033:0x7f1706f9ce59 [ 371.898109][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.917779][T10101] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.926289][T10101] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 371.934328][T10101] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 371.942359][T10101] RBP: 00007f1707032e6f R08: 0000000000000000 R09: 0000000000000000 [ 371.950390][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.958425][T10101] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 371.966475][T10101] [ 372.574773][T10118] netlink: 'syz.1.1436': attribute type 3 has an invalid length. [ 372.584009][T10118] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1436'. [ 372.789284][T10120] netlink: 'syz.2.1437': attribute type 3 has an invalid length. [ 372.799146][T10120] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1437'. [ 372.901921][T10126] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1440'. [ 373.175750][T10133] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1443'. [ 373.242492][T10133] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 373.256096][T10133] CPU: 0 PID: 10133 Comm: syz.0.1443 Not tainted syzkaller #0 [ 373.263750][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.273877][T10133] Call Trace: [ 373.277224][T10133] [ 373.280241][T10133] dump_stack_lvl+0x18c/0x250 [ 373.284992][T10133] ? show_regs_print_info+0x20/0x20 [ 373.290260][T10133] ? load_image+0x420/0x420 [ 373.294842][T10133] sysfs_warn_dup+0x8e/0xa0 [ 373.299412][T10133] sysfs_do_create_link_sd+0xc0/0x110 [ 373.304870][T10133] device_add_class_symlinks+0x1cf/0x240 [ 373.307180][T10138] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 373.310554][T10133] device_add+0x507/0xc50 [ 373.310592][T10133] wiphy_register+0x1dad/0x2ae0 [ 373.310646][T10133] ? cfg80211_event_work+0x40/0x40 [ 373.310676][T10133] ? minstrel_ht_alloc+0x88a/0x990 [ 373.310710][T10133] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 373.310749][T10133] ieee80211_register_hw+0x3464/0x4250 [ 373.310807][T10133] ? ieee80211_tasklet_handler+0x20/0x20 [ 373.310834][T10133] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 373.361453][T10133] ? __debug_object_init+0xec/0x450 [ 373.366708][T10133] ? __asan_memset+0x22/0x40 [ 373.371346][T10133] ? __hrtimer_init+0x186/0x270 [ 373.376247][T10133] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 373.382046][T10133] ? mac80211_hwsim_free+0x220/0x220 [ 373.387370][T10133] ? rcu_is_watching+0x15/0xb0 [ 373.392181][T10133] ? kstrndup+0xbd/0x140 [ 373.396481][T10133] hwsim_new_radio_nl+0xdc9/0x1a90 [ 373.401651][T10133] ? __nla_validate+0x50/0x50 [ 373.406378][T10133] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 373.412755][T10133] ? __nla_parse+0x40/0x50 [ 373.417209][T10133] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 373.423593][T10133] genl_family_rcv_msg_doit+0x211/0x310 [ 373.429225][T10133] ? end_current_label_crit_section+0x170/0x170 [ 373.435538][T10133] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 373.441489][T10133] ? bpf_lsm_capable+0x9/0x10 [ 373.446207][T10133] ? security_capable+0x89/0xb0 [ 373.451112][T10133] genl_rcv_msg+0x619/0x7a0 [ 373.455664][T10133] ? genl_bind+0x360/0x360 [ 373.460116][T10133] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 373.466483][T10133] ? ref_tracker_free+0x690/0x840 [ 373.471559][T10133] netlink_rcv_skb+0x241/0x4d0 [ 373.476363][T10133] ? genl_bind+0x360/0x360 [ 373.480821][T10133] ? netlink_ack+0x1180/0x1180 [ 373.485640][T10133] ? __lock_acquire+0x7d40/0x7d40 [ 373.490708][T10133] ? down_read+0x1ac/0x2e0 [ 373.495165][T10133] genl_rcv+0x28/0x40 [ 373.499191][T10133] netlink_unicast+0x751/0x8d0 [ 373.504008][T10133] netlink_sendmsg+0x8d0/0xbf0 [ 373.508830][T10133] ? netlink_getsockopt+0x590/0x590 [ 373.514135][T10133] ? aa_sock_msg_perm+0x94/0x150 [ 373.519124][T10133] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 373.524451][T10133] ? security_socket_sendmsg+0x80/0xa0 [ 373.529955][T10133] ? netlink_getsockopt+0x590/0x590 [ 373.535197][T10133] ____sys_sendmsg+0x5ba/0x960 [ 373.540008][T10133] ? __asan_memset+0x22/0x40 [ 373.544643][T10133] ? __sys_sendmsg_sock+0x30/0x30 [ 373.549704][T10133] ? __import_iovec+0x5f2/0x850 [ 373.554644][T10133] ? import_iovec+0x73/0xa0 [ 373.559191][T10133] ___sys_sendmsg+0x2a6/0x360 [ 373.563919][T10133] ? __sys_sendmsg+0x2a0/0x2a0 [ 373.568768][T10133] __se_sys_sendmsg+0x1c2/0x2b0 [ 373.573675][T10133] ? __x64_sys_sendmsg+0x80/0x80 [ 373.578668][T10133] ? lockdep_hardirqs_on+0x98/0x150 [ 373.583921][T10133] do_syscall_64+0x55/0xb0 [ 373.588377][T10133] ? clear_bhb_loop+0x40/0x90 [ 373.593095][T10133] ? clear_bhb_loop+0x40/0x90 [ 373.597806][T10133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.603755][T10133] RIP: 0033:0x7fc23259ce59 [ 373.608212][T10133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.627868][T10133] RSP: 002b:00007fc233485028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.636329][T10133] RAX: ffffffffffffffda RBX: 00007fc232815fa0 RCX: 00007fc23259ce59 [ 373.644351][T10133] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 373.652362][T10133] RBP: 00007fc232632e6f R08: 0000000000000000 R09: 0000000000000000 [ 373.660367][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.668373][T10133] R13: 00007fc232816038 R14: 00007fc232815fa0 R15: 00007fff55dbef48 [ 373.676398][T10133] [ 373.705474][T10138] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 374.243390][T10151] netlink: 'syz.3.1449': attribute type 3 has an invalid length. [ 374.934669][T10162] __nla_validate_parse: 1 callbacks suppressed [ 374.934692][T10162] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1452'. [ 375.152686][T10167] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1455'. [ 375.190426][T10167] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 375.210065][T10169] netlink: 'syz.1.1454': attribute type 29 has an invalid length. [ 375.223339][T10167] CPU: 1 PID: 10167 Comm: syz.2.1455 Not tainted syzkaller #0 [ 375.230903][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.241025][T10167] Call Trace: [ 375.244358][T10167] [ 375.247338][T10167] dump_stack_lvl+0x18c/0x250 [ 375.252090][T10167] ? show_regs_print_info+0x20/0x20 [ 375.257359][T10167] ? load_image+0x420/0x420 [ 375.261964][T10167] sysfs_warn_dup+0x8e/0xa0 [ 375.266545][T10167] sysfs_do_create_link_sd+0xc0/0x110 [ 375.271984][T10167] device_add_class_symlinks+0x1cf/0x240 [ 375.277705][T10167] device_add+0x507/0xc50 [ 375.282117][T10167] wiphy_register+0x1dad/0x2ae0 [ 375.287072][T10167] ? cfg80211_event_work+0x40/0x40 [ 375.292251][T10167] ? minstrel_ht_alloc+0x88a/0x990 [ 375.297436][T10167] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 375.303605][T10167] ieee80211_register_hw+0x3464/0x4250 [ 375.309158][T10167] ? ieee80211_tasklet_handler+0x20/0x20 [ 375.314858][T10167] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 375.320836][T10167] ? __debug_object_init+0xec/0x450 [ 375.326117][T10167] ? __asan_memset+0x22/0x40 [ 375.330786][T10167] ? __hrtimer_init+0x186/0x270 [ 375.335699][T10167] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 375.341495][T10167] ? mac80211_hwsim_free+0x220/0x220 [ 375.346848][T10167] ? rcu_is_watching+0x15/0xb0 [ 375.351661][T10167] ? kstrndup+0xbd/0x140 [ 375.355965][T10167] hwsim_new_radio_nl+0xdc9/0x1a90 [ 375.361128][T10167] ? __nla_validate+0x50/0x50 [ 375.365855][T10167] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 375.372240][T10167] ? __nla_parse+0x40/0x50 [ 375.376702][T10167] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 375.383088][T10167] genl_family_rcv_msg_doit+0x211/0x310 [ 375.388693][T10167] ? end_current_label_crit_section+0x170/0x170 [ 375.394992][T10167] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 375.400948][T10167] ? bpf_lsm_capable+0x9/0x10 [ 375.405674][T10167] ? security_capable+0x89/0xb0 [ 375.410577][T10167] genl_rcv_msg+0x619/0x7a0 [ 375.415134][T10167] ? genl_bind+0x360/0x360 [ 375.419594][T10167] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 375.425978][T10167] ? ref_tracker_free+0x690/0x840 [ 375.431075][T10167] netlink_rcv_skb+0x241/0x4d0 [ 375.435885][T10167] ? genl_bind+0x360/0x360 [ 375.440342][T10167] ? netlink_ack+0x1180/0x1180 [ 375.445161][T10167] ? __lock_acquire+0x7d40/0x7d40 [ 375.450231][T10167] ? down_read+0x1ac/0x2e0 [ 375.454694][T10167] genl_rcv+0x28/0x40 [ 375.458715][T10167] netlink_unicast+0x751/0x8d0 [ 375.463526][T10167] netlink_sendmsg+0x8d0/0xbf0 [ 375.468381][T10167] ? netlink_getsockopt+0x590/0x590 [ 375.473624][T10167] ? aa_sock_msg_perm+0x94/0x150 [ 375.478603][T10167] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 375.483932][T10167] ? security_socket_sendmsg+0x80/0xa0 [ 375.489476][T10167] ? netlink_getsockopt+0x590/0x590 [ 375.494725][T10167] ____sys_sendmsg+0x5ba/0x960 [ 375.499566][T10167] ? __asan_memset+0x22/0x40 [ 375.504200][T10167] ? __sys_sendmsg_sock+0x30/0x30 [ 375.509270][T10167] ? __import_iovec+0x5f2/0x850 [ 375.514164][T10167] ? import_iovec+0x73/0xa0 [ 375.518723][T10167] ___sys_sendmsg+0x2a6/0x360 [ 375.523459][T10167] ? __sys_sendmsg+0x2a0/0x2a0 [ 375.528313][T10167] __se_sys_sendmsg+0x1c2/0x2b0 [ 375.533207][T10167] ? __x64_sys_sendmsg+0x80/0x80 [ 375.538202][T10167] ? lockdep_hardirqs_on+0x98/0x150 [ 375.543460][T10167] do_syscall_64+0x55/0xb0 [ 375.547917][T10167] ? clear_bhb_loop+0x40/0x90 [ 375.552625][T10167] ? clear_bhb_loop+0x40/0x90 [ 375.557336][T10167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.563282][T10167] RIP: 0033:0x7f1706f9ce59 [ 375.567739][T10167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.587406][T10167] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.595888][T10167] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 375.603901][T10167] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 375.611914][T10167] RBP: 00007f1707032e6f R08: 0000000000000000 R09: 0000000000000000 [ 375.619927][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.627931][T10167] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 375.635979][T10167] [ 375.645188][T10169] netlink: 'syz.1.1454': attribute type 29 has an invalid length. [ 375.833047][T10176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1457'. [ 375.877811][T10180] netlink: 'syz.2.1459': attribute type 21 has an invalid length. [ 375.899476][T10180] netlink: 14530 bytes leftover after parsing attributes in process `syz.2.1459'. [ 376.023169][T10186] netlink: 'syz.0.1460': attribute type 153 has an invalid length. [ 376.033051][T10186] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1460'. [ 376.480635][T10197] netlink: 'syz.0.1464': attribute type 21 has an invalid length. [ 376.879357][T10201] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1465'. [ 377.390112][T10209] netlink: 'syz.3.1467': attribute type 29 has an invalid length. [ 377.417112][T10209] netlink: 'syz.3.1467': attribute type 29 has an invalid length. [ 377.740020][T10215] netlink: 'syz.0.1469': attribute type 3 has an invalid length. [ 377.753890][T10215] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1469'. [ 377.796574][T10220] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1471'. [ 378.029621][T10229] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1476'. [ 378.114503][T10232] FAULT_INJECTION: forcing a failure. [ 378.114503][T10232] name failslab, interval 1, probability 0, space 0, times 0 [ 378.143004][T10232] CPU: 0 PID: 10232 Comm: syz.1.1477 Not tainted syzkaller #0 [ 378.150585][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.160860][T10232] Call Trace: [ 378.164225][T10232] [ 378.167244][T10232] dump_stack_lvl+0x18c/0x250 [ 378.172032][T10232] ? show_regs_print_info+0x20/0x20 [ 378.177334][T10232] ? load_image+0x420/0x420 [ 378.181947][T10232] ? __might_sleep+0xe0/0xe0 [ 378.186627][T10232] ? __lock_acquire+0x7d40/0x7d40 [ 378.191740][T10232] ? __lock_acquire+0x7d40/0x7d40 [ 378.196863][T10232] should_fail_ex+0x39d/0x4d0 [ 378.201683][T10232] should_failslab+0x9/0x20 [ 378.206289][T10232] slab_pre_alloc_hook+0x59/0x310 [ 378.211435][T10232] ? __lock_acquire+0x1347/0x7d40 [ 378.216640][T10232] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 378.222153][T10232] __kmem_cache_alloc_node+0x53/0x250 [ 378.227643][T10232] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 378.233106][T10232] kmalloc_trace+0x2a/0xe0 [ 378.237627][T10232] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 378.242946][T10232] tcp_sendmsg_locked+0x4621/0x4bd0 [ 378.248231][T10232] ? verify_lock_unused+0x140/0x140 [ 378.253528][T10232] ? perf_trace_lock_acquire+0x34f/0x410 [ 378.259304][T10232] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 378.266084][T10232] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 378.272786][T10232] ? __lock_acquire+0x7d40/0x7d40 [ 378.277935][T10232] ? mark_lock+0x94/0x320 [ 378.282492][T10232] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 378.288581][T10232] ? lock_chain_count+0x20/0x20 [ 378.293567][T10232] ? tcp_set_state+0x680/0x680 [ 378.298473][T10232] ? do_raw_spin_unlock+0x121/0x230 [ 378.303877][T10232] tcp_sendmsg+0x2f/0x50 [ 378.308228][T10232] smc_sendmsg+0x24b/0x4d0 [ 378.312859][T10232] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 378.318236][T10232] ? security_socket_sendmsg+0x80/0xa0 [ 378.323779][T10232] ? smc_getsockopt+0x3a0/0x3a0 [ 378.328728][T10232] ____sys_sendmsg+0x5ba/0x960 [ 378.333804][T10232] ? __lock_acquire+0x7d40/0x7d40 [ 378.338942][T10232] ? __asan_memset+0x22/0x40 [ 378.343631][T10232] ? __sys_sendmsg_sock+0x30/0x30 [ 378.348749][T10232] ? __import_iovec+0x3fa/0x850 [ 378.353726][T10232] ? import_iovec+0x73/0xa0 [ 378.358339][T10232] ___sys_sendmsg+0x2a6/0x360 [ 378.363113][T10232] ? get_pid_task+0x20/0x1e0 [ 378.367819][T10232] ? __sys_sendmsg+0x2a0/0x2a0 [ 378.372770][T10232] ? __lock_acquire+0x7d40/0x7d40 [ 378.377989][T10232] __se_sys_sendmsg+0x1c2/0x2b0 [ 378.383003][T10232] ? __x64_sys_sendmsg+0x80/0x80 [ 378.388144][T10232] ? lockdep_hardirqs_on+0x98/0x150 [ 378.393464][T10232] do_syscall_64+0x55/0xb0 [ 378.398158][T10232] ? clear_bhb_loop+0x40/0x90 [ 378.402929][T10232] ? clear_bhb_loop+0x40/0x90 [ 378.407702][T10232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.413668][T10232] RIP: 0033:0x7f85d8f9ce59 [ 378.418147][T10232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.437821][T10232] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.446305][T10232] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 378.454373][T10232] RDX: 00000000200048cc RSI: 0000200000000240 RDI: 000000000000000a [ 378.462424][T10232] RBP: 00007f85d9f17090 R08: 0000000000000000 R09: 0000000000000000 [ 378.470508][T10232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.478540][T10232] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 378.486651][T10232] [ 378.875305][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.883830][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.336561][T10250] netlink: 'syz.3.1483': attribute type 3 has an invalid length. [ 379.354425][T10250] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1483'. [ 379.623530][T10256] FAULT_INJECTION: forcing a failure. [ 379.623530][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.627722][T10257] delete_channel: no stack [ 379.645055][T10256] CPU: 1 PID: 10256 Comm: syz.1.1485 Not tainted syzkaller #0 [ 379.652615][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.662733][T10256] Call Trace: [ 379.666066][T10256] [ 379.669093][T10256] dump_stack_lvl+0x18c/0x250 [ 379.673840][T10256] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.680069][T10256] ? show_regs_print_info+0x20/0x20 [ 379.685344][T10256] ? load_image+0x420/0x420 [ 379.689962][T10256] should_fail_ex+0x39d/0x4d0 [ 379.694720][T10256] _copy_from_user+0x2f/0xe0 [ 379.699398][T10256] csum_and_copy_from_iter+0x476/0x14a0 [ 379.705041][T10256] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 379.710743][T10256] ? __kasan_slab_alloc+0x6c/0x80 [ 379.715845][T10256] ? slab_post_alloc_hook+0x8a/0x4b0 [ 379.721207][T10256] ? rcu_is_watching+0x15/0xb0 [ 379.726037][T10256] ip_generic_getfrag+0x163/0x2f0 [ 379.731150][T10256] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 379.736063][T10256] ? skb_put+0x11b/0x210 [ 379.740399][T10256] __ip_append_data+0x2e80/0x3b80 [ 379.745590][T10256] ? raw_send_hdrinc+0x1140/0x1140 [ 379.750778][T10256] ? mark_lock+0x94/0x320 [ 379.755155][T10256] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 379.761179][T10256] ? ip_setup_cork+0x860/0x860 [ 379.765989][T10256] ? ip_setup_cork+0x530/0x860 [ 379.770788][T10256] ip_append_data+0x10d/0x180 [ 379.775518][T10256] ? raw_send_hdrinc+0x1140/0x1140 [ 379.780668][T10256] raw_sendmsg+0x15c1/0x1c00 [ 379.785314][T10256] ? compat_raw_ioctl+0x70/0x70 [ 379.790208][T10256] ? perf_trace_preemptirq_template+0x269/0x330 [ 379.796513][T10256] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 379.802971][T10256] ? sock_rps_record_flow+0x19/0x3f0 [ 379.808328][T10256] ? inet_sendmsg+0x7c/0x2f0 [ 379.812960][T10256] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 379.818279][T10256] ? security_socket_sendmsg+0x80/0xa0 [ 379.823776][T10256] ? inet_send_prepare+0x260/0x260 [ 379.828934][T10256] ____sys_sendmsg+0x5ba/0x960 [ 379.833739][T10256] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 379.839335][T10256] ? __asan_memset+0x22/0x40 [ 379.843976][T10256] ? __sys_sendmsg_sock+0x30/0x30 [ 379.849032][T10256] ? __import_iovec+0x3fa/0x850 [ 379.853922][T10256] ? import_iovec+0x73/0xa0 [ 379.858463][T10256] ___sys_sendmsg+0x2a6/0x360 [ 379.863189][T10256] ? __sys_sendmsg+0x2a0/0x2a0 [ 379.868029][T10256] __se_sys_sendmsg+0x1c2/0x2b0 [ 379.872929][T10256] ? __x64_sys_sendmsg+0x80/0x80 [ 379.877926][T10256] ? syscall_enter_from_user_mode+0x2e/0x80 [ 379.883860][T10256] do_syscall_64+0x55/0xb0 [ 379.888310][T10256] ? clear_bhb_loop+0x40/0x90 [ 379.893023][T10256] ? clear_bhb_loop+0x40/0x90 [ 379.897737][T10256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.903677][T10256] RIP: 0033:0x7f85d8f9ce59 [ 379.908123][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.927763][T10256] RSP: 002b:00007f85d9ef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.936216][T10256] RAX: ffffffffffffffda RBX: 00007f85d9216090 RCX: 00007f85d8f9ce59 [ 379.944220][T10256] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 379.952223][T10256] RBP: 00007f85d9ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 379.960245][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.968269][T10256] R13: 00007f85d9216128 R14: 00007f85d9216090 R15: 00007ffe03722ff8 [ 379.976297][T10256] [ 380.015915][T10260] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1487'. [ 380.142561][T10262] netlink: 'syz.2.1488': attribute type 153 has an invalid length. [ 380.169131][T10262] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1488'. [ 380.493578][T10270] FAULT_INJECTION: forcing a failure. [ 380.493578][T10270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.528209][T10270] CPU: 0 PID: 10270 Comm: syz.2.1491 Not tainted syzkaller #0 [ 380.535812][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.545966][T10270] Call Trace: [ 380.549333][T10270] [ 380.552360][T10270] dump_stack_lvl+0x18c/0x250 [ 380.557166][T10270] ? show_regs_print_info+0x20/0x20 [ 380.562475][T10270] ? load_image+0x420/0x420 [ 380.567103][T10270] ? __lock_acquire+0x7d40/0x7d40 [ 380.572286][T10270] should_fail_ex+0x39d/0x4d0 [ 380.577139][T10270] _copy_from_user+0x2f/0xe0 [ 380.581859][T10270] __copy_msghdr+0x3bb/0x580 [ 380.586579][T10270] ___sys_sendmsg+0x214/0x360 [ 380.591400][T10270] ? __sys_sendmsg+0x2a0/0x2a0 [ 380.596344][T10270] ? __lock_acquire+0x7d40/0x7d40 [ 380.601640][T10270] __se_sys_sendmsg+0x1c2/0x2b0 [ 380.606581][T10270] ? __x64_sys_sendmsg+0x80/0x80 [ 380.611679][T10270] ? lockdep_hardirqs_on+0x98/0x150 [ 380.616986][T10270] do_syscall_64+0x55/0xb0 [ 380.621488][T10270] ? clear_bhb_loop+0x40/0x90 [ 380.626228][T10270] ? clear_bhb_loop+0x40/0x90 [ 380.630978][T10270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.636976][T10270] RIP: 0033:0x7f1706f9ce59 [ 380.641502][T10270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.661196][T10270] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.669792][T10270] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 380.677835][T10270] RDX: 00000000200048cc RSI: 0000200000000240 RDI: 0000000000000004 [ 380.685875][T10270] RBP: 00007f1707dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 380.693915][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.701966][T10270] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 380.710067][T10270] [ 381.158096][T10278] netlink: 'syz.2.1494': attribute type 2 has an invalid length. [ 381.168041][T10278] netlink: 'syz.2.1494': attribute type 1 has an invalid length. [ 381.176831][T10278] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1494'. [ 381.271311][T10287] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1498'. [ 381.416261][T10289] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1507'. [ 381.555960][T10293] netlink: 'syz.3.1499': attribute type 153 has an invalid length. [ 381.582628][T10293] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1499'. [ 383.179606][T10322] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1510'. [ 383.424642][T10326] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1512'. [ 383.435899][T10326] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 383.451458][T10326] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 383.577399][T10334] FAULT_INJECTION: forcing a failure. [ 383.577399][T10334] name failslab, interval 1, probability 0, space 0, times 0 [ 383.592416][T10334] CPU: 0 PID: 10334 Comm: syz.1.1515 Not tainted syzkaller #0 [ 383.599941][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.610048][T10334] Call Trace: [ 383.613372][T10334] [ 383.616343][T10334] dump_stack_lvl+0x18c/0x250 [ 383.621071][T10334] ? show_regs_print_info+0x20/0x20 [ 383.626307][T10334] ? load_image+0x420/0x420 [ 383.630844][T10334] ? __might_sleep+0xe0/0xe0 [ 383.635483][T10334] ? __lock_acquire+0x7d40/0x7d40 [ 383.640585][T10334] should_fail_ex+0x39d/0x4d0 [ 383.645307][T10334] should_failslab+0x9/0x20 [ 383.649845][T10334] slab_pre_alloc_hook+0x59/0x310 [ 383.654917][T10334] ? lock_chain_count+0x20/0x20 [ 383.659805][T10334] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 383.665220][T10334] __kmem_cache_alloc_node+0x53/0x250 [ 383.670674][T10334] ? __local_bh_enable_ip+0x13a/0x1c0 [ 383.676084][T10334] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 383.681487][T10334] kmalloc_trace+0x2a/0xe0 [ 383.685947][T10334] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 383.691195][T10334] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 383.696696][T10334] mptcp_sendmsg+0x14b2/0x16d0 [ 383.701503][T10334] ? __lock_acquire+0x1273/0x7d40 [ 383.706585][T10334] ? verify_lock_unused+0x140/0x140 [ 383.711825][T10334] ? aa_sk_perm+0x83c/0x970 [ 383.716397][T10334] ? aa_af_perm+0x330/0x330 [ 383.720932][T10334] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 383.727381][T10334] ? mptcp_shutdown+0x80/0x80 [ 383.732097][T10334] ? sock_rps_record_flow+0x19/0x3f0 [ 383.737430][T10334] ? inet_sendmsg+0xe9/0x2f0 [ 383.742071][T10334] ? inet_send_prepare+0x260/0x260 [ 383.747220][T10334] ____sys_sendmsg+0x5ba/0x960 [ 383.752027][T10334] ? __asan_memset+0x22/0x40 [ 383.756665][T10334] ? __sys_sendmsg_sock+0x30/0x30 [ 383.761730][T10334] ? __import_iovec+0x3fa/0x850 [ 383.766625][T10334] ? import_iovec+0x73/0xa0 [ 383.771164][T10334] ___sys_sendmsg+0x2a6/0x360 [ 383.775897][T10334] ? __sys_sendmsg+0x2a0/0x2a0 [ 383.780722][T10334] ? trace_call_bpf+0xc3/0x6c0 [ 383.785557][T10334] __se_sys_sendmsg+0x1c2/0x2b0 [ 383.790459][T10334] ? __x64_sys_sendmsg+0x80/0x80 [ 383.795454][T10334] ? lockdep_hardirqs_on+0x98/0x150 [ 383.800704][T10334] do_syscall_64+0x55/0xb0 [ 383.805168][T10334] ? clear_bhb_loop+0x40/0x90 [ 383.809893][T10334] ? clear_bhb_loop+0x40/0x90 [ 383.814608][T10334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.820547][T10334] RIP: 0033:0x7f85d8f9ce59 [ 383.825003][T10334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.844649][T10334] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.853098][T10334] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 383.861105][T10334] RDX: 0000000030004084 RSI: 0000200000000080 RDI: 0000000000000003 [ 383.869160][T10334] RBP: 00007f85d9f17090 R08: 0000000000000000 R09: 0000000000000000 [ 383.877170][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.885175][T10334] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 383.893196][T10334] [ 384.321022][T10348] netlink: 'syz.3.1519': attribute type 29 has an invalid length. [ 384.340700][T10348] netlink: 'syz.3.1519': attribute type 29 has an invalid length. [ 385.015861][T10358] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1522'. [ 385.188347][T10361] netlink: 'syz.1.1525': attribute type 29 has an invalid length. [ 385.198006][T10361] netlink: 'syz.1.1525': attribute type 29 has an invalid length. [ 385.262720][T10361] netlink: 'syz.1.1525': attribute type 29 has an invalid length. [ 385.297257][T10364] netlink: 'syz.1.1525': attribute type 29 has an invalid length. [ 385.312977][T10361] netlink: 'syz.1.1525': attribute type 29 has an invalid length. [ 385.493714][T10367] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1527'. [ 385.512934][T10367] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1527'. [ 385.523243][T10367] `: renamed from syz_tun (while UP) [ 385.758180][T10371] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1528'. [ 386.336760][T10381] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1532'. [ 386.373438][T10381] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 386.411217][T10381] CPU: 1 PID: 10381 Comm: syz.1.1532 Not tainted syzkaller #0 [ 386.418819][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.428968][T10381] Call Trace: [ 386.432332][T10381] [ 386.435353][T10381] dump_stack_lvl+0x18c/0x250 [ 386.440195][T10381] ? show_regs_print_info+0x20/0x20 [ 386.445497][T10381] ? load_image+0x420/0x420 [ 386.450160][T10381] sysfs_warn_dup+0x8e/0xa0 [ 386.454760][T10381] sysfs_do_create_link_sd+0xc0/0x110 [ 386.460240][T10381] device_add_class_symlinks+0x1cf/0x240 [ 386.466005][T10381] device_add+0x507/0xc50 [ 386.470458][T10381] wiphy_register+0x1dad/0x2ae0 [ 386.475487][T10381] ? cfg80211_event_work+0x40/0x40 [ 386.480688][T10381] ? minstrel_ht_alloc+0x88a/0x990 [ 386.485938][T10381] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 386.492144][T10381] ieee80211_register_hw+0x3464/0x4250 [ 386.497786][T10381] ? ieee80211_tasklet_handler+0x20/0x20 [ 386.503538][T10381] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 386.509552][T10381] ? __debug_object_init+0xec/0x450 [ 386.514869][T10381] ? __asan_memset+0x22/0x40 [ 386.519559][T10381] ? __hrtimer_init+0x186/0x270 [ 386.524514][T10381] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 386.530372][T10381] ? mac80211_hwsim_free+0x220/0x220 [ 386.535721][T10381] ? rcu_is_watching+0x15/0xb0 [ 386.540559][T10381] ? kstrndup+0xbd/0x140 [ 386.544915][T10381] hwsim_new_radio_nl+0xdc9/0x1a90 [ 386.550142][T10381] ? __nla_validate+0x50/0x50 [ 386.554920][T10381] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 386.561349][T10381] ? __nla_parse+0x40/0x50 [ 386.565840][T10381] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 386.572258][T10381] genl_family_rcv_msg_doit+0x211/0x310 [ 386.577875][T10381] ? end_current_label_crit_section+0x170/0x170 [ 386.584192][T10381] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 386.590175][T10381] ? bpf_lsm_capable+0x9/0x10 [ 386.594916][T10381] ? security_capable+0x89/0xb0 [ 386.599856][T10381] genl_rcv_msg+0x619/0x7a0 [ 386.604440][T10381] ? genl_bind+0x360/0x360 [ 386.608925][T10381] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 386.615324][T10381] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 386.622068][T10381] ? ref_tracker_free+0x690/0x840 [ 386.627203][T10381] netlink_rcv_skb+0x241/0x4d0 [ 386.632038][T10381] ? genl_bind+0x360/0x360 [ 386.636797][T10381] ? netlink_ack+0x1180/0x1180 [ 386.641670][T10381] ? __lock_acquire+0x7d40/0x7d40 [ 386.646800][T10381] ? down_read+0x1ac/0x2e0 [ 386.651309][T10381] genl_rcv+0x28/0x40 [ 386.655355][T10381] netlink_unicast+0x751/0x8d0 [ 386.660217][T10381] netlink_sendmsg+0x8d0/0xbf0 [ 386.665069][T10381] ? netlink_getsockopt+0x590/0x590 [ 386.670350][T10381] ? aa_sock_msg_perm+0x94/0x150 [ 386.675362][T10381] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 386.680710][T10381] ? security_socket_sendmsg+0x80/0xa0 [ 386.686231][T10381] ? netlink_getsockopt+0x590/0x590 [ 386.691505][T10381] ____sys_sendmsg+0x5ba/0x960 [ 386.696361][T10381] ? __asan_memset+0x22/0x40 [ 386.701030][T10381] ? __sys_sendmsg_sock+0x30/0x30 [ 386.706734][T10381] ? __import_iovec+0x5f2/0x850 [ 386.711679][T10381] ? import_iovec+0x73/0xa0 [ 386.716257][T10381] ___sys_sendmsg+0x2a6/0x360 [ 386.721281][T10381] ? __sys_sendmsg+0x2a0/0x2a0 [ 386.726332][T10381] __se_sys_sendmsg+0x1c2/0x2b0 [ 386.731269][T10381] ? __x64_sys_sendmsg+0x80/0x80 [ 386.736322][T10381] ? lockdep_hardirqs_on+0x98/0x150 [ 386.741617][T10381] do_syscall_64+0x55/0xb0 [ 386.746103][T10381] ? clear_bhb_loop+0x40/0x90 [ 386.750841][T10381] ? clear_bhb_loop+0x40/0x90 [ 386.755589][T10381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.761582][T10381] RIP: 0033:0x7f85d8f9ce59 [ 386.766066][T10381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.785733][T10381] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.794311][T10381] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 386.802337][T10381] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 386.810364][T10381] RBP: 00007f85d9032e6f R08: 0000000000000000 R09: 0000000000000000 [ 386.818396][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.826431][T10381] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 386.834509][T10381] [ 388.231470][T10404] FAULT_INJECTION: forcing a failure. [ 388.231470][T10404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.244796][T10404] CPU: 1 PID: 10404 Comm: syz.2.1539 Not tainted syzkaller #0 [ 388.252311][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.262420][T10404] Call Trace: [ 388.265742][T10404] [ 388.268717][T10404] dump_stack_lvl+0x18c/0x250 [ 388.273460][T10404] ? show_regs_print_info+0x20/0x20 [ 388.278807][T10404] ? load_image+0x420/0x420 [ 388.283376][T10404] ? __lock_acquire+0x7d40/0x7d40 [ 388.288459][T10404] ? snprintf+0xe9/0x140 [ 388.292809][T10404] should_fail_ex+0x39d/0x4d0 [ 388.297600][T10404] _copy_to_user+0x2f/0xa0 [ 388.302089][T10404] simple_read_from_buffer+0xe7/0x150 [ 388.307529][T10404] proc_fail_nth_read+0x1e8/0x260 [ 388.312626][T10404] ? proc_fault_inject_write+0x360/0x360 [ 388.318328][T10404] ? fsnotify_perm+0x271/0x5e0 [ 388.323145][T10404] ? proc_fault_inject_write+0x360/0x360 [ 388.323882][T10405] validate_nla: 3 callbacks suppressed [ 388.323962][T10405] netlink: 'syz.0.1540': attribute type 29 has an invalid length. [ 388.328820][T10404] vfs_read+0x28b/0x970 [ 388.328888][T10404] ? kernel_read+0x1e0/0x1e0 [ 388.328919][T10404] ? __fget_files+0x28/0x4b0 [ 388.328947][T10404] ? __fget_files+0x28/0x4b0 [ 388.328985][T10404] ? __fget_files+0x43d/0x4b0 [ 388.329025][T10404] ? __fdget_pos+0x2a3/0x330 [ 388.329052][T10404] ? ksys_read+0x75/0x260 [ 388.374719][T10404] ksys_read+0x150/0x260 [ 388.379038][T10404] ? vfs_write+0x990/0x990 [ 388.383514][T10404] ? lockdep_hardirqs_on+0x98/0x150 [ 388.388776][T10404] do_syscall_64+0x55/0xb0 [ 388.393241][T10404] ? clear_bhb_loop+0x40/0x90 [ 388.397969][T10404] ? clear_bhb_loop+0x40/0x90 [ 388.402708][T10404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.408657][T10404] RIP: 0033:0x7f1706f5d68e [ 388.413121][T10404] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.420497][T10405] netlink: 'syz.0.1540': attribute type 29 has an invalid length. [ 388.432759][T10404] RSP: 002b:00007f1707dc1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.432790][T10404] RAX: ffffffffffffffda RBX: 00007f1707dc26c0 RCX: 00007f1706f5d68e [ 388.432805][T10404] RDX: 000000000000000f RSI: 00007f1707dc20a0 RDI: 0000000000000005 [ 388.432819][T10404] RBP: 00007f1707dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 388.432832][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.432844][T10404] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 388.432880][T10404] [ 388.723696][T10415] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1544'. [ 388.763090][T10415] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 388.781441][T10415] CPU: 0 PID: 10415 Comm: syz.1.1544 Not tainted syzkaller #0 [ 388.789033][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.799213][T10415] Call Trace: [ 388.802581][T10415] [ 388.805629][T10415] dump_stack_lvl+0x18c/0x250 [ 388.810428][T10415] ? show_regs_print_info+0x20/0x20 [ 388.815786][T10415] ? load_image+0x420/0x420 [ 388.820445][T10415] sysfs_warn_dup+0x8e/0xa0 [ 388.825137][T10415] sysfs_do_create_link_sd+0xc0/0x110 [ 388.830629][T10415] device_add_class_symlinks+0x1cf/0x240 [ 388.836416][T10415] device_add+0x507/0xc50 [ 388.840888][T10415] wiphy_register+0x1dad/0x2ae0 [ 388.845915][T10415] ? cfg80211_event_work+0x40/0x40 [ 388.851119][T10415] ? minstrel_ht_alloc+0x88a/0x990 [ 388.856450][T10415] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 388.862692][T10415] ieee80211_register_hw+0x3464/0x4250 [ 388.868671][T10415] ? ieee80211_tasklet_handler+0x20/0x20 [ 388.874428][T10415] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 388.880449][T10415] ? __debug_object_init+0xec/0x450 [ 388.885779][T10415] ? __asan_memset+0x22/0x40 [ 388.890487][T10415] ? __hrtimer_init+0x186/0x270 [ 388.895502][T10415] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 388.901450][T10415] ? mac80211_hwsim_free+0x220/0x220 [ 388.906900][T10415] ? rcu_is_watching+0x15/0xb0 [ 388.911771][T10415] ? kstrndup+0xbd/0x140 [ 388.916158][T10415] hwsim_new_radio_nl+0xdc9/0x1a90 [ 388.921404][T10415] ? __nla_validate+0x50/0x50 [ 388.926233][T10415] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 388.932710][T10415] ? __nla_parse+0x40/0x50 [ 388.937240][T10415] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 388.943696][T10415] genl_family_rcv_msg_doit+0x211/0x310 [ 388.949345][T10415] ? end_current_label_crit_section+0x170/0x170 [ 388.955715][T10415] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 388.961748][T10415] ? bpf_lsm_capable+0x9/0x10 [ 388.966533][T10415] ? security_capable+0x89/0xb0 [ 388.971530][T10415] genl_rcv_msg+0x619/0x7a0 [ 388.976180][T10415] ? genl_bind+0x360/0x360 [ 388.980700][T10415] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 388.987149][T10415] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 388.993899][T10415] ? ref_tracker_free+0x690/0x840 [ 388.999060][T10415] netlink_rcv_skb+0x241/0x4d0 [ 389.003931][T10415] ? genl_bind+0x360/0x360 [ 389.008458][T10415] ? netlink_ack+0x1180/0x1180 [ 389.013374][T10415] ? __lock_acquire+0x7d40/0x7d40 [ 389.018545][T10415] ? down_read+0x1ac/0x2e0 [ 389.023067][T10415] genl_rcv+0x28/0x40 [ 389.027138][T10415] netlink_unicast+0x751/0x8d0 [ 389.032038][T10415] netlink_sendmsg+0x8d0/0xbf0 [ 389.036934][T10415] ? netlink_getsockopt+0x590/0x590 [ 389.042331][T10415] ? aa_sock_msg_perm+0x94/0x150 [ 389.047381][T10415] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 389.052777][T10415] ? security_socket_sendmsg+0x80/0xa0 [ 389.058331][T10415] ? netlink_getsockopt+0x590/0x590 [ 389.063645][T10415] ____sys_sendmsg+0x5ba/0x960 [ 389.068584][T10415] ? __asan_memset+0x22/0x40 [ 389.073278][T10415] ? __sys_sendmsg_sock+0x30/0x30 [ 389.078478][T10415] ? __import_iovec+0x5f2/0x850 [ 389.083463][T10415] ? import_iovec+0x73/0xa0 [ 389.088085][T10415] ___sys_sendmsg+0x2a6/0x360 [ 389.092881][T10415] ? __sys_sendmsg+0x2a0/0x2a0 [ 389.097950][T10415] __se_sys_sendmsg+0x1c2/0x2b0 [ 389.102920][T10415] ? __x64_sys_sendmsg+0x80/0x80 [ 389.108050][T10415] ? lockdep_hardirqs_on+0x98/0x150 [ 389.113368][T10415] do_syscall_64+0x55/0xb0 [ 389.117885][T10415] ? clear_bhb_loop+0x40/0x90 [ 389.122650][T10415] ? clear_bhb_loop+0x40/0x90 [ 389.127436][T10415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.133430][T10415] RIP: 0033:0x7f85d8f9ce59 [ 389.137934][T10415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.157636][T10415] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.166188][T10415] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 389.174259][T10415] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 389.182333][T10415] RBP: 00007f85d9032e6f R08: 0000000000000000 R09: 0000000000000000 [ 389.190384][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.198437][T10415] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 389.206559][T10415] [ 389.652079][T10427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.542379][T10449] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1554'. [ 390.712703][T10449] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 390.739628][T10449] CPU: 0 PID: 10449 Comm: syz.1.1554 Not tainted syzkaller #0 [ 390.747225][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.757318][T10449] Call Trace: [ 390.760631][T10449] [ 390.763599][T10449] dump_stack_lvl+0x18c/0x250 [ 390.768325][T10449] ? show_regs_print_info+0x20/0x20 [ 390.773560][T10449] ? load_image+0x420/0x420 [ 390.778105][T10449] sysfs_warn_dup+0x8e/0xa0 [ 390.782645][T10449] sysfs_do_create_link_sd+0xc0/0x110 [ 390.788090][T10449] device_add_class_symlinks+0x1cf/0x240 [ 390.793769][T10449] device_add+0x507/0xc50 [ 390.798146][T10449] wiphy_register+0x1dad/0x2ae0 [ 390.803051][T10449] ? cfg80211_event_work+0x40/0x40 [ 390.808197][T10449] ? minstrel_ht_alloc+0x88a/0x990 [ 390.813357][T10449] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 390.819502][T10449] ieee80211_register_hw+0x3464/0x4250 [ 390.825019][T10449] ? ieee80211_tasklet_handler+0x20/0x20 [ 390.830685][T10449] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 390.836647][T10449] ? __debug_object_init+0xec/0x450 [ 390.841918][T10449] ? __asan_memset+0x22/0x40 [ 390.846577][T10449] ? __hrtimer_init+0x186/0x270 [ 390.851503][T10449] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 390.857307][T10449] ? mac80211_hwsim_free+0x220/0x220 [ 390.862642][T10449] ? rcu_is_watching+0x15/0xb0 [ 390.867464][T10449] ? kstrndup+0xbd/0x140 [ 390.871777][T10449] hwsim_new_radio_nl+0xdc9/0x1a90 [ 390.876955][T10449] ? __nla_validate+0x50/0x50 [ 390.881694][T10449] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 390.888090][T10449] ? __nla_parse+0x40/0x50 [ 390.892554][T10449] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 390.898944][T10449] genl_family_rcv_msg_doit+0x211/0x310 [ 390.904559][T10449] ? end_current_label_crit_section+0x170/0x170 [ 390.910867][T10449] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 390.916818][T10449] ? bpf_lsm_capable+0x9/0x10 [ 390.921549][T10449] ? security_capable+0x89/0xb0 [ 390.926459][T10449] genl_rcv_msg+0x619/0x7a0 [ 390.931020][T10449] ? genl_bind+0x360/0x360 [ 390.935483][T10449] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 390.941862][T10449] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 390.948507][T10449] ? ref_tracker_free+0x690/0x840 [ 390.953645][T10449] netlink_rcv_skb+0x241/0x4d0 [ 390.958464][T10449] ? genl_bind+0x360/0x360 [ 390.962929][T10449] ? netlink_ack+0x1180/0x1180 [ 390.967750][T10449] ? __lock_acquire+0x7d40/0x7d40 [ 390.972836][T10449] ? down_read+0x1ac/0x2e0 [ 390.977309][T10449] genl_rcv+0x28/0x40 [ 390.981340][T10449] netlink_unicast+0x751/0x8d0 [ 390.986167][T10449] netlink_sendmsg+0x8d0/0xbf0 [ 390.990990][T10449] ? netlink_getsockopt+0x590/0x590 [ 390.996245][T10449] ? aa_sock_msg_perm+0x94/0x150 [ 391.001250][T10449] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 391.006585][T10449] ? security_socket_sendmsg+0x80/0xa0 [ 391.012093][T10449] ? netlink_getsockopt+0x590/0x590 [ 391.017344][T10449] ____sys_sendmsg+0x5ba/0x960 [ 391.022174][T10449] ? __asan_memset+0x22/0x40 [ 391.026817][T10449] ? __sys_sendmsg_sock+0x30/0x30 [ 391.031906][T10449] ? __import_iovec+0x5f2/0x850 [ 391.036824][T10449] ? import_iovec+0x73/0xa0 [ 391.041378][T10449] ___sys_sendmsg+0x2a6/0x360 [ 391.046123][T10449] ? __sys_sendmsg+0x2a0/0x2a0 [ 391.051034][T10449] __se_sys_sendmsg+0x1c2/0x2b0 [ 391.055992][T10449] ? __x64_sys_sendmsg+0x80/0x80 [ 391.061002][T10449] ? lockdep_hardirqs_on+0x98/0x150 [ 391.066259][T10449] do_syscall_64+0x55/0xb0 [ 391.070725][T10449] ? clear_bhb_loop+0x40/0x90 [ 391.075449][T10449] ? clear_bhb_loop+0x40/0x90 [ 391.080172][T10449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.086152][T10449] RIP: 0033:0x7f85d8f9ce59 [ 391.090614][T10449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.110270][T10449] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.118758][T10449] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 391.126782][T10449] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 391.134807][T10449] RBP: 00007f85d9032e6f R08: 0000000000000000 R09: 0000000000000000 [ 391.142822][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.150842][T10449] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 391.158885][T10449] [ 392.844080][T10480] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1564'. [ 392.939702][T10486] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1566'. [ 392.959481][T10486] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 392.967729][T10486] CPU: 1 PID: 10486 Comm: syz.2.1566 Not tainted syzkaller #0 [ 392.975259][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.985386][T10486] Call Trace: [ 392.988722][T10486] [ 392.991709][T10486] dump_stack_lvl+0x18c/0x250 [ 392.996462][T10486] ? show_regs_print_info+0x20/0x20 [ 393.001844][T10486] ? load_image+0x420/0x420 [ 393.006442][T10486] sysfs_warn_dup+0x8e/0xa0 [ 393.011014][T10486] sysfs_do_create_link_sd+0xc0/0x110 [ 393.016468][T10486] device_add_class_symlinks+0x1cf/0x240 [ 393.022191][T10486] device_add+0x507/0xc50 [ 393.026611][T10486] wiphy_register+0x1dad/0x2ae0 [ 393.031558][T10486] ? cfg80211_event_work+0x40/0x40 [ 393.036749][T10486] ? minstrel_ht_alloc+0x88a/0x990 [ 393.041936][T10486] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 393.048063][T10486] ieee80211_register_hw+0x3464/0x4250 [ 393.053597][T10486] ? ieee80211_tasklet_handler+0x20/0x20 [ 393.059285][T10486] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 393.065223][T10486] ? __debug_object_init+0xec/0x450 [ 393.070557][T10486] ? __asan_memset+0x22/0x40 [ 393.075202][T10486] ? __hrtimer_init+0x186/0x270 [ 393.080107][T10486] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 393.085895][T10486] ? mac80211_hwsim_free+0x220/0x220 [ 393.091215][T10486] ? rcu_is_watching+0x15/0xb0 [ 393.096024][T10486] ? kstrndup+0xbd/0x140 [ 393.100322][T10486] hwsim_new_radio_nl+0xdc9/0x1a90 [ 393.105523][T10486] ? __nla_validate+0x50/0x50 [ 393.110259][T10486] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 393.116645][T10486] ? __nla_parse+0x40/0x50 [ 393.121106][T10486] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 393.127493][T10486] genl_family_rcv_msg_doit+0x211/0x310 [ 393.133082][T10486] ? end_current_label_crit_section+0x170/0x170 [ 393.139372][T10486] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 393.145325][T10486] ? bpf_lsm_capable+0x9/0x10 [ 393.150048][T10486] ? security_capable+0x89/0xb0 [ 393.154962][T10486] genl_rcv_msg+0x619/0x7a0 [ 393.159522][T10486] ? genl_bind+0x360/0x360 [ 393.163986][T10486] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 393.170383][T10486] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 393.177025][T10486] ? ref_tracker_free+0x690/0x840 [ 393.182107][T10486] netlink_rcv_skb+0x241/0x4d0 [ 393.186917][T10486] ? genl_bind+0x360/0x360 [ 393.191380][T10486] ? netlink_ack+0x1180/0x1180 [ 393.196306][T10486] ? __lock_acquire+0x7d40/0x7d40 [ 393.201411][T10486] ? down_read+0x1ac/0x2e0 [ 393.205885][T10486] genl_rcv+0x28/0x40 [ 393.209910][T10486] netlink_unicast+0x751/0x8d0 [ 393.214724][T10486] netlink_sendmsg+0x8d0/0xbf0 [ 393.219541][T10486] ? netlink_getsockopt+0x590/0x590 [ 393.224789][T10486] ? aa_sock_msg_perm+0x94/0x150 [ 393.229772][T10486] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 393.235095][T10486] ? security_socket_sendmsg+0x80/0xa0 [ 393.240593][T10486] ? netlink_getsockopt+0x590/0x590 [ 393.245836][T10486] ____sys_sendmsg+0x5ba/0x960 [ 393.250654][T10486] ? __asan_memset+0x22/0x40 [ 393.255293][T10486] ? __sys_sendmsg_sock+0x30/0x30 [ 393.260357][T10486] ? __import_iovec+0x5f2/0x850 [ 393.265262][T10486] ? import_iovec+0x73/0xa0 [ 393.269809][T10486] ___sys_sendmsg+0x2a6/0x360 [ 393.274535][T10486] ? __sys_sendmsg+0x2a0/0x2a0 [ 393.279374][T10486] ? trace_call_bpf+0xc3/0x6c0 [ 393.284219][T10486] __se_sys_sendmsg+0x1c2/0x2b0 [ 393.289129][T10486] ? __x64_sys_sendmsg+0x80/0x80 [ 393.294120][T10486] ? lockdep_hardirqs_on+0x98/0x150 [ 393.299368][T10486] do_syscall_64+0x55/0xb0 [ 393.303833][T10486] ? clear_bhb_loop+0x40/0x90 [ 393.308553][T10486] ? clear_bhb_loop+0x40/0x90 [ 393.313271][T10486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.319224][T10486] RIP: 0033:0x7f1706f9ce59 [ 393.323688][T10486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.343342][T10486] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.351807][T10486] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 393.359815][T10486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 393.367846][T10486] RBP: 00007f1707032e6f R08: 0000000000000000 R09: 0000000000000000 [ 393.375868][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.383952][T10486] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 393.391990][T10486] [ 394.279606][T10508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.301687][T10522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1576'. [ 395.926864][T10541] netlink: 'syz.3.1582': attribute type 29 has an invalid length. [ 395.971631][T10541] netlink: 'syz.3.1582': attribute type 29 has an invalid length. [ 396.005939][T10542] netlink: 'syz.0.1583': attribute type 21 has an invalid length. [ 396.084305][T10547] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1585'. [ 396.432127][T10551] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1587'. [ 396.504461][T10551] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 396.526476][T10551] CPU: 1 PID: 10551 Comm: syz.0.1587 Not tainted syzkaller #0 [ 396.534076][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.544240][T10551] Call Trace: [ 396.547576][T10551] [ 396.550559][T10551] dump_stack_lvl+0x18c/0x250 [ 396.555314][T10551] ? show_regs_print_info+0x20/0x20 [ 396.560578][T10551] ? load_image+0x420/0x420 [ 396.565211][T10551] sysfs_warn_dup+0x8e/0xa0 [ 396.569784][T10551] sysfs_do_create_link_sd+0xc0/0x110 [ 396.575233][T10551] device_add_class_symlinks+0x1cf/0x240 [ 396.580956][T10551] device_add+0x507/0xc50 [ 396.585369][T10551] wiphy_register+0x1dad/0x2ae0 [ 396.590415][T10551] ? cfg80211_event_work+0x40/0x40 [ 396.595594][T10551] ? minstrel_ht_alloc+0x88a/0x990 [ 396.600799][T10551] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 396.606942][T10551] ieee80211_register_hw+0x3464/0x4250 [ 396.612498][T10551] ? ieee80211_tasklet_handler+0x20/0x20 [ 396.618208][T10551] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 396.624183][T10551] ? __debug_object_init+0xec/0x450 [ 396.629481][T10551] ? __asan_memset+0x22/0x40 [ 396.634144][T10551] ? __hrtimer_init+0x186/0x270 [ 396.639098][T10551] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 396.644906][T10551] ? mac80211_hwsim_free+0x220/0x220 [ 396.650265][T10551] ? rcu_is_watching+0x15/0xb0 [ 396.655193][T10551] ? kstrndup+0xbd/0x140 [ 396.659615][T10551] hwsim_new_radio_nl+0xdc9/0x1a90 [ 396.664809][T10551] ? __nla_validate+0x50/0x50 [ 396.669576][T10551] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 396.675998][T10551] ? __nla_parse+0x40/0x50 [ 396.680499][T10551] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 396.686933][T10551] genl_family_rcv_msg_doit+0x211/0x310 [ 396.692556][T10551] ? end_current_label_crit_section+0x170/0x170 [ 396.698879][T10551] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 396.704890][T10551] ? bpf_lsm_capable+0x9/0x10 [ 396.709639][T10551] ? security_capable+0x89/0xb0 [ 396.714580][T10551] genl_rcv_msg+0x619/0x7a0 [ 396.719174][T10551] ? genl_bind+0x360/0x360 [ 396.723757][T10551] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 396.730210][T10551] ? ref_tracker_free+0x690/0x840 [ 396.735325][T10551] netlink_rcv_skb+0x241/0x4d0 [ 396.740162][T10551] ? genl_bind+0x360/0x360 [ 396.744664][T10551] ? netlink_ack+0x1180/0x1180 [ 396.749508][T10551] ? __lock_acquire+0x7d40/0x7d40 [ 396.754627][T10551] ? down_read+0x1ac/0x2e0 [ 396.759124][T10551] genl_rcv+0x28/0x40 [ 396.763195][T10551] netlink_unicast+0x751/0x8d0 [ 396.768051][T10551] netlink_sendmsg+0x8d0/0xbf0 [ 396.772917][T10551] ? netlink_getsockopt+0x590/0x590 [ 396.778196][T10551] ? aa_sock_msg_perm+0x94/0x150 [ 396.783218][T10551] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 396.788628][T10551] ? security_socket_sendmsg+0x80/0xa0 [ 396.795560][T10551] ? netlink_getsockopt+0x590/0x590 [ 396.802715][T10551] ____sys_sendmsg+0x5ba/0x960 [ 396.807604][T10551] ? __asan_memset+0x22/0x40 [ 396.812373][T10551] ? __sys_sendmsg_sock+0x30/0x30 [ 396.817637][T10551] ? __import_iovec+0x5f2/0x850 [ 396.822567][T10551] ? import_iovec+0x73/0xa0 [ 396.827163][T10551] ___sys_sendmsg+0x2a6/0x360 [ 396.832083][T10551] ? __sys_sendmsg+0x2a0/0x2a0 [ 396.837048][T10551] ? __lock_acquire+0x7d40/0x7d40 [ 396.844112][T10551] __se_sys_sendmsg+0x1c2/0x2b0 [ 396.849062][T10551] ? __x64_sys_sendmsg+0x80/0x80 [ 396.854095][T10551] ? lockdep_hardirqs_on+0x98/0x150 [ 396.859383][T10551] do_syscall_64+0x55/0xb0 [ 396.864317][T10551] ? clear_bhb_loop+0x40/0x90 [ 396.869056][T10551] ? clear_bhb_loop+0x40/0x90 [ 396.874477][T10551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.880468][T10551] RIP: 0033:0x7fc23259ce59 [ 396.884971][T10551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.904654][T10551] RSP: 002b:00007fc233485028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.913253][T10551] RAX: ffffffffffffffda RBX: 00007fc232815fa0 RCX: 00007fc23259ce59 [ 396.921307][T10551] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 396.929341][T10551] RBP: 00007fc232632e6f R08: 0000000000000000 R09: 0000000000000000 [ 396.937469][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.945508][T10551] R13: 00007fc232816038 R14: 00007fc232815fa0 R15: 00007fff55dbef48 [ 396.953663][T10551] [ 397.467809][T10564] netlink: 'syz.2.1590': attribute type 10 has an invalid length. [ 397.539812][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1591'. [ 397.600575][T10564] team0: Device ipvlan1 failed to register rx_handler [ 397.980583][T10578] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 398.078660][T10578] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 398.407570][T10586] netlink: 'syz.0.1605': attribute type 29 has an invalid length. [ 398.431541][T10586] netlink: 'syz.0.1605': attribute type 29 has an invalid length. [ 398.536269][T10584] netlink: 'syz.3.1597': attribute type 21 has an invalid length. [ 398.553978][T10588] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1596'. [ 398.724797][T10592] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1598'. [ 398.782533][T10597] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1601'. [ 398.804023][T10597] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 398.832828][T10597] CPU: 1 PID: 10597 Comm: syz.2.1601 Not tainted syzkaller #0 [ 398.840398][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.850498][T10597] Call Trace: [ 398.853810][T10597] [ 398.856769][T10597] dump_stack_lvl+0x18c/0x250 [ 398.861514][T10597] ? show_regs_print_info+0x20/0x20 [ 398.866786][T10597] ? load_image+0x420/0x420 [ 398.871352][T10597] sysfs_warn_dup+0x8e/0xa0 [ 398.875899][T10597] sysfs_do_create_link_sd+0xc0/0x110 [ 398.881318][T10597] device_add_class_symlinks+0x1cf/0x240 [ 398.887004][T10597] device_add+0x507/0xc50 [ 398.891388][T10597] wiphy_register+0x1dad/0x2ae0 [ 398.896303][T10597] ? cfg80211_event_work+0x40/0x40 [ 398.901459][T10597] ? minstrel_ht_alloc+0x88a/0x990 [ 398.906628][T10597] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 398.912851][T10597] ieee80211_register_hw+0x3464/0x4250 [ 398.918374][T10597] ? ieee80211_tasklet_handler+0x20/0x20 [ 398.924050][T10597] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 398.929988][T10597] ? __debug_object_init+0xec/0x450 [ 398.935242][T10597] ? __asan_memset+0x22/0x40 [ 398.939896][T10597] ? __hrtimer_init+0x186/0x270 [ 398.944814][T10597] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 398.950683][T10597] ? mac80211_hwsim_free+0x220/0x220 [ 398.956017][T10597] ? rcu_is_watching+0x15/0xb0 [ 398.960824][T10597] ? kstrndup+0xbd/0x140 [ 398.965274][T10597] hwsim_new_radio_nl+0xdc9/0x1a90 [ 398.970707][T10597] ? __nla_validate+0x50/0x50 [ 398.975444][T10597] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 398.981851][T10597] ? __nla_parse+0x40/0x50 [ 398.986313][T10597] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 398.992693][T10597] genl_family_rcv_msg_doit+0x211/0x310 [ 398.998289][T10597] ? end_current_label_crit_section+0x170/0x170 [ 399.004582][T10597] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 399.010528][T10597] ? bpf_lsm_capable+0x9/0x10 [ 399.015270][T10597] ? security_capable+0x89/0xb0 [ 399.020176][T10597] genl_rcv_msg+0x619/0x7a0 [ 399.024735][T10597] ? genl_bind+0x360/0x360 [ 399.029192][T10597] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 399.035564][T10597] ? ref_tracker_free+0x690/0x840 [ 399.040708][T10597] netlink_rcv_skb+0x241/0x4d0 [ 399.045519][T10597] ? genl_bind+0x360/0x360 [ 399.049990][T10597] ? netlink_ack+0x1180/0x1180 [ 399.054812][T10597] ? __lock_acquire+0x7d40/0x7d40 [ 399.059886][T10597] ? down_read+0x1ac/0x2e0 [ 399.064344][T10597] genl_rcv+0x28/0x40 [ 399.068359][T10597] netlink_unicast+0x751/0x8d0 [ 399.073172][T10597] netlink_sendmsg+0x8d0/0xbf0 [ 399.077979][T10597] ? netlink_getsockopt+0x590/0x590 [ 399.083220][T10597] ? aa_sock_msg_perm+0x94/0x150 [ 399.088198][T10597] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 399.093523][T10597] ? security_socket_sendmsg+0x80/0xa0 [ 399.099025][T10597] ? netlink_getsockopt+0x590/0x590 [ 399.104265][T10597] ____sys_sendmsg+0x5ba/0x960 [ 399.109080][T10597] ? __asan_memset+0x22/0x40 [ 399.113713][T10597] ? __sys_sendmsg_sock+0x30/0x30 [ 399.118777][T10597] ? __import_iovec+0x5f2/0x850 [ 399.123682][T10597] ? import_iovec+0x73/0xa0 [ 399.128229][T10597] ___sys_sendmsg+0x2a6/0x360 [ 399.132953][T10597] ? __sys_sendmsg+0x2a0/0x2a0 [ 399.137831][T10597] __se_sys_sendmsg+0x1c2/0x2b0 [ 399.142739][T10597] ? __x64_sys_sendmsg+0x80/0x80 [ 399.147740][T10597] ? lockdep_hardirqs_on+0x98/0x150 [ 399.153001][T10597] do_syscall_64+0x55/0xb0 [ 399.157464][T10597] ? clear_bhb_loop+0x40/0x90 [ 399.162180][T10597] ? clear_bhb_loop+0x40/0x90 [ 399.166910][T10597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.172861][T10597] RIP: 0033:0x7f1706f9ce59 [ 399.177316][T10597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.196990][T10597] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.205455][T10597] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 399.213466][T10597] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 399.221477][T10597] RBP: 00007f1707032e6f R08: 0000000000000000 R09: 0000000000000000 [ 399.229482][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.237483][T10597] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 399.245512][T10597] [ 399.537525][T10607] syzkaller0: entered promiscuous mode [ 399.547183][T10607] syzkaller0: entered allmulticast mode [ 399.639778][T10612] netlink: 'syz.2.1606': attribute type 12 has an invalid length. [ 399.652151][T10612] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1606'. [ 399.762172][T10616] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1610'. [ 399.896268][T10620] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1620'. [ 399.979647][T10624] team0: Port device dummy0 added [ 399.999680][T10624] FAULT_INJECTION: forcing a failure. [ 399.999680][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 400.016861][T10624] CPU: 1 PID: 10624 Comm: syz.1.1613 Not tainted syzkaller #0 [ 400.024504][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.034621][T10624] Call Trace: [ 400.037962][T10624] [ 400.040951][T10624] dump_stack_lvl+0x18c/0x250 [ 400.045696][T10624] ? show_regs_print_info+0x20/0x20 [ 400.050959][T10624] ? load_image+0x420/0x420 [ 400.055527][T10624] ? __might_sleep+0xe0/0xe0 [ 400.060194][T10624] ? __lock_acquire+0x7d40/0x7d40 [ 400.065292][T10624] should_fail_ex+0x39d/0x4d0 [ 400.070044][T10624] should_failslab+0x9/0x20 [ 400.074616][T10624] slab_pre_alloc_hook+0x59/0x310 [ 400.079708][T10624] kmem_cache_alloc_node+0x60/0x320 [ 400.084976][T10624] ? __alloc_skb+0x103/0x2c0 [ 400.089632][T10624] __alloc_skb+0x103/0x2c0 [ 400.094297][T10624] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 400.099773][T10624] rtnetlink_event+0x1b7/0x260 [ 400.104613][T10624] notifier_call_chain+0x197/0x380 [ 400.109794][T10624] netdev_lower_state_changed+0xd5/0x150 [ 400.115560][T10624] ? netdev_lower_dev_get_private+0xc0/0xc0 [ 400.121530][T10624] team_port_disable+0x950/0xb40 [ 400.126597][T10624] ? __mutex_trylock_common+0x159/0x260 [ 400.132182][T10624] ? team_port_enable+0xce0/0xce0 [ 400.137251][T10624] team_port_del+0x1f8/0xc80 [ 400.141887][T10624] ? team_port_disable+0xb40/0xb40 [ 400.147029][T10624] ? __dev_change_flags+0x4d4/0x6a0 [ 400.152273][T10624] ? team_del_slave+0x32/0x1c0 [ 400.157074][T10624] ? mutex_lock_nested+0x20/0x20 [ 400.162057][T10624] ? dev_get_flags+0x1c0/0x1c0 [ 400.166863][T10624] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 400.172815][T10624] ? lockdep_hardirqs_on+0x98/0x150 [ 400.178059][T10624] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 400.184004][T10624] ? _raw_spin_unlock+0x40/0x40 [ 400.188898][T10624] team_del_slave+0x3d/0x1c0 [ 400.193524][T10624] ? team_add_slave+0x29a0/0x29a0 [ 400.198618][T10624] do_setlink+0xe7f/0x4130 [ 400.203099][T10624] ? arch_stack_walk+0x160/0x190 [ 400.208112][T10624] ? radix_tree_cpu_dead+0x160/0x160 [ 400.213446][T10624] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 400.219659][T10624] ? stack_trace_save+0xaa/0x100 [ 400.224650][T10624] ? __nla_validate_parse+0x2522/0x2ea0 [ 400.230254][T10624] ? __nla_validate+0x50/0x50 [ 400.235000][T10624] ? validate_linkmsg+0x719/0x910 [ 400.240081][T10624] rtnl_newlink+0x17da/0x20a0 [ 400.244844][T10624] ? rtnl_setlink+0x4e0/0x4e0 [ 400.249567][T10624] ? trace_raw_output_contention_end+0xd0/0xd0 [ 400.255763][T10624] ? rcu_is_watching+0x15/0xb0 [ 400.260574][T10624] ? trace_contention_end+0x39/0xe0 [ 400.265896][T10624] ? __mutex_lock+0x315/0xcc0 [ 400.270647][T10624] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 400.275805][T10624] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 400.280953][T10624] ? rtnl_setlink+0x4e0/0x4e0 [ 400.285666][T10624] rtnetlink_rcv_msg+0x869/0xfa0 [ 400.290650][T10624] ? lockdep_hardirqs_on+0x98/0x150 [ 400.295893][T10624] ? rtnetlink_bind+0x80/0x80 [ 400.300617][T10624] ? perf_trace_preemptirq_template+0xac/0x330 [ 400.306838][T10624] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 400.312890][T10624] ? lock_chain_count+0x20/0x20 [ 400.317785][T10624] ? __local_bh_enable_ip+0x13a/0x1c0 [ 400.323197][T10624] ? lockdep_hardirqs_on+0x98/0x150 [ 400.328440][T10624] ? __local_bh_enable_ip+0x13a/0x1c0 [ 400.333848][T10624] ? _local_bh_enable+0xa0/0xa0 [ 400.338742][T10624] ? __dev_queue_xmit+0x265/0x3660 [ 400.343928][T10624] ? __dev_queue_xmit+0x265/0x3660 [ 400.349092][T10624] ? __dev_queue_xmit+0x1b2c/0x3660 [ 400.354342][T10624] ? __dev_queue_xmit+0x265/0x3660 [ 400.359509][T10624] ? ref_tracker_free+0x690/0x840 [ 400.364577][T10624] netlink_rcv_skb+0x241/0x4d0 [ 400.369410][T10624] ? rtnetlink_bind+0x80/0x80 [ 400.374134][T10624] ? netlink_ack+0x1180/0x1180 [ 400.378974][T10624] ? __lock_acquire+0x7d40/0x7d40 [ 400.384053][T10624] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.389295][T10624] netlink_unicast+0x751/0x8d0 [ 400.394100][T10624] netlink_sendmsg+0x8d0/0xbf0 [ 400.398918][T10624] ? netlink_getsockopt+0x590/0x590 [ 400.404162][T10624] ? aa_sock_msg_perm+0x94/0x150 [ 400.409141][T10624] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 400.414499][T10624] ? security_socket_sendmsg+0x80/0xa0 [ 400.419993][T10624] ? netlink_getsockopt+0x590/0x590 [ 400.425345][T10624] ____sys_sendmsg+0x5ba/0x960 [ 400.430150][T10624] ? __asan_memset+0x22/0x40 [ 400.434870][T10624] ? __sys_sendmsg_sock+0x30/0x30 [ 400.439944][T10624] ? __import_iovec+0x5f2/0x850 [ 400.444916][T10624] ? import_iovec+0x73/0xa0 [ 400.449484][T10624] ___sys_sendmsg+0x2a6/0x360 [ 400.454219][T10624] ? get_pid_task+0x20/0x1e0 [ 400.458857][T10624] ? __sys_sendmsg+0x2a0/0x2a0 [ 400.463674][T10624] ? __lock_acquire+0x7d40/0x7d40 [ 400.468758][T10624] __se_sys_sendmsg+0x1c2/0x2b0 [ 400.473657][T10624] ? __x64_sys_sendmsg+0x80/0x80 [ 400.478657][T10624] ? lockdep_hardirqs_on+0x98/0x150 [ 400.483905][T10624] do_syscall_64+0x55/0xb0 [ 400.488360][T10624] ? clear_bhb_loop+0x40/0x90 [ 400.493080][T10624] ? clear_bhb_loop+0x40/0x90 [ 400.497814][T10624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.503804][T10624] RIP: 0033:0x7f85d8f9ce59 [ 400.508258][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.527904][T10624] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.536484][T10624] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 400.544496][T10624] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003 [ 400.552503][T10624] RBP: 00007f85d9f17090 R08: 0000000000000000 R09: 0000000000000000 [ 400.560522][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.568524][T10624] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 400.576549][T10624] [ 400.622531][T10624] team0: Port device dummy0 removed [ 400.658593][T10624] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 400.789713][T10627] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1614'. [ 400.824988][T10631] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 400.859228][T10631] CPU: 1 PID: 10631 Comm: syz.1.1615 Not tainted syzkaller #0 [ 400.866788][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.876988][T10631] Call Trace: [ 400.880322][T10631] [ 400.883297][T10631] dump_stack_lvl+0x18c/0x250 [ 400.888053][T10631] ? show_regs_print_info+0x20/0x20 [ 400.893313][T10631] ? load_image+0x420/0x420 [ 400.897886][T10631] sysfs_warn_dup+0x8e/0xa0 [ 400.902452][T10631] sysfs_do_create_link_sd+0xc0/0x110 [ 400.907901][T10631] device_add_class_symlinks+0x1cf/0x240 [ 400.913702][T10631] device_add+0x507/0xc50 [ 400.918103][T10631] wiphy_register+0x1dad/0x2ae0 [ 400.923114][T10631] ? cfg80211_event_work+0x40/0x40 [ 400.928284][T10631] ? minstrel_ht_alloc+0x88a/0x990 [ 400.933470][T10631] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 400.939602][T10631] ieee80211_register_hw+0x3464/0x4250 [ 400.945147][T10631] ? ieee80211_tasklet_handler+0x20/0x20 [ 400.950820][T10631] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 400.956761][T10631] ? __debug_object_init+0xec/0x450 [ 400.962018][T10631] ? __asan_memset+0x22/0x40 [ 400.966660][T10631] ? __hrtimer_init+0x186/0x270 [ 400.971557][T10631] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 400.977481][T10631] ? mac80211_hwsim_free+0x220/0x220 [ 400.982815][T10631] ? rcu_is_watching+0x15/0xb0 [ 400.987640][T10631] ? kstrndup+0xbd/0x140 [ 400.991945][T10631] hwsim_new_radio_nl+0xdc9/0x1a90 [ 400.997121][T10631] ? __nla_validate+0x50/0x50 [ 401.001854][T10631] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 401.008239][T10631] ? __nla_parse+0x40/0x50 [ 401.012717][T10631] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 401.019134][T10631] genl_family_rcv_msg_doit+0x211/0x310 [ 401.024747][T10631] ? end_current_label_crit_section+0x170/0x170 [ 401.031040][T10631] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 401.036995][T10631] ? bpf_lsm_capable+0x9/0x10 [ 401.041817][T10631] ? security_capable+0x89/0xb0 [ 401.046718][T10631] genl_rcv_msg+0x619/0x7a0 [ 401.051268][T10631] ? genl_bind+0x360/0x360 [ 401.055719][T10631] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 401.062091][T10631] ? ref_tracker_free+0x690/0x840 [ 401.067168][T10631] netlink_rcv_skb+0x241/0x4d0 [ 401.071980][T10631] ? genl_bind+0x360/0x360 [ 401.076444][T10631] ? netlink_ack+0x1180/0x1180 [ 401.081257][T10631] ? __lock_acquire+0x7d40/0x7d40 [ 401.086339][T10631] ? down_read+0x1ac/0x2e0 [ 401.090816][T10631] genl_rcv+0x28/0x40 [ 401.094846][T10631] netlink_unicast+0x751/0x8d0 [ 401.099664][T10631] netlink_sendmsg+0x8d0/0xbf0 [ 401.104482][T10631] ? netlink_getsockopt+0x590/0x590 [ 401.109752][T10631] ? aa_sock_msg_perm+0x94/0x150 [ 401.114743][T10631] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 401.120071][T10631] ? security_socket_sendmsg+0x80/0xa0 [ 401.125569][T10631] ? netlink_getsockopt+0x590/0x590 [ 401.130822][T10631] ____sys_sendmsg+0x5ba/0x960 [ 401.135642][T10631] ? __asan_memset+0x22/0x40 [ 401.140283][T10631] ? __sys_sendmsg_sock+0x30/0x30 [ 401.145359][T10631] ? __import_iovec+0x5f2/0x850 [ 401.150274][T10631] ? import_iovec+0x73/0xa0 [ 401.154855][T10631] ___sys_sendmsg+0x2a6/0x360 [ 401.159580][T10631] ? __sys_sendmsg+0x2a0/0x2a0 [ 401.164524][T10631] __se_sys_sendmsg+0x1c2/0x2b0 [ 401.169436][T10631] ? __x64_sys_sendmsg+0x80/0x80 [ 401.174437][T10631] ? lockdep_hardirqs_on+0x98/0x150 [ 401.179692][T10631] do_syscall_64+0x55/0xb0 [ 401.184153][T10631] ? clear_bhb_loop+0x40/0x90 [ 401.188898][T10631] ? clear_bhb_loop+0x40/0x90 [ 401.193623][T10631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.199561][T10631] RIP: 0033:0x7f85d8f9ce59 [ 401.204016][T10631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.223667][T10631] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.232128][T10631] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 401.240139][T10631] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 401.248149][T10631] RBP: 00007f85d9032e6f R08: 0000000000000000 R09: 0000000000000000 [ 401.256185][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.264205][T10631] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 401.272239][T10631] [ 401.483548][T10636] validate_nla: 6 callbacks suppressed [ 401.483641][T10636] netlink: 'syz.3.1618': attribute type 3 has an invalid length. [ 401.530917][T10641] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 401.549877][T10636] __nla_validate_parse: 2 callbacks suppressed [ 401.549970][T10636] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1618'. [ 401.741270][T10645] netlink: 'syz.2.1621': attribute type 29 has an invalid length. [ 401.770089][T10641] team0: Device wg1 is of different type [ 401.815845][T10645] netlink: 'syz.2.1621': attribute type 29 has an invalid length. [ 401.871897][T10648] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1622'. [ 401.976614][T10650] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1623'. [ 402.165101][T10657] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1634'. [ 402.393509][T10660] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1626'. [ 402.968119][T10677] netlink: 'syz.1.1631': attribute type 3 has an invalid length. [ 402.978744][T10677] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1631'. [ 403.172206][T10679] FAULT_INJECTION: forcing a failure. [ 403.172206][T10679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 403.208541][T10679] CPU: 0 PID: 10679 Comm: syz.2.1632 Not tainted syzkaller #0 [ 403.216102][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.226214][T10679] Call Trace: [ 403.229550][T10679] [ 403.232522][T10679] dump_stack_lvl+0x18c/0x250 [ 403.237261][T10679] ? show_regs_print_info+0x20/0x20 [ 403.242539][T10679] ? load_image+0x420/0x420 [ 403.247081][T10679] ? __lock_acquire+0x7d40/0x7d40 [ 403.252141][T10679] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.258347][T10679] should_fail_ex+0x39d/0x4d0 [ 403.263505][T10679] prepare_alloc_pages+0x1e2/0x5f0 [ 403.268662][T10679] __alloc_pages+0x134/0x460 [ 403.273294][T10679] ? zone_statistics+0x170/0x170 [ 403.278278][T10679] ? __raw_spin_lock_init+0x45/0x100 [ 403.283609][T10679] probe_event_enable+0x363/0xb40 [ 403.288667][T10679] ? fetch_store_string+0x2c0/0x2c0 [ 403.293905][T10679] perf_trace_event_init+0x4d2/0x9b0 [ 403.299325][T10679] perf_uprobe_init+0x12e/0x190 [ 403.304225][T10679] perf_uprobe_event_init+0xe6/0x180 [ 403.309563][T10679] perf_try_init_event+0x12b/0x3c0 [ 403.314729][T10679] perf_event_alloc+0xfa4/0x21b0 [ 403.319710][T10679] ? perf_event_alloc+0xc06/0x21b0 [ 403.324874][T10679] __se_sys_perf_event_open+0x740/0x1c50 [ 403.330557][T10679] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 403.336275][T10679] ? syscall_enter_from_user_mode+0x2e/0x80 [ 403.342249][T10679] ? __x64_sys_perf_event_open+0x20/0xc0 [ 403.347918][T10679] do_syscall_64+0x55/0xb0 [ 403.352364][T10679] ? clear_bhb_loop+0x40/0x90 [ 403.357073][T10679] ? clear_bhb_loop+0x40/0x90 [ 403.361799][T10679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.367736][T10679] RIP: 0033:0x7f1706f9ce59 [ 403.372219][T10679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.391871][T10679] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 403.400317][T10679] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 403.409018][T10679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 403.417058][T10679] RBP: 00007f1707dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 403.425060][T10679] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 403.433101][T10679] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 403.441128][T10679] [ 403.552136][T10686] netlink: 'syz.1.1635': attribute type 29 has an invalid length. [ 403.579504][T10686] netlink: 'syz.1.1635': attribute type 29 has an invalid length. [ 403.674343][T10691] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1637'. [ 403.973718][T10697] syzkaller0: entered promiscuous mode [ 403.987433][T10697] syzkaller0: entered allmulticast mode [ 404.582381][T10705] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 404.610917][T10705] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1643'. [ 404.801760][T10712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1644'. [ 405.187749][T10719] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1649'. [ 405.231773][T10721] netlink: 'syz.3.1648': attribute type 29 has an invalid length. [ 405.249939][T10721] netlink: 'syz.3.1648': attribute type 29 has an invalid length. [ 406.107830][T10736] team0: Device ipvlan1 failed to register rx_handler [ 406.843701][T10752] __nla_validate_parse: 1 callbacks suppressed [ 406.843723][T10752] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1660'. [ 407.282572][T10756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1658'. [ 407.748170][T10765] validate_nla: 1 callbacks suppressed [ 407.748208][T10765] netlink: 'syz.1.1664': attribute type 3 has an invalid length. [ 407.764926][T10765] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1664'. [ 408.276201][T10770] netlink: 'syz.0.1666': attribute type 3 has an invalid length. [ 408.326165][T10770] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1666'. [ 408.446512][T10774] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1667'. [ 408.495363][ T5786] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 408.975843][T10781] netlink: 'syz.3.1670': attribute type 10 has an invalid length. [ 409.109432][T10781] team0: Port device dummy0 added [ 409.143243][T10782] netlink: 'syz.3.1670': attribute type 10 has an invalid length. [ 409.204855][T10782] team0: Port device dummy0 removed [ 409.254341][T10782] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 409.474285][T10790] netlink: 'syz.3.1675': attribute type 3 has an invalid length. [ 409.506032][T10790] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1675'. [ 409.704275][T10798] netlink: 'syz.2.1677': attribute type 29 has an invalid length. [ 409.718459][T10800] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1678'. [ 409.760325][T10798] netlink: 'syz.2.1677': attribute type 29 has an invalid length. [ 410.091580][T10810] netlink: 'syz.2.1681': attribute type 21 has an invalid length. [ 410.207824][T10814] netlink: 'syz.3.1684': attribute type 27 has an invalid length. [ 410.219866][T10814] netlink: 'syz.3.1684': attribute type 3 has an invalid length. [ 410.467332][T10821] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1687'. [ 410.477711][T10822] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1688'. [ 410.513204][T10821] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 410.558948][T10821] CPU: 1 PID: 10821 Comm: syz.0.1687 Not tainted syzkaller #0 [ 410.566520][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.576650][T10821] Call Trace: [ 410.580003][T10821] [ 410.582997][T10821] dump_stack_lvl+0x18c/0x250 [ 410.587747][T10821] ? show_regs_print_info+0x20/0x20 [ 410.593020][T10821] ? load_image+0x420/0x420 [ 410.597612][T10821] sysfs_warn_dup+0x8e/0xa0 [ 410.602181][T10821] sysfs_do_create_link_sd+0xc0/0x110 [ 410.607618][T10821] device_add_class_symlinks+0x1cf/0x240 [ 410.613332][T10821] device_add+0x507/0xc50 [ 410.617747][T10821] wiphy_register+0x1dad/0x2ae0 [ 410.622709][T10821] ? cfg80211_event_work+0x40/0x40 [ 410.627901][T10821] ? minstrel_ht_alloc+0x88a/0x990 [ 410.633097][T10821] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 410.639247][T10821] ieee80211_register_hw+0x3464/0x4250 [ 410.644813][T10821] ? ieee80211_tasklet_handler+0x20/0x20 [ 410.650521][T10821] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 410.656506][T10821] ? __debug_object_init+0xec/0x450 [ 410.661821][T10821] ? __asan_memset+0x22/0x40 [ 410.666478][T10821] ? __hrtimer_init+0x186/0x270 [ 410.671394][T10821] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 410.677203][T10821] ? mac80211_hwsim_free+0x220/0x220 [ 410.682545][T10821] ? rcu_is_watching+0x15/0xb0 [ 410.687370][T10821] ? kstrndup+0xbd/0x140 [ 410.691684][T10821] hwsim_new_radio_nl+0xdc9/0x1a90 [ 410.696867][T10821] ? __nla_validate+0x50/0x50 [ 410.701628][T10821] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 410.708058][T10821] ? __nla_parse+0x40/0x50 [ 410.712542][T10821] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 410.718960][T10821] genl_family_rcv_msg_doit+0x211/0x310 [ 410.724583][T10821] ? end_current_label_crit_section+0x170/0x170 [ 410.730900][T10821] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 410.736871][T10821] ? bpf_lsm_capable+0x9/0x10 [ 410.741632][T10821] ? security_capable+0x89/0xb0 [ 410.746575][T10821] genl_rcv_msg+0x619/0x7a0 [ 410.751163][T10821] ? genl_bind+0x360/0x360 [ 410.755803][T10821] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 410.762214][T10821] ? perf_trace_lock+0xfc/0x3b0 [ 410.767157][T10821] netlink_rcv_skb+0x241/0x4d0 [ 410.771994][T10821] ? genl_bind+0x360/0x360 [ 410.776486][T10821] ? netlink_ack+0x1180/0x1180 [ 410.781344][T10821] ? __lock_acquire+0x7d40/0x7d40 [ 410.786441][T10821] ? down_read+0x1ac/0x2e0 [ 410.790925][T10821] genl_rcv+0x28/0x40 [ 410.794976][T10821] netlink_unicast+0x751/0x8d0 [ 410.799811][T10821] netlink_sendmsg+0x8d0/0xbf0 [ 410.804656][T10821] ? netlink_getsockopt+0x590/0x590 [ 410.809919][T10821] ? aa_sock_msg_perm+0x94/0x150 [ 410.814924][T10821] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.820272][T10821] ? security_socket_sendmsg+0x80/0xa0 [ 410.825799][T10821] ? netlink_getsockopt+0x590/0x590 [ 410.831068][T10821] ____sys_sendmsg+0x5ba/0x960 [ 410.835910][T10821] ? __asan_memset+0x22/0x40 [ 410.840573][T10821] ? __sys_sendmsg_sock+0x30/0x30 [ 410.845668][T10821] ? __import_iovec+0x5f2/0x850 [ 410.850645][T10821] ? import_iovec+0x73/0xa0 [ 410.855214][T10821] ___sys_sendmsg+0x2a6/0x360 [ 410.859971][T10821] ? __sys_sendmsg+0x2a0/0x2a0 [ 410.864860][T10821] __se_sys_sendmsg+0x1c2/0x2b0 [ 410.869793][T10821] ? __x64_sys_sendmsg+0x80/0x80 [ 410.874836][T10821] ? lockdep_hardirqs_on+0x98/0x150 [ 410.880116][T10821] do_syscall_64+0x55/0xb0 [ 410.884606][T10821] ? clear_bhb_loop+0x40/0x90 [ 410.889343][T10821] ? clear_bhb_loop+0x40/0x90 [ 410.894077][T10821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.900042][T10821] RIP: 0033:0x7fc23259ce59 [ 410.904520][T10821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.924218][T10821] RSP: 002b:00007fc233485028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.932715][T10821] RAX: ffffffffffffffda RBX: 00007fc232815fa0 RCX: 00007fc23259ce59 [ 410.940756][T10821] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 410.948793][T10821] RBP: 00007fc232632e6f R08: 0000000000000000 R09: 0000000000000000 [ 410.956856][T10821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.964899][T10821] R13: 00007fc232816038 R14: 00007fc232815fa0 R15: 00007fff55dbef48 [ 410.972999][T10821] [ 411.472090][T10846] Q1`Ҙ: renamed from lo (while UP) [ 411.694705][T10851] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1698'. [ 411.772952][T10853] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 411.788505][T10853] CPU: 1 PID: 10853 Comm: syz.3.1700 Not tainted syzkaller #0 [ 411.796067][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.806177][T10853] Call Trace: [ 411.809505][T10853] [ 411.812484][T10853] dump_stack_lvl+0x18c/0x250 [ 411.817232][T10853] ? show_regs_print_info+0x20/0x20 [ 411.822498][T10853] ? load_image+0x420/0x420 [ 411.827082][T10853] sysfs_warn_dup+0x8e/0xa0 [ 411.831658][T10853] sysfs_do_create_link_sd+0xc0/0x110 [ 411.837158][T10853] device_add_class_symlinks+0x1cf/0x240 [ 411.842874][T10853] device_add+0x507/0xc50 [ 411.847287][T10853] wiphy_register+0x1dad/0x2ae0 [ 411.852229][T10853] ? cfg80211_event_work+0x40/0x40 [ 411.857404][T10853] ? minstrel_ht_alloc+0x88a/0x990 [ 411.862594][T10853] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 411.868749][T10853] ieee80211_register_hw+0x3464/0x4250 [ 411.874307][T10853] ? ieee80211_tasklet_handler+0x20/0x20 [ 411.880042][T10853] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 411.886010][T10853] ? __debug_object_init+0xec/0x450 [ 411.891289][T10853] ? __asan_memset+0x22/0x40 [ 411.895959][T10853] ? __hrtimer_init+0x186/0x270 [ 411.900871][T10853] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 411.906688][T10853] ? mac80211_hwsim_free+0x220/0x220 [ 411.912033][T10853] ? rcu_is_watching+0x15/0xb0 [ 411.916879][T10853] ? kstrndup+0xbd/0x140 [ 411.921198][T10853] hwsim_new_radio_nl+0xdc9/0x1a90 [ 411.926730][T10853] ? __nla_validate+0x50/0x50 [ 411.931477][T10853] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 411.937890][T10853] ? __nla_parse+0x40/0x50 [ 411.942385][T10853] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 411.948786][T10853] genl_family_rcv_msg_doit+0x211/0x310 [ 411.954419][T10853] ? end_current_label_crit_section+0x170/0x170 [ 411.960737][T10853] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 411.966739][T10853] ? bpf_lsm_capable+0x9/0x10 [ 411.971493][T10853] ? security_capable+0x89/0xb0 [ 411.976432][T10853] genl_rcv_msg+0x619/0x7a0 [ 411.981007][T10853] ? genl_bind+0x360/0x360 [ 411.985484][T10853] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 411.991881][T10853] ? ref_tracker_free+0x690/0x840 [ 411.996987][T10853] netlink_rcv_skb+0x241/0x4d0 [ 412.001825][T10853] ? genl_bind+0x360/0x360 [ 412.006302][T10853] ? netlink_ack+0x1180/0x1180 [ 412.011146][T10853] ? __lock_acquire+0x7d40/0x7d40 [ 412.016251][T10853] ? down_read+0x1ac/0x2e0 [ 412.020739][T10853] genl_rcv+0x28/0x40 [ 412.024789][T10853] netlink_unicast+0x751/0x8d0 [ 412.029639][T10853] netlink_sendmsg+0x8d0/0xbf0 [ 412.034489][T10853] ? netlink_getsockopt+0x590/0x590 [ 412.039774][T10853] ? aa_sock_msg_perm+0x94/0x150 [ 412.044785][T10853] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 412.050141][T10853] ? security_socket_sendmsg+0x80/0xa0 [ 412.055664][T10853] ? netlink_getsockopt+0x590/0x590 [ 412.060935][T10853] ____sys_sendmsg+0x5ba/0x960 [ 412.065832][T10853] ? __asan_memset+0x22/0x40 [ 412.070495][T10853] ? __sys_sendmsg_sock+0x30/0x30 [ 412.075583][T10853] ? __import_iovec+0x5f2/0x850 [ 412.080509][T10853] ? import_iovec+0x73/0xa0 [ 412.085070][T10853] ___sys_sendmsg+0x2a6/0x360 [ 412.089815][T10853] ? __sys_sendmsg+0x2a0/0x2a0 [ 412.094676][T10853] ? __lock_acquire+0x7d40/0x7d40 [ 412.099792][T10853] __se_sys_sendmsg+0x1c2/0x2b0 [ 412.104715][T10853] ? __x64_sys_sendmsg+0x80/0x80 [ 412.109737][T10853] ? lockdep_hardirqs_on+0x98/0x150 [ 412.115011][T10853] do_syscall_64+0x55/0xb0 [ 412.119494][T10853] ? clear_bhb_loop+0x40/0x90 [ 412.124221][T10853] ? clear_bhb_loop+0x40/0x90 [ 412.128961][T10853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.134934][T10853] RIP: 0033:0x7f6e7459ce59 [ 412.139416][T10853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.159102][T10853] RSP: 002b:00007f6e75527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.167591][T10853] RAX: ffffffffffffffda RBX: 00007f6e74815fa0 RCX: 00007f6e7459ce59 [ 412.175620][T10853] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 412.183647][T10853] RBP: 00007f6e74632e6f R08: 0000000000000000 R09: 0000000000000000 [ 412.191725][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.199759][T10853] R13: 00007f6e74816038 R14: 00007f6e74815fa0 R15: 00007ffcb1697138 [ 412.207812][T10853] [ 412.286345][T10856] __nla_validate_parse: 1 callbacks suppressed [ 412.286365][T10856] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1701'. [ 413.199920][T10881] Q6`Ҙ: renamed from lo (while UP) [ 413.333134][T10883] validate_nla: 1 callbacks suppressed [ 413.333179][T10883] netlink: 'syz.2.1711': attribute type 29 has an invalid length. [ 413.384835][T10883] netlink: 'syz.2.1711': attribute type 29 has an invalid length. [ 413.416438][T10888] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1713'. [ 413.443159][T10888] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 413.454636][T10888] CPU: 0 PID: 10888 Comm: syz.1.1713 Not tainted syzkaller #0 [ 413.462198][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.472317][T10888] Call Trace: [ 413.475647][T10888] [ 413.478672][T10888] dump_stack_lvl+0x18c/0x250 [ 413.483427][T10888] ? show_regs_print_info+0x20/0x20 [ 413.488740][T10888] ? load_image+0x420/0x420 [ 413.493325][T10888] sysfs_warn_dup+0x8e/0xa0 [ 413.497890][T10888] sysfs_do_create_link_sd+0xc0/0x110 [ 413.503324][T10888] device_add_class_symlinks+0x1cf/0x240 [ 413.509022][T10888] device_add+0x507/0xc50 [ 413.513429][T10888] wiphy_register+0x1dad/0x2ae0 [ 413.518368][T10888] ? cfg80211_event_work+0x40/0x40 [ 413.523541][T10888] ? minstrel_ht_alloc+0x88a/0x990 [ 413.528743][T10888] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 413.534887][T10888] ieee80211_register_hw+0x3464/0x4250 [ 413.540448][T10888] ? ieee80211_tasklet_handler+0x20/0x20 [ 413.546148][T10888] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 413.552113][T10888] ? __debug_object_init+0xec/0x450 [ 413.557382][T10888] ? __asan_memset+0x22/0x40 [ 413.562034][T10888] ? __hrtimer_init+0x186/0x270 [ 413.566947][T10888] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 413.572753][T10888] ? mac80211_hwsim_free+0x220/0x220 [ 413.578102][T10888] ? rcu_is_watching+0x15/0xb0 [ 413.582933][T10888] ? kstrndup+0xbd/0x140 [ 413.587242][T10888] hwsim_new_radio_nl+0xdc9/0x1a90 [ 413.592407][T10888] ? __nla_validate+0x50/0x50 [ 413.597177][T10888] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 413.603564][T10888] ? __nla_parse+0x40/0x50 [ 413.608019][T10888] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 413.614395][T10888] genl_family_rcv_msg_doit+0x211/0x310 [ 413.619986][T10888] ? end_current_label_crit_section+0x170/0x170 [ 413.626271][T10888] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 413.632220][T10888] ? bpf_lsm_capable+0x9/0x10 [ 413.636942][T10888] ? security_capable+0x89/0xb0 [ 413.641847][T10888] genl_rcv_msg+0x619/0x7a0 [ 413.646395][T10888] ? genl_bind+0x360/0x360 [ 413.650853][T10888] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 413.657229][T10888] ? ref_tracker_free+0x690/0x840 [ 413.662307][T10888] netlink_rcv_skb+0x241/0x4d0 [ 413.667130][T10888] ? genl_bind+0x360/0x360 [ 413.671584][T10888] ? netlink_ack+0x1180/0x1180 [ 413.676397][T10888] ? __lock_acquire+0x7d40/0x7d40 [ 413.681488][T10888] ? down_read+0x1ac/0x2e0 [ 413.685950][T10888] genl_rcv+0x28/0x40 [ 413.689967][T10888] netlink_unicast+0x751/0x8d0 [ 413.694775][T10888] netlink_sendmsg+0x8d0/0xbf0 [ 413.699584][T10888] ? netlink_getsockopt+0x590/0x590 [ 413.704825][T10888] ? aa_sock_msg_perm+0x94/0x150 [ 413.709813][T10888] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 413.715144][T10888] ? security_socket_sendmsg+0x80/0xa0 [ 413.720675][T10888] ? netlink_getsockopt+0x590/0x590 [ 413.725918][T10888] ____sys_sendmsg+0x5ba/0x960 [ 413.730734][T10888] ? __asan_memset+0x22/0x40 [ 413.735368][T10888] ? __sys_sendmsg_sock+0x30/0x30 [ 413.740427][T10888] ? __import_iovec+0x5f2/0x850 [ 413.745324][T10888] ? import_iovec+0x73/0xa0 [ 413.749872][T10888] ___sys_sendmsg+0x2a6/0x360 [ 413.754597][T10888] ? __sys_sendmsg+0x2a0/0x2a0 [ 413.759446][T10888] __se_sys_sendmsg+0x1c2/0x2b0 [ 413.764377][T10888] ? __x64_sys_sendmsg+0x80/0x80 [ 413.769365][T10888] ? lockdep_hardirqs_on+0x98/0x150 [ 413.774613][T10888] do_syscall_64+0x55/0xb0 [ 413.779072][T10888] ? clear_bhb_loop+0x40/0x90 [ 413.783873][T10888] ? clear_bhb_loop+0x40/0x90 [ 413.788590][T10888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.794531][T10888] RIP: 0033:0x7f85d8f9ce59 [ 413.799004][T10888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.818667][T10888] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.827124][T10888] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 413.835153][T10888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 413.843169][T10888] RBP: 00007f85d9032e6f R08: 0000000000000000 R09: 0000000000000000 [ 413.851298][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.859318][T10888] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 413.867347][T10888] [ 414.002849][T10896] netlink: 'syz.3.1714': attribute type 3 has an invalid length. [ 414.024754][T10896] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1714'. [ 414.704209][T10921] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1724'. [ 414.743283][T10921] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 414.757396][T10921] CPU: 1 PID: 10921 Comm: syz.2.1724 Not tainted syzkaller #0 [ 414.764962][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.775080][T10921] Call Trace: [ 414.778415][T10921] [ 414.781394][T10921] dump_stack_lvl+0x18c/0x250 [ 414.786137][T10926] FAULT_INJECTION: forcing a failure. [ 414.786137][T10926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.786142][T10921] ? show_regs_print_info+0x20/0x20 [ 414.786179][T10921] ? load_image+0x420/0x420 [ 414.808999][T10921] sysfs_warn_dup+0x8e/0xa0 [ 414.813609][T10921] sysfs_do_create_link_sd+0xc0/0x110 [ 414.819342][T10921] device_add_class_symlinks+0x1cf/0x240 [ 414.825053][T10921] device_add+0x507/0xc50 [ 414.829457][T10921] wiphy_register+0x1dad/0x2ae0 [ 414.834406][T10921] ? cfg80211_event_work+0x40/0x40 [ 414.839619][T10921] ? minstrel_ht_alloc+0x88a/0x990 [ 414.844812][T10921] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 414.850962][T10921] ieee80211_register_hw+0x3464/0x4250 [ 414.856499][T10921] ? ieee80211_tasklet_handler+0x20/0x20 [ 414.862180][T10921] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 414.868131][T10921] ? __debug_object_init+0xec/0x450 [ 414.873391][T10921] ? __asan_memset+0x22/0x40 [ 414.878026][T10921] ? __hrtimer_init+0x186/0x270 [ 414.882920][T10921] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 414.888707][T10921] ? mac80211_hwsim_free+0x220/0x220 [ 414.894042][T10921] ? rcu_is_watching+0x15/0xb0 [ 414.898882][T10921] ? kstrndup+0xbd/0x140 [ 414.903188][T10921] hwsim_new_radio_nl+0xdc9/0x1a90 [ 414.908382][T10921] ? __nla_validate+0x50/0x50 [ 414.913126][T10921] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 414.919526][T10921] ? __nla_parse+0x40/0x50 [ 414.924000][T10921] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 414.930378][T10921] genl_family_rcv_msg_doit+0x211/0x310 [ 414.935967][T10921] ? end_current_label_crit_section+0x170/0x170 [ 414.942263][T10921] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 414.948209][T10921] ? bpf_lsm_capable+0x9/0x10 [ 414.952939][T10921] ? security_capable+0x89/0xb0 [ 414.957843][T10921] genl_rcv_msg+0x619/0x7a0 [ 414.962405][T10921] ? genl_bind+0x360/0x360 [ 414.966864][T10921] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 414.973248][T10921] ? ref_tracker_free+0x690/0x840 [ 414.978324][T10921] netlink_rcv_skb+0x241/0x4d0 [ 414.983132][T10921] ? genl_bind+0x360/0x360 [ 414.987594][T10921] ? netlink_ack+0x1180/0x1180 [ 414.992408][T10921] ? __lock_acquire+0x7d40/0x7d40 [ 414.997477][T10921] ? down_read+0x1ac/0x2e0 [ 415.001939][T10921] genl_rcv+0x28/0x40 [ 415.005957][T10921] netlink_unicast+0x751/0x8d0 [ 415.010768][T10921] netlink_sendmsg+0x8d0/0xbf0 [ 415.015582][T10921] ? netlink_getsockopt+0x590/0x590 [ 415.020827][T10921] ? aa_sock_msg_perm+0x94/0x150 [ 415.025815][T10921] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 415.031156][T10921] ? security_socket_sendmsg+0x80/0xa0 [ 415.036698][T10921] ? netlink_getsockopt+0x590/0x590 [ 415.041949][T10921] ____sys_sendmsg+0x5ba/0x960 [ 415.046766][T10921] ? __asan_memset+0x22/0x40 [ 415.051406][T10921] ? __sys_sendmsg_sock+0x30/0x30 [ 415.056470][T10921] ? __import_iovec+0x5f2/0x850 [ 415.061411][T10921] ? import_iovec+0x73/0xa0 [ 415.065986][T10921] ___sys_sendmsg+0x2a6/0x360 [ 415.070712][T10921] ? __sys_sendmsg+0x2a0/0x2a0 [ 415.075542][T10921] ? __lock_acquire+0x7d40/0x7d40 [ 415.080633][T10921] __se_sys_sendmsg+0x1c2/0x2b0 [ 415.085530][T10921] ? __x64_sys_sendmsg+0x80/0x80 [ 415.090524][T10921] ? lockdep_hardirqs_on+0x98/0x150 [ 415.095770][T10921] do_syscall_64+0x55/0xb0 [ 415.100275][T10921] ? clear_bhb_loop+0x40/0x90 [ 415.105009][T10921] ? clear_bhb_loop+0x40/0x90 [ 415.109729][T10921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.115688][T10921] RIP: 0033:0x7f1706f9ce59 [ 415.120153][T10921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.139810][T10921] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.148282][T10921] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 415.156291][T10921] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 415.164297][T10921] RBP: 00007f1707032e6f R08: 0000000000000000 R09: 0000000000000000 [ 415.172305][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.180328][T10921] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 415.188350][T10921] [ 415.192031][T10926] CPU: 0 PID: 10926 Comm: syz.1.1726 Not tainted syzkaller #0 [ 415.199559][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.209665][T10926] Call Trace: [ 415.212986][T10926] [ 415.215955][T10926] dump_stack_lvl+0x18c/0x250 [ 415.220692][T10926] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.226891][T10926] ? show_regs_print_info+0x20/0x20 [ 415.232171][T10926] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.238387][T10926] ? dump_stack+0x9/0x20 [ 415.242688][T10926] should_fail_ex+0x39d/0x4d0 [ 415.247427][T10926] _copy_from_iter+0x1d9/0x12e0 [ 415.252326][T10926] ? rep_movs_alternative+0x4a/0x90 [ 415.257572][T10926] ? _copy_from_iter+0x24e/0x12e0 [ 415.262638][T10926] ? __virt_addr_valid+0x18c/0x540 [ 415.267789][T10926] ? __lock_acquire+0x7d40/0x7d40 [ 415.272873][T10926] ? copyout_mc+0x70/0x70 [ 415.277264][T10926] ? copyout_mc+0x70/0x70 [ 415.281646][T10926] ? __virt_addr_valid+0x18c/0x540 [ 415.286807][T10926] ? page_copy_sane+0x16a/0x270 [ 415.291713][T10926] copy_page_from_iter+0x7b/0x100 [ 415.296804][T10926] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 415.302703][T10926] unix_stream_sendmsg+0x562/0xbf0 [ 415.307910][T10926] ? unix_show_fdinfo+0x270/0x270 [ 415.312973][T10926] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 415.319448][T10926] ? aa_sock_msg_perm+0x94/0x150 [ 415.324466][T10926] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 415.329790][T10926] ? security_socket_sendmsg+0x80/0xa0 [ 415.335290][T10926] ? unix_show_fdinfo+0x270/0x270 [ 415.340355][T10926] ____sys_sendmsg+0x5ba/0x960 [ 415.345164][T10926] ? __asan_memset+0x22/0x40 [ 415.349796][T10926] ? __sys_sendmsg_sock+0x30/0x30 [ 415.354860][T10926] ? __import_iovec+0x5f2/0x850 [ 415.359755][T10926] ? import_iovec+0x73/0xa0 [ 415.364302][T10926] ___sys_sendmsg+0x2a6/0x360 [ 415.369023][T10926] ? get_pid_task+0x20/0x1e0 [ 415.373656][T10926] ? __sys_sendmsg+0x2a0/0x2a0 [ 415.378483][T10926] ? __lock_acquire+0x7d40/0x7d40 [ 415.383564][T10926] __se_sys_sendmsg+0x1c2/0x2b0 [ 415.388458][T10926] ? __x64_sys_sendmsg+0x80/0x80 [ 415.393451][T10926] ? lockdep_hardirqs_on+0x98/0x150 [ 415.398707][T10926] do_syscall_64+0x55/0xb0 [ 415.403163][T10926] ? clear_bhb_loop+0x40/0x90 [ 415.407875][T10926] ? clear_bhb_loop+0x40/0x90 [ 415.412586][T10926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.418537][T10926] RIP: 0033:0x7f85d8f9ce59 [ 415.422989][T10926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.442666][T10926] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.451155][T10926] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 415.459185][T10926] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005 [ 415.467194][T10926] RBP: 00007f85d9f17090 R08: 0000000000000000 R09: 0000000000000000 [ 415.475204][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.483217][T10926] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 415.491241][T10926] [ 415.631573][T10924] netlink: 'syz.3.1725': attribute type 3 has an invalid length. [ 415.679840][T10924] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1725'. [ 416.640111][T10961] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1737'. [ 416.683247][T10957] : renamed from vlan0 (while UP) [ 416.716202][T10962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1737'. [ 416.748508][T10961] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 416.764775][T10961] CPU: 1 PID: 10961 Comm: syz.0.1737 Not tainted syzkaller #0 [ 416.772340][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.782445][T10961] Call Trace: [ 416.785757][T10961] [ 416.788725][T10961] dump_stack_lvl+0x18c/0x250 [ 416.793474][T10961] ? show_regs_print_info+0x20/0x20 [ 416.798699][T10961] ? load_image+0x420/0x420 [ 416.803240][T10961] sysfs_warn_dup+0x8e/0xa0 [ 416.807765][T10961] sysfs_do_create_link_sd+0xc0/0x110 [ 416.813171][T10961] device_add_class_symlinks+0x1cf/0x240 [ 416.818858][T10961] device_add+0x507/0xc50 [ 416.823271][T10961] wiphy_register+0x1dad/0x2ae0 [ 416.828191][T10961] ? cfg80211_event_work+0x40/0x40 [ 416.833355][T10961] ? minstrel_ht_alloc+0x88a/0x990 [ 416.838522][T10961] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 416.844644][T10961] ieee80211_register_hw+0x3464/0x4250 [ 416.850174][T10961] ? ieee80211_tasklet_handler+0x20/0x20 [ 416.855860][T10961] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 416.861827][T10961] ? __debug_object_init+0xec/0x450 [ 416.867089][T10961] ? __asan_memset+0x22/0x40 [ 416.871731][T10961] ? __hrtimer_init+0x186/0x270 [ 416.876629][T10961] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 416.882419][T10961] ? mac80211_hwsim_free+0x220/0x220 [ 416.887793][T10961] ? rcu_is_watching+0x15/0xb0 [ 416.892614][T10961] ? kstrndup+0xbd/0x140 [ 416.896916][T10961] hwsim_new_radio_nl+0xdc9/0x1a90 [ 416.902103][T10961] ? __nla_validate+0x50/0x50 [ 416.906832][T10961] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 416.913214][T10961] ? __nla_parse+0x40/0x50 [ 416.917676][T10961] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 416.924057][T10961] genl_family_rcv_msg_doit+0x211/0x310 [ 416.929653][T10961] ? end_current_label_crit_section+0x170/0x170 [ 416.935944][T10961] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 416.941887][T10961] ? bpf_lsm_capable+0x9/0x10 [ 416.946602][T10961] ? security_capable+0x89/0xb0 [ 416.951505][T10961] genl_rcv_msg+0x619/0x7a0 [ 416.956061][T10961] ? genl_bind+0x360/0x360 [ 416.960526][T10961] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 416.966899][T10961] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 416.973533][T10961] ? perf_trace_lock+0xfc/0x3b0 [ 416.978444][T10961] netlink_rcv_skb+0x241/0x4d0 [ 416.983250][T10961] ? genl_bind+0x360/0x360 [ 416.987706][T10961] ? netlink_ack+0x1180/0x1180 [ 416.992523][T10961] ? __lock_acquire+0x7d40/0x7d40 [ 416.997597][T10961] ? down_read+0x1ac/0x2e0 [ 417.002061][T10961] genl_rcv+0x28/0x40 [ 417.006087][T10961] netlink_unicast+0x751/0x8d0 [ 417.010896][T10961] netlink_sendmsg+0x8d0/0xbf0 [ 417.015728][T10961] ? netlink_getsockopt+0x590/0x590 [ 417.020984][T10961] ? aa_sock_msg_perm+0x94/0x150 [ 417.025979][T10961] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.031312][T10961] ? security_socket_sendmsg+0x80/0xa0 [ 417.036809][T10961] ? netlink_getsockopt+0x590/0x590 [ 417.042056][T10961] ____sys_sendmsg+0x5ba/0x960 [ 417.046894][T10961] ? __asan_memset+0x22/0x40 [ 417.051532][T10961] ? __sys_sendmsg_sock+0x30/0x30 [ 417.056597][T10961] ? __import_iovec+0x5f2/0x850 [ 417.061533][T10961] ? import_iovec+0x73/0xa0 [ 417.066106][T10961] ___sys_sendmsg+0x2a6/0x360 [ 417.070855][T10961] ? __sys_sendmsg+0x2a0/0x2a0 [ 417.075713][T10961] __se_sys_sendmsg+0x1c2/0x2b0 [ 417.080607][T10961] ? __x64_sys_sendmsg+0x80/0x80 [ 417.085601][T10961] ? lockdep_hardirqs_on+0x98/0x150 [ 417.090896][T10961] do_syscall_64+0x55/0xb0 [ 417.095353][T10961] ? clear_bhb_loop+0x40/0x90 [ 417.100068][T10961] ? clear_bhb_loop+0x40/0x90 [ 417.104776][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.110712][T10961] RIP: 0033:0x7fc23259ce59 [ 417.115165][T10961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.134812][T10961] RSP: 002b:00007fc233464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.143269][T10961] RAX: ffffffffffffffda RBX: 00007fc232816090 RCX: 00007fc23259ce59 [ 417.151284][T10961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 417.159333][T10961] RBP: 00007fc232632e6f R08: 0000000000000000 R09: 0000000000000000 [ 417.167357][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.175375][T10961] R13: 00007fc232816128 R14: 00007fc232816090 R15: 00007fff55dbef48 [ 417.183410][T10961] [ 417.361482][T10967] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1740'. [ 417.966026][T10983] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1749'. [ 418.008649][T10983] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 418.035506][T10983] CPU: 0 PID: 10983 Comm: syz.1.1749 Not tainted syzkaller #0 [ 418.043076][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.053199][T10983] Call Trace: [ 418.056531][T10983] [ 418.059514][T10983] dump_stack_lvl+0x18c/0x250 [ 418.064260][T10983] ? show_regs_print_info+0x20/0x20 [ 418.069531][T10983] ? load_image+0x420/0x420 [ 418.074118][T10983] sysfs_warn_dup+0x8e/0xa0 [ 418.078786][T10983] sysfs_do_create_link_sd+0xc0/0x110 [ 418.084227][T10983] device_add_class_symlinks+0x1cf/0x240 [ 418.089945][T10983] device_add+0x507/0xc50 [ 418.094370][T10983] wiphy_register+0x1dad/0x2ae0 [ 418.099332][T10983] ? cfg80211_event_work+0x40/0x40 [ 418.104556][T10983] ? minstrel_ht_alloc+0x88a/0x990 [ 418.109705][T10983] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 418.115808][T10983] ieee80211_register_hw+0x3464/0x4250 [ 418.121381][T10983] ? ieee80211_tasklet_handler+0x20/0x20 [ 418.127061][T10983] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 418.132994][T10983] ? __debug_object_init+0xec/0x450 [ 418.138242][T10983] ? __asan_memset+0x22/0x40 [ 418.142876][T10983] ? __hrtimer_init+0x186/0x270 [ 418.147788][T10983] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 418.153592][T10983] ? mac80211_hwsim_free+0x220/0x220 [ 418.158926][T10983] ? rcu_is_watching+0x15/0xb0 [ 418.163745][T10983] ? kstrndup+0xbd/0x140 [ 418.168036][T10983] hwsim_new_radio_nl+0xdc9/0x1a90 [ 418.173187][T10983] ? __nla_validate+0x50/0x50 [ 418.177897][T10983] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 418.184271][T10983] ? __nla_parse+0x40/0x50 [ 418.188718][T10983] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 418.195112][T10983] genl_family_rcv_msg_doit+0x211/0x310 [ 418.200706][T10983] ? end_current_label_crit_section+0x170/0x170 [ 418.207054][T10983] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 418.213014][T10983] ? bpf_lsm_capable+0x9/0x10 [ 418.217759][T10983] ? security_capable+0x89/0xb0 [ 418.222917][T10983] genl_rcv_msg+0x619/0x7a0 [ 418.227514][T10983] ? genl_bind+0x360/0x360 [ 418.232003][T10983] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 418.238398][T10983] ? ref_tracker_free+0x690/0x840 [ 418.243503][T10983] netlink_rcv_skb+0x241/0x4d0 [ 418.248297][T10983] ? genl_bind+0x360/0x360 [ 418.252757][T10983] ? netlink_ack+0x1180/0x1180 [ 418.257591][T10983] ? __lock_acquire+0x7d40/0x7d40 [ 418.262653][T10983] ? down_read+0x1ac/0x2e0 [ 418.267115][T10983] genl_rcv+0x28/0x40 [ 418.271133][T10983] netlink_unicast+0x751/0x8d0 [ 418.275944][T10983] netlink_sendmsg+0x8d0/0xbf0 [ 418.280742][T10983] ? netlink_getsockopt+0x590/0x590 [ 418.285974][T10983] ? aa_sock_msg_perm+0x94/0x150 [ 418.290973][T10983] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.296326][T10983] ? security_socket_sendmsg+0x80/0xa0 [ 418.301846][T10983] ? netlink_getsockopt+0x590/0x590 [ 418.307110][T10983] ____sys_sendmsg+0x5ba/0x960 [ 418.311949][T10983] ? __asan_memset+0x22/0x40 [ 418.316611][T10983] ? __sys_sendmsg_sock+0x30/0x30 [ 418.321699][T10983] ? __import_iovec+0x5f2/0x850 [ 418.326605][T10983] ? import_iovec+0x73/0xa0 [ 418.331153][T10983] ___sys_sendmsg+0x2a6/0x360 [ 418.335938][T10983] ? __sys_sendmsg+0x2a0/0x2a0 [ 418.340802][T10983] __se_sys_sendmsg+0x1c2/0x2b0 [ 418.345701][T10983] ? __x64_sys_sendmsg+0x80/0x80 [ 418.350722][T10983] ? lockdep_hardirqs_on+0x98/0x150 [ 418.355977][T10983] do_syscall_64+0x55/0xb0 [ 418.360432][T10983] ? clear_bhb_loop+0x40/0x90 [ 418.365135][T10983] ? clear_bhb_loop+0x40/0x90 [ 418.369839][T10983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.375769][T10983] RIP: 0033:0x7f85d8f9ce59 [ 418.380252][T10983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.399946][T10983] RSP: 002b:00007f85d9f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.408420][T10983] RAX: ffffffffffffffda RBX: 00007f85d9215fa0 RCX: 00007f85d8f9ce59 [ 418.416424][T10983] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 418.424478][T10983] RBP: 00007f85d9032e6f R08: 0000000000000000 R09: 0000000000000000 [ 418.432496][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.440505][T10983] R13: 00007f85d9216038 R14: 00007f85d9215fa0 R15: 00007ffe03722ff8 [ 418.448556][T10983] [ 418.459030][T10989] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1749'. [ 418.696064][T11002] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1752'. [ 418.991447][T11011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1751'. [ 419.168816][T11010] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 419.178101][T11010] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1755'. [ 419.529921][T11023] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1761'. [ 419.568204][T11023] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 419.617289][T11023] CPU: 1 PID: 11023 Comm: syz.2.1761 Not tainted syzkaller #0 [ 419.624862][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.634972][T11023] Call Trace: [ 419.638299][T11023] [ 419.641283][T11023] dump_stack_lvl+0x18c/0x250 [ 419.646028][T11023] ? show_regs_print_info+0x20/0x20 [ 419.651302][T11023] ? load_image+0x420/0x420 [ 419.655920][T11023] sysfs_warn_dup+0x8e/0xa0 [ 419.660491][T11023] sysfs_do_create_link_sd+0xc0/0x110 [ 419.665926][T11023] device_add_class_symlinks+0x1cf/0x240 [ 419.671643][T11023] device_add+0x507/0xc50 [ 419.676053][T11023] wiphy_register+0x1dad/0x2ae0 [ 419.681045][T11023] ? cfg80211_event_work+0x40/0x40 [ 419.686219][T11023] ? minstrel_ht_alloc+0x88a/0x990 [ 419.691414][T11023] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 419.697561][T11023] ieee80211_register_hw+0x3464/0x4250 [ 419.703110][T11023] ? ieee80211_tasklet_handler+0x20/0x20 [ 419.708810][T11023] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 419.714784][T11023] ? __debug_object_init+0xec/0x450 [ 419.720058][T11023] ? __asan_memset+0x22/0x40 [ 419.724714][T11023] ? __hrtimer_init+0x186/0x270 [ 419.729626][T11023] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 419.735444][T11023] ? mac80211_hwsim_free+0x220/0x220 [ 419.740795][T11023] ? rcu_is_watching+0x15/0xb0 [ 419.745633][T11023] ? kstrndup+0xbd/0x140 [ 419.749960][T11023] hwsim_new_radio_nl+0xdc9/0x1a90 [ 419.755154][T11023] ? __nla_validate+0x50/0x50 [ 419.759910][T11023] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 419.766326][T11023] ? __nla_parse+0x40/0x50 [ 419.770836][T11023] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 419.777240][T11023] genl_family_rcv_msg_doit+0x211/0x310 [ 419.782846][T11023] ? end_current_label_crit_section+0x170/0x170 [ 419.789164][T11023] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 419.795143][T11023] ? bpf_lsm_capable+0x9/0x10 [ 419.799936][T11023] ? security_capable+0x89/0xb0 [ 419.804860][T11023] genl_rcv_msg+0x619/0x7a0 [ 419.809433][T11023] ? genl_bind+0x360/0x360 [ 419.813904][T11023] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 419.820295][T11023] ? ref_tracker_free+0x690/0x840 [ 419.825454][T11023] netlink_rcv_skb+0x241/0x4d0 [ 419.830294][T11023] ? genl_bind+0x360/0x360 [ 419.834776][T11023] ? netlink_ack+0x1180/0x1180 [ 419.839619][T11023] ? __lock_acquire+0x7d40/0x7d40 [ 419.844718][T11023] ? down_read+0x1ac/0x2e0 [ 419.849213][T11023] genl_rcv+0x28/0x40 [ 419.853259][T11023] netlink_unicast+0x751/0x8d0 [ 419.858098][T11023] netlink_sendmsg+0x8d0/0xbf0 [ 419.862938][T11023] ? netlink_getsockopt+0x590/0x590 [ 419.868208][T11023] ? aa_sock_msg_perm+0x94/0x150 [ 419.873215][T11023] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 419.878570][T11023] ? security_socket_sendmsg+0x80/0xa0 [ 419.884220][T11023] ? netlink_getsockopt+0x590/0x590 [ 419.889493][T11023] ____sys_sendmsg+0x5ba/0x960 [ 419.894332][T11023] ? __asan_memset+0x22/0x40 [ 419.898997][T11023] ? __sys_sendmsg_sock+0x30/0x30 [ 419.904082][T11023] ? __import_iovec+0x5f2/0x850 [ 419.909007][T11023] ? import_iovec+0x73/0xa0 [ 419.913578][T11023] ___sys_sendmsg+0x2a6/0x360 [ 419.918349][T11023] ? __sys_sendmsg+0x2a0/0x2a0 [ 419.923214][T11023] ? trace_call_bpf+0xc3/0x6c0 [ 419.928089][T11023] __se_sys_sendmsg+0x1c2/0x2b0 [ 419.933015][T11023] ? __x64_sys_sendmsg+0x80/0x80 [ 419.938089][T11023] ? lockdep_hardirqs_on+0x98/0x150 [ 419.943409][T11023] do_syscall_64+0x55/0xb0 [ 419.947893][T11023] ? clear_bhb_loop+0x40/0x90 [ 419.952628][T11023] ? clear_bhb_loop+0x40/0x90 [ 419.957367][T11023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.963354][T11023] RIP: 0033:0x7f1706f9ce59 [ 419.967842][T11023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.987542][T11023] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.996051][T11023] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 420.004104][T11023] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 420.012137][T11023] RBP: 00007f1707032e6f R08: 0000000000000000 R09: 0000000000000000 [ 420.020178][T11023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.028228][T11023] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 420.036393][T11023] [ 420.189076][T11028] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1761'. [ 420.267173][T11031] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1762'. [ 420.694914][T11040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1765'. [ 420.896647][T11050] netlink: 'syz.0.1769': attribute type 3 has an invalid length. [ 421.206100][ T5786] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 422.610239][T11103] netlink: 'syz.1.1782': attribute type 3 has an invalid length. [ 422.632720][T11103] __nla_validate_parse: 5 callbacks suppressed [ 422.632763][T11103] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1782'. [ 423.080892][T11124] netlink: 'syz.1.1791': attribute type 29 has an invalid length. [ 424.913989][T11124] netlink: 'syz.1.1791': attribute type 29 has an invalid length. [ 425.825031][T11150] netlink: 'syz.2.1802': attribute type 29 has an invalid length. [ 425.854701][T11150] netlink: 'syz.2.1802': attribute type 29 has an invalid length. [ 425.953159][T11154] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1804'. [ 426.064185][T11159] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1805'. [ 428.033132][T11172] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1810'. [ 428.088598][T11172] hsr_slave_0: left promiscuous mode [ 428.210090][T11172] hsr_slave_1: left promiscuous mode [ 428.759822][T11192] netlink: 'syz.0.1817': attribute type 21 has an invalid length. [ 428.784173][T11188] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1815'. [ 428.839933][T11188] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1815'. [ 444.163378][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 444.178873][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 444.192325][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 444.201947][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 444.215696][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 444.237149][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.941015][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 445.961254][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 445.974491][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 445.983901][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.992460][ T5791] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 446.000358][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 446.307098][ T5791] Bluetooth: hci4: command tx timeout [ 446.430095][ T5786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 446.449456][ T5786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 446.457914][ T5786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 446.468862][ T5786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 446.476996][ T5786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 446.485513][ T5786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 446.497485][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.509121][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.517474][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.525825][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.552367][ T5791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 446.561369][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.058961][ T5791] Bluetooth: hci6: command tx timeout [ 448.379022][ T5791] Bluetooth: hci4: command tx timeout [ 448.619099][ T5087] Bluetooth: hci7: command tx timeout [ 448.626849][ T5791] Bluetooth: hci5: command tx timeout [ 450.138903][ T5791] Bluetooth: hci6: command tx timeout [ 450.458975][ T5791] Bluetooth: hci4: command tx timeout [ 450.698985][ T5087] Bluetooth: hci7: command tx timeout [ 450.705901][ T5791] Bluetooth: hci5: command tx timeout [ 452.218945][ T5791] Bluetooth: hci6: command tx timeout [ 452.538884][ T5791] Bluetooth: hci4: command tx timeout [ 452.779085][ T5087] Bluetooth: hci7: command tx timeout [ 452.785444][ T5791] Bluetooth: hci5: command tx timeout [ 454.520436][ T5791] Bluetooth: hci6: command tx timeout [ 454.859047][ T5791] Bluetooth: hci7: command tx timeout [ 454.864561][ T5087] Bluetooth: hci5: command tx timeout [ 492.204621][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 492.213526][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.482252][ T5791] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 505.492794][ T5791] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 505.509925][ T5791] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 505.518943][ T5791] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 505.528089][ T5791] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 505.536211][ T5791] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 506.717252][ T5786] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 506.726949][ T5786] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 506.740457][ T5786] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 506.754971][ T5786] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 506.763056][ T5786] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 506.771180][ T5786] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 506.870160][ T5786] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 506.879853][ T5786] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 506.888095][ T5786] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 506.898134][ T5786] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 506.906007][ T5786] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 506.914005][ T5786] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 507.579065][ T5087] Bluetooth: hci8: command tx timeout [ 507.587768][ T5087] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 507.598124][ T5087] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 507.606488][ T5087] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 507.615823][ T5087] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 507.629087][ T5087] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 507.639003][ T5087] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 508.858979][ T5087] Bluetooth: hci10: command tx timeout [ 508.939012][ T5087] Bluetooth: hci9: command tx timeout [ 509.659024][ T5087] Bluetooth: hci8: command tx timeout [ 509.748983][ T5087] Bluetooth: hci11: command tx timeout [ 510.938927][ T5087] Bluetooth: hci10: command tx timeout [ 511.018959][ T5087] Bluetooth: hci9: command tx timeout [ 511.738979][ T5087] Bluetooth: hci8: command tx timeout [ 511.828910][ T5087] Bluetooth: hci11: command tx timeout [ 513.019016][ T5087] Bluetooth: hci10: command tx timeout [ 513.098932][ T5087] Bluetooth: hci9: command tx timeout [ 513.818926][ T5087] Bluetooth: hci8: command tx timeout [ 513.908944][ T5087] Bluetooth: hci11: command tx timeout [ 515.099035][ T5087] Bluetooth: hci10: command tx timeout [ 515.178976][ T5087] Bluetooth: hci9: command tx timeout [ 515.979438][ T5087] Bluetooth: hci11: command tx timeout [ 534.688770][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 534.695469][ C0] rcu: 0-....: (1 GPs behind) idle=4104/1/0x4000000000000000 softirq=35427/35428 fqs=5166 [ 534.706632][ C0] rcu: hardirqs softirqs csw/system [ 534.713067][ C0] rcu: number: 1303343 2 0 [ 534.719494][ C0] rcu: cputime: 16643 35846 75 ==> 52500(ms) [ 534.727417][ C0] rcu: (t=10502 jiffies g=48825 q=1453 ncpus=2) [ 534.733813][ C0] CPU: 0 PID: 11188 Comm: syz.2.1815 Not tainted syzkaller #0 [ 534.741325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.751427][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 534.758328][ C0] Code: 00 4d 85 e4 75 16 e8 85 c8 0f 00 eb 15 e8 7e c8 0f 00 e8 69 f8 10 09 4d 85 e4 74 ea e8 6f c8 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 534.778013][ C0] RSP: 0018:ffffc90000006120 EFLAGS: 00000246 [ 534.784145][ C0] RAX: ffffffff81776321 RBX: 0000000000000000 RCX: ffff88802bceda00 [ 534.792149][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.800170][ C0] RBP: ffffc900000061d8 R08: ffffffff911cd5c7 R09: 1ffffffff2239ab8 [ 534.808182][ C0] R10: dffffc0000000000 R11: fffffbfff2239ab9 R12: 0000000000000200 [ 534.816190][ C0] R13: 000001fb63109b96 R14: 1ffff92000000c24 R15: dffffc0000000000 [ 534.824201][ C0] FS: 00007f1707dc26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 534.833165][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.839780][ C0] CR2: 0000001b2e00cff8 CR3: 0000000056bd1000 CR4: 00000000003506f0 [ 534.847788][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 534.855795][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 534.863809][ C0] Call Trace: [ 534.867120][ C0] [ 534.869996][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 534.875353][ C0] ? __skb_clone+0x480/0x790 [ 534.879993][ C0] ktime_get_with_offset+0x94/0x330 [ 534.885236][ C0] dev_queue_xmit_nit+0x8ce/0xbb0 [ 534.890301][ C0] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 534.895464][ C0] dev_hard_start_xmit+0x148/0x740 [ 534.900628][ C0] sch_direct_xmit+0x25e/0x4c0 [ 534.905534][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 534.911560][ C0] __dev_queue_xmit+0x165d/0x3660 [ 534.916641][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 534.921793][ C0] ? read_seqbegin+0x1c8/0x270 [ 534.926598][ C0] ? nf_ct_pernet+0x270/0x270 [ 534.931410][ C0] ? neigh_event_send+0x110/0x110 [ 534.936490][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 534.941816][ C0] ? __asan_memcpy+0x40/0x70 [ 534.946445][ C0] ? eth_header+0x11b/0x200 [ 534.950997][ C0] ? ip_finish_output2+0x457/0x11e0 [ 534.956253][ C0] ip_finish_output2+0xd3a/0x11e0 [ 534.961368][ C0] ? skb_gso_transport_seglen+0x141/0x510 [ 534.967219][ C0] ? ip_fragment+0x210/0x210 [ 534.971847][ C0] ? skb_gso_validate_network_len+0x12c/0x290 [ 534.977953][ C0] ? ip_finish_output+0x1c5/0x4c0 [ 534.983024][ C0] ip_output+0x2a1/0x3b0 [ 534.987314][ C0] ? ip_output+0x60/0x3b0 [ 534.991693][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 534.996666][ C0] __ip_queue_xmit+0x1049/0x1950 [ 535.001653][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 535.006641][ C0] __tcp_transmit_skb+0x1d6d/0x33f0 [ 535.011904][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 535.016807][ C0] ? sk_forced_mem_schedule+0x113/0x200 [ 535.022434][ C0] ? tcp_small_queue_check+0x201/0x400 [ 535.027964][ C0] tcp_write_xmit+0x174c/0x62e0 [ 535.032901][ C0] __tcp_push_pending_frames+0x97/0x340 [ 535.038494][ C0] tcp_rcv_established+0xab3/0x1d20 [ 535.043751][ C0] ? rt_is_expired+0x1c/0x2d0 [ 535.048499][ C0] ? tcp_check_space+0xad0/0xad0 [ 535.053513][ C0] ? rt_is_expired+0x1c/0x2d0 [ 535.058247][ C0] ? rt_is_expired+0x250/0x2d0 [ 535.063059][ C0] tcp_v4_do_rcv+0x4ed/0xb80 [ 535.067799][ C0] tcp_v4_rcv+0x23bf/0x2af0 [ 535.072373][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 535.077468][ C0] ? tcp_filter+0x90/0x90 [ 535.081843][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 535.087342][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 535.093018][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 535.098528][ C0] NF_HOOK+0x32d/0x3b0 [ 535.102632][ C0] ? fib_multipath_hash+0x1b10/0x1b10 [ 535.108142][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 535.112414][ C0] ? NF_HOOK+0x9f/0x3b0 [ 535.116600][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 535.121704][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 535.125980][ C0] ? ip_rcv_finish_core+0xd92/0x1bd0 [ 535.131310][ C0] ? ip_local_deliver+0x122/0x1b0 [ 535.136376][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 535.141092][ C0] ? packet_rcv+0x16b/0x13d0 [ 535.145784][ C0] ? ip_list_rcv+0x440/0x440 [ 535.150421][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 535.155057][ C0] ip_list_rcv+0x3f2/0x440 [ 535.159515][ C0] ? ip_rcv_finish+0x250/0x250 [ 535.164325][ C0] ? ip_rcv_finish+0x250/0x250 [ 535.169127][ C0] __netif_receive_skb_list_core+0x2da/0x750 [ 535.175158][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 535.179794][ C0] ? netif_receive_skb_list_internal+0x86d/0xca0 [ 535.186168][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 535.192362][ C0] ? tcp_gro_receive+0x6fa/0x12b0 [ 535.197427][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 535.203811][ C0] ? netif_receive_skb_core+0x230/0x230 [ 535.209406][ C0] ? dev_gro_receive+0x10ce/0x22c0 [ 535.214557][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 535.219642][ C0] napi_gro_complete+0x2db/0x6f0 [ 535.224629][ C0] dev_gro_receive+0x19cd/0x22c0 [ 535.229606][ C0] ? dev_gro_receive+0xff0/0x22c0 [ 535.234699][ C0] napi_gro_receive+0x381/0xb00 [ 535.239594][ C0] receive_buf+0x2203/0x3820 [ 535.244246][ C0] ? virtnet_poll_tx+0x530/0x530 [ 535.249249][ C0] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 535.254837][ C0] virtnet_poll+0x5dd/0x1280 [ 535.259515][ C0] ? refill_work+0x220/0x220 [ 535.264156][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.270366][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 535.275613][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.281840][ C0] __napi_poll+0xc0/0x460 [ 535.286215][ C0] net_rx_action+0x616/0xc40 [ 535.290855][ C0] ? net_tx_action+0x980/0x980 [ 535.295663][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 535.300911][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.307120][ C0] handle_softirqs+0x280/0x820 [ 535.311926][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 535.316737][ C0] ? do_softirq+0x1a0/0x1a0 [ 535.321278][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 535.326539][ C0] __irq_exit_rcu+0xd3/0x190 [ 535.331168][ C0] ? irq_exit_rcu+0x20/0x20 [ 535.335717][ C0] irq_exit_rcu+0x9/0x20 [ 535.339988][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 535.345669][ C0] [ 535.348623][ C0] [ 535.351585][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.357613][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 535.363549][ C0] Code: 75 11 e8 c2 06 0b 00 48 85 db 75 16 e8 b8 06 0b 00 eb 15 e8 b1 06 0b 00 e8 9c 36 0c 09 48 85 db 74 ea e8 a2 06 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 535.383216][ C0] RSP: 0018:ffffc90003b47860 EFLAGS: 00000246 [ 535.389360][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 535.397385][ C0] RDX: ffffc9000d3db000 RSI: 000000000000102a RDI: 000000000000102b [ 535.405406][ C0] RBP: ffffc90003b47930 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 535.413433][ C0] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: 1ffff92000768f10 [ 535.421463][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000768f31 [ 535.429488][ C0] ? event_function+0x300/0x300 [ 535.434389][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 535.440150][ C0] ? mark_lock+0x94/0x320 [ 535.444521][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 535.450211][ C0] smp_call_function_single+0x36d/0x5a0 [ 535.455820][ C0] ? event_function+0x300/0x300 [ 535.460726][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 535.466924][ C0] ? event_function+0x300/0x300 [ 535.471810][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 535.477063][ C0] event_function_call+0x359/0x650 [ 535.482220][ C0] ? __perf_event_read+0x990/0x990 [ 535.487403][ C0] ? perf_event_ctx_lock_nested+0x490/0x490 [ 535.493339][ C0] ? event_function_call+0x650/0x650 [ 535.498667][ C0] ? __might_fault+0xaa/0x120 [ 535.503379][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 535.508446][ C0] ? __perf_event_read+0x990/0x990 [ 535.513600][ C0] ? __might_fault+0xaa/0x120 [ 535.518312][ C0] ? __might_fault+0xc6/0x120 [ 535.523016][ C0] ? __might_fault+0xaa/0x120 [ 535.527737][ C0] perf_ioctl+0x1fdc/0x24a0 [ 535.532290][ C0] ? tomoyo_path_number_perm+0x217/0x620 [ 535.538006][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 535.543537][ C0] ? perf_poll+0x1b0/0x1b0 [ 535.548022][ C0] ? __fget_files+0x28/0x4b0 [ 535.552653][ C0] ? __fget_files+0x28/0x4b0 [ 535.557290][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 535.562261][ C0] ? security_file_ioctl+0x80/0xa0 [ 535.567408][ C0] ? perf_poll+0x1b0/0x1b0 [ 535.571882][ C0] __se_sys_ioctl+0xfd/0x170 [ 535.576525][ C0] do_syscall_64+0x55/0xb0 [ 535.580980][ C0] ? clear_bhb_loop+0x40/0x90 [ 535.585692][ C0] ? clear_bhb_loop+0x40/0x90 [ 535.590401][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.596346][ C0] RIP: 0033:0x7f1706f9ce59 [ 535.600802][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.620459][ C0] RSP: 002b:00007f1707dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.628930][ C0] RAX: ffffffffffffffda RBX: 00007f1707215fa0 RCX: 00007f1706f9ce59 [ 535.636958][ C0] RDX: 0000200000000240 RSI: 0000000040082404 RDI: 0000000000000004 [ 535.644987][ C0] RBP: 00007f1707032e6f R08: 0000000000000000 R09: 0000000000000000 [ 535.652996][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.661004][ C0] R13: 00007f1707216038 R14: 00007f1707215fa0 R15: 00007ffc528b25e8 [ 535.669029][ C0]