last executing test programs: 2m33.286695294s ago: executing program 0 (id=3331): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000003c0)=""/4096, 0x44, 0x1000, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x60, &(0x7f0000001100)}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r2}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) 2m31.944316505s ago: executing program 0 (id=3335): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5c, 0xfffffffc, 0x0, 0x0, 0xc77, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x3a, 0x800, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a1085", @ANYRES8=r2, @ANYBLOB="8700"/20, @ANYBLOB="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"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900"], 0x18}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) socket$kcm(0xa, 0x922000000004, 0x11) sendmsg$unix(r2, &(0x7f00000004c0)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="09710cb99890712f32264465d945b6ae3244161b13a38896d5d6cc207a01f4c2c16ec0a9326185f33bf1ec40cbb87bf864d2a6119431a969d53bbacbd9e78d34339ce2851696fcfa7aff0332fba938b5003579d3f4dcd1568331487231e5f42d2ff0844f8d3a698b1e1a72ff36e85856530cd8e0cda8be5783b532a79c37a11c8dcf28830b9fc6a07cea41843e391691301e0576d32777f20700377e3402", 0x9e}], 0x1, 0x0, 0x0, 0xc004}, 0x40085) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x503800, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x104) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) 2m31.303245974s ago: executing program 0 (id=3341): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000001000), 0x0}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02083b00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f00000001c0)=0xa00, &(0x7f0000000200)}, 0x20) (async) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00"/12, @ANYRES32, @ANYBLOB="b0b82287816807eda58fa434e7ed44e10b45e19cd543ab9cbb7e8741b956b653eee1592cc029336e335be104915e86772ca9f4404d8255da40a787f5b9489b40ceeef87f8f836fa42f6e251e0ae3dd265b9e2608a7dfba8a5de16151bd857eb46aa7c3de8f8afe7ffd470a955ed1e9cb136588ddf0ec3969d7d4cdb979249f204676023f166adab648a93c6868b8446489f2198228eedfa86a4680dd7f2dd949b66f0a9c0319b443cd13cebd2ab58cd88e70250b5c352e536023982d7df1b510b07cfdac5895d65d06cb449277a4495b16", @ANYRES64], 0x20) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff65, &(0x7f0000000900)='{\x88*\x10\xc2\xd5\x97\xd7\xc1\x97\xc5\x1b7U\xaf\xe2\xf9\xf7\xb0\xec\"\xbf\xf9-#^\x15*K\xa86\x02\xc7m\xbc\x03\xe9\xb7t\xfa\xf7\xc5\xd1\xc1\xab\x05\xa6\xf8\xc0H\x11\n\xe6\x92\x8f\x87\xadW\xbd\xdb\xc9\xa40\xc2f{@\xe9\xcfs\xe3\x92\x9fh\xc6,0\x1c\x9eD\xe5*<\xb5RPKe+\x19'}, 0x30) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x9, 0x5, 0x1c, 0x1, 0x0, 0xf96, 0x10002, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000500), 0x6}, 0x2200, 0x3, 0x5, 0x4, 0x7, 0xd55, 0x2, 0x0, 0xe25, 0x0, 0x4}, 0x0, 0x0, r4, 0x8) (async) unlink(&(0x7f0000000440)='./file0\x00') sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b70200000f001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x0, 0x9, 0x0, 0x0, 0x20, 0x1c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x4}, 0x10d002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}], 0x1}, 0x12000) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m31.064453138s ago: executing program 0 (id=3344): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf94}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@exit], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c40)={r2, 0x0, &(0x7f0000000c40)=""/4096}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4004743b, &(0x7f0000001200)) 2m30.747635943s ago: executing program 0 (id=3347): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280), 0x0, 0x0, 0x0, 0x2663}, 0x8044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) getpid() r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}, {&(0x7f00000006c0)="ef96ae5a35f5ad40d868ab88a57b9fd05bda6ff4ee8301094429389130a3900fd587af8d04572440c030b5c1ba9d3ac818a869d13b992f65b42923e39463593d966ed27362f8aa735d14d40fd2767ace7fe61d84706a4b0978c198b35ff2f2ee5814f1e964654e121e9a33", 0x6b}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2m29.046380029s ago: executing program 0 (id=3354): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x10000000000007fe, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2c, 0x3, 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x10000000000007fe, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) close(r5) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) (async) 2m13.749478784s ago: executing program 32 (id=3354): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x10000000000007fe, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2c, 0x3, 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x10000000000007fe, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}], 0x20}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) close(r5) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) (async) 5.729685732s ago: executing program 5 (id=4040): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000000000000000000000000000009500080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7a28}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000011c0)=@llc={0x1a, 0x102, 0x5e, 0x81, 0x5, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x80, &(0x7f0000002300)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu '], 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) 5.231876529s ago: executing program 3 (id=4044): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000003c0)=""/4096, 0x44, 0x1000, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001100)}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 5.16946421s ago: executing program 2 (id=4045): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000580)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) getpid() r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000040)=@raw=[@generic={0xe2, 0x2, 0x5, 0xa, 0x2}], 0x0, 0xc, 0x21, &(0x7f00000000c0)=""/33, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1], 0x0, 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.439003771s ago: executing program 3 (id=4047): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280), 0x0, 0x0, 0x0, 0x2663}, 0x8044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6200000000ec0000000000e200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 4.414580112s ago: executing program 5 (id=4048): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.295831734s ago: executing program 4 (id=4049): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280), 0x0, 0x0, 0x0, 0x2663}, 0x8044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) getpid() r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}, {&(0x7f00000006c0)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.603803755s ago: executing program 5 (id=4051): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="d089", 0x2}], 0x1}, 0x20040011) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYRESHEX], 0x6a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 3.27866386s ago: executing program 3 (id=4052): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/4080, 0xff0}, {&(0x7f0000000400)=""/70, 0x46}, {0x0}], 0x5}, 0x40002000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f797250", 0x1b}], 0x1}, 0x0) 3.25307672s ago: executing program 4 (id=4053): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) 3.131647002s ago: executing program 5 (id=4055): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.947814935s ago: executing program 2 (id=4056): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280), 0x0, 0x0, 0x0, 0x2663}, 0x8044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6200000000ec0000000000e2000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.947380615s ago: executing program 1 (id=4057): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000003c0)=""/4096, 0x44, 0x1000, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001100)}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 2.910256045s ago: executing program 4 (id=4058): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x73) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) (async) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = socket$kcm(0x10, 0x2, 0x4) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x29, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40012101) r9 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:2'], 0xa) (async) mkdir(0x0, 0x140) 2.858736916s ago: executing program 5 (id=4059): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) getpid() r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}, {&(0x7f00000006c0)="ef96ae5a35f5ad40d868ab88a57b9fd05bda6ff4ee8301094429389130a3900fd587af8d04572440c030b5c1ba9d3ac818a869d13b992f65b42923e39463593d966ed27362f8aa735d14d40fd2767ace7fe61d84706a4b0978c198b35ff2f2ee5814f1e964654e121e9a33", 0x6b}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.638448589s ago: executing program 1 (id=4060): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r4, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0xd, 0xffffc4b6, 0x64e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r7, 0xffffffffffffffff, 0x1], &(0x7f00000012c0), 0x10, 0x7fffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a0000000500000000000000f8ffffff10200000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYBLOB="03000000050000000300"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000a0000000000008001"], 0x50) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @generic={0x61}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x21) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18100000afbcc9f70b3149d22597d3032d74ede577a8c7f289faf766f19e349bf430cf6ae3156fc5970f21e5df07cd5b1b4acec9bab9e9d5b7cd84a1ab416d4468e4fa678aa61dea14a59a54b28d2b16eba32bdd9ad42477bed3cdd4cf9ed7a33678", @ANYRES32=r4, @ANYBLOB="0000000000000000185600000c000000000000000000000095000000000000008520000002000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x64, &(0x7f00000004c0)=""/100, 0x40f00, 0x45, '\x00', r5, 0x1a, r6, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xade2, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[r8, r2, r9], &(0x7f0000000700)=[{0x4, 0x3, 0x6, 0x8}, {0x5, 0x3, 0xf, 0xc}, {0x2, 0x1, 0x1}, {0x3, 0x7, 0xd, 0xc}, {0x1, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x8, 0x7}, {0x7, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x3, 0x8}, {0x5, 0x3, 0x1, 0x8}, {0x4, 0x5, 0xf, 0x9}], 0x10, 0x80009}, 0x94) close(0x3) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.095878008s ago: executing program 4 (id=4061): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.063440408s ago: executing program 3 (id=4062): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280), 0x0, 0x0, 0x0, 0x2663}, 0x8044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6200000000ec0000000000e200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.95864047s ago: executing program 2 (id=4063): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280), 0x0, 0x0, 0x0, 0x2663}, 0x8044000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x80000000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) getpid() r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='-devices -memory +cpu -net_Prio '], 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}, {&(0x7f00000006c0)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.815863582s ago: executing program 4 (id=4064): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r0, 0x0, 0x48800) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0xd, 0xffffc4b6, 0x64e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r5, 0xffffffffffffffff, 0x1], &(0x7f00000012c0), 0x10, 0x7fffffff}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000a0000000000008001"], 0x50) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x61}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x21) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18100000afbcc9f70b3149d22597d3032d74ede577a8c7f289faf766f19e349bf430cf6ae3156fc5970f21e5df07cd5b1b4acec9bab9e9d5b7cd84a1ab416d4468e4fa678aa61dea14a59a54b28d2b16eba32bdd9ad42477bed3cdd4cf9ed7a33678", @ANYRES32=r3, @ANYBLOB="0000000000000000185600000c000000000000000000000095000000000000008520000002000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x64, &(0x7f00000004c0)=""/100, 0x40f00, 0x45, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xade2, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[0xffffffffffffffff, r1, r6], &(0x7f0000000700)=[{0x4, 0x3, 0x6, 0x8}, {0x5, 0x3, 0xf, 0xc}, {0x2, 0x1, 0x1}, {0x3, 0x7, 0xd, 0xc}, {0x1, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x8, 0x7}, {0x7, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x3, 0x8}, {0x5, 0x3, 0x1, 0x8}, {0x4, 0x5, 0xf, 0x9}], 0x10, 0x80009}, 0x94) close(0x3) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) 1.759860203s ago: executing program 1 (id=4065): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) 1.31709241s ago: executing program 5 (id=4066): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000580)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) getpid() r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a", 0xa}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000040)=@raw=[@generic={0xe2, 0x2, 0x5, 0xa, 0x2}], 0x0, 0xc, 0x21, &(0x7f00000000c0)=""/33, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1], 0x0, 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.119296663s ago: executing program 3 (id=4067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000001500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="220000000000000000000000008a169104000000008fad380b000000"], 0x48) 995.458995ms ago: executing program 1 (id=4068): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) 890.674086ms ago: executing program 2 (id=4069): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 775.663358ms ago: executing program 3 (id=4070): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000003c0)=""/4096, 0x44, 0x1000, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001100)}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 537.349402ms ago: executing program 1 (id=4071): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r4, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0xd, 0xffffc4b6, 0x64e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r7, 0xffffffffffffffff, 0x1], &(0x7f00000012c0), 0x10, 0x7fffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a0000000500000000000000f8ffffff10200000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYBLOB="03000000050000000300"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000a0000000000008001"], 0x50) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @generic={0x61}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x21) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18100000afbcc9f70b3149d22597d3032d74ede577a8c7f289faf766f19e349bf430cf6ae3156fc5970f21e5df07cd5b1b4acec9bab9e9d5b7cd84a1ab416d4468e4fa678aa61dea14a59a54b28d2b16eba32bdd9ad42477bed3cdd4cf9ed7a33678", @ANYRES32=r4, @ANYBLOB="0000000000000000185600000c000000000000000000000095000000000000008520000002000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x64, &(0x7f00000004c0)=""/100, 0x40f00, 0x45, '\x00', r5, 0x1a, r6, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xade2, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[r8, r2, r9], &(0x7f0000000700)=[{0x4, 0x3, 0x6, 0x8}, {0x5, 0x3, 0xf, 0xc}, {0x2, 0x1, 0x1}, {0x3, 0x7, 0xd, 0xc}, {0x1, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x8, 0x7}, {0x7, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x3, 0x8}, {0x5, 0x3, 0x1, 0x8}, {0x4, 0x5, 0xf, 0x9}], 0x10, 0x80009}, 0x94) close(0x3) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 522.565422ms ago: executing program 4 (id=4072): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/4080, 0xff0}, {&(0x7f0000000400)=""/70, 0x46}, {0x0}], 0x5}, 0x40002000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f797250", 0x1b}], 0x1}, 0x0) 382.304634ms ago: executing program 2 (id=4073): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, 0x0, 0x4) 156.673308ms ago: executing program 2 (id=4074): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x1}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008884) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_config_ext, 0x0, 0x8, 0x2, 0x5, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x40, 0x0, 0xc2b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, 0xfffffffffffffeea}, 0x804) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) 0s ago: executing program 1 (id=4075): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r4, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0xd, 0xffffc4b6, 0x64e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r7, 0xffffffffffffffff, 0x1], &(0x7f00000012c0), 0x10, 0x7fffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a0000000500000000000000f8ffffff10200000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32, @ANYBLOB="03000000050000000300"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000a0000000000008001"], 0x50) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @generic={0x61}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x21) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18100000afbcc9f70b3149d22597d3032d74ede577a8c7f289faf766f19e349bf430cf6ae3156fc5970f21e5df07cd5b1b4acec9bab9e9d5b7cd84a1ab416d4468e4fa678aa61dea14a59a54b28d2b16eba32bdd9ad42477bed3cdd4cf9ed7a33678", @ANYRES32=r4, @ANYBLOB="0000000000000000185600000c000000000000000000000095000000000000008520000002000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x64, &(0x7f00000004c0)=""/100, 0x40f00, 0x45, '\x00', r5, 0x1a, r6, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xade2, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[r8, r2, r9], &(0x7f0000000700)=[{0x4, 0x3, 0x6, 0x8}, {0x5, 0x3, 0xf, 0xc}, {0x2, 0x1, 0x1}, {0x3, 0x7, 0xd, 0xc}, {0x1, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x8, 0x7}, {0x7, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x3, 0x8}, {0x5, 0x3, 0x1, 0x8}, {0x4, 0x5, 0xf, 0x9}], 0x10, 0x80009}, 0x94) close(0x3) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): T17454] ___sys_sendmsg+0x2a2/0x360 [ 840.588597][T17454] ? __sys_sendmsg+0x2a0/0x2a0 [ 840.593488][T17454] __se_sys_sendmsg+0x1c3/0x2b0 [ 840.598400][T17454] ? __x64_sys_sendmsg+0x80/0x80 [ 840.603414][T17454] ? lockdep_hardirqs_on+0x94/0x140 [ 840.608688][T17454] do_syscall_64+0x4c/0xa0 [ 840.613160][T17454] ? clear_bhb_loop+0x60/0xb0 [ 840.617881][T17454] ? clear_bhb_loop+0x60/0xb0 [ 840.622621][T17454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.628614][T17454] RIP: 0033:0x7f902c59ce59 [ 840.633087][T17454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.652831][T17454] RSP: 002b:00007f902d4a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.661300][T17454] RAX: ffffffffffffffda RBX: 00007f902c815fa0 RCX: 00007f902c59ce59 [ 840.669319][T17454] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 840.677338][T17454] RBP: 00007f902c632e6f R08: 0000000000000000 R09: 0000000000000000 [ 840.685371][T17454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.693397][T17454] R13: 00007f902c816038 R14: 00007f902c815fa0 R15: 00007ffdc42fa578 [ 840.701452][T17454] [ 841.274763][T17475] netlink: 'syz.4.3757': attribute type 2 has an invalid length. [ 841.285623][T17475] netlink: 'syz.4.3757': attribute type 8 has an invalid length. [ 841.319350][T17475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3757'. [ 841.740117][T17486] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3758'. [ 841.800605][T17486] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 841.845043][T17486] CPU: 0 PID: 17486 Comm: syz.5.3758 Not tainted syzkaller #0 [ 841.852596][T17486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.862702][T17486] Call Trace: [ 841.866028][T17486] [ 841.869008][T17486] dump_stack_lvl+0x188/0x24e [ 841.873746][T17486] ? show_regs_print_info+0x12/0x12 [ 841.879011][T17486] ? load_image+0x410/0x410 [ 841.883597][T17486] sysfs_warn_dup+0x8a/0xa0 [ 841.888168][T17486] sysfs_do_create_link_sd+0xc0/0x110 [ 841.893612][T17486] device_add+0x83b/0x1050 [ 841.898096][T17486] wiphy_register+0x1d8b/0x2aa0 [ 841.903027][T17486] ? cfg80211_event_work+0x40/0x40 [ 841.908209][T17486] ? minstrel_ht_alloc+0x894/0xa20 [ 841.913390][T17486] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 841.919532][T17486] ieee80211_register_hw+0x2d48/0x39f0 [ 841.925063][T17486] ? ieee80211_register_hw+0xed1/0x39f0 [ 841.930668][T17486] ? ieee80211_register_hw+0xed1/0x39f0 [ 841.936286][T17486] ? ieee80211_tasklet_handler+0x20/0x20 [ 841.941978][T17486] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 841.947933][T17486] ? __debug_object_init+0xed/0x440 [ 841.953198][T17486] ? memset+0x1e/0x40 [ 841.957232][T17486] ? __hrtimer_init+0x189/0x270 [ 841.962156][T17486] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 841.967945][T17486] ? memcpy+0x3c/0x60 [ 841.971985][T17486] hwsim_new_radio_nl+0xab7/0xc90 [ 841.977087][T17486] genl_family_rcv_msg_doit+0x22f/0x350 [ 841.982692][T17486] ? end_current_label_crit_section+0x170/0x170 [ 841.989029][T17486] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 841.994996][T17486] ? bpf_lsm_capable+0x5/0x10 [ 841.999731][T17486] ? security_capable+0x85/0xb0 [ 842.004638][T17486] genl_rcv_msg+0x601/0x790 [ 842.009210][T17486] ? genl_bind+0x360/0x360 [ 842.013682][T17486] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 842.020093][T17486] netlink_rcv_skb+0x1ef/0x440 [ 842.024911][T17486] ? genl_bind+0x360/0x360 [ 842.029399][T17486] ? netlink_ack+0x1160/0x1160 [ 842.034273][T17486] ? down_read+0x1a8/0x2d0 [ 842.038753][T17486] genl_rcv+0x24/0x40 [ 842.042799][T17486] netlink_unicast+0x7ad/0x920 [ 842.047638][T17486] netlink_sendmsg+0x8ad/0xbd0 [ 842.052470][T17486] ? netlink_getsockopt+0x550/0x550 [ 842.057732][T17486] ? aa_sock_msg_perm+0x94/0x150 [ 842.062743][T17486] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 842.068186][T17486] ? security_socket_sendmsg+0x7c/0xa0 [ 842.073692][T17486] ? netlink_getsockopt+0x550/0x550 [ 842.078954][T17486] ____sys_sendmsg+0x5ed/0x9a0 [ 842.083790][T17486] ? __sys_sendmsg_sock+0x30/0x30 [ 842.088876][T17486] ? __import_iovec+0x306/0x510 [ 842.093804][T17486] ? import_iovec+0x6f/0xa0 [ 842.098375][T17486] ___sys_sendmsg+0x2a2/0x360 [ 842.103109][T17486] ? __sys_sendmsg+0x2a0/0x2a0 [ 842.107990][T17486] __se_sys_sendmsg+0x1c3/0x2b0 [ 842.112901][T17486] ? __x64_sys_sendmsg+0x80/0x80 [ 842.117922][T17486] ? lockdep_hardirqs_on+0x94/0x140 [ 842.123190][T17486] do_syscall_64+0x4c/0xa0 [ 842.127653][T17486] ? clear_bhb_loop+0x60/0xb0 [ 842.132385][T17486] ? clear_bhb_loop+0x60/0xb0 [ 842.137122][T17486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.143081][T17486] RIP: 0033:0x7f357cb9ce59 [ 842.147553][T17486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.167220][T17486] RSP: 002b:00007f357da96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.175705][T17486] RAX: ffffffffffffffda RBX: 00007f357ce16090 RCX: 00007f357cb9ce59 [ 842.183739][T17486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 842.191769][T17486] RBP: 00007f357cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 842.199797][T17486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.207826][T17486] R13: 00007f357ce16128 R14: 00007f357ce16090 R15: 00007ffd585ecc88 [ 842.215882][T17486] [ 843.612267][T17509] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3767'. [ 843.687454][T17509] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 843.725690][T17509] CPU: 0 PID: 17509 Comm: syz.2.3767 Not tainted syzkaller #0 [ 843.733259][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.743365][T17509] Call Trace: [ 843.746688][T17509] [ 843.749666][T17509] dump_stack_lvl+0x188/0x24e [ 843.754412][T17509] ? show_regs_print_info+0x12/0x12 [ 843.759670][T17509] ? load_image+0x410/0x410 [ 843.764263][T17509] sysfs_warn_dup+0x8a/0xa0 [ 843.768830][T17509] sysfs_do_create_link_sd+0xc0/0x110 [ 843.774264][T17509] device_add+0x83b/0x1050 [ 843.778747][T17509] wiphy_register+0x1d8b/0x2aa0 [ 843.783677][T17509] ? cfg80211_event_work+0x40/0x40 [ 843.788860][T17509] ? minstrel_ht_alloc+0x894/0xa20 [ 843.794298][T17509] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 843.800466][T17509] ieee80211_register_hw+0x2d48/0x39f0 [ 843.806000][T17509] ? ieee80211_register_hw+0xed1/0x39f0 [ 843.811606][T17509] ? ieee80211_register_hw+0xed1/0x39f0 [ 843.817220][T17509] ? ieee80211_tasklet_handler+0x20/0x20 [ 843.822912][T17509] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 843.828872][T17509] ? __debug_object_init+0xed/0x440 [ 843.834129][T17509] ? memset+0x1e/0x40 [ 843.838165][T17509] ? __hrtimer_init+0x189/0x270 [ 843.843084][T17509] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 843.848880][T17509] ? memcpy+0x3c/0x60 [ 843.852916][T17509] hwsim_new_radio_nl+0xab7/0xc90 [ 843.858009][T17509] genl_family_rcv_msg_doit+0x22f/0x350 [ 843.863616][T17509] ? end_current_label_crit_section+0x170/0x170 [ 843.869918][T17509] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 843.875881][T17509] ? bpf_lsm_capable+0x5/0x10 [ 843.880612][T17509] ? security_capable+0x85/0xb0 [ 843.885533][T17509] genl_rcv_msg+0x601/0x790 [ 843.890099][T17509] ? genl_bind+0x360/0x360 [ 843.894565][T17509] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 843.900962][T17509] netlink_rcv_skb+0x1ef/0x440 [ 843.905784][T17509] ? genl_bind+0x360/0x360 [ 843.910257][T17509] ? netlink_ack+0x1160/0x1160 [ 843.915085][T17509] ? down_read+0x1a8/0x2d0 [ 843.919559][T17509] genl_rcv+0x24/0x40 [ 843.923587][T17509] netlink_unicast+0x7ad/0x920 [ 843.928423][T17509] netlink_sendmsg+0x8ad/0xbd0 [ 843.933252][T17509] ? netlink_getsockopt+0x550/0x550 [ 843.938512][T17509] ? aa_sock_msg_perm+0x94/0x150 [ 843.943509][T17509] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 843.948851][T17509] ? security_socket_sendmsg+0x7c/0xa0 [ 843.954363][T17509] ? netlink_getsockopt+0x550/0x550 [ 843.959623][T17509] ____sys_sendmsg+0x5ed/0x9a0 [ 843.964460][T17509] ? __sys_sendmsg_sock+0x30/0x30 [ 843.969537][T17509] ? __import_iovec+0x306/0x510 [ 843.974451][T17509] ? import_iovec+0x6f/0xa0 [ 843.979007][T17509] ___sys_sendmsg+0x2a2/0x360 [ 843.983742][T17509] ? __sys_sendmsg+0x2a0/0x2a0 [ 843.988616][T17509] __se_sys_sendmsg+0x1c3/0x2b0 [ 843.993525][T17509] ? __x64_sys_sendmsg+0x80/0x80 [ 843.998530][T17509] ? lockdep_hardirqs_on+0x94/0x140 [ 844.003794][T17509] do_syscall_64+0x4c/0xa0 [ 844.008261][T17509] ? clear_bhb_loop+0x60/0xb0 [ 844.012991][T17509] ? clear_bhb_loop+0x60/0xb0 [ 844.017720][T17509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.023689][T17509] RIP: 0033:0x7f902c59ce59 [ 844.028152][T17509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.047816][T17509] RSP: 002b:00007f902d4a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.056283][T17509] RAX: ffffffffffffffda RBX: 00007f902c815fa0 RCX: 00007f902c59ce59 [ 844.064300][T17509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 844.072320][T17509] RBP: 00007f902c632e6f R08: 0000000000000000 R09: 0000000000000000 [ 844.080344][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.088369][T17509] R13: 00007f902c816038 R14: 00007f902c815fa0 R15: 00007ffdc42fa578 [ 844.096413][T17509] [ 844.238189][T17523] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3769'. [ 844.281793][T17523] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 844.345357][T17523] CPU: 0 PID: 17523 Comm: syz.1.3769 Not tainted syzkaller #0 [ 844.352928][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.363050][T17523] Call Trace: [ 844.366392][T17523] [ 844.369361][T17523] dump_stack_lvl+0x188/0x24e [ 844.374087][T17523] ? show_regs_print_info+0x12/0x12 [ 844.379333][T17523] ? load_image+0x410/0x410 [ 844.383894][T17523] sysfs_warn_dup+0x8a/0xa0 [ 844.388466][T17523] sysfs_do_create_link_sd+0xc0/0x110 [ 844.393906][T17523] device_add+0x83b/0x1050 [ 844.398382][T17523] wiphy_register+0x1d8b/0x2aa0 [ 844.403295][T17523] ? cfg80211_event_work+0x40/0x40 [ 844.408442][T17523] ? minstrel_ht_alloc+0x894/0xa20 [ 844.413591][T17523] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 844.419700][T17523] ieee80211_register_hw+0x2d48/0x39f0 [ 844.425205][T17523] ? ieee80211_register_hw+0xed1/0x39f0 [ 844.430786][T17523] ? ieee80211_register_hw+0xed1/0x39f0 [ 844.436373][T17523] ? ieee80211_tasklet_handler+0x20/0x20 [ 844.442035][T17523] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 844.447965][T17523] ? __debug_object_init+0xed/0x440 [ 844.453205][T17523] ? memset+0x1e/0x40 [ 844.457223][T17523] ? __hrtimer_init+0x189/0x270 [ 844.462101][T17523] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 844.467875][T17523] ? memcpy+0x3c/0x60 [ 844.471918][T17523] hwsim_new_radio_nl+0xab7/0xc90 [ 844.476988][T17523] genl_family_rcv_msg_doit+0x22f/0x350 [ 844.482574][T17523] ? end_current_label_crit_section+0x170/0x170 [ 844.488853][T17523] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 844.494790][T17523] ? bpf_lsm_capable+0x5/0x10 [ 844.499501][T17523] ? security_capable+0x85/0xb0 [ 844.504393][T17523] genl_rcv_msg+0x601/0x790 [ 844.508937][T17523] ? genl_bind+0x360/0x360 [ 844.513395][T17523] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 844.519765][T17523] netlink_rcv_skb+0x1ef/0x440 [ 844.524562][T17523] ? genl_bind+0x360/0x360 [ 844.529019][T17523] ? netlink_ack+0x1160/0x1160 [ 844.533820][T17523] ? down_read+0x1a8/0x2d0 [ 844.538267][T17523] genl_rcv+0x24/0x40 [ 844.542281][T17523] netlink_unicast+0x7ad/0x920 [ 844.547080][T17523] netlink_sendmsg+0x8ad/0xbd0 [ 844.551883][T17523] ? netlink_getsockopt+0x550/0x550 [ 844.557108][T17523] ? aa_sock_msg_perm+0x94/0x150 [ 844.562072][T17523] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 844.567382][T17523] ? security_socket_sendmsg+0x7c/0xa0 [ 844.572865][T17523] ? netlink_getsockopt+0x550/0x550 [ 844.578094][T17523] ____sys_sendmsg+0x5ed/0x9a0 [ 844.582894][T17523] ? __sys_sendmsg_sock+0x30/0x30 [ 844.587940][T17523] ? __import_iovec+0x306/0x510 [ 844.592827][T17523] ? import_iovec+0x6f/0xa0 [ 844.597361][T17523] ___sys_sendmsg+0x2a2/0x360 [ 844.602073][T17523] ? __sys_sendmsg+0x2a0/0x2a0 [ 844.606905][T17523] __se_sys_sendmsg+0x1c3/0x2b0 [ 844.611786][T17523] ? __x64_sys_sendmsg+0x80/0x80 [ 844.616855][T17523] ? lockdep_hardirqs_on+0x94/0x140 [ 844.622092][T17523] do_syscall_64+0x4c/0xa0 [ 844.626534][T17523] ? clear_bhb_loop+0x60/0xb0 [ 844.631246][T17523] ? clear_bhb_loop+0x60/0xb0 [ 844.635953][T17523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.641882][T17523] RIP: 0033:0x7f16b499ce59 [ 844.646323][T17523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.665952][T17523] RSP: 002b:00007f16b5807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.674397][T17523] RAX: ffffffffffffffda RBX: 00007f16b4c16360 RCX: 00007f16b499ce59 [ 844.682393][T17523] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 844.690393][T17523] RBP: 00007f16b4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 844.698394][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.706385][T17523] R13: 00007f16b4c163f8 R14: 00007f16b4c16360 R15: 00007ffffeea0208 [ 844.714395][T17523] [ 844.815024][T17533] netlink: 'syz.3.3774': attribute type 21 has an invalid length. [ 844.859438][T17533] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3774'. [ 844.933057][T17537] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3771'. [ 845.093813][T17537] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 845.178858][T17537] CPU: 0 PID: 17537 Comm: syz.5.3771 Not tainted syzkaller #0 [ 845.186414][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.196524][T17537] Call Trace: [ 845.199841][T17537] [ 845.202817][T17537] dump_stack_lvl+0x188/0x24e [ 845.207551][T17537] ? show_regs_print_info+0x12/0x12 [ 845.212812][T17537] ? load_image+0x410/0x410 [ 845.217396][T17537] sysfs_warn_dup+0x8a/0xa0 [ 845.221938][T17537] sysfs_do_create_link_sd+0xc0/0x110 [ 845.227352][T17537] device_add+0x83b/0x1050 [ 845.231802][T17537] wiphy_register+0x1d8b/0x2aa0 [ 845.236710][T17537] ? cfg80211_event_work+0x40/0x40 [ 845.241873][T17537] ? minstrel_ht_alloc+0x894/0xa20 [ 845.247034][T17537] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 845.253150][T17537] ieee80211_register_hw+0x2d48/0x39f0 [ 845.258661][T17537] ? ieee80211_register_hw+0xed1/0x39f0 [ 845.264238][T17537] ? ieee80211_register_hw+0xed1/0x39f0 [ 845.269819][T17537] ? ieee80211_tasklet_handler+0x20/0x20 [ 845.275497][T17537] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 845.281442][T17537] ? __debug_object_init+0xed/0x440 [ 845.286680][T17537] ? memset+0x1e/0x40 [ 845.290704][T17537] ? __hrtimer_init+0x189/0x270 [ 845.295592][T17537] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 845.301359][T17537] ? memcpy+0x3c/0x60 [ 845.305377][T17537] hwsim_new_radio_nl+0xab7/0xc90 [ 845.310443][T17537] genl_family_rcv_msg_doit+0x22f/0x350 [ 845.316027][T17537] ? end_current_label_crit_section+0x170/0x170 [ 845.322296][T17537] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 845.328222][T17537] ? bpf_lsm_capable+0x5/0x10 [ 845.332929][T17537] ? security_capable+0x85/0xb0 [ 845.337820][T17537] genl_rcv_msg+0x601/0x790 [ 845.342361][T17537] ? genl_bind+0x360/0x360 [ 845.346802][T17537] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 845.353168][T17537] netlink_rcv_skb+0x1ef/0x440 [ 845.357964][T17537] ? genl_bind+0x360/0x360 [ 845.362419][T17537] ? netlink_ack+0x1160/0x1160 [ 845.367217][T17537] ? down_read+0x1a8/0x2d0 [ 845.371669][T17537] genl_rcv+0x24/0x40 [ 845.375679][T17537] netlink_unicast+0x7ad/0x920 [ 845.380561][T17537] netlink_sendmsg+0x8ad/0xbd0 [ 845.385357][T17537] ? netlink_getsockopt+0x550/0x550 [ 845.390587][T17537] ? aa_sock_msg_perm+0x94/0x150 [ 845.395557][T17537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 845.400865][T17537] ? security_socket_sendmsg+0x7c/0xa0 [ 845.406353][T17537] ? netlink_getsockopt+0x550/0x550 [ 845.411582][T17537] ____sys_sendmsg+0x5ed/0x9a0 [ 845.416382][T17537] ? __sys_sendmsg_sock+0x30/0x30 [ 845.421428][T17537] ? __import_iovec+0x306/0x510 [ 845.426315][T17537] ? import_iovec+0x6f/0xa0 [ 845.430853][T17537] ___sys_sendmsg+0x2a2/0x360 [ 845.435571][T17537] ? __sys_sendmsg+0x2a0/0x2a0 [ 845.440397][T17537] __se_sys_sendmsg+0x1c3/0x2b0 [ 845.445283][T17537] ? __x64_sys_sendmsg+0x80/0x80 [ 845.450261][T17537] ? lockdep_hardirqs_on+0x94/0x140 [ 845.455492][T17537] do_syscall_64+0x4c/0xa0 [ 845.459937][T17537] ? clear_bhb_loop+0x60/0xb0 [ 845.464639][T17537] ? clear_bhb_loop+0x60/0xb0 [ 845.469346][T17537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.475275][T17537] RIP: 0033:0x7f357cb9ce59 [ 845.479720][T17537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.499366][T17537] RSP: 002b:00007f357da96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.507817][T17537] RAX: ffffffffffffffda RBX: 00007f357ce16090 RCX: 00007f357cb9ce59 [ 845.515815][T17537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 845.523811][T17537] RBP: 00007f357cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 845.531808][T17537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.539805][T17537] R13: 00007f357ce16128 R14: 00007f357ce16090 R15: 00007ffd585ecc88 [ 845.547848][T17537] [ 845.745386][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3777'. [ 845.785375][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3777'. [ 845.794350][T17548] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3777'. [ 845.817503][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3777'. [ 845.832717][T17548] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3777'. [ 845.842514][T17548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3777'. [ 845.859690][T17548] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3777'. [ 846.065460][T17557] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 846.107775][T17557] CPU: 0 PID: 17557 Comm: syz.4.3779 Not tainted syzkaller #0 [ 846.115329][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.125438][T17557] Call Trace: [ 846.128755][T17557] [ 846.131728][T17557] dump_stack_lvl+0x188/0x24e [ 846.136462][T17557] ? show_regs_print_info+0x12/0x12 [ 846.141716][T17557] ? load_image+0x410/0x410 [ 846.146291][T17557] sysfs_warn_dup+0x8a/0xa0 [ 846.150857][T17557] sysfs_do_create_link_sd+0xc0/0x110 [ 846.156304][T17557] device_add+0x83b/0x1050 [ 846.160781][T17557] wiphy_register+0x1d8b/0x2aa0 [ 846.165698][T17557] ? cfg80211_event_work+0x40/0x40 [ 846.170858][T17557] ? minstrel_ht_alloc+0x894/0xa20 [ 846.176035][T17557] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 846.182165][T17557] ieee80211_register_hw+0x2d48/0x39f0 [ 846.187698][T17557] ? ieee80211_register_hw+0xed1/0x39f0 [ 846.193294][T17557] ? ieee80211_register_hw+0xed1/0x39f0 [ 846.198912][T17557] ? ieee80211_tasklet_handler+0x20/0x20 [ 846.204680][T17557] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 846.210632][T17557] ? __debug_object_init+0xed/0x440 [ 846.215873][T17557] ? memset+0x1e/0x40 [ 846.219883][T17557] ? __hrtimer_init+0x189/0x270 [ 846.224763][T17557] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 846.230520][T17557] ? memcpy+0x3c/0x60 [ 846.234533][T17557] hwsim_new_radio_nl+0xab7/0xc90 [ 846.239598][T17557] genl_family_rcv_msg_doit+0x22f/0x350 [ 846.245192][T17557] ? end_current_label_crit_section+0x170/0x170 [ 846.251471][T17557] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 846.257404][T17557] ? bpf_lsm_capable+0x5/0x10 [ 846.262117][T17557] ? security_capable+0x85/0xb0 [ 846.267007][T17557] genl_rcv_msg+0x601/0x790 [ 846.271547][T17557] ? genl_bind+0x360/0x360 [ 846.275988][T17557] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 846.282353][T17557] netlink_rcv_skb+0x1ef/0x440 [ 846.287146][T17557] ? genl_bind+0x360/0x360 [ 846.291593][T17557] ? netlink_ack+0x1160/0x1160 [ 846.296389][T17557] ? down_read+0x1a8/0x2d0 [ 846.300840][T17557] genl_rcv+0x24/0x40 [ 846.304846][T17557] netlink_unicast+0x7ad/0x920 [ 846.309658][T17557] netlink_sendmsg+0x8ad/0xbd0 [ 846.314460][T17557] ? netlink_getsockopt+0x550/0x550 [ 846.319695][T17557] ? aa_sock_msg_perm+0x94/0x150 [ 846.324663][T17557] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 846.329983][T17557] ? security_socket_sendmsg+0x7c/0xa0 [ 846.335473][T17557] ? netlink_getsockopt+0x550/0x550 [ 846.340698][T17557] ____sys_sendmsg+0x5ed/0x9a0 [ 846.345496][T17557] ? __sys_sendmsg_sock+0x30/0x30 [ 846.350547][T17557] ? __import_iovec+0x306/0x510 [ 846.355434][T17557] ? import_iovec+0x6f/0xa0 [ 846.359963][T17557] ___sys_sendmsg+0x2a2/0x360 [ 846.364667][T17557] ? __sys_sendmsg+0x2a0/0x2a0 [ 846.369497][T17557] __se_sys_sendmsg+0x1c3/0x2b0 [ 846.374376][T17557] ? __x64_sys_sendmsg+0x80/0x80 [ 846.379790][T17557] ? lockdep_hardirqs_on+0x94/0x140 [ 846.385025][T17557] do_syscall_64+0x4c/0xa0 [ 846.389473][T17557] ? clear_bhb_loop+0x60/0xb0 [ 846.394177][T17557] ? clear_bhb_loop+0x60/0xb0 [ 846.398879][T17557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.404810][T17557] RIP: 0033:0x7fca7a79ce59 [ 846.409253][T17557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.428893][T17557] RSP: 002b:00007fca7b651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.437361][T17557] RAX: ffffffffffffffda RBX: 00007fca7aa16090 RCX: 00007fca7a79ce59 [ 846.445363][T17557] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 846.453373][T17557] RBP: 00007fca7a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 846.461383][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.469389][T17557] R13: 00007fca7aa16128 R14: 00007fca7aa16090 R15: 00007ffccb986878 [ 846.477410][T17557] [ 846.637169][T17560] netlink: 'syz.2.3781': attribute type 2 has an invalid length. [ 846.658596][T17560] netlink: 'syz.2.3781': attribute type 8 has an invalid length. [ 847.209424][T17581] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 847.243138][T17581] CPU: 0 PID: 17581 Comm: syz.3.3786 Not tainted syzkaller #0 [ 847.250690][T17581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.260807][T17581] Call Trace: [ 847.264137][T17581] [ 847.267114][T17581] dump_stack_lvl+0x188/0x24e [ 847.271851][T17581] ? show_regs_print_info+0x12/0x12 [ 847.277102][T17581] ? load_image+0x410/0x410 [ 847.281681][T17581] sysfs_warn_dup+0x8a/0xa0 [ 847.286256][T17581] sysfs_do_create_link_sd+0xc0/0x110 [ 847.291698][T17581] device_add+0x83b/0x1050 [ 847.296180][T17581] wiphy_register+0x1d8b/0x2aa0 [ 847.301106][T17581] ? cfg80211_event_work+0x40/0x40 [ 847.306280][T17581] ? minstrel_ht_alloc+0x894/0xa20 [ 847.311463][T17581] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 847.317595][T17581] ieee80211_register_hw+0x2d48/0x39f0 [ 847.323143][T17581] ? ieee80211_register_hw+0xed1/0x39f0 [ 847.328758][T17581] ? ieee80211_register_hw+0xed1/0x39f0 [ 847.334365][T17581] ? ieee80211_tasklet_handler+0x20/0x20 [ 847.340053][T17581] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 847.346012][T17581] ? __debug_object_init+0xed/0x440 [ 847.351281][T17581] ? memset+0x1e/0x40 [ 847.355311][T17581] ? __hrtimer_init+0x189/0x270 [ 847.360242][T17581] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 847.366035][T17581] ? memcpy+0x3c/0x60 [ 847.370079][T17581] hwsim_new_radio_nl+0xab7/0xc90 [ 847.375172][T17581] genl_family_rcv_msg_doit+0x22f/0x350 [ 847.380782][T17581] ? end_current_label_crit_section+0x170/0x170 [ 847.387079][T17581] ? lockdep_hardirqs_on+0x94/0x140 [ 847.392347][T17581] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 847.398316][T17581] ? bpf_lsm_capable+0x5/0x10 [ 847.403053][T17581] ? security_capable+0x85/0xb0 [ 847.407980][T17581] genl_rcv_msg+0x601/0x790 [ 847.412558][T17581] ? genl_bind+0x360/0x360 [ 847.417026][T17581] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 847.423422][T17581] netlink_rcv_skb+0x1ef/0x440 [ 847.428248][T17581] ? genl_bind+0x360/0x360 [ 847.432737][T17581] ? netlink_ack+0x1160/0x1160 [ 847.437571][T17581] ? down_read+0x1a8/0x2d0 [ 847.442050][T17581] genl_rcv+0x24/0x40 [ 847.446097][T17581] netlink_unicast+0x7ad/0x920 [ 847.450931][T17581] netlink_sendmsg+0x8ad/0xbd0 [ 847.455768][T17581] ? netlink_getsockopt+0x550/0x550 [ 847.461058][T17581] ? aa_sock_msg_perm+0x94/0x150 [ 847.466052][T17581] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 847.471386][T17581] ? security_socket_sendmsg+0x7c/0xa0 [ 847.476902][T17581] ? netlink_getsockopt+0x550/0x550 [ 847.482163][T17581] ____sys_sendmsg+0x5ed/0x9a0 [ 847.487009][T17581] ? __sys_sendmsg_sock+0x30/0x30 [ 847.492085][T17581] ? __import_iovec+0x306/0x510 [ 847.497003][T17581] ? import_iovec+0x6f/0xa0 [ 847.501561][T17581] ___sys_sendmsg+0x2a2/0x360 [ 847.506306][T17581] ? __sys_sendmsg+0x2a0/0x2a0 [ 847.511192][T17581] __se_sys_sendmsg+0x1c3/0x2b0 [ 847.516106][T17581] ? __x64_sys_sendmsg+0x80/0x80 [ 847.521115][T17581] ? lockdep_hardirqs_on+0x94/0x140 [ 847.526375][T17581] do_syscall_64+0x4c/0xa0 [ 847.530842][T17581] ? clear_bhb_loop+0x60/0xb0 [ 847.535567][T17581] ? clear_bhb_loop+0x60/0xb0 [ 847.540296][T17581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.546253][T17581] RIP: 0033:0x7f06e1b9ce59 [ 847.550722][T17581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.570381][T17581] RSP: 002b:00007f06e2a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.578858][T17581] RAX: ffffffffffffffda RBX: 00007f06e1e16090 RCX: 00007f06e1b9ce59 [ 847.586897][T17581] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 847.594921][T17581] RBP: 00007f06e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 847.602954][T17581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.611064][T17581] R13: 00007f06e1e16128 R14: 00007f06e1e16090 R15: 00007ffd1770ec28 [ 847.619083][T17581] [ 847.686472][T17589] -1: renamed from syzkaller0 [ 847.776333][T17592] netlink: 'syz.2.3788': attribute type 21 has an invalid length. [ 848.264495][T17604] netlink: 'syz.4.3793': attribute type 10 has an invalid length. [ 848.323154][T17604] device team0 entered promiscuous mode [ 848.365363][T17604] device team_slave_0 entered promiscuous mode [ 848.371761][T17604] device team_slave_1 entered promiscuous mode [ 848.435631][T17604] device macvlan0 entered promiscuous mode [ 848.447552][T17604] device wlan1 entered promiscuous mode [ 848.463749][T17604] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 848.572847][T17617] netlink: 'syz.3.3796': attribute type 2 has an invalid length. [ 848.678890][T17617] netlink: 'syz.3.3796': attribute type 8 has an invalid length. [ 849.067563][T17625] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 849.126898][T17625] CPU: 0 PID: 17625 Comm: syz.1.3800 Not tainted syzkaller #0 [ 849.134478][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.144595][T17625] Call Trace: [ 849.147919][T17625] [ 849.150900][T17625] dump_stack_lvl+0x188/0x24e [ 849.155637][T17625] ? show_regs_print_info+0x12/0x12 [ 849.160898][T17625] ? load_image+0x410/0x410 [ 849.165498][T17625] sysfs_warn_dup+0x8a/0xa0 [ 849.170058][T17625] sysfs_do_create_link_sd+0xc0/0x110 [ 849.175496][T17625] device_add+0x83b/0x1050 [ 849.179975][T17625] wiphy_register+0x1d8b/0x2aa0 [ 849.184908][T17625] ? cfg80211_event_work+0x40/0x40 [ 849.190160][T17625] ? minstrel_ht_alloc+0x894/0xa20 [ 849.195336][T17625] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 849.201465][T17625] ieee80211_register_hw+0x2d48/0x39f0 [ 849.206999][T17625] ? ieee80211_register_hw+0xed1/0x39f0 [ 849.212599][T17625] ? ieee80211_register_hw+0xed1/0x39f0 [ 849.218215][T17625] ? ieee80211_tasklet_handler+0x20/0x20 [ 849.223878][T17625] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 849.229993][T17625] ? __debug_object_init+0xed/0x440 [ 849.235227][T17625] ? memset+0x1e/0x40 [ 849.239245][T17625] ? __hrtimer_init+0x189/0x270 [ 849.244127][T17625] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 849.249886][T17625] ? memcpy+0x3c/0x60 [ 849.253898][T17625] hwsim_new_radio_nl+0xab7/0xc90 [ 849.258970][T17625] genl_family_rcv_msg_doit+0x22f/0x350 [ 849.264546][T17625] ? end_current_label_crit_section+0x170/0x170 [ 849.270922][T17625] ? lockdep_hardirqs_on+0x94/0x140 [ 849.276169][T17625] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 849.282113][T17625] ? bpf_lsm_capable+0x5/0x10 [ 849.286833][T17625] ? security_capable+0x85/0xb0 [ 849.291730][T17625] genl_rcv_msg+0x601/0x790 [ 849.296281][T17625] ? genl_bind+0x360/0x360 [ 849.300729][T17625] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 849.307118][T17625] netlink_rcv_skb+0x1ef/0x440 [ 849.311914][T17625] ? genl_bind+0x360/0x360 [ 849.316366][T17625] ? netlink_ack+0x1160/0x1160 [ 849.321172][T17625] ? down_read+0x1a8/0x2d0 [ 849.325623][T17625] genl_rcv+0x24/0x40 [ 849.329638][T17625] netlink_unicast+0x7ad/0x920 [ 849.334441][T17625] netlink_sendmsg+0x8ad/0xbd0 [ 849.339243][T17625] ? netlink_getsockopt+0x550/0x550 [ 849.344479][T17625] ? aa_sock_msg_perm+0x94/0x150 [ 849.349446][T17625] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 849.354780][T17625] ? security_socket_sendmsg+0x7c/0xa0 [ 849.360355][T17625] ? netlink_getsockopt+0x550/0x550 [ 849.365586][T17625] ____sys_sendmsg+0x5ed/0x9a0 [ 849.370389][T17625] ? __sys_sendmsg_sock+0x30/0x30 [ 849.375436][T17625] ? __import_iovec+0x306/0x510 [ 849.380327][T17625] ? import_iovec+0x6f/0xa0 [ 849.384859][T17625] ___sys_sendmsg+0x2a2/0x360 [ 849.389590][T17625] ? __sys_sendmsg+0x2a0/0x2a0 [ 849.394455][T17625] __se_sys_sendmsg+0x1c3/0x2b0 [ 849.399434][T17625] ? __x64_sys_sendmsg+0x80/0x80 [ 849.404420][T17625] ? lockdep_hardirqs_on+0x94/0x140 [ 849.409657][T17625] do_syscall_64+0x4c/0xa0 [ 849.414101][T17625] ? clear_bhb_loop+0x60/0xb0 [ 849.418804][T17625] ? clear_bhb_loop+0x60/0xb0 [ 849.423506][T17625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.429438][T17625] RIP: 0033:0x7f16b499ce59 [ 849.433896][T17625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.453539][T17625] RSP: 002b:00007f16b588b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.462004][T17625] RAX: ffffffffffffffda RBX: 00007f16b4c15fa0 RCX: 00007f16b499ce59 [ 849.470016][T17625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 849.478022][T17625] RBP: 00007f16b4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 849.486024][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.494032][T17625] R13: 00007f16b4c16038 R14: 00007f16b4c15fa0 R15: 00007ffffeea0208 [ 849.502053][T17625] [ 849.717140][T17638] netlink: 'syz.4.3802': attribute type 21 has an invalid length. [ 849.736467][T17638] __nla_validate_parse: 18 callbacks suppressed [ 849.736501][T17638] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3802'. [ 849.789716][T17642] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3801'. [ 849.898905][T17642] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 849.989372][T17642] CPU: 0 PID: 17642 Comm: syz.5.3801 Not tainted syzkaller #0 [ 849.996975][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.007111][T17642] Call Trace: [ 850.010444][T17642] [ 850.013426][T17642] dump_stack_lvl+0x188/0x24e [ 850.018175][T17642] ? show_regs_print_info+0x12/0x12 [ 850.023440][T17642] ? load_image+0x410/0x410 [ 850.028030][T17642] sysfs_warn_dup+0x8a/0xa0 [ 850.032597][T17642] sysfs_do_create_link_sd+0xc0/0x110 [ 850.038095][T17642] device_add+0x83b/0x1050 [ 850.042590][T17642] wiphy_register+0x1d8b/0x2aa0 [ 850.047526][T17642] ? cfg80211_event_work+0x40/0x40 [ 850.052696][T17642] ? minstrel_ht_alloc+0x894/0xa20 [ 850.057874][T17642] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 850.063998][T17642] ieee80211_register_hw+0x2d48/0x39f0 [ 850.069568][T17642] ? ieee80211_register_hw+0xed1/0x39f0 [ 850.075150][T17642] ? ieee80211_register_hw+0xed1/0x39f0 [ 850.080836][T17642] ? ieee80211_tasklet_handler+0x20/0x20 [ 850.086513][T17642] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 850.092457][T17642] ? __debug_object_init+0xed/0x440 [ 850.097732][T17642] ? memset+0x1e/0x40 [ 850.101752][T17642] ? __hrtimer_init+0x189/0x270 [ 850.106642][T17642] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 850.112401][T17642] ? memcpy+0x3c/0x60 [ 850.116422][T17642] hwsim_new_radio_nl+0xab7/0xc90 [ 850.121493][T17642] genl_family_rcv_msg_doit+0x22f/0x350 [ 850.127072][T17642] ? end_current_label_crit_section+0x170/0x170 [ 850.133346][T17642] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 850.139281][T17642] ? bpf_lsm_capable+0x5/0x10 [ 850.143987][T17642] ? security_capable+0x85/0xb0 [ 850.148879][T17642] genl_rcv_msg+0x601/0x790 [ 850.153426][T17642] ? genl_bind+0x360/0x360 [ 850.157873][T17642] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 850.164240][T17642] netlink_rcv_skb+0x1ef/0x440 [ 850.169033][T17642] ? genl_bind+0x360/0x360 [ 850.173481][T17642] ? netlink_ack+0x1160/0x1160 [ 850.178281][T17642] ? down_read+0x1a8/0x2d0 [ 850.182731][T17642] genl_rcv+0x24/0x40 [ 850.186752][T17642] netlink_unicast+0x7ad/0x920 [ 850.191551][T17642] netlink_sendmsg+0x8ad/0xbd0 [ 850.196351][T17642] ? netlink_getsockopt+0x550/0x550 [ 850.201580][T17642] ? aa_sock_msg_perm+0x94/0x150 [ 850.206552][T17642] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 850.211861][T17642] ? security_socket_sendmsg+0x7c/0xa0 [ 850.217362][T17642] ? netlink_getsockopt+0x550/0x550 [ 850.222630][T17642] ____sys_sendmsg+0x5ed/0x9a0 [ 850.227445][T17642] ? __sys_sendmsg_sock+0x30/0x30 [ 850.232503][T17642] ? __import_iovec+0x306/0x510 [ 850.237395][T17642] ? import_iovec+0x6f/0xa0 [ 850.241942][T17642] ___sys_sendmsg+0x2a2/0x360 [ 850.246665][T17642] ? __sys_sendmsg+0x2a0/0x2a0 [ 850.251502][T17642] __se_sys_sendmsg+0x1c3/0x2b0 [ 850.256420][T17642] ? __x64_sys_sendmsg+0x80/0x80 [ 850.261419][T17642] ? lockdep_hardirqs_on+0x94/0x140 [ 850.266657][T17642] do_syscall_64+0x4c/0xa0 [ 850.271101][T17642] ? clear_bhb_loop+0x60/0xb0 [ 850.275807][T17642] ? clear_bhb_loop+0x60/0xb0 [ 850.280527][T17642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.286458][T17642] RIP: 0033:0x7f357cb9ce59 [ 850.290947][T17642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.310657][T17642] RSP: 002b:00007f357da96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.319111][T17642] RAX: ffffffffffffffda RBX: 00007f357ce16090 RCX: 00007f357cb9ce59 [ 850.327116][T17642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 850.335120][T17642] RBP: 00007f357cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 850.343116][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.351108][T17642] R13: 00007f357ce16128 R14: 00007f357ce16090 R15: 00007ffd585ecc88 [ 850.359125][T17642] [ 850.585330][T17647] -1: renamed from syzkaller0 [ 850.935782][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 850.944718][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3810'. [ 850.975426][T17661] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3810'. [ 850.984730][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3810'. [ 850.994108][T17661] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3810'. [ 851.004533][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3810'. [ 851.022707][T17661] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3810'. [ 851.100413][T17668] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3811'. [ 851.181815][T17668] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 851.223552][T17668] CPU: 1 PID: 17668 Comm: syz.3.3811 Not tainted syzkaller #0 [ 851.231104][T17668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 851.241208][T17668] Call Trace: [ 851.244551][T17668] [ 851.247526][T17668] dump_stack_lvl+0x188/0x24e [ 851.252276][T17668] ? show_regs_print_info+0x12/0x12 [ 851.257561][T17668] ? load_image+0x410/0x410 [ 851.262147][T17668] sysfs_warn_dup+0x8a/0xa0 [ 851.266715][T17668] sysfs_do_create_link_sd+0xc0/0x110 [ 851.272152][T17668] device_add+0x83b/0x1050 [ 851.276625][T17668] wiphy_register+0x1d8b/0x2aa0 [ 851.281891][T17668] ? cfg80211_event_work+0x40/0x40 [ 851.287061][T17668] ? minstrel_ht_alloc+0x894/0xa20 [ 851.292237][T17668] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 851.298371][T17668] ieee80211_register_hw+0x2d48/0x39f0 [ 851.303905][T17668] ? ieee80211_register_hw+0xed1/0x39f0 [ 851.309497][T17668] ? ieee80211_register_hw+0xed1/0x39f0 [ 851.315196][T17668] ? ieee80211_tasklet_handler+0x20/0x20 [ 851.320885][T17668] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 851.326854][T17668] ? __debug_object_init+0xed/0x440 [ 851.332104][T17668] ? memset+0x1e/0x40 [ 851.336129][T17668] ? __hrtimer_init+0x189/0x270 [ 851.341032][T17668] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 851.346815][T17668] ? memcpy+0x3c/0x60 [ 851.350848][T17668] hwsim_new_radio_nl+0xab7/0xc90 [ 851.355937][T17668] genl_family_rcv_msg_doit+0x22f/0x350 [ 851.361536][T17668] ? end_current_label_crit_section+0x170/0x170 [ 851.367836][T17668] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 851.373790][T17668] ? bpf_lsm_capable+0x5/0x10 [ 851.378515][T17668] ? security_capable+0x85/0xb0 [ 851.383417][T17668] genl_rcv_msg+0x601/0x790 [ 851.387971][T17668] ? genl_bind+0x360/0x360 [ 851.392425][T17668] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 851.398810][T17668] netlink_rcv_skb+0x1ef/0x440 [ 851.403613][T17668] ? genl_bind+0x360/0x360 [ 851.408070][T17668] ? netlink_ack+0x1160/0x1160 [ 851.412885][T17668] ? down_read+0x1a8/0x2d0 [ 851.417354][T17668] genl_rcv+0x24/0x40 [ 851.421382][T17668] netlink_unicast+0x7ad/0x920 [ 851.426200][T17668] netlink_sendmsg+0x8ad/0xbd0 [ 851.431023][T17668] ? netlink_getsockopt+0x550/0x550 [ 851.436356][T17668] ? aa_sock_msg_perm+0x94/0x150 [ 851.441335][T17668] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 851.446662][T17668] ? security_socket_sendmsg+0x7c/0xa0 [ 851.452259][T17668] ? netlink_getsockopt+0x550/0x550 [ 851.457513][T17668] ____sys_sendmsg+0x5ed/0x9a0 [ 851.462368][T17668] ? __sys_sendmsg_sock+0x30/0x30 [ 851.467428][T17668] ? __import_iovec+0x306/0x510 [ 851.472330][T17668] ? import_iovec+0x6f/0xa0 [ 851.476880][T17668] ___sys_sendmsg+0x2a2/0x360 [ 851.481608][T17668] ? __sys_sendmsg+0x2a0/0x2a0 [ 851.486458][T17668] __se_sys_sendmsg+0x1c3/0x2b0 [ 851.491348][T17668] ? __x64_sys_sendmsg+0x80/0x80 [ 851.496338][T17668] ? lockdep_hardirqs_on+0x94/0x140 [ 851.501582][T17668] do_syscall_64+0x4c/0xa0 [ 851.506042][T17668] ? clear_bhb_loop+0x60/0xb0 [ 851.510764][T17668] ? clear_bhb_loop+0x60/0xb0 [ 851.515476][T17668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.521409][T17668] RIP: 0033:0x7f06e1b9ce59 [ 851.525866][T17668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.545504][T17668] RSP: 002b:00007f06e2a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.553950][T17668] RAX: ffffffffffffffda RBX: 00007f06e1e16090 RCX: 00007f06e1b9ce59 [ 851.561954][T17668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 851.569975][T17668] RBP: 00007f06e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 851.577970][T17668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.585968][T17668] R13: 00007f06e1e16128 R14: 00007f06e1e16090 R15: 00007ffd1770ec28 [ 851.594797][T17668] [ 851.628461][T17657] netlink: 'syz.1.3808': attribute type 2 has an invalid length. [ 851.640889][T17657] netlink: 'syz.1.3808': attribute type 8 has an invalid length. [ 852.422264][T17674] netlink: 'syz.5.3822': attribute type 2 has an invalid length. [ 852.476592][T17674] netlink: 'syz.5.3822': attribute type 8 has an invalid length. [ 853.290043][T17709] -1: renamed from syzkaller0 [ 853.833357][T17715] netlink: 'syz.1.3825': attribute type 46 has an invalid length. [ 853.849891][T17715] netlink: 'syz.1.3825': attribute type 46 has an invalid length. [ 854.044992][T17718] netlink: 'syz.4.3827': attribute type 2 has an invalid length. [ 854.067378][T17718] netlink: 'syz.4.3827': attribute type 8 has an invalid length. [ 855.088543][T17750] -1: renamed from syzkaller0 [ 855.206926][T17755] netlink: 'syz.2.3841': attribute type 2 has an invalid length. [ 855.295508][T17755] __nla_validate_parse: 13 callbacks suppressed [ 855.295528][T17755] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3841'. [ 855.970047][T17758] netlink: 'syz.1.3842': attribute type 2 has an invalid length. [ 855.992216][T17758] netlink: 'syz.1.3842': attribute type 8 has an invalid length. [ 856.046853][T17758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3842'. [ 858.836401][T17778] -1: renamed from syzkaller0 [ 858.850357][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3848'. [ 858.861966][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 858.877962][T17794] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3848'. [ 858.893416][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 858.911336][T17794] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3848'. [ 858.921172][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 858.936193][T17794] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3848'. [ 859.028669][T17799] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.3849'. [ 859.458566][T17818] -1: renamed from syzkaller0 [ 859.849417][T17829] netlink: 'syz.1.3858': attribute type 2 has an invalid length. [ 859.935582][T17829] netlink: 'syz.1.3858': attribute type 8 has an invalid length. [ 859.951229][T17831] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 859.993874][T17831] CPU: 1 PID: 17831 Comm: syz.2.3859 Not tainted syzkaller #0 [ 860.001423][T17831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 860.011527][T17831] Call Trace: [ 860.014844][T17831] [ 860.017829][T17831] dump_stack_lvl+0x188/0x24e [ 860.022576][T17831] ? show_regs_print_info+0x12/0x12 [ 860.027834][T17831] ? load_image+0x410/0x410 [ 860.032408][T17831] sysfs_warn_dup+0x8a/0xa0 [ 860.036971][T17831] sysfs_do_create_link_sd+0xc0/0x110 [ 860.042519][T17831] device_add+0x83b/0x1050 [ 860.046995][T17831] wiphy_register+0x1d8b/0x2aa0 [ 860.051935][T17831] ? cfg80211_event_work+0x40/0x40 [ 860.057088][T17831] ? minstrel_ht_alloc+0x894/0xa20 [ 860.062234][T17831] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 860.068337][T17831] ieee80211_register_hw+0x2d48/0x39f0 [ 860.073833][T17831] ? ieee80211_register_hw+0xed1/0x39f0 [ 860.079404][T17831] ? ieee80211_register_hw+0xed1/0x39f0 [ 860.084984][T17831] ? ieee80211_tasklet_handler+0x20/0x20 [ 860.090649][T17831] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 860.096584][T17831] ? __debug_object_init+0xed/0x440 [ 860.101817][T17831] ? memset+0x1e/0x40 [ 860.105833][T17831] ? __hrtimer_init+0x189/0x270 [ 860.110711][T17831] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 860.116469][T17831] ? memcpy+0x3c/0x60 [ 860.120476][T17831] hwsim_new_radio_nl+0xab7/0xc90 [ 860.125536][T17831] genl_family_rcv_msg_doit+0x22f/0x350 [ 860.131116][T17831] ? end_current_label_crit_section+0x170/0x170 [ 860.137400][T17831] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 860.143336][T17831] ? bpf_lsm_capable+0x5/0x10 [ 860.148046][T17831] ? security_capable+0x85/0xb0 [ 860.152934][T17831] genl_rcv_msg+0x601/0x790 [ 860.157474][T17831] ? genl_bind+0x360/0x360 [ 860.161923][T17831] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 860.168297][T17831] netlink_rcv_skb+0x1ef/0x440 [ 860.173091][T17831] ? genl_bind+0x360/0x360 [ 860.177541][T17831] ? netlink_ack+0x1160/0x1160 [ 860.182341][T17831] ? down_read+0x1a8/0x2d0 [ 860.186788][T17831] genl_rcv+0x24/0x40 [ 860.190797][T17831] netlink_unicast+0x7ad/0x920 [ 860.195692][T17831] netlink_sendmsg+0x8ad/0xbd0 [ 860.200516][T17831] ? netlink_getsockopt+0x550/0x550 [ 860.205740][T17831] ? aa_sock_msg_perm+0x94/0x150 [ 860.210711][T17831] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 860.216033][T17831] ? security_socket_sendmsg+0x7c/0xa0 [ 860.221607][T17831] ? netlink_getsockopt+0x550/0x550 [ 860.226835][T17831] ____sys_sendmsg+0x5ed/0x9a0 [ 860.231644][T17831] ? __sys_sendmsg_sock+0x30/0x30 [ 860.236699][T17831] ? __import_iovec+0x306/0x510 [ 860.241592][T17831] ? import_iovec+0x6f/0xa0 [ 860.246127][T17831] ___sys_sendmsg+0x2a2/0x360 [ 860.250843][T17831] ? __sys_sendmsg+0x2a0/0x2a0 [ 860.255685][T17831] __se_sys_sendmsg+0x1c3/0x2b0 [ 860.260571][T17831] ? __x64_sys_sendmsg+0x80/0x80 [ 860.265555][T17831] ? lockdep_hardirqs_on+0x94/0x140 [ 860.270790][T17831] do_syscall_64+0x4c/0xa0 [ 860.275251][T17831] ? clear_bhb_loop+0x60/0xb0 [ 860.279984][T17831] ? clear_bhb_loop+0x60/0xb0 [ 860.284705][T17831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.290653][T17831] RIP: 0033:0x7f902c59ce59 [ 860.295100][T17831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.314736][T17831] RSP: 002b:00007f902d481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.323179][T17831] RAX: ffffffffffffffda RBX: 00007f902c816090 RCX: 00007f902c59ce59 [ 860.331198][T17831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 860.339191][T17831] RBP: 00007f902c632e6f R08: 0000000000000000 R09: 0000000000000000 [ 860.347201][T17831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.355192][T17831] R13: 00007f902c816128 R14: 00007f902c816090 R15: 00007ffdc42fa578 [ 860.363202][T17831] [ 860.545108][T17841] __nla_validate_parse: 3 callbacks suppressed [ 860.545128][T17841] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3862'. [ 860.625883][T17841] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 860.659670][T17841] CPU: 1 PID: 17841 Comm: syz.5.3862 Not tainted syzkaller #0 [ 860.667220][T17841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 860.677411][T17841] Call Trace: [ 860.680745][T17841] [ 860.683722][T17841] dump_stack_lvl+0x188/0x24e [ 860.688550][T17841] ? show_regs_print_info+0x12/0x12 [ 860.693809][T17841] ? load_image+0x410/0x410 [ 860.698489][T17841] sysfs_warn_dup+0x8a/0xa0 [ 860.703072][T17841] sysfs_do_create_link_sd+0xc0/0x110 [ 860.708520][T17841] device_add+0x83b/0x1050 [ 860.713010][T17841] wiphy_register+0x1d8b/0x2aa0 [ 860.717933][T17841] ? cfg80211_event_work+0x40/0x40 [ 860.723098][T17841] ? minstrel_ht_alloc+0x894/0xa20 [ 860.728268][T17841] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 860.734400][T17841] ieee80211_register_hw+0x2d48/0x39f0 [ 860.739928][T17841] ? ieee80211_register_hw+0xed1/0x39f0 [ 860.745534][T17841] ? ieee80211_register_hw+0xed1/0x39f0 [ 860.751148][T17841] ? ieee80211_tasklet_handler+0x20/0x20 [ 860.756833][T17841] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 860.762797][T17841] ? __debug_object_init+0xed/0x440 [ 860.768054][T17841] ? memset+0x1e/0x40 [ 860.772091][T17841] ? __hrtimer_init+0x189/0x270 [ 860.777004][T17841] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 860.782793][T17841] ? memcpy+0x3c/0x60 [ 860.786840][T17841] hwsim_new_radio_nl+0xab7/0xc90 [ 860.791936][T17841] genl_family_rcv_msg_doit+0x22f/0x350 [ 860.797548][T17841] ? end_current_label_crit_section+0x170/0x170 [ 860.803843][T17841] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 860.809801][T17841] ? bpf_lsm_capable+0x5/0x10 [ 860.814542][T17841] ? security_capable+0x85/0xb0 [ 860.819455][T17841] genl_rcv_msg+0x601/0x790 [ 860.824023][T17841] ? genl_bind+0x360/0x360 [ 860.828495][T17841] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 860.834896][T17841] netlink_rcv_skb+0x1ef/0x440 [ 860.839721][T17841] ? genl_bind+0x360/0x360 [ 860.844192][T17841] ? netlink_ack+0x1160/0x1160 [ 860.849105][T17841] ? down_read+0x1a8/0x2d0 [ 860.853591][T17841] genl_rcv+0x24/0x40 [ 860.857631][T17841] netlink_unicast+0x7ad/0x920 [ 860.862461][T17841] netlink_sendmsg+0x8ad/0xbd0 [ 860.867302][T17841] ? netlink_getsockopt+0x550/0x550 [ 860.872561][T17841] ? aa_sock_msg_perm+0x94/0x150 [ 860.877566][T17841] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 860.882910][T17841] ? security_socket_sendmsg+0x7c/0xa0 [ 860.888423][T17841] ? netlink_getsockopt+0x550/0x550 [ 860.893677][T17841] ____sys_sendmsg+0x5ed/0x9a0 [ 860.898509][T17841] ? __sys_sendmsg_sock+0x30/0x30 [ 860.903584][T17841] ? __import_iovec+0x306/0x510 [ 860.908501][T17841] ? import_iovec+0x6f/0xa0 [ 860.913081][T17841] ___sys_sendmsg+0x2a2/0x360 [ 860.917834][T17841] ? __sys_sendmsg+0x2a0/0x2a0 [ 860.922802][T17841] __se_sys_sendmsg+0x1c3/0x2b0 [ 860.927799][T17841] ? __x64_sys_sendmsg+0x80/0x80 [ 860.932813][T17841] ? lockdep_hardirqs_on+0x94/0x140 [ 860.938085][T17841] do_syscall_64+0x4c/0xa0 [ 860.942562][T17841] ? clear_bhb_loop+0x60/0xb0 [ 860.947288][T17841] ? clear_bhb_loop+0x60/0xb0 [ 860.952020][T17841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.957985][T17841] RIP: 0033:0x7f357cb9ce59 [ 860.962450][T17841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.982196][T17841] RSP: 002b:00007f357da96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.990677][T17841] RAX: ffffffffffffffda RBX: 00007f357ce16090 RCX: 00007f357cb9ce59 [ 860.998702][T17841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 861.006817][T17841] RBP: 00007f357cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 861.014844][T17841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.022865][T17841] R13: 00007f357ce16128 R14: 00007f357ce16090 R15: 00007ffd585ecc88 [ 861.030905][T17841] [ 861.589816][T17869] netlink: 'syz.1.3871': attribute type 3 has an invalid length. [ 861.603908][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3872'. [ 861.613099][T17869] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.3871'. [ 861.899680][T17878] netlink: 'syz.5.3874': attribute type 2 has an invalid length. [ 861.918646][T17878] netlink: 'syz.5.3874': attribute type 8 has an invalid length. [ 861.938762][T17878] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3874'. [ 862.111059][T17888] -1: renamed from syzkaller0 [ 862.942925][T17910] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3884'. [ 862.980783][T17900] netlink: 'syz.1.3881': attribute type 2 has an invalid length. [ 863.012035][T17900] netlink: 'syz.1.3881': attribute type 8 has an invalid length. [ 863.022248][T17900] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3881'. [ 863.038733][T17910] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 863.086034][T17910] CPU: 1 PID: 17910 Comm: syz.4.3884 Not tainted syzkaller #0 [ 863.093592][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 863.103700][T17910] Call Trace: [ 863.107028][T17910] [ 863.110001][T17910] dump_stack_lvl+0x188/0x24e [ 863.114742][T17910] ? show_regs_print_info+0x12/0x12 [ 863.119997][T17910] ? load_image+0x410/0x410 [ 863.124572][T17910] sysfs_warn_dup+0x8a/0xa0 [ 863.129133][T17910] sysfs_do_create_link_sd+0xc0/0x110 [ 863.134576][T17910] device_add+0x83b/0x1050 [ 863.139050][T17910] wiphy_register+0x1d8b/0x2aa0 [ 863.143976][T17910] ? cfg80211_event_work+0x40/0x40 [ 863.149139][T17910] ? minstrel_ht_alloc+0x894/0xa20 [ 863.154301][T17910] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 863.160430][T17910] ieee80211_register_hw+0x2d48/0x39f0 [ 863.165955][T17910] ? ieee80211_register_hw+0xed1/0x39f0 [ 863.171550][T17910] ? ieee80211_register_hw+0xed1/0x39f0 [ 863.177153][T17910] ? ieee80211_tasklet_handler+0x20/0x20 [ 863.182830][T17910] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 863.188781][T17910] ? __debug_object_init+0xed/0x440 [ 863.194024][T17910] ? memset+0x1e/0x40 [ 863.198033][T17910] ? __hrtimer_init+0x189/0x270 [ 863.202915][T17910] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 863.208674][T17910] ? memcpy+0x3c/0x60 [ 863.212693][T17910] hwsim_new_radio_nl+0xab7/0xc90 [ 863.217759][T17910] genl_family_rcv_msg_doit+0x22f/0x350 [ 863.223334][T17910] ? end_current_label_crit_section+0x170/0x170 [ 863.229607][T17910] ? lockdep_hardirqs_on+0x94/0x140 [ 863.234844][T17910] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 863.240781][T17910] ? bpf_lsm_capable+0x5/0x10 [ 863.245489][T17910] ? security_capable+0x85/0xb0 [ 863.250376][T17910] genl_rcv_msg+0x601/0x790 [ 863.254921][T17910] ? genl_bind+0x360/0x360 [ 863.259364][T17910] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 863.265737][T17910] netlink_rcv_skb+0x1ef/0x440 [ 863.270528][T17910] ? genl_bind+0x360/0x360 [ 863.274972][T17910] ? netlink_ack+0x1160/0x1160 [ 863.279778][T17910] ? down_read+0x1a8/0x2d0 [ 863.284231][T17910] genl_rcv+0x24/0x40 [ 863.288243][T17910] netlink_unicast+0x7ad/0x920 [ 863.293067][T17910] netlink_sendmsg+0x8ad/0xbd0 [ 863.297865][T17910] ? netlink_getsockopt+0x550/0x550 [ 863.303091][T17910] ? aa_sock_msg_perm+0x94/0x150 [ 863.308060][T17910] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 863.313394][T17910] ? security_socket_sendmsg+0x7c/0xa0 [ 863.318880][T17910] ? netlink_getsockopt+0x550/0x550 [ 863.324106][T17910] ____sys_sendmsg+0x5ed/0x9a0 [ 863.328905][T17910] ? __sys_sendmsg_sock+0x30/0x30 [ 863.333957][T17910] ? __import_iovec+0x306/0x510 [ 863.338874][T17910] ? import_iovec+0x6f/0xa0 [ 863.343414][T17910] ___sys_sendmsg+0x2a2/0x360 [ 863.348139][T17910] ? __sys_sendmsg+0x2a0/0x2a0 [ 863.352976][T17910] __se_sys_sendmsg+0x1c3/0x2b0 [ 863.357945][T17910] ? __x64_sys_sendmsg+0x80/0x80 [ 863.362925][T17910] ? lockdep_hardirqs_on+0x94/0x140 [ 863.368167][T17910] do_syscall_64+0x4c/0xa0 [ 863.372612][T17910] ? clear_bhb_loop+0x60/0xb0 [ 863.377318][T17910] ? clear_bhb_loop+0x60/0xb0 [ 863.382026][T17910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.387971][T17910] RIP: 0033:0x7fca7a79ce59 [ 863.392419][T17910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.412086][T17910] RSP: 002b:00007fca7b651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.420539][T17910] RAX: ffffffffffffffda RBX: 00007fca7aa16090 RCX: 00007fca7a79ce59 [ 863.428545][T17910] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 863.436546][T17910] RBP: 00007fca7a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 863.444541][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.452539][T17910] R13: 00007fca7aa16128 R14: 00007fca7aa16090 R15: 00007ffccb986878 [ 863.460559][T17910] [ 863.512018][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 863.960703][T17929] netlink: 'syz.4.3889': attribute type 2 has an invalid length. [ 863.975087][T17929] netlink: 'syz.4.3889': attribute type 8 has an invalid length. [ 863.991050][T17929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3889'. [ 864.029086][T17931] netlink: 'syz.5.3891': attribute type 4 has an invalid length. [ 864.047311][T17931] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3891'. [ 864.736652][T17957] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3899'. [ 864.777755][T17957] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 864.798816][T17957] CPU: 1 PID: 17957 Comm: syz.3.3899 Not tainted syzkaller #0 [ 864.806362][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 864.816450][T17957] Call Trace: [ 864.819761][T17957] [ 864.822721][T17957] dump_stack_lvl+0x188/0x24e [ 864.827434][T17957] ? show_regs_print_info+0x12/0x12 [ 864.832662][T17957] ? load_image+0x410/0x410 [ 864.837210][T17957] sysfs_warn_dup+0x8a/0xa0 [ 864.841748][T17957] sysfs_do_create_link_sd+0xc0/0x110 [ 864.847159][T17957] device_add+0x83b/0x1050 [ 864.851617][T17957] wiphy_register+0x1d8b/0x2aa0 [ 864.856519][T17957] ? cfg80211_event_work+0x40/0x40 [ 864.861661][T17957] ? minstrel_ht_alloc+0x894/0xa20 [ 864.866805][T17957] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 864.872912][T17957] ieee80211_register_hw+0x2d48/0x39f0 [ 864.878430][T17957] ? ieee80211_register_hw+0xed1/0x39f0 [ 864.884028][T17957] ? ieee80211_register_hw+0xed1/0x39f0 [ 864.889619][T17957] ? ieee80211_tasklet_handler+0x20/0x20 [ 864.895296][T17957] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 864.901241][T17957] ? __debug_object_init+0xed/0x440 [ 864.906485][T17957] ? memset+0x1e/0x40 [ 864.910496][T17957] ? __hrtimer_init+0x189/0x270 [ 864.915383][T17957] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 864.921143][T17957] ? memcpy+0x3c/0x60 [ 864.925160][T17957] hwsim_new_radio_nl+0xab7/0xc90 [ 864.930236][T17957] genl_family_rcv_msg_doit+0x22f/0x350 [ 864.935819][T17957] ? end_current_label_crit_section+0x170/0x170 [ 864.942092][T17957] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 864.948026][T17957] ? bpf_lsm_capable+0x5/0x10 [ 864.952741][T17957] ? security_capable+0x85/0xb0 [ 864.957631][T17957] genl_rcv_msg+0x601/0x790 [ 864.962182][T17957] ? genl_bind+0x360/0x360 [ 864.966626][T17957] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 864.972999][T17957] netlink_rcv_skb+0x1ef/0x440 [ 864.977798][T17957] ? genl_bind+0x360/0x360 [ 864.982249][T17957] ? netlink_ack+0x1160/0x1160 [ 864.987053][T17957] ? down_read+0x1a8/0x2d0 [ 864.991498][T17957] genl_rcv+0x24/0x40 [ 864.995510][T17957] netlink_unicast+0x7ad/0x920 [ 865.000315][T17957] netlink_sendmsg+0x8ad/0xbd0 [ 865.005117][T17957] ? netlink_getsockopt+0x550/0x550 [ 865.010353][T17957] ? aa_sock_msg_perm+0x94/0x150 [ 865.015335][T17957] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 865.020647][T17957] ? security_socket_sendmsg+0x7c/0xa0 [ 865.026128][T17957] ? netlink_getsockopt+0x550/0x550 [ 865.031354][T17957] ____sys_sendmsg+0x5ed/0x9a0 [ 865.036165][T17957] ? __sys_sendmsg_sock+0x30/0x30 [ 865.041225][T17957] ? __import_iovec+0x306/0x510 [ 865.046114][T17957] ? import_iovec+0x6f/0xa0 [ 865.050645][T17957] ___sys_sendmsg+0x2a2/0x360 [ 865.055354][T17957] ? __sys_sendmsg+0x2a0/0x2a0 [ 865.060198][T17957] __se_sys_sendmsg+0x1c3/0x2b0 [ 865.065082][T17957] ? __x64_sys_sendmsg+0x80/0x80 [ 865.070062][T17957] ? lockdep_hardirqs_on+0x94/0x140 [ 865.075301][T17957] do_syscall_64+0x4c/0xa0 [ 865.079748][T17957] ? clear_bhb_loop+0x60/0xb0 [ 865.084532][T17957] ? clear_bhb_loop+0x60/0xb0 [ 865.089246][T17957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.095174][T17957] RIP: 0033:0x7f06e1b9ce59 [ 865.099616][T17957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.119272][T17957] RSP: 002b:00007f06e2a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.127717][T17957] RAX: ffffffffffffffda RBX: 00007f06e1e16090 RCX: 00007f06e1b9ce59 [ 865.135714][T17957] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 865.143711][T17957] RBP: 00007f06e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 865.151708][T17957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.159706][T17957] R13: 00007f06e1e16128 R14: 00007f06e1e16090 R15: 00007ffd1770ec28 [ 865.167725][T17957] [ 865.750168][T17974] validate_nla: 2 callbacks suppressed [ 865.750221][T17974] netlink: 'syz.5.3905': attribute type 2 has an invalid length. [ 865.775879][T17974] netlink: 'syz.5.3905': attribute type 8 has an invalid length. [ 865.784125][T17974] __nla_validate_parse: 1 callbacks suppressed [ 865.784158][T17974] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3905'. [ 865.993116][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3911'. [ 866.010791][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 866.021100][T17990] netlink: 33 bytes leftover after parsing attributes in process `syz.5.3911'. [ 866.030835][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 866.040065][T17990] netlink: 33 bytes leftover after parsing attributes in process `syz.5.3911'. [ 866.049787][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 866.075142][T17990] netlink: 33 bytes leftover after parsing attributes in process `syz.5.3911'. [ 866.300765][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3915'. [ 866.629333][T18007] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3917'. [ 866.670323][T18007] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 866.698969][T18007] CPU: 1 PID: 18007 Comm: syz.5.3917 Not tainted syzkaller #0 [ 866.706529][T18007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.716638][T18007] Call Trace: [ 866.719977][T18007] [ 866.722952][T18007] dump_stack_lvl+0x188/0x24e [ 866.727689][T18007] ? show_regs_print_info+0x12/0x12 [ 866.732973][T18007] ? load_image+0x410/0x410 [ 866.738165][T18007] sysfs_warn_dup+0x8a/0xa0 [ 866.742737][T18007] sysfs_do_create_link_sd+0xc0/0x110 [ 866.748178][T18007] device_add+0x83b/0x1050 [ 866.752659][T18007] wiphy_register+0x1d8b/0x2aa0 [ 866.757584][T18007] ? cfg80211_event_work+0x40/0x40 [ 866.762833][T18007] ? minstrel_ht_alloc+0x894/0xa20 [ 866.768102][T18007] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 866.774241][T18007] ieee80211_register_hw+0x2d48/0x39f0 [ 866.779778][T18007] ? ieee80211_register_hw+0xed1/0x39f0 [ 866.785379][T18007] ? ieee80211_register_hw+0xed1/0x39f0 [ 866.790986][T18007] ? ieee80211_tasklet_handler+0x20/0x20 [ 866.796676][T18007] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 866.802639][T18007] ? __debug_object_init+0xed/0x440 [ 866.807893][T18007] ? memset+0x1e/0x40 [ 866.811917][T18007] ? __hrtimer_init+0x189/0x270 [ 866.816809][T18007] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 866.822569][T18007] ? memcpy+0x3c/0x60 [ 866.826589][T18007] hwsim_new_radio_nl+0xab7/0xc90 [ 866.831654][T18007] genl_family_rcv_msg_doit+0x22f/0x350 [ 866.837322][T18007] ? end_current_label_crit_section+0x170/0x170 [ 866.843601][T18007] ? lockdep_hardirqs_on+0x94/0x140 [ 866.848840][T18007] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 866.854789][T18007] ? bpf_lsm_capable+0x5/0x10 [ 866.859500][T18007] ? security_capable+0x85/0xb0 [ 866.864397][T18007] genl_rcv_msg+0x601/0x790 [ 866.868956][T18007] ? genl_bind+0x360/0x360 [ 866.873407][T18007] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 866.879780][T18007] netlink_rcv_skb+0x1ef/0x440 [ 866.884578][T18007] ? genl_bind+0x360/0x360 [ 866.889026][T18007] ? netlink_ack+0x1160/0x1160 [ 866.893845][T18007] ? down_read+0x1a8/0x2d0 [ 866.898322][T18007] genl_rcv+0x24/0x40 [ 866.902338][T18007] netlink_unicast+0x7ad/0x920 [ 866.907141][T18007] netlink_sendmsg+0x8ad/0xbd0 [ 866.911945][T18007] ? netlink_getsockopt+0x550/0x550 [ 866.917176][T18007] ? aa_sock_msg_perm+0x94/0x150 [ 866.922147][T18007] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 866.927464][T18007] ? security_socket_sendmsg+0x7c/0xa0 [ 866.932953][T18007] ? netlink_getsockopt+0x550/0x550 [ 866.938187][T18007] ____sys_sendmsg+0x5ed/0x9a0 [ 866.942990][T18007] ? __sys_sendmsg_sock+0x30/0x30 [ 866.948038][T18007] ? __import_iovec+0x306/0x510 [ 866.952929][T18007] ? import_iovec+0x6f/0xa0 [ 866.957459][T18007] ___sys_sendmsg+0x2a2/0x360 [ 866.962172][T18007] ? __sys_sendmsg+0x2a0/0x2a0 [ 866.967010][T18007] __se_sys_sendmsg+0x1c3/0x2b0 [ 866.971886][T18007] ? __x64_sys_sendmsg+0x80/0x80 [ 866.976875][T18007] ? lockdep_hardirqs_on+0x94/0x140 [ 866.982111][T18007] do_syscall_64+0x4c/0xa0 [ 866.986552][T18007] ? clear_bhb_loop+0x60/0xb0 [ 866.991258][T18007] ? clear_bhb_loop+0x60/0xb0 [ 866.995959][T18007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.001885][T18007] RIP: 0033:0x7f357cb9ce59 [ 867.006328][T18007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.026057][T18007] RSP: 002b:00007f357da96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.034596][T18007] RAX: ffffffffffffffda RBX: 00007f357ce16090 RCX: 00007f357cb9ce59 [ 867.042595][T18007] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 867.050597][T18007] RBP: 00007f357cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 867.058623][T18007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.066621][T18007] R13: 00007f357ce16128 R14: 00007f357ce16090 R15: 00007ffd585ecc88 [ 867.074716][T18007] [ 867.455109][T18023] netlink: 'syz.3.3921': attribute type 2 has an invalid length. [ 867.476084][T18023] netlink: 'syz.3.3921': attribute type 8 has an invalid length. [ 868.386331][T18056] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 868.410272][T18056] CPU: 0 PID: 18056 Comm: syz.1.3934 Not tainted syzkaller #0 [ 868.417831][T18056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.427946][T18056] Call Trace: [ 868.431449][T18056] [ 868.434429][T18056] dump_stack_lvl+0x188/0x24e [ 868.439163][T18056] ? show_regs_print_info+0x12/0x12 [ 868.444422][T18056] ? load_image+0x410/0x410 [ 868.449046][T18056] sysfs_warn_dup+0x8a/0xa0 [ 868.453622][T18056] sysfs_do_create_link_sd+0xc0/0x110 [ 868.459070][T18056] device_add+0x83b/0x1050 [ 868.464026][T18056] wiphy_register+0x1d8b/0x2aa0 [ 868.468961][T18056] ? cfg80211_event_work+0x40/0x40 [ 868.474141][T18056] ? minstrel_ht_alloc+0x894/0xa20 [ 868.479318][T18056] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 868.485437][T18056] ieee80211_register_hw+0x2d48/0x39f0 [ 868.490974][T18056] ? ieee80211_register_hw+0xed1/0x39f0 [ 868.496571][T18056] ? ieee80211_register_hw+0xed1/0x39f0 [ 868.502155][T18056] ? ieee80211_tasklet_handler+0x20/0x20 [ 868.507822][T18056] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 868.513758][T18056] ? __debug_object_init+0xed/0x440 [ 868.518999][T18056] ? memset+0x1e/0x40 [ 868.523010][T18056] ? __hrtimer_init+0x189/0x270 [ 868.527902][T18056] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 868.533679][T18056] ? memcpy+0x3c/0x60 [ 868.537739][T18056] hwsim_new_radio_nl+0xab7/0xc90 [ 868.542814][T18056] genl_family_rcv_msg_doit+0x22f/0x350 [ 868.548616][T18056] ? end_current_label_crit_section+0x170/0x170 [ 868.554895][T18056] ? lockdep_hardirqs_on+0x94/0x140 [ 868.560166][T18056] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 868.566104][T18056] ? bpf_lsm_capable+0x5/0x10 [ 868.570845][T18056] ? security_capable+0x85/0xb0 [ 868.575759][T18056] genl_rcv_msg+0x601/0x790 [ 868.580307][T18056] ? genl_bind+0x360/0x360 [ 868.584754][T18056] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 868.591160][T18056] netlink_rcv_skb+0x1ef/0x440 [ 868.596131][T18056] ? genl_bind+0x360/0x360 [ 868.600590][T18056] ? netlink_ack+0x1160/0x1160 [ 868.605395][T18056] ? down_read+0x1a8/0x2d0 [ 868.609843][T18056] genl_rcv+0x24/0x40 [ 868.613944][T18056] netlink_unicast+0x7ad/0x920 [ 868.618748][T18056] netlink_sendmsg+0x8ad/0xbd0 [ 868.623548][T18056] ? netlink_getsockopt+0x550/0x550 [ 868.628776][T18056] ? aa_sock_msg_perm+0x94/0x150 [ 868.633745][T18056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 868.639055][T18056] ? security_socket_sendmsg+0x7c/0xa0 [ 868.644535][T18056] ? netlink_getsockopt+0x550/0x550 [ 868.649764][T18056] ____sys_sendmsg+0x5ed/0x9a0 [ 868.654568][T18056] ? __sys_sendmsg_sock+0x30/0x30 [ 868.659622][T18056] ? __import_iovec+0x306/0x510 [ 868.664518][T18056] ? import_iovec+0x6f/0xa0 [ 868.669058][T18056] ___sys_sendmsg+0x2a2/0x360 [ 868.673772][T18056] ? __sys_sendmsg+0x2a0/0x2a0 [ 868.678611][T18056] __se_sys_sendmsg+0x1c3/0x2b0 [ 868.683502][T18056] ? __x64_sys_sendmsg+0x80/0x80 [ 868.688486][T18056] ? lockdep_hardirqs_on+0x94/0x140 [ 868.693753][T18056] do_syscall_64+0x4c/0xa0 [ 868.698227][T18056] ? clear_bhb_loop+0x60/0xb0 [ 868.702933][T18056] ? clear_bhb_loop+0x60/0xb0 [ 868.707755][T18056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.713711][T18056] RIP: 0033:0x7f16b499ce59 [ 868.718161][T18056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.737799][T18056] RSP: 002b:00007f16b586a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.746243][T18056] RAX: ffffffffffffffda RBX: 00007f16b4c16090 RCX: 00007f16b499ce59 [ 868.754418][T18056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 868.762504][T18056] RBP: 00007f16b4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 868.770506][T18056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.778534][T18056] R13: 00007f16b4c16128 R14: 00007f16b4c16090 R15: 00007ffffeea0208 [ 868.786558][T18056] [ 868.886060][T18055] -1: renamed from syzkaller0 [ 869.031892][T18063] netlink: 'syz.5.3937': attribute type 2 has an invalid length. [ 869.055462][T18063] netlink: 'syz.5.3937': attribute type 8 has an invalid length. [ 869.454798][T17112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 870.104669][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.111326][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.329655][T18103] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 870.398853][T18103] CPU: 1 PID: 18103 Comm: syz.3.3949 Not tainted syzkaller #0 [ 870.406427][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 870.416581][T18103] Call Trace: [ 870.419919][T18103] [ 870.422909][T18103] dump_stack_lvl+0x188/0x24e [ 870.427674][T18103] ? show_regs_print_info+0x12/0x12 [ 870.432956][T18103] ? load_image+0x410/0x410 [ 870.437568][T18103] sysfs_warn_dup+0x8a/0xa0 [ 870.442152][T18103] sysfs_do_create_link_sd+0xc0/0x110 [ 870.447610][T18103] device_add+0x83b/0x1050 [ 870.452100][T18103] wiphy_register+0x1d8b/0x2aa0 [ 870.457040][T18103] ? cfg80211_event_work+0x40/0x40 [ 870.462220][T18103] ? minstrel_ht_alloc+0x894/0xa20 [ 870.467402][T18103] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 870.473564][T18103] ieee80211_register_hw+0x2d48/0x39f0 [ 870.479098][T18103] ? ieee80211_register_hw+0xed1/0x39f0 [ 870.484702][T18103] ? ieee80211_register_hw+0xed1/0x39f0 [ 870.490309][T18103] ? ieee80211_tasklet_handler+0x20/0x20 [ 870.495996][T18103] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 870.501960][T18103] ? __debug_object_init+0xed/0x440 [ 870.507226][T18103] ? memset+0x1e/0x40 [ 870.511272][T18103] ? __hrtimer_init+0x189/0x270 [ 870.516279][T18103] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 870.522069][T18103] ? memcpy+0x3c/0x60 [ 870.526121][T18103] hwsim_new_radio_nl+0xab7/0xc90 [ 870.531226][T18103] genl_family_rcv_msg_doit+0x22f/0x350 [ 870.536835][T18103] ? end_current_label_crit_section+0x170/0x170 [ 870.543146][T18103] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 870.549117][T18103] ? bpf_lsm_capable+0x5/0x10 [ 870.553858][T18103] ? security_capable+0x85/0xb0 [ 870.558784][T18103] genl_rcv_msg+0x601/0x790 [ 870.563365][T18103] ? genl_bind+0x360/0x360 [ 870.567843][T18103] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 870.574252][T18103] netlink_rcv_skb+0x1ef/0x440 [ 870.579075][T18103] ? genl_bind+0x360/0x360 [ 870.583556][T18103] ? netlink_ack+0x1160/0x1160 [ 870.588398][T18103] ? down_read+0x1a8/0x2d0 [ 870.592882][T18103] genl_rcv+0x24/0x40 [ 870.596930][T18103] netlink_unicast+0x7ad/0x920 [ 870.601778][T18103] netlink_sendmsg+0x8ad/0xbd0 [ 870.606614][T18103] ? netlink_getsockopt+0x550/0x550 [ 870.611876][T18103] ? aa_sock_msg_perm+0x94/0x150 [ 870.616874][T18103] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 870.622222][T18103] ? security_socket_sendmsg+0x7c/0xa0 [ 870.627734][T18103] ? netlink_getsockopt+0x550/0x550 [ 870.632991][T18103] ____sys_sendmsg+0x5ed/0x9a0 [ 870.637829][T18103] ? __sys_sendmsg_sock+0x30/0x30 [ 870.642956][T18103] ? __import_iovec+0x306/0x510 [ 870.647878][T18103] ? import_iovec+0x6f/0xa0 [ 870.652442][T18103] ___sys_sendmsg+0x2a2/0x360 [ 870.657193][T18103] ? __sys_sendmsg+0x2a0/0x2a0 [ 870.662080][T18103] __se_sys_sendmsg+0x1c3/0x2b0 [ 870.667002][T18103] ? __x64_sys_sendmsg+0x80/0x80 [ 870.672019][T18103] ? lockdep_hardirqs_on+0x94/0x140 [ 870.677291][T18103] do_syscall_64+0x4c/0xa0 [ 870.681771][T18103] ? clear_bhb_loop+0x60/0xb0 [ 870.686504][T18103] ? clear_bhb_loop+0x60/0xb0 [ 870.691239][T18103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.697200][T18103] RIP: 0033:0x7f06e1b9ce59 [ 870.701672][T18103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.721338][T18103] RSP: 002b:00007f06e2a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.729907][T18103] RAX: ffffffffffffffda RBX: 00007f06e1e16090 RCX: 00007f06e1b9ce59 [ 870.737935][T18103] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 870.745962][T18103] RBP: 00007f06e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 870.753992][T18103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.762023][T18103] R13: 00007f06e1e16128 R14: 00007f06e1e16090 R15: 00007ffd1770ec28 [ 870.770084][T18103] [ 871.117620][T18109] netlink: 'syz.4.3952': attribute type 2 has an invalid length. [ 871.146767][T18109] netlink: 'syz.4.3952': attribute type 8 has an invalid length. [ 871.155130][T18109] __nla_validate_parse: 7 callbacks suppressed [ 871.155163][T18109] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3952'. [ 871.381733][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3955'. [ 871.526976][T18119] netlink: 14661 bytes leftover after parsing attributes in process `syz.4.3955'. [ 871.652351][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3958'. [ 871.687739][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'. [ 871.720188][T18127] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3958'. [ 871.795574][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'. [ 871.804611][T18127] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3958'. [ 871.850680][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3958'. [ 871.875608][T18127] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3958'. [ 872.398265][T18145] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 872.485743][T18145] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 872.584809][T18152] netlink: 'syz.4.3965': attribute type 2 has an invalid length. [ 872.614093][T18152] netlink: 'syz.4.3965': attribute type 8 has an invalid length. [ 872.991150][T18161] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 873.015558][T18161] CPU: 1 PID: 18161 Comm: syz.4.3967 Not tainted syzkaller #0 [ 873.023100][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 873.033210][T18161] Call Trace: [ 873.036535][T18161] [ 873.039513][T18161] dump_stack_lvl+0x188/0x24e [ 873.044346][T18161] ? show_regs_print_info+0x12/0x12 [ 873.049600][T18161] ? load_image+0x410/0x410 [ 873.054181][T18161] sysfs_warn_dup+0x8a/0xa0 [ 873.058781][T18161] sysfs_do_create_link_sd+0xc0/0x110 [ 873.064224][T18161] device_add+0x83b/0x1050 [ 873.068705][T18161] wiphy_register+0x1d8b/0x2aa0 [ 873.073637][T18161] ? cfg80211_event_work+0x40/0x40 [ 873.078810][T18161] ? minstrel_ht_alloc+0x894/0xa20 [ 873.084147][T18161] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 873.090264][T18161] ieee80211_register_hw+0x2d48/0x39f0 [ 873.095768][T18161] ? ieee80211_register_hw+0xed1/0x39f0 [ 873.101342][T18161] ? ieee80211_register_hw+0xed1/0x39f0 [ 873.106937][T18161] ? ieee80211_tasklet_handler+0x20/0x20 [ 873.112592][T18161] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 873.118524][T18161] ? __debug_object_init+0xed/0x440 [ 873.123765][T18161] ? memset+0x1e/0x40 [ 873.127788][T18161] ? __hrtimer_init+0x189/0x270 [ 873.132670][T18161] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 873.138426][T18161] ? memcpy+0x3c/0x60 [ 873.142445][T18161] hwsim_new_radio_nl+0xab7/0xc90 [ 873.147522][T18161] genl_family_rcv_msg_doit+0x22f/0x350 [ 873.153100][T18161] ? end_current_label_crit_section+0x170/0x170 [ 873.159371][T18161] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 873.165304][T18161] ? bpf_lsm_capable+0x5/0x10 [ 873.170016][T18161] ? security_capable+0x85/0xb0 [ 873.174907][T18161] genl_rcv_msg+0x601/0x790 [ 873.179464][T18161] ? genl_bind+0x360/0x360 [ 873.183912][T18161] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 873.190287][T18161] netlink_rcv_skb+0x1ef/0x440 [ 873.195076][T18161] ? genl_bind+0x360/0x360 [ 873.199522][T18161] ? netlink_ack+0x1160/0x1160 [ 873.204324][T18161] ? down_read+0x1a8/0x2d0 [ 873.208770][T18161] genl_rcv+0x24/0x40 [ 873.212779][T18161] netlink_unicast+0x7ad/0x920 [ 873.217577][T18161] netlink_sendmsg+0x8ad/0xbd0 [ 873.222378][T18161] ? netlink_getsockopt+0x550/0x550 [ 873.227635][T18161] ? aa_sock_msg_perm+0x94/0x150 [ 873.232601][T18161] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 873.237911][T18161] ? security_socket_sendmsg+0x7c/0xa0 [ 873.243402][T18161] ? netlink_getsockopt+0x550/0x550 [ 873.248631][T18161] ____sys_sendmsg+0x5ed/0x9a0 [ 873.253428][T18161] ? __sys_sendmsg_sock+0x30/0x30 [ 873.258475][T18161] ? __import_iovec+0x306/0x510 [ 873.263360][T18161] ? import_iovec+0x6f/0xa0 [ 873.267890][T18161] ___sys_sendmsg+0x2a2/0x360 [ 873.272597][T18161] ? __sys_sendmsg+0x2a0/0x2a0 [ 873.277432][T18161] __se_sys_sendmsg+0x1c3/0x2b0 [ 873.282310][T18161] ? __x64_sys_sendmsg+0x80/0x80 [ 873.287290][T18161] ? lockdep_hardirqs_on+0x94/0x140 [ 873.292527][T18161] do_syscall_64+0x4c/0xa0 [ 873.296969][T18161] ? clear_bhb_loop+0x60/0xb0 [ 873.301668][T18161] ? clear_bhb_loop+0x60/0xb0 [ 873.306372][T18161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.312297][T18161] RIP: 0033:0x7fca7a79ce59 [ 873.316740][T18161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.336388][T18161] RSP: 002b:00007fca7b651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.344841][T18161] RAX: ffffffffffffffda RBX: 00007fca7aa16090 RCX: 00007fca7a79ce59 [ 873.352860][T18161] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 873.360863][T18161] RBP: 00007fca7a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 873.368860][T18161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.376859][T18161] R13: 00007fca7aa16128 R14: 00007fca7aa16090 R15: 00007ffccb986878 [ 873.384876][T18161] [ 873.876788][T18169] -1: renamed from syzkaller0 [ 874.053276][T18172] netlink: 'syz.5.3969': attribute type 2 has an invalid length. [ 874.157593][T18172] netlink: 'syz.5.3969': attribute type 8 has an invalid length. [ 877.931172][T18211] __nla_validate_parse: 14 callbacks suppressed [ 877.931193][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3984'. [ 877.948488][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 877.965376][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 877.989989][T18210] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3985'. [ 878.022318][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 878.043854][T18210] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3985'. [ 878.063067][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 878.073893][T18210] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3985'. [ 878.125565][T18211] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3984'. [ 878.234653][T18218] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3983'. [ 878.795658][T18218] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 878.833938][T18218] CPU: 0 PID: 18218 Comm: syz.3.3983 Not tainted syzkaller #0 [ 878.841495][T18218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 878.851604][T18218] Call Trace: [ 878.854928][T18218] [ 878.857909][T18218] dump_stack_lvl+0x188/0x24e [ 878.862668][T18218] ? show_regs_print_info+0x12/0x12 [ 878.867927][T18218] ? load_image+0x410/0x410 [ 878.872506][T18218] sysfs_warn_dup+0x8a/0xa0 [ 878.877074][T18218] sysfs_do_create_link_sd+0xc0/0x110 [ 878.882517][T18218] device_add+0x83b/0x1050 [ 878.886993][T18218] wiphy_register+0x1d8b/0x2aa0 [ 878.891937][T18218] ? cfg80211_event_work+0x40/0x40 [ 878.897102][T18218] ? minstrel_ht_alloc+0x894/0xa20 [ 878.902271][T18218] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 878.908386][T18218] ieee80211_register_hw+0x2d48/0x39f0 [ 878.913890][T18218] ? ieee80211_register_hw+0xed1/0x39f0 [ 878.919468][T18218] ? ieee80211_register_hw+0xed1/0x39f0 [ 878.925053][T18218] ? ieee80211_tasklet_handler+0x20/0x20 [ 878.930721][T18218] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 878.936654][T18218] ? __debug_object_init+0xed/0x440 [ 878.941892][T18218] ? memset+0x1e/0x40 [ 878.945905][T18218] ? __hrtimer_init+0x189/0x270 [ 878.950793][T18218] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 878.956548][T18218] ? memcpy+0x3c/0x60 [ 878.960560][T18218] hwsim_new_radio_nl+0xab7/0xc90 [ 878.965639][T18218] genl_family_rcv_msg_doit+0x22f/0x350 [ 878.971221][T18218] ? end_current_label_crit_section+0x170/0x170 [ 878.977497][T18218] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 878.983426][T18218] ? bpf_lsm_capable+0x5/0x10 [ 878.988139][T18218] ? security_capable+0x85/0xb0 [ 878.993037][T18218] genl_rcv_msg+0x601/0x790 [ 878.997581][T18218] ? genl_bind+0x360/0x360 [ 879.002023][T18218] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 879.010662][T18218] netlink_rcv_skb+0x1ef/0x440 [ 879.015462][T18218] ? genl_bind+0x360/0x360 [ 879.019910][T18218] ? netlink_ack+0x1160/0x1160 [ 879.024708][T18218] ? down_read+0x1a8/0x2d0 [ 879.029159][T18218] genl_rcv+0x24/0x40 [ 879.033198][T18218] netlink_unicast+0x7ad/0x920 [ 879.038020][T18218] netlink_sendmsg+0x8ad/0xbd0 [ 879.042930][T18218] ? netlink_getsockopt+0x550/0x550 [ 879.048180][T18218] ? aa_sock_msg_perm+0x94/0x150 [ 879.053162][T18218] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 879.058474][T18218] ? security_socket_sendmsg+0x7c/0xa0 [ 879.063963][T18218] ? netlink_getsockopt+0x550/0x550 [ 879.069195][T18218] ____sys_sendmsg+0x5ed/0x9a0 [ 879.073998][T18218] ? __sys_sendmsg_sock+0x30/0x30 [ 879.079045][T18218] ? __import_iovec+0x306/0x510 [ 879.083929][T18218] ? import_iovec+0x6f/0xa0 [ 879.088465][T18218] ___sys_sendmsg+0x2a2/0x360 [ 879.093179][T18218] ? __sys_sendmsg+0x2a0/0x2a0 [ 879.098021][T18218] __se_sys_sendmsg+0x1c3/0x2b0 [ 879.102908][T18218] ? __x64_sys_sendmsg+0x80/0x80 [ 879.107894][T18218] ? lockdep_hardirqs_on+0x94/0x140 [ 879.113131][T18218] do_syscall_64+0x4c/0xa0 [ 879.117578][T18218] ? clear_bhb_loop+0x60/0xb0 [ 879.122281][T18218] ? clear_bhb_loop+0x60/0xb0 [ 879.126990][T18218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.132917][T18218] RIP: 0033:0x7f06e1b9ce59 [ 879.137360][T18218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.156993][T18218] RSP: 002b:00007f06e2a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.165433][T18218] RAX: ffffffffffffffda RBX: 00007f06e1e16090 RCX: 00007f06e1b9ce59 [ 879.173426][T18218] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 879.181426][T18218] RBP: 00007f06e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 879.189427][T18218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.197420][T18218] R13: 00007f06e1e16128 R14: 00007f06e1e16090 R15: 00007ffd1770ec28 [ 879.205437][T18218] [ 879.435326][T18220] netlink: 'syz.2.3987': attribute type 2 has an invalid length. [ 879.451901][T18220] netlink: 'syz.2.3987': attribute type 8 has an invalid length. [ 880.025543][T18248] netlink: 'syz.4.3994': attribute type 39 has an invalid length. [ 880.907411][T18268] netlink: 'syz.2.4001': attribute type 2 has an invalid length. [ 880.943611][T18268] netlink: 'syz.2.4001': attribute type 8 has an invalid length. [ 881.482346][T18278] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 881.595928][T18278] CPU: 0 PID: 18278 Comm: syz.3.4003 Not tainted syzkaller #0 [ 881.603478][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.613571][T18278] Call Trace: [ 881.616877][T18278] [ 881.619832][T18278] dump_stack_lvl+0x188/0x24e [ 881.624550][T18278] ? show_regs_print_info+0x12/0x12 [ 881.629802][T18278] ? load_image+0x410/0x410 [ 881.634350][T18278] sysfs_warn_dup+0x8a/0xa0 [ 881.638914][T18278] sysfs_do_create_link_sd+0xc0/0x110 [ 881.644326][T18278] device_add+0x83b/0x1050 [ 881.648772][T18278] wiphy_register+0x1d8b/0x2aa0 [ 881.653741][T18278] ? cfg80211_event_work+0x40/0x40 [ 881.659130][T18278] ? minstrel_ht_alloc+0x894/0xa20 [ 881.664292][T18278] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 881.670405][T18278] ieee80211_register_hw+0x2d48/0x39f0 [ 881.675996][T18278] ? ieee80211_register_hw+0xed1/0x39f0 [ 881.681593][T18278] ? ieee80211_register_hw+0xed1/0x39f0 [ 881.687191][T18278] ? ieee80211_tasklet_handler+0x20/0x20 [ 881.692856][T18278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 881.698811][T18278] ? __debug_object_init+0xed/0x440 [ 881.704051][T18278] ? memset+0x1e/0x40 [ 881.708063][T18278] ? __hrtimer_init+0x189/0x270 [ 881.712945][T18278] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 881.718713][T18278] ? memcpy+0x3c/0x60 [ 881.722728][T18278] hwsim_new_radio_nl+0xab7/0xc90 [ 881.727800][T18278] genl_family_rcv_msg_doit+0x22f/0x350 [ 881.733380][T18278] ? end_current_label_crit_section+0x170/0x170 [ 881.739655][T18278] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 881.745585][T18278] ? bpf_lsm_capable+0x5/0x10 [ 881.750295][T18278] ? security_capable+0x85/0xb0 [ 881.755205][T18278] genl_rcv_msg+0x601/0x790 [ 881.759780][T18278] ? genl_bind+0x360/0x360 [ 881.764232][T18278] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 881.770611][T18278] netlink_rcv_skb+0x1ef/0x440 [ 881.775419][T18278] ? genl_bind+0x360/0x360 [ 881.779867][T18278] ? netlink_ack+0x1160/0x1160 [ 881.784672][T18278] ? down_read+0x1a8/0x2d0 [ 881.789211][T18278] genl_rcv+0x24/0x40 [ 881.793236][T18278] netlink_unicast+0x7ad/0x920 [ 881.798229][T18278] netlink_sendmsg+0x8ad/0xbd0 [ 881.803032][T18278] ? netlink_getsockopt+0x550/0x550 [ 881.808274][T18278] ? aa_sock_msg_perm+0x94/0x150 [ 881.813268][T18278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 881.818594][T18278] ? security_socket_sendmsg+0x7c/0xa0 [ 881.824081][T18278] ? netlink_getsockopt+0x550/0x550 [ 881.829309][T18278] ____sys_sendmsg+0x5ed/0x9a0 [ 881.834107][T18278] ? __sys_sendmsg_sock+0x30/0x30 [ 881.839158][T18278] ? __import_iovec+0x306/0x510 [ 881.844136][T18278] ? import_iovec+0x6f/0xa0 [ 881.848676][T18278] ___sys_sendmsg+0x2a2/0x360 [ 881.853385][T18278] ? __sys_sendmsg+0x2a0/0x2a0 [ 881.858228][T18278] __se_sys_sendmsg+0x1c3/0x2b0 [ 881.863107][T18278] ? __x64_sys_sendmsg+0x80/0x80 [ 881.868085][T18278] ? lockdep_hardirqs_on+0x94/0x140 [ 881.873320][T18278] do_syscall_64+0x4c/0xa0 [ 881.877766][T18278] ? clear_bhb_loop+0x60/0xb0 [ 881.882480][T18278] ? clear_bhb_loop+0x60/0xb0 [ 881.887180][T18278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.893106][T18278] RIP: 0033:0x7f06e1b9ce59 [ 881.897546][T18278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.917441][T18278] RSP: 002b:00007f06e2a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.925970][T18278] RAX: ffffffffffffffda RBX: 00007f06e1e16090 RCX: 00007f06e1b9ce59 [ 881.933963][T18278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 881.941954][T18278] RBP: 00007f06e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 881.949949][T18278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.957945][T18278] R13: 00007f06e1e16128 R14: 00007f06e1e16090 R15: 00007ffd1770ec28 [ 881.965964][T18278] [ 882.082973][T18284] netlink: 'syz.1.4005': attribute type 10 has an invalid length. [ 882.156217][T18284] bridge0: port 3(veth0_vlan) entered blocking state [ 882.171678][T18284] bridge0: port 3(veth0_vlan) entered disabled state [ 882.215577][T18284] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 882.369051][T18294] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 882.387523][T18294] CPU: 1 PID: 18294 Comm: syz.4.4008 Not tainted syzkaller #0 [ 882.395085][T18294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 882.405233][T18294] Call Trace: [ 882.408668][T18294] [ 882.411662][T18294] dump_stack_lvl+0x188/0x24e [ 882.416427][T18294] ? show_regs_print_info+0x12/0x12 [ 882.421694][T18294] ? load_image+0x410/0x410 [ 882.426317][T18294] sysfs_warn_dup+0x8a/0xa0 [ 882.430903][T18294] sysfs_do_create_link_sd+0xc0/0x110 [ 882.436363][T18294] device_add+0x83b/0x1050 [ 882.440863][T18294] wiphy_register+0x1d8b/0x2aa0 [ 882.445822][T18294] ? cfg80211_event_work+0x40/0x40 [ 882.451010][T18294] ? minstrel_ht_alloc+0x894/0xa20 [ 882.456196][T18294] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 882.462341][T18294] ieee80211_register_hw+0x2d48/0x39f0 [ 882.467900][T18294] ? ieee80211_register_hw+0xed1/0x39f0 [ 882.473513][T18294] ? ieee80211_register_hw+0xed1/0x39f0 [ 882.479147][T18294] ? ieee80211_tasklet_handler+0x20/0x20 [ 882.484843][T18294] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 882.490815][T18294] ? __debug_object_init+0xed/0x440 [ 882.496083][T18294] ? memset+0x1e/0x40 [ 882.500117][T18294] ? __hrtimer_init+0x189/0x270 [ 882.505037][T18294] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 882.510827][T18294] ? memcpy+0x3c/0x60 [ 882.514870][T18294] hwsim_new_radio_nl+0xab7/0xc90 [ 882.519964][T18294] genl_family_rcv_msg_doit+0x22f/0x350 [ 882.525577][T18294] ? end_current_label_crit_section+0x170/0x170 [ 882.531876][T18294] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 882.537839][T18294] ? bpf_lsm_capable+0x5/0x10 [ 882.542583][T18294] ? security_capable+0x85/0xb0 [ 882.547506][T18294] genl_rcv_msg+0x601/0x790 [ 882.552113][T18294] ? genl_bind+0x360/0x360 [ 882.556586][T18294] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 882.562991][T18294] netlink_rcv_skb+0x1ef/0x440 [ 882.567818][T18294] ? genl_bind+0x360/0x360 [ 882.572298][T18294] ? netlink_ack+0x1160/0x1160 [ 882.577125][T18294] ? down_read+0x1a8/0x2d0 [ 882.581604][T18294] genl_rcv+0x24/0x40 [ 882.585640][T18294] netlink_unicast+0x7ad/0x920 [ 882.590478][T18294] netlink_sendmsg+0x8ad/0xbd0 [ 882.595307][T18294] ? netlink_getsockopt+0x550/0x550 [ 882.600563][T18294] ? aa_sock_msg_perm+0x94/0x150 [ 882.605569][T18294] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 882.610905][T18294] ? security_socket_sendmsg+0x7c/0xa0 [ 882.616417][T18294] ? netlink_getsockopt+0x550/0x550 [ 882.621673][T18294] ____sys_sendmsg+0x5ed/0x9a0 [ 882.626515][T18294] ? __sys_sendmsg_sock+0x30/0x30 [ 882.631592][T18294] ? __import_iovec+0x306/0x510 [ 882.636541][T18294] ? import_iovec+0x6f/0xa0 [ 882.641096][T18294] ___sys_sendmsg+0x2a2/0x360 [ 882.645824][T18294] ? __sys_sendmsg+0x2a0/0x2a0 [ 882.650765][T18294] __se_sys_sendmsg+0x1c3/0x2b0 [ 882.655653][T18294] ? __x64_sys_sendmsg+0x80/0x80 [ 882.660634][T18294] ? lockdep_hardirqs_on+0x94/0x140 [ 882.665873][T18294] do_syscall_64+0x4c/0xa0 [ 882.670319][T18294] ? clear_bhb_loop+0x60/0xb0 [ 882.675021][T18294] ? clear_bhb_loop+0x60/0xb0 [ 882.679729][T18294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 882.685668][T18294] RIP: 0033:0x7fca7a79ce59 [ 882.690111][T18294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.709756][T18294] RSP: 002b:00007fca7b651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.718206][T18294] RAX: ffffffffffffffda RBX: 00007fca7aa16090 RCX: 00007fca7a79ce59 [ 882.726391][T18294] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 882.734404][T18294] RBP: 00007fca7a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 882.742405][T18294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.750402][T18294] R13: 00007fca7aa16128 R14: 00007fca7aa16090 R15: 00007ffccb986878 [ 882.758428][T18294] [ 883.122238][T18309] __nla_validate_parse: 14 callbacks suppressed [ 883.122261][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 883.138827][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4010'. [ 883.168306][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4010'. [ 883.215471][T18311] netlink: 33 bytes leftover after parsing attributes in process `syz.5.4010'. [ 883.241016][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4010'. [ 883.263495][T18311] netlink: 33 bytes leftover after parsing attributes in process `syz.5.4010'. [ 883.302946][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4010'. [ 883.448152][T18311] netlink: 33 bytes leftover after parsing attributes in process `syz.5.4010'. [ 884.137629][T18309] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4011'. [ 884.409006][T18322] netlink: 'syz.5.4016': attribute type 2 has an invalid length. [ 884.417930][T18322] netlink: 'syz.5.4016': attribute type 8 has an invalid length. [ 884.442607][T18322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4016'. [ 884.661898][T18336] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 884.706971][T18336] CPU: 0 PID: 18336 Comm: syz.3.4019 Not tainted syzkaller #0 [ 884.714529][T18336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.724639][T18336] Call Trace: [ 884.727964][T18336] [ 884.730937][T18336] dump_stack_lvl+0x188/0x24e [ 884.735677][T18336] ? show_regs_print_info+0x12/0x12 [ 884.740972][T18336] ? load_image+0x410/0x410 [ 884.745559][T18336] sysfs_warn_dup+0x8a/0xa0 [ 884.750122][T18336] sysfs_do_create_link_sd+0xc0/0x110 [ 884.755559][T18336] device_add+0x83b/0x1050 [ 884.760042][T18336] wiphy_register+0x1d8b/0x2aa0 [ 884.764963][T18336] ? cfg80211_event_work+0x40/0x40 [ 884.770128][T18336] ? minstrel_ht_alloc+0x894/0xa20 [ 884.775300][T18336] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 884.781441][T18336] ieee80211_register_hw+0x2d48/0x39f0 [ 884.786968][T18336] ? ieee80211_register_hw+0xed1/0x39f0 [ 884.792573][T18336] ? ieee80211_register_hw+0xed1/0x39f0 [ 884.798193][T18336] ? ieee80211_tasklet_handler+0x20/0x20 [ 884.803878][T18336] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 884.809834][T18336] ? __debug_object_init+0xed/0x440 [ 884.815084][T18336] ? memset+0x1e/0x40 [ 884.819102][T18336] ? __hrtimer_init+0x189/0x270 [ 884.824000][T18336] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 884.829759][T18336] ? memcpy+0x3c/0x60 [ 884.833776][T18336] hwsim_new_radio_nl+0xab7/0xc90 [ 884.838844][T18336] genl_family_rcv_msg_doit+0x22f/0x350 [ 884.844433][T18336] ? end_current_label_crit_section+0x170/0x170 [ 884.850721][T18336] ? lockdep_hardirqs_on+0x94/0x140 [ 884.855952][T18336] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 884.861883][T18336] ? bpf_lsm_capable+0x5/0x10 [ 884.866595][T18336] ? security_capable+0x85/0xb0 [ 884.871488][T18336] genl_rcv_msg+0x601/0x790 [ 884.876033][T18336] ? genl_bind+0x360/0x360 [ 884.880474][T18336] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 884.886842][T18336] netlink_rcv_skb+0x1ef/0x440 [ 884.891633][T18336] ? genl_bind+0x360/0x360 [ 884.896083][T18336] ? netlink_ack+0x1160/0x1160 [ 884.900882][T18336] ? down_read+0x1a8/0x2d0 [ 884.905330][T18336] genl_rcv+0x24/0x40 [ 884.909344][T18336] netlink_unicast+0x7ad/0x920 [ 884.914228][T18336] netlink_sendmsg+0x8ad/0xbd0 [ 884.919034][T18336] ? netlink_getsockopt+0x550/0x550 [ 884.924260][T18336] ? aa_sock_msg_perm+0x94/0x150 [ 884.929233][T18336] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 884.934547][T18336] ? security_socket_sendmsg+0x7c/0xa0 [ 884.940031][T18336] ? netlink_getsockopt+0x550/0x550 [ 884.945271][T18336] ____sys_sendmsg+0x5ed/0x9a0 [ 884.950077][T18336] ? __sys_sendmsg_sock+0x30/0x30 [ 884.955126][T18336] ? __import_iovec+0x306/0x510 [ 884.960010][T18336] ? import_iovec+0x6f/0xa0 [ 884.964543][T18336] ___sys_sendmsg+0x2a2/0x360 [ 884.969259][T18336] ? __sys_sendmsg+0x2a0/0x2a0 [ 884.974092][T18336] __se_sys_sendmsg+0x1c3/0x2b0 [ 884.978977][T18336] ? __x64_sys_sendmsg+0x80/0x80 [ 884.983952][T18336] ? lockdep_hardirqs_on+0x94/0x140 [ 884.989182][T18336] do_syscall_64+0x4c/0xa0 [ 884.993633][T18336] ? clear_bhb_loop+0x60/0xb0 [ 884.998346][T18336] ? clear_bhb_loop+0x60/0xb0 [ 885.003050][T18336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.008977][T18336] RIP: 0033:0x7f06e1b9ce59 [ 885.013419][T18336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.033048][T18336] RSP: 002b:00007f06e2a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.041488][T18336] RAX: ffffffffffffffda RBX: 00007f06e1e16090 RCX: 00007f06e1b9ce59 [ 885.049486][T18336] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 885.057479][T18336] RBP: 00007f06e1c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 885.065475][T18336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.073465][T18336] R13: 00007f06e1e16128 R14: 00007f06e1e16090 R15: 00007ffd1770ec28 [ 885.081473][T18336] [ 885.598480][T18358] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 885.620342][T18358] CPU: 0 PID: 18358 Comm: syz.1.4022 Not tainted syzkaller #0 [ 885.627897][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 885.638007][T18358] Call Trace: [ 885.641331][T18358] [ 885.644394][T18358] dump_stack_lvl+0x188/0x24e [ 885.649141][T18358] ? show_regs_print_info+0x12/0x12 [ 885.654404][T18358] ? load_image+0x410/0x410 [ 885.658991][T18358] sysfs_warn_dup+0x8a/0xa0 [ 885.663558][T18358] sysfs_do_create_link_sd+0xc0/0x110 [ 885.668992][T18358] device_add+0x83b/0x1050 [ 885.673472][T18358] wiphy_register+0x1d8b/0x2aa0 [ 885.678401][T18358] ? cfg80211_event_work+0x40/0x40 [ 885.683564][T18358] ? minstrel_ht_alloc+0x894/0xa20 [ 885.688739][T18358] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 885.694875][T18358] ieee80211_register_hw+0x2d48/0x39f0 [ 885.700405][T18358] ? ieee80211_register_hw+0xed1/0x39f0 [ 885.706012][T18358] ? ieee80211_register_hw+0xed1/0x39f0 [ 885.711630][T18358] ? ieee80211_tasklet_handler+0x20/0x20 [ 885.717320][T18358] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 885.723271][T18358] ? __debug_object_init+0xed/0x440 [ 885.728531][T18358] ? memset+0x1e/0x40 [ 885.732544][T18358] ? __hrtimer_init+0x189/0x270 [ 885.737434][T18358] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 885.743198][T18358] ? memcpy+0x3c/0x60 [ 885.747212][T18358] hwsim_new_radio_nl+0xab7/0xc90 [ 885.752280][T18358] genl_family_rcv_msg_doit+0x22f/0x350 [ 885.757861][T18358] ? end_current_label_crit_section+0x170/0x170 [ 885.764139][T18358] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 885.770101][T18358] ? bpf_lsm_capable+0x5/0x10 [ 885.774814][T18358] ? security_capable+0x85/0xb0 [ 885.779709][T18358] genl_rcv_msg+0x601/0x790 [ 885.784256][T18358] ? genl_bind+0x360/0x360 [ 885.788702][T18358] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 885.795074][T18358] netlink_rcv_skb+0x1ef/0x440 [ 885.799872][T18358] ? genl_bind+0x360/0x360 [ 885.804324][T18358] ? netlink_ack+0x1160/0x1160 [ 885.809126][T18358] ? down_read+0x1a8/0x2d0 [ 885.813574][T18358] genl_rcv+0x24/0x40 [ 885.817586][T18358] netlink_unicast+0x7ad/0x920 [ 885.822417][T18358] netlink_sendmsg+0x8ad/0xbd0 [ 885.827223][T18358] ? netlink_getsockopt+0x550/0x550 [ 885.832453][T18358] ? aa_sock_msg_perm+0x94/0x150 [ 885.837421][T18358] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 885.842757][T18358] ? security_socket_sendmsg+0x7c/0xa0 [ 885.848240][T18358] ? netlink_getsockopt+0x550/0x550 [ 885.853491][T18358] ____sys_sendmsg+0x5ed/0x9a0 [ 885.858292][T18358] ? __sys_sendmsg_sock+0x30/0x30 [ 885.863342][T18358] ? __import_iovec+0x306/0x510 [ 885.868225][T18358] ? import_iovec+0x6f/0xa0 [ 885.872762][T18358] ___sys_sendmsg+0x2a2/0x360 [ 885.877475][T18358] ? __sys_sendmsg+0x2a0/0x2a0 [ 885.882339][T18358] __se_sys_sendmsg+0x1c3/0x2b0 [ 885.887222][T18358] ? __x64_sys_sendmsg+0x80/0x80 [ 885.892203][T18358] ? lockdep_hardirqs_on+0x94/0x140 [ 885.897438][T18358] do_syscall_64+0x4c/0xa0 [ 885.901882][T18358] ? clear_bhb_loop+0x60/0xb0 [ 885.906583][T18358] ? clear_bhb_loop+0x60/0xb0 [ 885.911291][T18358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.917216][T18358] RIP: 0033:0x7f16b499ce59 [ 885.921663][T18358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.941293][T18358] RSP: 002b:00007f16b586a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.949755][T18358] RAX: ffffffffffffffda RBX: 00007f16b4c16090 RCX: 00007f16b499ce59 [ 885.957752][T18358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 885.965752][T18358] RBP: 00007f16b4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 885.973745][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.981737][T18358] R13: 00007f16b4c16128 R14: 00007f16b4c16090 R15: 00007ffffeea0208 [ 885.989754][T18358] [ 886.887139][T18377] netlink: 'syz.5.4031': attribute type 2 has an invalid length. [ 886.931215][T18377] netlink: 'syz.5.4031': attribute type 8 has an invalid length. [ 887.183033][T18393] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 887.219031][T18393] CPU: 0 PID: 18393 Comm: syz.2.4033 Not tainted syzkaller #0 [ 887.226581][T18393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 887.236685][T18393] Call Trace: [ 887.240003][T18393] [ 887.242988][T18393] dump_stack_lvl+0x188/0x24e [ 887.247729][T18393] ? show_regs_print_info+0x12/0x12 [ 887.252987][T18393] ? load_image+0x410/0x410 [ 887.257573][T18393] sysfs_warn_dup+0x8a/0xa0 [ 887.262145][T18393] sysfs_do_create_link_sd+0xc0/0x110 [ 887.267585][T18393] device_add+0x83b/0x1050 [ 887.272059][T18393] wiphy_register+0x1d8b/0x2aa0 [ 887.277023][T18393] ? cfg80211_event_work+0x40/0x40 [ 887.282194][T18393] ? minstrel_ht_alloc+0x894/0xa20 [ 887.287373][T18393] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 887.293516][T18393] ieee80211_register_hw+0x2d48/0x39f0 [ 887.299070][T18393] ? ieee80211_register_hw+0xed1/0x39f0 [ 887.304685][T18393] ? ieee80211_register_hw+0xed1/0x39f0 [ 887.310309][T18393] ? ieee80211_tasklet_handler+0x20/0x20 [ 887.316013][T18393] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 887.321973][T18393] ? __debug_object_init+0xed/0x440 [ 887.327220][T18393] ? memset+0x1e/0x40 [ 887.331235][T18393] ? __hrtimer_init+0x189/0x270 [ 887.336122][T18393] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 887.341888][T18393] ? memcpy+0x3c/0x60 [ 887.345930][T18393] hwsim_new_radio_nl+0xab7/0xc90 [ 887.351177][T18393] genl_family_rcv_msg_doit+0x22f/0x350 [ 887.356761][T18393] ? end_current_label_crit_section+0x170/0x170 [ 887.363038][T18393] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 887.368976][T18393] ? bpf_lsm_capable+0x5/0x10 [ 887.373704][T18393] ? security_capable+0x85/0xb0 [ 887.378602][T18393] genl_rcv_msg+0x601/0x790 [ 887.383154][T18393] ? genl_bind+0x360/0x360 [ 887.387600][T18393] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 887.393971][T18393] netlink_rcv_skb+0x1ef/0x440 [ 887.398762][T18393] ? genl_bind+0x360/0x360 [ 887.403219][T18393] ? netlink_ack+0x1160/0x1160 [ 887.408022][T18393] ? down_read+0x1a8/0x2d0 [ 887.412476][T18393] genl_rcv+0x24/0x40 [ 887.416503][T18393] netlink_unicast+0x7ad/0x920 [ 887.421310][T18393] netlink_sendmsg+0x8ad/0xbd0 [ 887.426119][T18393] ? netlink_getsockopt+0x550/0x550 [ 887.431347][T18393] ? aa_sock_msg_perm+0x94/0x150 [ 887.436323][T18393] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 887.441634][T18393] ? security_socket_sendmsg+0x7c/0xa0 [ 887.447117][T18393] ? netlink_getsockopt+0x550/0x550 [ 887.452349][T18393] ____sys_sendmsg+0x5ed/0x9a0 [ 887.457156][T18393] ? __sys_sendmsg_sock+0x30/0x30 [ 887.462208][T18393] ? __import_iovec+0x306/0x510 [ 887.467096][T18393] ? import_iovec+0x6f/0xa0 [ 887.471655][T18393] ___sys_sendmsg+0x2a2/0x360 [ 887.476387][T18393] ? __sys_sendmsg+0x2a0/0x2a0 [ 887.481244][T18393] __se_sys_sendmsg+0x1c3/0x2b0 [ 887.486143][T18393] ? __x64_sys_sendmsg+0x80/0x80 [ 887.491212][T18393] ? lockdep_hardirqs_on+0x94/0x140 [ 887.496470][T18393] do_syscall_64+0x4c/0xa0 [ 887.500949][T18393] ? clear_bhb_loop+0x60/0xb0 [ 887.505677][T18393] ? clear_bhb_loop+0x60/0xb0 [ 887.510398][T18393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.516361][T18393] RIP: 0033:0x7f902c59ce59 [ 887.520804][T18393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.540454][T18393] RSP: 002b:00007f902d481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.548905][T18393] RAX: ffffffffffffffda RBX: 00007f902c816090 RCX: 00007f902c59ce59 [ 887.556903][T18393] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 887.564899][T18393] RBP: 00007f902c632e6f R08: 0000000000000000 R09: 0000000000000000 [ 887.572904][T18393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.580904][T18393] R13: 00007f902c816128 R14: 00007f902c816090 R15: 00007ffdc42fa578 [ 887.588925][T18393] [ 887.596092][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 888.141752][T18411] __nla_validate_parse: 13 callbacks suppressed [ 888.141775][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4039'. [ 888.165881][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 888.209712][T18411] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4039'. [ 888.235424][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 888.292334][T18411] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4039'. [ 888.315377][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 888.378721][T18424] netlink: 'syz.1.4043': attribute type 2 has an invalid length. [ 888.388195][T18411] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4039'. [ 888.409811][T18424] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.4043'. [ 888.451440][T18415] netlink: 'syz.5.4040': attribute type 39 has an invalid length. [ 888.533068][T18427] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4041'. [ 888.664546][T18427] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 888.688845][T18427] CPU: 1 PID: 18427 Comm: syz.4.4041 Not tainted syzkaller #0 [ 888.696490][T18427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 888.706595][T18427] Call Trace: [ 888.709918][T18427] [ 888.712884][T18427] dump_stack_lvl+0x188/0x24e [ 888.717618][T18427] ? show_regs_print_info+0x12/0x12 [ 888.722862][T18427] ? load_image+0x410/0x410 [ 888.727443][T18427] sysfs_warn_dup+0x8a/0xa0 [ 888.732008][T18427] sysfs_do_create_link_sd+0xc0/0x110 [ 888.737449][T18427] device_add+0x83b/0x1050 [ 888.741924][T18427] wiphy_register+0x1d8b/0x2aa0 [ 888.746936][T18427] ? cfg80211_event_work+0x40/0x40 [ 888.752083][T18427] ? minstrel_ht_alloc+0x894/0xa20 [ 888.757241][T18427] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 888.763347][T18427] ieee80211_register_hw+0x2d48/0x39f0 [ 888.768849][T18427] ? ieee80211_register_hw+0xed1/0x39f0 [ 888.774429][T18427] ? ieee80211_register_hw+0xed1/0x39f0 [ 888.780037][T18427] ? ieee80211_tasklet_handler+0x20/0x20 [ 888.785718][T18427] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 888.791675][T18427] ? __debug_object_init+0xed/0x440 [ 888.797189][T18427] ? memset+0x1e/0x40 [ 888.801225][T18427] ? __hrtimer_init+0x189/0x270 [ 888.806127][T18427] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 888.811935][T18427] ? memcpy+0x3c/0x60 [ 888.815963][T18427] hwsim_new_radio_nl+0xab7/0xc90 [ 888.821039][T18427] genl_family_rcv_msg_doit+0x22f/0x350 [ 888.826638][T18427] ? end_current_label_crit_section+0x170/0x170 [ 888.832930][T18427] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 888.838876][T18427] ? bpf_lsm_capable+0x5/0x10 [ 888.843591][T18427] ? security_capable+0x85/0xb0 [ 888.848481][T18427] genl_rcv_msg+0x601/0x790 [ 888.853034][T18427] ? genl_bind+0x360/0x360 [ 888.857486][T18427] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 888.863867][T18427] netlink_rcv_skb+0x1ef/0x440 [ 888.868663][T18427] ? genl_bind+0x360/0x360 [ 888.873112][T18427] ? netlink_ack+0x1160/0x1160 [ 888.877919][T18427] ? down_read+0x1a8/0x2d0 [ 888.882374][T18427] genl_rcv+0x24/0x40 [ 888.886390][T18427] netlink_unicast+0x7ad/0x920 [ 888.891198][T18427] netlink_sendmsg+0x8ad/0xbd0 [ 888.896016][T18427] ? netlink_getsockopt+0x550/0x550 [ 888.901244][T18427] ? aa_sock_msg_perm+0x94/0x150 [ 888.906214][T18427] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 888.911533][T18427] ? security_socket_sendmsg+0x7c/0xa0 [ 888.917021][T18427] ? netlink_getsockopt+0x550/0x550 [ 888.922250][T18427] ____sys_sendmsg+0x5ed/0x9a0 [ 888.927055][T18427] ? __sys_sendmsg_sock+0x30/0x30 [ 888.932107][T18427] ? __import_iovec+0x306/0x510 [ 888.936995][T18427] ? import_iovec+0x6f/0xa0 [ 888.941537][T18427] ___sys_sendmsg+0x2a2/0x360 [ 888.946253][T18427] ? __sys_sendmsg+0x2a0/0x2a0 [ 888.951098][T18427] __se_sys_sendmsg+0x1c3/0x2b0 [ 888.955991][T18427] ? __x64_sys_sendmsg+0x80/0x80 [ 888.960970][T18427] ? lockdep_hardirqs_on+0x94/0x140 [ 888.966204][T18427] do_syscall_64+0x4c/0xa0 [ 888.970646][T18427] ? clear_bhb_loop+0x60/0xb0 [ 888.975353][T18427] ? clear_bhb_loop+0x60/0xb0 [ 888.980058][T18427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.985989][T18427] RIP: 0033:0x7fca7a79ce59 [ 888.990522][T18427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.010161][T18427] RSP: 002b:00007fca7b5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.018611][T18427] RAX: ffffffffffffffda RBX: 00007fca7aa16360 RCX: 00007fca7a79ce59 [ 889.026720][T18427] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 889.034803][T18427] RBP: 00007fca7a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 889.042805][T18427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.050803][T18427] R13: 00007fca7aa163f8 R14: 00007fca7aa16360 R15: 00007ffccb986878 [ 889.058831][T18427] [ 889.477536][T18435] netlink: 'syz.1.4046': attribute type 2 has an invalid length. [ 889.515576][T18435] netlink: 'syz.1.4046': attribute type 8 has an invalid length. [ 889.531121][T18435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4046'. [ 889.646687][T18447] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 889.693545][T18447] CPU: 0 PID: 18447 Comm: syz.4.4049 Not tainted syzkaller #0 [ 889.701114][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 889.711221][T18447] Call Trace: [ 889.714545][T18447] [ 889.717569][T18447] dump_stack_lvl+0x188/0x24e [ 889.722321][T18447] ? show_regs_print_info+0x12/0x12 [ 889.727576][T18447] ? load_image+0x410/0x410 [ 889.732191][T18447] sysfs_warn_dup+0x8a/0xa0 [ 889.736763][T18447] sysfs_do_create_link_sd+0xc0/0x110 [ 889.742204][T18447] device_add+0x83b/0x1050 [ 889.746694][T18447] wiphy_register+0x1d8b/0x2aa0 [ 889.751621][T18447] ? cfg80211_event_work+0x40/0x40 [ 889.756790][T18447] ? minstrel_ht_alloc+0x894/0xa20 [ 889.761964][T18447] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 889.768188][T18447] ieee80211_register_hw+0x2d48/0x39f0 [ 889.773715][T18447] ? ieee80211_register_hw+0xed1/0x39f0 [ 889.779312][T18447] ? ieee80211_register_hw+0xed1/0x39f0 [ 889.784917][T18447] ? ieee80211_tasklet_handler+0x20/0x20 [ 889.790604][T18447] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 889.796559][T18447] ? __debug_object_init+0xed/0x440 [ 889.801822][T18447] ? memset+0x1e/0x40 [ 889.805860][T18447] ? __hrtimer_init+0x189/0x270 [ 889.810774][T18447] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 889.816561][T18447] ? memcpy+0x3c/0x60 [ 889.820620][T18447] hwsim_new_radio_nl+0xab7/0xc90 [ 889.825716][T18447] genl_family_rcv_msg_doit+0x22f/0x350 [ 889.831326][T18447] ? end_current_label_crit_section+0x170/0x170 [ 889.837626][T18447] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 889.843586][T18447] ? bpf_lsm_capable+0x5/0x10 [ 889.848321][T18447] ? security_capable+0x85/0xb0 [ 889.853234][T18447] genl_rcv_msg+0x601/0x790 [ 889.857803][T18447] ? genl_bind+0x360/0x360 [ 889.862270][T18447] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 889.868686][T18447] netlink_rcv_skb+0x1ef/0x440 [ 889.873511][T18447] ? genl_bind+0x360/0x360 [ 889.877985][T18447] ? netlink_ack+0x1160/0x1160 [ 889.882822][T18447] ? down_read+0x1a8/0x2d0 [ 889.887294][T18447] genl_rcv+0x24/0x40 [ 889.891331][T18447] netlink_unicast+0x7ad/0x920 [ 889.896163][T18447] netlink_sendmsg+0x8ad/0xbd0 [ 889.900993][T18447] ? netlink_getsockopt+0x550/0x550 [ 889.906247][T18447] ? aa_sock_msg_perm+0x94/0x150 [ 889.911234][T18447] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 889.916563][T18447] ? security_socket_sendmsg+0x7c/0xa0 [ 889.922076][T18447] ? netlink_getsockopt+0x550/0x550 [ 889.927321][T18447] ____sys_sendmsg+0x5ed/0x9a0 [ 889.932163][T18447] ? __sys_sendmsg_sock+0x30/0x30 [ 889.937231][T18447] ? __import_iovec+0x306/0x510 [ 889.942141][T18447] ? import_iovec+0x6f/0xa0 [ 889.946691][T18447] ___sys_sendmsg+0x2a2/0x360 [ 889.951421][T18447] ? __sys_sendmsg+0x2a0/0x2a0 [ 889.956278][T18447] __se_sys_sendmsg+0x1c3/0x2b0 [ 889.961177][T18447] ? __x64_sys_sendmsg+0x80/0x80 [ 889.966173][T18447] ? lockdep_hardirqs_on+0x94/0x140 [ 889.971425][T18447] do_syscall_64+0x4c/0xa0 [ 889.975883][T18447] ? clear_bhb_loop+0x60/0xb0 [ 889.980625][T18447] ? clear_bhb_loop+0x60/0xb0 [ 889.985336][T18447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 889.991279][T18447] RIP: 0033:0x7fca7a79ce59 [ 889.995733][T18447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.015381][T18447] RSP: 002b:00007fca7b651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.023837][T18447] RAX: ffffffffffffffda RBX: 00007fca7aa16090 RCX: 00007fca7a79ce59 [ 890.031843][T18447] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 890.039853][T18447] RBP: 00007fca7a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 890.047863][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.055897][T18447] R13: 00007fca7aa16128 R14: 00007fca7aa16090 R15: 00007ffccb986878 [ 890.063928][T18447] [ 891.192325][T18488] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 891.231167][T18488] CPU: 0 PID: 18488 Comm: syz.5.4059 Not tainted syzkaller #0 [ 891.238715][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 891.248818][T18488] Call Trace: [ 891.252137][T18488] [ 891.255108][T18488] dump_stack_lvl+0x188/0x24e [ 891.259848][T18488] ? show_regs_print_info+0x12/0x12 [ 891.265111][T18488] ? load_image+0x410/0x410 [ 891.269698][T18488] sysfs_warn_dup+0x8a/0xa0 [ 891.274261][T18488] sysfs_do_create_link_sd+0xc0/0x110 [ 891.279729][T18488] device_add+0x83b/0x1050 [ 891.284209][T18488] wiphy_register+0x1d8b/0x2aa0 [ 891.289154][T18488] ? cfg80211_event_work+0x40/0x40 [ 891.294326][T18488] ? minstrel_ht_alloc+0x894/0xa20 [ 891.299602][T18488] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 891.305737][T18488] ieee80211_register_hw+0x2d48/0x39f0 [ 891.311269][T18488] ? ieee80211_register_hw+0xed1/0x39f0 [ 891.316871][T18488] ? ieee80211_register_hw+0xed1/0x39f0 [ 891.322485][T18488] ? ieee80211_tasklet_handler+0x20/0x20 [ 891.328172][T18488] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 891.334131][T18488] ? __debug_object_init+0xed/0x440 [ 891.339395][T18488] ? memset+0x1e/0x40 [ 891.343441][T18488] ? __hrtimer_init+0x189/0x270 [ 891.348358][T18488] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 891.354153][T18488] ? memcpy+0x3c/0x60 [ 891.358200][T18488] hwsim_new_radio_nl+0xab7/0xc90 [ 891.363294][T18488] genl_family_rcv_msg_doit+0x22f/0x350 [ 891.368903][T18488] ? end_current_label_crit_section+0x170/0x170 [ 891.375211][T18488] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 891.381168][T18488] ? bpf_lsm_capable+0x5/0x10 [ 891.385900][T18488] ? security_capable+0x85/0xb0 [ 891.390815][T18488] genl_rcv_msg+0x601/0x790 [ 891.395387][T18488] ? genl_bind+0x360/0x360 [ 891.399860][T18488] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 891.406258][T18488] netlink_rcv_skb+0x1ef/0x440 [ 891.411177][T18488] ? genl_bind+0x360/0x360 [ 891.415637][T18488] ? netlink_ack+0x1160/0x1160 [ 891.420460][T18488] ? down_read+0x1a8/0x2d0 [ 891.424942][T18488] genl_rcv+0x24/0x40 [ 891.428976][T18488] netlink_unicast+0x7ad/0x920 [ 891.433808][T18488] netlink_sendmsg+0x8ad/0xbd0 [ 891.438642][T18488] ? netlink_getsockopt+0x550/0x550 [ 891.443906][T18488] ? aa_sock_msg_perm+0x94/0x150 [ 891.448907][T18488] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 891.454333][T18488] ? security_socket_sendmsg+0x7c/0xa0 [ 891.459859][T18488] ? netlink_getsockopt+0x550/0x550 [ 891.465119][T18488] ____sys_sendmsg+0x5ed/0x9a0 [ 891.469949][T18488] ? __sys_sendmsg_sock+0x30/0x30 [ 891.475023][T18488] ? __import_iovec+0x306/0x510 [ 891.479936][T18488] ? import_iovec+0x6f/0xa0 [ 891.484499][T18488] ___sys_sendmsg+0x2a2/0x360 [ 891.489241][T18488] ? __sys_sendmsg+0x2a0/0x2a0 [ 891.494132][T18488] __se_sys_sendmsg+0x1c3/0x2b0 [ 891.499040][T18488] ? __x64_sys_sendmsg+0x80/0x80 [ 891.504062][T18488] ? lockdep_hardirqs_on+0x94/0x140 [ 891.509330][T18488] do_syscall_64+0x4c/0xa0 [ 891.513808][T18488] ? clear_bhb_loop+0x60/0xb0 [ 891.518529][T18488] ? clear_bhb_loop+0x60/0xb0 [ 891.523266][T18488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.529223][T18488] RIP: 0033:0x7f357cb9ce59 [ 891.533703][T18488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.553376][T18488] RSP: 002b:00007f357da96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.561951][T18488] RAX: ffffffffffffffda RBX: 00007f357ce16090 RCX: 00007f357cb9ce59 [ 891.569979][T18488] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 891.578006][T18488] RBP: 00007f357cc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 891.586031][T18488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.594061][T18488] R13: 00007f357ce16128 R14: 00007f357ce16090 R15: 00007ffd585ecc88 [ 891.602147][T18488] [ 891.752309][T18492] netlink: 'syz.1.4060': attribute type 2 has an invalid length. [ 891.802848][T18492] netlink: 'syz.1.4060': attribute type 8 has an invalid length. [ 892.004786][T18507] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 892.042129][T18507] CPU: 0 PID: 18507 Comm: syz.2.4063 Not tainted syzkaller #0 [ 892.049776][T18507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.059889][T18507] Call Trace: [ 892.063464][T18507] [ 892.066431][T18507] dump_stack_lvl+0x188/0x24e [ 892.071174][T18507] ? show_regs_print_info+0x12/0x12 [ 892.076426][T18507] ? load_image+0x410/0x410 [ 892.081021][T18507] sysfs_warn_dup+0x8a/0xa0 [ 892.085591][T18507] sysfs_do_create_link_sd+0xc0/0x110 [ 892.091126][T18507] device_add+0x83b/0x1050 [ 892.095950][T18507] wiphy_register+0x1d8b/0x2aa0 [ 892.100870][T18507] ? cfg80211_event_work+0x40/0x40 [ 892.106039][T18507] ? minstrel_ht_alloc+0x894/0xa20 [ 892.111217][T18507] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 892.117353][T18507] ieee80211_register_hw+0x2d48/0x39f0 [ 892.122869][T18507] ? ieee80211_register_hw+0xed1/0x39f0 [ 892.128446][T18507] ? ieee80211_register_hw+0xed1/0x39f0 [ 892.134030][T18507] ? ieee80211_tasklet_handler+0x20/0x20 [ 892.139698][T18507] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 892.145658][T18507] ? __debug_object_init+0xed/0x440 [ 892.150899][T18507] ? memset+0x1e/0x40 [ 892.155535][T18507] ? __hrtimer_init+0x189/0x270 [ 892.160435][T18507] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 892.166194][T18507] ? memcpy+0x3c/0x60 [ 892.170213][T18507] hwsim_new_radio_nl+0xab7/0xc90 [ 892.175285][T18507] genl_family_rcv_msg_doit+0x22f/0x350 [ 892.180892][T18507] ? end_current_label_crit_section+0x170/0x170 [ 892.187178][T18507] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 892.193120][T18507] ? bpf_lsm_capable+0x5/0x10 [ 892.197842][T18507] ? security_capable+0x85/0xb0 [ 892.202949][T18507] genl_rcv_msg+0x601/0x790 [ 892.207512][T18507] ? genl_bind+0x360/0x360 [ 892.211970][T18507] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 892.218348][T18507] netlink_rcv_skb+0x1ef/0x440 [ 892.223163][T18507] ? genl_bind+0x360/0x360 [ 892.227620][T18507] ? netlink_ack+0x1160/0x1160 [ 892.232441][T18507] ? down_read+0x1a8/0x2d0 [ 892.236895][T18507] genl_rcv+0x24/0x40 [ 892.240910][T18507] netlink_unicast+0x7ad/0x920 [ 892.245708][T18507] netlink_sendmsg+0x8ad/0xbd0 [ 892.250597][T18507] ? netlink_getsockopt+0x550/0x550 [ 892.255825][T18507] ? aa_sock_msg_perm+0x94/0x150 [ 892.260813][T18507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 892.266140][T18507] ? security_socket_sendmsg+0x7c/0xa0 [ 892.271724][T18507] ? netlink_getsockopt+0x550/0x550 [ 892.276966][T18507] ____sys_sendmsg+0x5ed/0x9a0 [ 892.281776][T18507] ? __sys_sendmsg_sock+0x30/0x30 [ 892.286837][T18507] ? __import_iovec+0x306/0x510 [ 892.291730][T18507] ? import_iovec+0x6f/0xa0 [ 892.296265][T18507] ___sys_sendmsg+0x2a2/0x360 [ 892.300984][T18507] ? __sys_sendmsg+0x2a0/0x2a0 [ 892.305818][T18507] __se_sys_sendmsg+0x1c3/0x2b0 [ 892.310703][T18507] ? __x64_sys_sendmsg+0x80/0x80 [ 892.315683][T18507] ? lockdep_hardirqs_on+0x94/0x140 [ 892.320918][T18507] do_syscall_64+0x4c/0xa0 [ 892.325454][T18507] ? clear_bhb_loop+0x60/0xb0 [ 892.330160][T18507] ? clear_bhb_loop+0x60/0xb0 [ 892.334880][T18507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.340823][T18507] RIP: 0033:0x7f902c59ce59 [ 892.345280][T18507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.364938][T18507] RSP: 002b:00007f902d481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.373390][T18507] RAX: ffffffffffffffda RBX: 00007f902c816090 RCX: 00007f902c59ce59 [ 892.381405][T18507] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 892.389605][T18507] RBP: 00007f902c632e6f R08: 0000000000000000 R09: 0000000000000000 [ 892.397607][T18507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.405601][T18507] R13: 00007f902c816128 R14: 00007f902c816090 R15: 00007ffdc42fa578 [ 892.413612][T18507] [ 893.095874][T18520] netlink: 'syz.4.4064': attribute type 2 has an invalid length. [ 893.103985][T18520] netlink: 'syz.4.4064': attribute type 8 has an invalid length. [ 893.573299][T18537] netlink: 'syz.1.4071': attribute type 2 has an invalid length. [ 893.604434][T18537] netlink: 'syz.1.4071': attribute type 8 has an invalid length. [ 893.623059][T18537] __nla_validate_parse: 19 callbacks suppressed [ 893.623080][T18537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4071'. [ 893.765774][ T27] INFO: task syz.0.3354:15706 blocked for more than 143 seconds. [ 893.795382][ T27] Not tainted syzkaller #0 [ 893.800515][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 893.813134][ T27] task:syz.0.3354 state:D stack:24088 pid:15706 ppid:14587 flags:0x00004002 [ 893.823031][ T27] Call Trace: [ 893.827646][ T27] [ 893.830762][ T27] __schedule+0x107f/0x4030 [ 893.835649][ T27] ? __lock_acquire+0x7bd0/0x7bd0 [ 893.840880][ T27] ? __sched_text_start+0x8/0x8 [ 893.846346][ T27] ? task_work_cancel+0xa1/0x220 [ 893.851559][ T27] ? task_work_cancel_func+0x210/0x210 [ 893.857391][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 893.863226][ T27] schedule+0xb9/0x180 [ 893.867827][ T27] ? _free_event+0x10d/0x1050 [ 893.872691][ T27] _free_event+0x176/0x1050 [ 893.877672][ T27] perf_event_release_kernel+0x7c4/0x850 [ 893.883601][ T27] ? __might_sleep+0xd0/0xd0 [ 893.888446][ T27] ? calc_timer_values+0x410/0x410 [ 893.893848][ T27] ? __might_sleep+0xd0/0xd0 [ 893.898730][ T27] ? perf_mmap+0x1470/0x1470 [ 893.903504][ T27] perf_release+0x37/0x40 [ 893.908188][ T27] __fput+0x20a/0x8b0 [ 893.913949][ T27] task_work_run+0x1d0/0x260 [ 893.933367][ T27] ? task_work_cancel+0x220/0x220 [ 893.938637][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 893.943932][ T27] do_exit+0x9d5/0x2570 [ 893.951731][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 893.959967][ T27] ? put_task_struct+0x80/0x80 [ 893.973198][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 893.979656][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 893.984929][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 893.991618][ T27] do_group_exit+0x229/0x2e0 [ 893.996499][ T27] ? _raw_spin_unlock_irq+0x25/0x40 [ 894.001780][ T27] get_signal+0x1259/0x1340 [ 894.006704][ T27] arch_do_signal_or_restart+0xc4/0x1310 [ 894.012606][ T27] ? create_io_thread+0x170/0x170 [ 894.017976][ T27] ? __might_sleep+0xd0/0xd0 [ 894.022955][ T27] ? get_sigframe_size+0x10/0x10 [ 894.032688][ T27] ? __x64_sys_clone+0x1a7/0x220 [ 894.042518][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 894.050059][ T27] exit_to_user_mode_loop+0x70/0x110 [ 894.055787][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 894.061409][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 894.067399][ T27] do_syscall_64+0x58/0xa0 [ 894.071888][ T27] ? clear_bhb_loop+0x60/0xb0 [ 894.076964][ T27] ? clear_bhb_loop+0x60/0xb0 [ 894.081710][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.088190][ T27] RIP: 0033:0x7f00ad59ce59 [ 894.092692][ T27] RSP: 002b:00007f00ae447fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 894.103099][ T27] RAX: fffffffffffffffc RBX: 00007f00ad815fa0 RCX: 00007f00ad59ce59 [ 894.115184][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 894.123552][ T27] RBP: 00007f00ad632e6f R08: 0000000000000000 R09: 0000000000000000 [ 894.132564][ T27] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.142581][ T27] R13: 00007f00ad816038 R14: 00007f00ad815fa0 R15: 00007ffe856601e8 [ 894.150970][ T27] [ 894.167151][ T27] [ 894.167151][ T27] Showing all locks held in the system: [ 894.173295][T18543] netlink: 'syz.1.4075': attribute type 2 has an invalid length. [ 894.174911][ T27] 3 locks held by kworker/0:0/7: [ 894.174939][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 894.192268][T18543] netlink: 'syz.1.4075': attribute type 8 has an invalid length. [ 894.200412][ T27] #1: ffffc900000c7d00 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 894.217944][T18543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4075'. [ 894.227338][ T27] #2: ffffffff8cb33700 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5e0 [ 894.240156][ T27] 1 lock held by rcu_tasks_kthre/12: [ 894.251039][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 894.261914][ T27] 1 lock held by rcu_tasks_trace/13: [ 894.267359][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 894.278524][ T27] 1 lock held by khungtaskd/27: [ 894.283406][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 894.293453][ T27] 1 lock held by klogd/3629: [ 894.298152][ T27] #0: ffff8880b8f3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 894.311460][ T27] 2 locks held by getty/4025: [ 894.316515][ T27] #0: ffff88802fcb6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 894.326647][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 894.337923][ T27] 2 locks held by kworker/0:7/4327: [ 894.343280][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 894.354113][ T27] #1: ffffc900049a7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 894.370634][ T27] 2 locks held by syz.5.4066/18514: [ 894.376114][ T27] #0: ffffffff8dd3c650 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 894.386023][ T27] #1: ffffffff8dd494e8 (rtnl_mutex){+.+.}-{3:3}, at: br_net_exit_batch+0xb6/0x210 [ 894.395671][ T27] 3 locks held by syz.5.4066/18517: [ 894.400996][ T27] #0: ffffffff8dd3c650 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 894.411020][ T27] #1: ffffffff8dd494e8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd2/0x370 [ 894.421262][ T27] #2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 894.432805][ T27] 1 lock held by syz.3.4070/18524: [ 894.438214][ T27] #0: ffffffff8cb82c88 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 894.448993][ T27] 2 locks held by syz.4.4072/18530: [ 894.454242][ T27] #0: ffffffff8cb82c88 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 894.464147][ T27] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 894.477185][ T27] 1 lock held by syz.1.4075/18541: [ 894.482354][ T27] #0: ffffffff8cb82c88 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 894.525324][ T27] [ 894.527889][ T27] ============================================= [ 894.527889][ T27] [ 894.548149][ T27] NMI backtrace for cpu 0 [ 894.552553][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 894.559795][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.569875][ T27] Call Trace: [ 894.573182][ T27] [ 894.576146][ T27] dump_stack_lvl+0x188/0x24e [ 894.580856][ T27] ? irq_work_queue+0xb8/0x140 [ 894.585653][ T27] ? show_regs_print_info+0x12/0x12 [ 894.590882][ T27] ? load_image+0x410/0x410 [ 894.595416][ T27] ? vprintk_emit+0x59f/0x6a0 [ 894.600127][ T27] ? printk_sprint+0x460/0x460 [ 894.604930][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 894.609899][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 894.616082][ T27] ? _printk+0xda/0x130 [ 894.620274][ T27] ? load_image+0x410/0x410 [ 894.624809][ T27] ? load_image+0x410/0x410 [ 894.629341][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 894.635433][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 894.641523][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 894.647538][ T27] watchdog+0xf0e/0xf50 [ 894.651726][ T27] ? watchdog+0x1ed/0xf50 [ 894.656088][ T27] kthread+0x29d/0x330 [ 894.660243][ T27] ? hungtask_pm_notify+0x40/0x40 [ 894.665299][ T27] ? kthread_blkcg+0xd0/0xd0 [ 894.669916][ T27] ret_from_fork+0x1f/0x30 [ 894.674391][ T27] [ 894.678324][ T27] Sending NMI from CPU 0 to CPUs 1: [ 894.683585][ C1] NMI backtrace for cpu 1 [ 894.683596][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 894.683614][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.683625][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 894.683708][ C1] RIP: 0010:mark_lock+0xd2/0x320 [ 894.683737][ C1] Code: 00 a1 47 90 eb 24 48 c7 c0 40 91 bf 96 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 06 02 00 00 83 3d b3 e3 5a 15 00 74 36 45 31 ff <49> 83 c7 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 [ 894.683753][ C1] RSP: 0018:ffffc900000e7780 EFLAGS: 00000006 [ 894.683768][ C1] RAX: 000000000005d300 RBX: ffff88813fea8000 RCX: ffffffff8164ad54 [ 894.683781][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af2338 [ 894.683793][ C1] RBP: 0000000000000006 R08: ffffffff90af233f R09: 1ffffffff215e467 [ 894.683807][ C1] R10: dffffc0000000000 R11: fffffbfff215e468 R12: 0000000000000040 [ 894.683819][ C1] R13: dffffc0000000000 R14: ffff88813fea8b30 R15: ffffffff904d7400 [ 894.683833][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 894.683849][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 894.683862][ C1] CR2: 000000110c35731e CR3: 000000007e4bc000 CR4: 00000000003506e0 [ 894.683877][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 894.683889][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 894.683901][ C1] Call Trace: [ 894.683906][ C1] [ 894.683915][ C1] lockdep_hardirqs_on_prepare+0x380/0x7c0 [ 894.683941][ C1] ? __lock_acquire+0x7bd0/0x7bd0 [ 894.683966][ C1] ? lock_chain_count+0x20/0x20 [ 894.683992][ C1] trace_hardirqs_on+0x34/0x40 [ 894.684015][ C1] crng_make_state+0x4ee/0xb00 [ 894.684076][ C1] ? crng_make_state+0x1d1/0xb00 [ 894.684105][ C1] ? urandom_read_iter+0x140/0x140 [ 894.684139][ C1] _get_random_bytes+0xfc/0x250 [ 894.684162][ C1] ? get_random_bytes+0x20/0x20 [ 894.684186][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 894.684207][ C1] ? __alloc_skb+0x4e6/0x7d0 [ 894.684223][ C1] ? skb_put+0x10e/0x200 [ 894.684242][ C1] nsim_dev_trap_report_work+0x2e5/0xa80 [ 894.684264][ C1] ? process_one_work+0x7b4/0x1160 [ 894.684285][ C1] process_one_work+0x8ab/0x1160 [ 894.684311][ C1] ? worker_detach_from_pool+0x240/0x240 [ 894.684333][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 894.684357][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 894.684381][ C1] ? wq_worker_running+0x97/0x190 [ 894.684398][ C1] worker_thread+0xaf5/0x12a0 [ 894.684428][ C1] kthread+0x29d/0x330 [ 894.684443][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 894.684463][ C1] ? kthread_blkcg+0xd0/0xd0 [ 894.684478][ C1] ret_from_fork+0x1f/0x30 [ 894.684507][ C1] [ 894.932095][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 894.932145][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 894.932207][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.932246][ T27] Call Trace: [ 894.932267][ T27] [ 894.932290][ T27] dump_stack_lvl+0x188/0x24e [ 894.932371][ T27] ? memcpy+0x3c/0x60 [ 894.992748][ T27] ? show_regs_print_info+0x12/0x12 [ 894.998002][ T27] ? load_image+0x410/0x410 [ 895.002575][ T27] panic+0x2d3/0x710 [ 895.006537][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 895.012236][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 895.016786][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 895.022397][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 895.028603][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 895.034804][ T27] watchdog+0xf4d/0xf50 [ 895.039020][ T27] ? watchdog+0x1ed/0xf50 [ 895.043396][ T27] kthread+0x29d/0x330 [ 895.047505][ T27] ? hungtask_pm_notify+0x40/0x40 [ 895.052591][ T27] ? kthread_blkcg+0xd0/0xd0 [ 895.057227][ T27] ret_from_fork+0x1f/0x30 [ 895.062059][ T27] [ 895.065700][ T27] Kernel Offset: disabled [ 895.070039][ T27] Rebooting in 86400 seconds..