last executing test programs: 6.990281993s ago: executing program 4 (id=5251): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$sock(r1, &(0x7f0000000d00)={&(0x7f0000000400)=@phonet={0x23, 0x7a, 0x2, 0x9}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000005c0)="363eda0de73ea34ef737ffbada3ab34612bea29176f5464cbaedf0d2e3cec9b4264349e0f51715c3332b66d9e66dc7d89ebdc7dcb4016dff03934791bfaadbbce8691dc8e889dfb37b454e6f6d77a5c973545c049d47279b318d8c4572c32615af69a392a6666c70c59722d4f837a813eddd1fda418df30724ce030955189cd391108121e631930ed6a7107f68befabf7ab4ddcd81e42a7a49ce7e7d3b48022d820eaedb7eb7efc1467b57ad0c8e8d9d974e402198ca71d9af70a3b9e30b2da912d5698eedee02c79f711a2211521f214b86ae77888990d0efc78d27b2670d8da061cb94e777693d", 0xe8}, {&(0x7f0000000840)="846e1d1fd9207222fe51b3e8fca43eff2eab730fb2cf12089bd82cbc19d00a382a65647dc7f4e6488c406e8402e32e25b73ea938d9bca82d0e0ea4292dfb87ca876d95e3612c06fd15bb49cfa249c3e285c285bd2366d179c6f2e71f52475e18425ff73348bda3ce265790b1e612577872edf83e0d5a1989816fc48042d65940c39f898b54aab89290c8c4be9c5980698bcf3bb9422780c257b16a4a042f9bc3e6667630cb0ba31b6fded3dc0f4d7a2605c6b6c55adb7528eba55de85278ee388fa2944ff730bdbe0c037c980cc19250eb3865a7f80fb68cf79d6b15182d425019935407aff986c6910b3e7e9f8f1050ff56479de7", 0xf5}, {&(0x7f0000000940)="b0fd5b339df6838014fb68027cf8806be1e8e61ed802938de2b28c7c7704b8aafc57481ae4fec168407bfde07a37d1159a0c8f1f11c7b04cc401773af507061c61ab8d871a0186f65a0347e05f542668009555bf0afdb68777c02d63ccadad26fd02b762d3c8eed9f275626f5eeb7bc1ca0636c96e075445bd651de0698798b0b564fadfa91d111152ada03e51cbfcabff76b6113b30c62b2492683db197f49887a7dd87f1c7c0594ff8971458ffee5d77591e694e98762d829141321934296c03f9bd875755", 0xc6}, {&(0x7f0000000a40)="7c6b8039ae3879c633ccf81adf0534aa52c8a9ff60d44f65726fec5da4e3674923e07995d52e90cd8590733ae6314ba531302899bf7aa8adc29f4c55479f8fb8be5007189c405f479528d57c6c7400bc5cfe96858aa65ce999d7a865535a409971402a13c544da42c7c922ca54a17a4b4ba8a7f350a06003880e56be82e1d35d172199867cb67ea4ea3c5e77e18eaea9c110d5", 0x93}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)="f6c34f9a78407faa21e2e5d54fcf24f123e9fdc2d743c850fbe579fbfaf90bb9a39fe30cc2fb4e98b975ca69b8940954d07780d1b5a9461bd5b5bb7a2a79b4505f7870b1adb0b98d7ac489f0bc024fc494aba499afce0ed78cbb78da5237b9e88bb30fce7320c8d334de1c54b7f3651829300b46de0d6f3684dd22a01598854138cf95a3d5a917b11b61fb333cdaea87809eae9acf6ea5566f", 0x99}], 0x6, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x30}, 0x41) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x0, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0x60c42711, 0x0, 0x400004, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000a000000000000000300000018110000582464b6f08c6d7c29", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500", @ANYRES32=0x1, @ANYBLOB="00000000fcffffff95000000000000008520000001000000183300000500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xb, 0x2, 0xcbb}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x1, 0x3, 0x9}, {0x0, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x9, 0x2}], 0x10, 0x901a}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x804) 6.128435824s ago: executing program 2 (id=5253): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100004, 0x9, 0x5, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x10005ff}, 0x0, 0x403, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}, 0x8054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x127, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) 5.668224615s ago: executing program 4 (id=5256): r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x80000005, 0x0, 0xffffffffffffffff, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x81}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2b) socket$kcm(0x23, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x5, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000100), 0x120) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0100, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f00000001c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5.651872255s ago: executing program 0 (id=5257): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x1, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f00000000c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @tracing=0x18}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80086601, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.064994629s ago: executing program 2 (id=5262): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c23620", 0x40}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) socketpair(0x1, 0x1, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a701000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02004b04391bc045fc00000200"/35], 0x50) r10 = perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x7, 0x2, 0x9, 0x9, 0x0, 0x9, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x4000, 0x4, 0x1, 0x9, 0x4, 0x8000009, 0x2, 0x0, 0x3, 0x0, 0xc}, 0x0, 0xc, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a3, &(0x7f0000000080)) 4.856784254s ago: executing program 0 (id=5263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3c, 0x20, 0x5, 0x0, 0x0, 0x2000000001, 0x2e082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x810, 0xc8, 0x3, 0x0, 0x2, 0x1, 0x8, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0xa, &(0x7f0000000b40)=[{&(0x7f0000000580)='x', 0x1}, {&(0x7f0000000280)="9daa000f20276ea116e35b9e41d436d3e94b1db974ebadae4d39cd4f6cd6f0d0650cbe9883f0a87df55cd2fb9cd971d4352351ced9bc7392571e51922238e59979d8deecfce88258212d07573c1ad1b93bc05ddf82ee44bebb8a2a78e7b98389911d4ce4961c15866a448be5149171bee2b9d9a82dbe73337267fc9ce9418145eb5388e8a330bacfa664a344f14cdebe769713123b146e15bffe0395a68c8bdc570a000000000000", 0xa8}, {&(0x7f0000000440)="27195086c41d2282b53aa824abd93018345995c23df7145433a1c140669754e318eb1aa43d7ab657fe7bff909999b9d4afd85126b6a08249b2f40bc5a33e7d9e4e390911e1c7755901524838a6148caf4fd827c93cb28b0adf8d0d67ba31793a775883c7526fd95bffafa788d59beea7fe3e1a331d5126fac4ace1c84e22a9d94906ae0653d00219fe46d03957f48a4e75ce063ad10ae6e6dc931e4efbd7006bbde31aec23480f770085432cbf4ac1c7a3757d1ec2243d3ab05453e222537f467dd87dc464854da6b221b8882748baec26c2c6159f36698e9af27562229e", 0xde}, {&(0x7f00000009c0)="bd362dd21b5e85fa00df4c81e4be71f05667cf3d962d0c72de21b408cf357d5fbd23a00fc934c119cab18554a3a5a0c8b5f4adf9ac4bbc751a894541b18d5809897c46774449adbf0b6d0534966548fbb4a1615c1dad9f", 0x57}, {&(0x7f0000000340)="7acbecf782a480d735", 0x9}, {&(0x7f0000000fc0)="97869f4aff9ae90f702a9abe1aded19b7f7d9ed137160335bc2829f444a9a3899f815fcd203d075cdccd097bdc48fb64ff876a1251881571c41d05e5772a6d838af07c01356bfd8150c8a9973726e237f36415d6de0ddf776beabe8d7a0536ec0bc617e8b098db9282dc1124a524e69c8e6fc12be259d8f38c17c966ae35ca76cc5409c5c2eb571426ed1e3e9194c389ce1c1f9827f3e442a3a55f0878ac51070d42f6ae9c01022f5c20ceb353c84d2a7044e529a2ca357e841bb68800339b", 0xb3}, {&(0x7f0000000780)="374ffc58206dee782dafd315557f653d966a947905eb5eda093761f16385b6fa3e71c805f41ef84ca0f109780045012cfb3416e926d560dc935acf170397521ac608e32bb48d498f1b91e01103f5a6640c6d3d6df708bfd99889823eeb438ff0e6cbcde7c1add055f23fb03f7ba267dea28f1113335d2f23d1bcda26467df0a2f341050079e2acf5", 0x88}, {&(0x7f0000000c00)="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", 0xfa}, {&(0x7f0000000840)="6d7e7ce5934bb186c83c3db9a2db3fcaa31bf1f3cb3f2c129d3e5bb3dcb904090d781b522663f6d75ad3ba702dc15702db1a147d72f3ed728a35341c6b81c3b3aacacd8d8426eb18444de27d95dd357ba16529f88ac3051648f7b3d80f1d5137f89c9da391db967800f9dd1e28356aefd81fa35a", 0x74}, {&(0x7f0000000ac0)="45efb73c6cf7d201ea5a0ff948f6ab8deeb52485d2d0ae41d23a3fba59b1d1f93b6d26b6c5607ae58c98c7a58d4a07b9ae75650f9202dcf60b2ef72c0587c0cab9", 0x41}], 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000840000000200000005002b"], 0x20}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000003140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033b08000000000000000003000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 4.826047265s ago: executing program 1 (id=5264): r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x80000005, 0x0, 0xffffffffffffffff, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x81}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2b) socket$kcm(0x23, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x5, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100), 0x120) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000001c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.717481427s ago: executing program 4 (id=5266): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x8000000000000}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)={[{0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}]}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x0, 0x0) 4.593468421s ago: executing program 2 (id=5267): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$sock(r1, &(0x7f0000000d00)={&(0x7f0000000400)=@phonet={0x23, 0x7a, 0x2, 0x9}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000005c0)="363eda0de73ea34ef737ffbada3ab34612bea29176f5464cbaedf0d2e3cec9b4264349e0f51715c3332b66d9e66dc7d89ebdc7dcb4016dff03934791bfaadbbce8691dc8e889dfb37b454e6f6d77a5c973545c049d47279b318d8c4572c32615af69a392a6666c70c59722d4f837a813eddd1fda418df30724ce030955189cd391108121e631930ed6a7107f68befabf7ab4ddcd81e42a7a49ce7e7d3b48022d820eaedb7eb7efc1467b57ad0c8e8d9d974e402198ca71d9af70a3b9e30b2da912d5698eedee02c79f711a2211521f214b86ae77888990d0efc78d27b2670d8da061cb94e777693d", 0xe8}, {&(0x7f0000000840)="846e1d1fd9207222fe51b3e8fca43eff2eab730fb2cf12089bd82cbc19d00a382a65647dc7f4e6488c406e8402e32e25b73ea938d9bca82d0e0ea4292dfb87ca876d95e3612c06fd15bb49cfa249c3e285c285bd2366d179c6f2e71f52475e18425ff73348bda3ce265790b1e612577872edf83e0d5a1989816fc48042d65940c39f898b54aab89290c8c4be9c5980698bcf3bb9422780c257b16a4a042f9bc3e6667630cb0ba31b6fded3dc0f4d7a2605c6b6c55adb7528eba55de85278ee388fa2944ff730bdbe0c037c980cc19250eb3865a7f80fb68cf79d6b15182d425019935407aff986c6910b3e7e9f8f1050ff56479de7", 0xf5}, {&(0x7f0000000940)="b0fd5b339df6838014fb68027cf8806be1e8e61ed802938de2b28c7c7704b8aafc57481ae4fec168407bfde07a37d1159a0c8f1f11c7b04cc401773af507061c61ab8d871a0186f65a0347e05f542668009555bf0afdb68777c02d63ccadad26fd02b762d3c8eed9f275626f5eeb7bc1ca0636c96e075445bd651de0698798b0b564fadfa91d111152ada03e51cbfcabff76b6113b30c62b2492683db197f49887a7dd87f1c7c0594ff8971458ffee5d77591e694e98762d829141321934296c03f9bd875755", 0xc6}, {&(0x7f0000000a40)="7c6b8039ae3879c633ccf81adf0534aa52c8a9ff60d44f65726fec5da4e3674923e07995d52e90cd8590733ae6314ba531302899bf7aa8adc29f4c55479f8fb8be5007189c405f479528d57c6c7400bc5cfe96858aa65ce999d7a865535a409971402a13c544da42c7c922ca54a17a4b4ba8a7f350a06003880e56be82e1d35d172199867cb67ea4ea3c5e77e18eaea9c110d5", 0x93}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)="f6c34f9a78407faa21e2e5d54fcf24f123e9fdc2d743c850fbe579fbfaf90bb9a39fe30cc2fb4e98b975ca69b8940954d07780d1b5a9461bd5b5bb7a2a79b4505f7870b1adb0b98d7ac489f0bc024fc494aba499afce0ed78cbb78da5237b9e88bb30fce7320c8d334de1c54b7f3651829300b46de0d6f3684dd22a01598854138cf95a3d5a917b11b61fb333cdaea87809eae9acf6ea5566f", 0x99}], 0x6, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x30}, 0x41) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x0, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0x60c42711, 0x0, 0x400004, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000a000000000000000300000018110000582464b6f08c6d7c29", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500", @ANYRES32=0x1, @ANYBLOB="00000000fcffffff95000000000000008520000001000000183300000500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xb, 0x2, 0xcbb}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x1, 0x3, 0x9}, {0x0, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x9, 0x2}], 0x10, 0x901a}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x804) 3.721914591s ago: executing program 3 (id=5269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @netfilter}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000002000)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x1) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r7, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r0, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000012c0)=0xffffffffffffffff, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000013c0)=@o_path={&(0x7f0000001380)='./file0\x00', 0x0, 0x18, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1cc, 0x0, 0x0, 0x0, 0xacdd}, [@ldst={0x3, 0x1, 0x0, 0xb, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x31, &(0x7f0000000640)=""/49, 0x41100, 0x24, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000001300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x3, 0xf, 0x0, 0x4fe}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001400)=[r10], &(0x7f0000001440)=[{0x3, 0x3, 0xa, 0x4}, {0x0, 0x1, 0x6, 0x9}, {0x3, 0x4, 0x8, 0xb}], 0x10, 0x2}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00121100631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3987050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) socket$kcm(0x29, 0x4, 0x0) 3.632200433s ago: executing program 1 (id=5270): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500001100000000"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x69, &(0x7f0000000180)=""/105, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0xe, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x1, 0x1, 0xf, 0x7}], 0x10, 0x40}, 0x94) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x20104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000840), 0xb}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000180)=r5, 0x4) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000004c0)={'veth0', 0x32, 0x30}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r1], 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x5, 0x80000001, 0x8, 0x20000, r7, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0xd}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(r8) sendmsg$sock(0xffffffffffffffff, 0x0, 0x44801) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x338) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000000000007b2af8ff000000007b2ad0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000180200000a0002000000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000950000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.568863925s ago: executing program 0 (id=5271): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c23620", 0x40}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) socketpair(0x1, 0x1, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a701000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r10 = perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x7, 0x2, 0x9, 0x9, 0x0, 0x9, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x4000, 0x4, 0x1, 0x9, 0x4, 0x8000009, 0x2, 0x0, 0x3, 0x0, 0xc}, 0x0, 0xc, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a3, &(0x7f0000000080)) 3.526929656s ago: executing program 2 (id=5272): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100004, 0x9, 0x5, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x10005ff}, 0x0, 0x403, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="4400000000000000000000000700000044140513ac141412000008000a01010000000002071313ac1414bbac1414bbac1414bbac1414bb0707adac1e0001940401000000000000001400000000000000000000000100000039000000000000001400000000000000000000000100000001000000000000001400000000000000000000000200000002000000000000007c010000000000000000000007000000891be7e0000002e0000002ac1414bb0a01010200000000ac1414bb01820ea8a082c526f1bd0c286e69e901891f3dffffffffac1414bb640101017f000001ffffffff64010100ffffffff867a000000010012278c6a7ffaa4b7200d0370efe906dd92070664856524060bc63cac245ae7c843480011537b81712a5141c6ce58c716bfb3eb010a165b30ac6d6bdced00098995de4e432c92000e18a21e2f5ff60f1a6740c68b010e79f874b2f6a220810ffb588c000c378cead6f3f9d681edc70005145ae44444a8e1e00000020000000100000000000027757f000001000000ffe000000100000004e0060000000000050000000000000005ac1414bb0000000bac1414aa00000005866100000000010a95d0cde88def1ab1050e1da2450cb5cd6b6009fc65bd0e12babfc042461ec8e4be688f12a00f0fd700030002122871cabaf5a04627feb9cc97858c512c020f3def4b8f0cf3d991b16673a00c050da89123d647c9f3801fa7210000000000000088"], 0x298}, 0xc004) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}, 0x8054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x127, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) 3.111841546s ago: executing program 3 (id=5273): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x8000000000000}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)={[{0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}]}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x0, 0x0) 3.048599737s ago: executing program 4 (id=5274): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000001c34f584af67343b7c8e663322a520312c57fe9f3ff577ae412bef677e031899953c6f426f4a6653eb7084125ebb6dea0a06d48fbf7e39fc21c52d0aa0dbcaa4461f5cf94a912f4168dbe407bcd738384e7727d9381879021b72b09da469c769f7c04eb1ad5f70e187fdbcff6cbc3d6985a65434a27fa6354161be028cb0a554233c60a40a73945ad8ca752bc880d2ec83b511", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0), 0x4) 2.914023611s ago: executing program 1 (id=5275): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x20000034, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) write$cgroup_subtree(r5, &(0x7f0000000500)={[{0x2b, 'memory'}, {0x2b, 'net'}, {0x0, 'cpuacct'}, {0x2d, 'cpu'}, {0x2d, 'hugetlb'}]}, 0x24) socket$kcm(0xa, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x7, &(0x7f0000000000)=r8, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) r11 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x0, 0x35}, 0x28) write$cgroup_devices(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:*\vrww'], 0xa) 1.905940705s ago: executing program 2 (id=5276): r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x80000005, 0x0, 0xffffffffffffffff, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x81}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x2b) socket$kcm(0x23, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x5, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1b, &(0x7f0000000100), 0x120) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0100, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f00000001c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.905233725s ago: executing program 3 (id=5277): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94a24fc60", 0x14}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x8, 0x4fa, 0x145, 0x0, 0xffffffffffffffff, 0x7f000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000500)=""/177}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60082fc569", 0x14}], 0x1}, 0x400c0c4) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000008000000000000390e027d5a703c0dfd1a0d0e000055"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033d407277bac878b4ab50a", @ANYRES32, @ANYRES8=r7], 0xfe33) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000100)="668389c6d673494898e9475cac34b2e393cd6c04ccde9a6c7cc5b74b018009ac3cb381268839746eb95997b6f57de36a1937f06307c741c35606af954e1bc43a074665a15d589bed4a2d027cd090ada769c0e428f03e238267d15106fb7a12ecde036fbe3f98d06383da5506", &(0x7f00000002c0)=""/57, &(0x7f0000000400)="27ffc03f15b8cde00cc1726075f73dd9d3f68f1a1596b17a56", &(0x7f0000000440)="28eb40d16690dd79f9e3eaa28f5cec45f462d9cb7d03db1964cdf6afbd860ddbde2a8d04097201a9b9b29257b553c278827a0aeaa9fe64ce10fef217e006e54f8962541e2d626f9e1d3f6423e0110833a7f5fb9500ac", 0xb, r8, 0x4}, 0x38) 1.904829734s ago: executing program 4 (id=5278): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x341a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8386}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000600000000007a00000046db93b7f5d541dc39b13df04abd9532702adcf3349261af0b5d731dad6bcf5d3318f43495503ac22905ccb7c0215f0fad949f50a780b1e686f8cfacf8a591f651d1ab", @ANYRES32=0x0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 1.898282785s ago: executing program 0 (id=5279): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) r1 = socket$kcm(0xa, 0x3, 0x73) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x2, 0x37a0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000003000000020000008500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e1ff0000000005004a8e29820a8a591c75363ac16221bfaa95"], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = openat$cgroup_subtree(r4, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="e302000000"], 0x5) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000c2f12b9301eceacb000008000080"], 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.878738035s ago: executing program 1 (id=5280): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x8000000000000}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)={[{0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}]}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x0, 0x0) 1.66617384s ago: executing program 4 (id=5281): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x8000000000000}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)={[{0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}]}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x0, 0x0) 1.005472466s ago: executing program 3 (id=5282): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3c, 0x20, 0x5, 0x0, 0x0, 0x2000000001, 0x2e082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x810, 0xc8, 0x3, 0x0, 0x2, 0x1, 0x8, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0xa, &(0x7f0000000b40)=[{&(0x7f0000000580)='x', 0x1}, {&(0x7f0000000280)="9daa000f20276ea116e35b9e41d436d3e94b1db974ebadae4d39cd4f6cd6f0d0650cbe9883f0a87df55cd2fb9cd971d4352351ced9bc7392571e51922238e59979d8deecfce88258212d07573c1ad1b93bc05ddf82ee44bebb8a2a78e7b98389911d4ce4961c15866a448be5149171bee2b9d9a82dbe73337267fc9ce9418145eb5388e8a330bacfa664a344f14cdebe769713123b146e15bffe0395a68c8bdc570a000000000000", 0xa8}, {&(0x7f0000000440)="27195086c41d2282b53aa824abd93018345995c23df7145433a1c140669754e318eb1aa43d7ab657fe7bff909999b9d4afd85126b6a08249b2f40bc5a33e7d9e4e390911e1c7755901524838a6148caf4fd827c93cb28b0adf8d0d67ba31793a775883c7526fd95bffafa788d59beea7fe3e1a331d5126fac4ace1c84e22a9d94906ae0653d00219fe46d03957f48a4e75ce063ad10ae6e6dc931e4efbd7006bbde31aec23480f770085432cbf4ac1c7a3757d1ec2243d3ab05453e222537f467dd87dc464854da6b221b8882748baec26c2c6159f36698e9af27562229e", 0xde}, {&(0x7f00000009c0)="bd362dd21b5e85fa00df4c81e4be71f05667cf3d962d0c72de21b408cf357d5fbd23a00fc934c119cab18554a3a5a0c8b5f4adf9ac4bbc751a894541b18d5809897c46774449adbf0b6d0534966548fbb4a1615c1dad9f", 0x57}, {&(0x7f0000000340)="7acbecf782a480d735", 0x9}, {&(0x7f0000000fc0)="97869f4aff9ae90f702a9abe1aded19b7f7d9ed137160335bc2829f444a9a3899f815fcd203d075cdccd097bdc48fb64ff876a1251881571c41d05e5772a6d838af07c01356bfd8150c8a9973726e237f36415d6de0ddf776beabe8d7a0536ec0bc617e8b098db9282dc1124a524e69c8e6fc12be259d8f38c17c966ae35ca76cc5409c5c2eb571426ed1e3e9194c389ce1c1f9827f3e442a3a55f0878ac51070d42f6ae9c01022f5c20ceb353c84d2a7044e529a2ca357e841bb68800339b", 0xb3}, {&(0x7f0000000780)="374ffc58206dee782dafd315557f653d966a947905eb5eda093761f16385b6fa3e71c805f41ef84ca0f109780045012cfb3416e926d560dc935acf170397521ac608e32bb48d498f1b91e01103f5a6640c6d3d6df708bfd99889823eeb438ff0e6cbcde7c1add055f23fb03f7ba267dea28f1113335d2f23d1bcda26467df0a2f341050079e2acf5", 0x88}, {&(0x7f0000000c00)="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", 0xfa}, {&(0x7f0000000840)="6d7e7ce5934bb186c83c3db9a2db3fcaa31bf1f3cb3f2c129d3e5bb3dcb904090d781b522663f6d75ad3ba702dc15702db1a147d72f3ed728a35341c6b81c3b3aacacd8d8426eb18444de27d95dd357ba16529f88ac3051648f7b3d80f1d5137f89c9da391db967800f9dd1e28356aefd81fa35a", 0x74}, {&(0x7f0000000ac0)="45efb73c6cf7d201ea5a0ff948f6ab8deeb52485d2d0ae41d23a3fba59b1d1f93b6d26b6c5607ae58c98c7a58d4a07b9ae75650f9202dcf60b2ef72c0587c0cab9", 0x41}], 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000840000000200000005002b"], 0x20}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000003140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033b08000000000000000003000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 1.003325276s ago: executing program 0 (id=5292): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002400001498e4eab1d79a22df40c37af12d85002400000002000000080000000000000c05000000040000000000000c030000"], 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000004180)={&(0x7f0000000240)=@ll={0x11, 0x9, 0x0, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)="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", 0x800}, {&(0x7f0000001980)="24723fe6b023bf3bc8385ae8b41f45a581c89edae96a7170ff263c58596f3d82f854aa4648664568890ad6055ac7cca07bb1470f81d79fcf23506ea7eec3ff02e4e49d3d9cc341f4b118d38d40cabb2f56e2ac9686226b937dce0038da9e74bdec31a003ae06751868f66f26512bc13adbe0b900d00c0ddb1d58a74089cf1c10c41f29", 0x83}, {&(0x7f0000001a80)="54338c57ed755d415b4c20da8d5aa31c3c99b83de85e32b4b094c2a588dfde8ea71c133ae186c11700ef4737b3f44688bb80d660ffb97a8a92735ba6ed2f889a38e6d053b1e7ac335886d3ebd180a8428bb1cbc44aa6d373", 0x58}, {&(0x7f0000001b00)}, {&(0x7f0000001c00)="cb9df7a2f44d987b1f8c023c944e5818b9c96fa5c8d148ec1b09a6dfb265240cd6c7bcc7d6f430e5b7a3512eeaa49d396acf8dbcc26923269cced39d59ed053d4c8a4e9040d214e479dad9105f87cd907ffc9b0a267547a958e8f49ffb2081c43868e2f31352eff9994bb085d80690b010ea1fc4c280cdfde670bdd210e08281aa4040cd697bc0483bf042d94578c0f6b40215fcc0e1c9bd7189a3890ccd81aff95468d859a1309c275b8d09", 0xac}], 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB], 0x1420}, 0x80) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027", 0x23}, {&(0x7f0000000040)}, {0x0}, {&(0x7f0000000180)="1dc12083af2a93cb061c8befd4d0ef", 0xf}, {0x0}, {&(0x7f0000000640)}], 0x6}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) socket$kcm(0x10, 0x2, 0x0) 525.186458ms ago: executing program 1 (id=5283): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000000000007b2af8ff000000007b2ad0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000180200000a0002000000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 331.071652ms ago: executing program 3 (id=5284): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) close(r3) 309.051093ms ago: executing program 1 (id=5285): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500001100000000"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x69, &(0x7f0000000180)=""/105, 0x41100, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0xe, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x1, 0x1, 0xf, 0x7}], 0x10, 0x40}, 0x94) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x20104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000840), 0xb}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000180)=r5, 0x4) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000004c0)={'veth0', 0x32, 0x30}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r1], 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x5, 0x80000001, 0x8, 0x20000, r7, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0xd}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(r8) sendmsg$sock(0xffffffffffffffff, 0x0, 0x44801) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x338) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000000000007b2af8ff000000007b2ad0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000180200000a0002000000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000950000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 307.433783ms ago: executing program 2 (id=5286): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000001c34f584af67343b7c8e663322a520312c57fe9f3ff577ae412bef677e031899953c6f426f4a6653eb7084125ebb6dea0a06d48fbf7e39fc21c52d0aa0dbcaa4461f5cf94a912f4168dbe407bcd738384e7727d9381879021b72b09da469c769f7c04eb1ad5f70e187fdbcff6cbc3d6985a65434a27fa6354161be028cb0a554233c60a40a73945ad8ca752bc880d2ec83b511", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0), 0x4) 209.474325ms ago: executing program 0 (id=5287): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100004, 0x9, 0x5, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x10005ff}, 0x0, 0x403, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}, 0x8054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x127, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) 0s ago: executing program 3 (id=5288): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000002400001498e4eab1d79a22df40c37af12d85002400000002000000080000000000000c05000000040000000000000c030000"], 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000004180)={&(0x7f0000000240)=@ll={0x11, 0x9, 0x0, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)="405d9fa59b2bd8ba7d54aecb6a5e18b4b5b461f73b5e3dbf433f6d118d1c9ccc4eaf7bfaca1cd8516da3e1e68298805f7980c9743d9b140fffb719bb96ba5c31059e4789f43f702ae79d0ff63ef34563bc7c448227f626bd2b48c6f3c35384b92779a2980680843cc7c4d99f48d022fbfeb0d0bff7e7b31aa1f7e47529c1075564ea6b8c7871f6556f89890f9d1b4b6a0ff65063831ec8122a4bca3e7f3491006fa8aee6660356da7c231b7716f5a7ba181ef2c59e05eeafe7ea73cacfad356b4dba45754bbd43c0418d1a8f1d093bfb193362cd3db5a7c0a0ae3e1a7573d9d7486a3a4e90922d48e36898cfbec842fdf4fb3fe8c722591f367df2d989cc5200af49507cc655871b3de9974311c58cdebb09c24823bbba589e212c5c124d5e568f8c820963766eab02a870096a2ca08055fe0e59da318062593932262e1f61a2f05f30ef9153d8d37d0ed420eb25464ae2c81014654e3aff57eb874cca5b18b037d824068f62d5acb424c24d74bf62e88395b4cb87cba12bb57e86ab0bce342710d604d226380eb47669c68b2e57f4e84864214e82fce54bae84202c9891c32536a883587d4c2f3909b3c8832f367e7266f84d2b3a7ab41df24fff9c89a841d14061f661fc7f9ecd9a7dab122d387dd5663fff21939d4c0edd2c9edab54cd93256a106c942102c748b36a161a5c7ebfc1c180710ba801ad4bf45670df12dd8f35806d3100abc67ebb8914ee02fe366d35fa10f6e9db4bff8254dfbbffb1090082a645e6b6caa344898b02c25bc98988fd564c2cbba4476c71f40cb3eb48356b4de6f4b65450f69238868a77dd6f7e0b7542bf5e920b84c0d988b7d0409596086a7816dac403e09b85406b6f2abe20fce6599d05f65cd2219ec2235506a118cb197fe8f7fe75f1d0fce976408438c2daea8da4b426d3a480d6b90245d458a88fa868fee158ef326cde9be7b5e1fddf47fa27a2aaa4fa4095a81cfa78bd7b4efa6eb099153acbfb77be1cbef476daba33f811020ee48af9a3fc47ff2d5d3348ee1bfd2cb77928af2bc97673b3cf601b6e829a70489e70a2357bf5675219537c85aa4caff6e13115b97f7dabc7e0399e8f1114acc7115f96c4ed62b5b1d8d644fb38da5175b2ce17501853fdc19c8360caa3c8d319c20146bd4f6d6cba198966fe1fa10b2535ee88c5930b80f8906f7814ab01e5712889e2ea0a07a42304928f79000a4a8bb3ea8d389f72fce8fca96381b8f6aca9067fa96a8d98062c93f09389e5be7a233d5d37824c25c2ba07c0a91e2afa65869b167c1774800be9228a42f1e0dd8c9dc95460ec61c40b110838bd56ac297a35364c8f27eb8710a45b9378e2c58c681ba0d2450be7e441d1b4b3a9c733ba0d4181f4dea6dfa6776fb16a2d3b41686e34726566311a88b0a212dc81dd646e1214d7377d6a140b893d4cdb926ec91adff82d617432c0a88d9a55814a92f53f1f63ae9c72f4de6f7774526446a285207abc8f1b3c606cb823e89560a3ab6f38dc6aaf878ef532d23199265a269624c425673ac4d88f70b9837706984938cfa02206dd479bc4c9f97c501b7dfead951832e61cfef8ae732ef5b7114affc573210134670fda0f9d7f2efca9f5b9e637feed5363b9c432f5905a51f62d8990e021db35c784b9a98648d9be023d2bf7051fa0c9d781a8b49dff07d9489095c834a03c1ea95e153a7519a45bb6ae3127cec2f43e4916d8046846f63b627c806f4c52925e687303e3de1b494882dd8eb3471ca1fbc773d5cb8055e70b98843517b8e61c850826f64cfa2cde950abb6c2a36534f6af409a44bf5fbb16b3b2c239c967bc584f26e072c5fcb114b15948bb9538e445a2f9a0431118d63fe5f1ca84ec3973f5f4778bf38b86be5711bee4ecfa88be045935eb3487bb696010931c8b930a50cc3e7dd0a4484d80bacda831de3757fa70347f2f10b4275b15c89a9fd0fc241df5445a3b3e60138e0de8d6646389fc496b3f27e6fe2538b30bb700ab06daf0b18bf64aa7713a0624a73eb6d2ba931eb571124405a5ca507417a1d8a41c6f8fa80d943ca7bb2cc42120c6bd81995c28f3bfff93696b4ad620290f51a3fea2e6b6c0aade28165ac6e739a3bf606761dc685dfbb9005400990c541092bfba9bdaca34d02438b4a5b8c3f1995eb7625e53583e5d979035800f53de6cdb8021853a09885b773319fd306a00d0ea41ef928fe8766674779ef00919cd60ebf6bbf7350cfc65f0e30e3d798fd15588c47f9a721cba1c4bdb9c9c1790df84dadbbb32dbaa0c78d10b8d753f4e3d2dcaba091c400ad2a255c1fcaed0272612e2526032294d345afbae7cf7ab9fa03c0d05c82304d0e6e7f821420ae2511763f3111a5616c3f464b816392c495246715a6a0e521d47253743d39e7cd23e9510c2495eb4963f22458b005144621676ce81c37e6ef3be0add83c68eed1b1f933575b9d8cc6d3b392ffd3362423dc5eac96aef067e90bbecfb4622586f606c079b7c596f697f8fc4d5475498b98e35ed78e252300c95e767adebaf82939536587ba2ba3bac621543d33fea37861b540e484fedfd0db47eed1ac9f8799e6d94202899f135b4bbb4cffd96b2b480a59ea1fb38d72a2dc154c873a24d9c139ce9485a98d9400dfc3a6d3c8bafaa3e6a00e08b3a9d7f2067d2594d1316cbec305601f0f0038370d99859f882c886f960e5d87f5a9ee798166fef2efa3fbf95cdea84920791f10196f9c55e72ebacc9c83a63d548df0ba3141b1d294fec9ef495a962da8ee5fd19a2e985a307e71cebfd8c0c3d42a181b6af0673a2749cb578a078df106e52bfa38ce9026419c127a17b29076a99d943d515d87a6015fc599af5497deb7570caf72f1bb137a3b85c5e9407aabd6e36ed8d", 0x800}, {&(0x7f0000001980)="24723fe6b023bf3bc8385ae8b41f45a581c89edae96a7170ff263c58596f3d82f854aa4648664568890ad6055ac7cca07bb1470f81d79fcf23506ea7eec3ff02e4e49d3d9cc341f4b118d38d40cabb2f56e2ac9686226b937dce0038da9e74bdec31a003ae06751868f66f26512bc13adbe0b900d00c0ddb1d58a74089cf1c10c41f29", 0x83}, {&(0x7f0000001a80)="54338c57ed755d415b4c20da8d5aa31c3c99b83de85e32b4b094c2a588dfde8ea71c133ae186c11700ef4737b3f44688bb80d660ffb97a8a92735ba6ed2f889a38e6d053b1e7ac335886d3ebd180a8428bb1cbc44aa6d373", 0x58}, {&(0x7f0000001b00)}, {&(0x7f0000001c00)="cb9df7a2f44d987b1f8c023c944e5818b9c96fa5c8d148ec1b09a6dfb265240cd6c7bcc7d6f430e5b7a3512eeaa49d396acf8dbcc26923269cced39d59ed053d4c8a4e9040d214e479dad9105f87cd907ffc9b0a267547a958e8f49ffb2081c43868e2f31352eff9994bb085d80690b010ea1fc4c280cdfde670bdd210e08281aa4040cd697bc0483bf042d94578c0f6b40215fcc0e1c9bd7189a3890ccd81aff95468d859a1309c275b8d09", 0xac}], 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB], 0x1420}, 0x80) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027", 0x23}, {&(0x7f0000000040)}, {0x0}, {&(0x7f0000000180)="1dc12083af2a93cb061c8befd4d0ef", 0xf}, {0x0}, {&(0x7f0000000640)}], 0x6}, 0x0) (fail_nth: 1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): 41] RSP: 002b:00007faf14fbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.815301][T20441] RAX: ffffffffffffffda RBX: 00007faf14426090 RCX: 00007faf1419e0d9 [ 783.823297][T20441] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 783.831285][T20441] RBP: 00007faf14235024 R08: 0000000000000000 R09: 0000000000000000 [ 783.839273][T20441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.847262][T20441] R13: 00007faf14426128 R14: 00007faf14426090 R15: 00007ffce7078268 [ 783.855300][T20441] [ 784.156261][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4949'. [ 784.205166][T20448] netlink: 'syz.2.4949': attribute type 11 has an invalid length. [ 784.213035][T20448] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4949'. [ 784.272339][T20448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.292148][T20455] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4952'. [ 786.064145][T20455] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 786.098504][T20455] CPU: 1 PID: 20455 Comm: syz.1.4952 Not tainted syzkaller #0 [ 786.106027][T20455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 786.116098][T20455] Call Trace: [ 786.119392][T20455] [ 786.122336][T20455] dump_stack_lvl+0x188/0x24e [ 786.127043][T20455] ? show_regs_print_info+0x12/0x12 [ 786.132270][T20455] ? load_image+0x410/0x410 [ 786.136804][T20455] sysfs_warn_dup+0x8a/0xa0 [ 786.141327][T20455] sysfs_do_create_link_sd+0xc0/0x110 [ 786.146718][T20455] device_add+0x83b/0x1050 [ 786.151165][T20455] wiphy_register+0x1d8b/0x2aa0 [ 786.156058][T20455] ? cfg80211_event_work+0x40/0x40 [ 786.161190][T20455] ? minstrel_ht_alloc+0x894/0xa20 [ 786.166298][T20455] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 786.172368][T20455] ieee80211_register_hw+0x2d48/0x39f0 [ 786.177826][T20455] ? ieee80211_register_hw+0xee1/0x39f0 [ 786.183358][T20455] ? ieee80211_register_hw+0xee1/0x39f0 [ 786.188911][T20455] ? ieee80211_tasklet_handler+0x20/0x20 [ 786.194559][T20455] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 786.200469][T20455] ? __debug_object_init+0xed/0x440 [ 786.205683][T20455] ? memset+0x1e/0x40 [ 786.209680][T20455] ? __hrtimer_init+0x189/0x270 [ 786.214555][T20455] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 786.220310][T20455] ? memcpy+0x3c/0x60 [ 786.224307][T20455] hwsim_new_radio_nl+0xab7/0xc90 [ 786.229356][T20455] genl_family_rcv_msg_doit+0x22f/0x350 [ 786.234918][T20455] ? end_current_label_crit_section+0x170/0x170 [ 786.241171][T20455] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 786.247070][T20455] ? bpf_lsm_capable+0x5/0x10 [ 786.251746][T20455] ? security_capable+0x85/0xb0 [ 786.256609][T20455] genl_rcv_msg+0x601/0x790 [ 786.261117][T20455] ? genl_bind+0x360/0x360 [ 786.265532][T20455] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 786.271872][T20455] netlink_rcv_skb+0x1ef/0x440 [ 786.276644][T20455] ? genl_bind+0x360/0x360 [ 786.281051][T20455] ? netlink_ack+0x1160/0x1160 [ 786.285820][T20455] ? down_read+0x1a8/0x2d0 [ 786.290229][T20455] genl_rcv+0x24/0x40 [ 786.294203][T20455] netlink_unicast+0x7ad/0x920 [ 786.299016][T20455] netlink_sendmsg+0x8ad/0xbd0 [ 786.303814][T20455] ? netlink_getsockopt+0x550/0x550 [ 786.309014][T20455] ? apparmor_socket_sendmsg+0x8a/0x330 [ 786.314559][T20455] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 786.319838][T20455] ? security_socket_sendmsg+0x7c/0xa0 [ 786.325294][T20455] ? netlink_getsockopt+0x550/0x550 [ 786.330489][T20455] ____sys_sendmsg+0x5ed/0x9a0 [ 786.335257][T20455] ? __sys_sendmsg_sock+0x30/0x30 [ 786.340275][T20455] ? __import_iovec+0x306/0x510 [ 786.345132][T20455] ? import_iovec+0x6f/0xa0 [ 786.349631][T20455] ___sys_sendmsg+0x2a2/0x360 [ 786.354308][T20455] ? __sys_sendmsg+0x2a0/0x2a0 [ 786.359104][T20455] __se_sys_sendmsg+0x1c3/0x2b0 [ 786.363951][T20455] ? __x64_sys_sendmsg+0x80/0x80 [ 786.368903][T20455] ? lockdep_hardirqs_on+0x94/0x140 [ 786.374094][T20455] do_syscall_64+0x4c/0xa0 [ 786.378508][T20455] ? clear_bhb_loop+0x60/0xb0 [ 786.383180][T20455] ? clear_bhb_loop+0x60/0xb0 [ 786.387858][T20455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.393750][T20455] RIP: 0033:0x7f0d3739e0d9 [ 786.398156][T20455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.417753][T20455] RSP: 002b:00007f0d3826a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.426161][T20455] RAX: ffffffffffffffda RBX: 00007f0d37625fa0 RCX: 00007f0d3739e0d9 [ 786.434123][T20455] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 786.442083][T20455] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 786.450042][T20455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.458007][T20455] R13: 00007f0d37626038 R14: 00007f0d37625fa0 R15: 00007ffe08067238 [ 786.465982][T20455] [ 787.420775][T20489] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4962'. [ 787.857532][T20505] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4968'. [ 787.922518][T20505] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 787.942142][T20505] CPU: 0 PID: 20505 Comm: syz.3.4968 Not tainted syzkaller #0 [ 787.949648][T20505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 787.959720][T20505] Call Trace: [ 787.963006][T20505] [ 787.965950][T20505] dump_stack_lvl+0x188/0x24e [ 787.970651][T20505] ? show_regs_print_info+0x12/0x12 [ 787.975873][T20505] ? load_image+0x410/0x410 [ 787.980406][T20505] sysfs_warn_dup+0x8a/0xa0 [ 787.984932][T20505] sysfs_do_create_link_sd+0xc0/0x110 [ 787.990329][T20505] device_add+0x83b/0x1050 [ 787.994783][T20505] wiphy_register+0x1d8b/0x2aa0 [ 787.999681][T20505] ? cfg80211_event_work+0x40/0x40 [ 788.004813][T20505] ? minstrel_ht_alloc+0x894/0xa20 [ 788.009953][T20505] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 788.016041][T20505] ieee80211_register_hw+0x2d48/0x39f0 [ 788.021541][T20505] ? ieee80211_register_hw+0xee1/0x39f0 [ 788.027106][T20505] ? ieee80211_register_hw+0xee1/0x39f0 [ 788.032681][T20505] ? ieee80211_tasklet_handler+0x20/0x20 [ 788.038332][T20505] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 788.044247][T20505] ? __debug_object_init+0xed/0x440 [ 788.049479][T20505] ? memset+0x1e/0x40 [ 788.053478][T20505] ? __hrtimer_init+0x189/0x270 [ 788.058351][T20505] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 788.064107][T20505] ? memcpy+0x3c/0x60 [ 788.068111][T20505] hwsim_new_radio_nl+0xab7/0xc90 [ 788.073169][T20505] genl_family_rcv_msg_doit+0x22f/0x350 [ 788.078730][T20505] ? end_current_label_crit_section+0x170/0x170 [ 788.085005][T20505] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 788.090921][T20505] ? bpf_lsm_capable+0x5/0x10 [ 788.095615][T20505] ? security_capable+0x85/0xb0 [ 788.100496][T20505] genl_rcv_msg+0x601/0x790 [ 788.105028][T20505] ? genl_bind+0x360/0x360 [ 788.109456][T20505] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 788.115827][T20505] netlink_rcv_skb+0x1ef/0x440 [ 788.120611][T20505] ? genl_bind+0x360/0x360 [ 788.125039][T20505] ? netlink_ack+0x1160/0x1160 [ 788.129834][T20505] ? down_read+0x1a8/0x2d0 [ 788.134271][T20505] genl_rcv+0x24/0x40 [ 788.138270][T20505] netlink_unicast+0x7ad/0x920 [ 788.143055][T20505] netlink_sendmsg+0x8ad/0xbd0 [ 788.147845][T20505] ? netlink_getsockopt+0x550/0x550 [ 788.153071][T20505] ? apparmor_socket_sendmsg+0x8a/0x330 [ 788.158627][T20505] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 788.163903][T20505] ? security_socket_sendmsg+0x7c/0xa0 [ 788.169362][T20505] ? netlink_getsockopt+0x550/0x550 [ 788.174566][T20505] ____sys_sendmsg+0x5ed/0x9a0 [ 788.179339][T20505] ? __sys_sendmsg_sock+0x30/0x30 [ 788.184364][T20505] ? __import_iovec+0x306/0x510 [ 788.189225][T20505] ? import_iovec+0x6f/0xa0 [ 788.193731][T20505] ___sys_sendmsg+0x2a2/0x360 [ 788.198415][T20505] ? ct_irq_enter_irqson+0x170/0x170 [ 788.203791][T20505] ? __sys_sendmsg+0x2a0/0x2a0 [ 788.208578][T20505] ? rcu_is_watching+0x11/0xa0 [ 788.213373][T20505] __se_sys_sendmsg+0x1c3/0x2b0 [ 788.218222][T20505] ? perf_trace_preemptirq_template+0x268/0x320 [ 788.224465][T20505] ? __x64_sys_sendmsg+0x80/0x80 [ 788.229419][T20505] ? lockdep_hardirqs_on+0x94/0x140 [ 788.234621][T20505] do_syscall_64+0x4c/0xa0 [ 788.239031][T20505] ? clear_bhb_loop+0x60/0xb0 [ 788.243704][T20505] ? clear_bhb_loop+0x60/0xb0 [ 788.248384][T20505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.254272][T20505] RIP: 0033:0x7f2a8159e0d9 [ 788.258680][T20505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.278280][T20505] RSP: 002b:00007f2a82393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.286686][T20505] RAX: ffffffffffffffda RBX: 00007f2a81826090 RCX: 00007f2a8159e0d9 [ 788.294652][T20505] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 788.302616][T20505] RBP: 00007f2a81635024 R08: 0000000000000000 R09: 0000000000000000 [ 788.310578][T20505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.318540][T20505] R13: 00007f2a81826128 R14: 00007f2a81826090 R15: 00007ffda30f65e8 [ 788.326524][T20505] [ 788.657885][T20520] netlink: 'syz.0.4972': attribute type 29 has an invalid length. [ 788.695516][T20520] netlink: 'syz.0.4972': attribute type 29 has an invalid length. [ 788.767309][T20526] netlink: 'syz.2.4977': attribute type 3 has an invalid length. [ 788.775973][T20526] netlink: 'syz.2.4977': attribute type 1 has an invalid length. [ 788.788521][T20526] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4977'. [ 788.852803][T20526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4977'. [ 788.875651][T20526] device caif0 entered promiscuous mode [ 788.881588][T20526] net_ratelimit: 823 callbacks suppressed [ 788.881627][T20526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.967174][T20531] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4978'. [ 789.598473][T20548] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4985'. [ 789.745292][T20552] FAULT_INJECTION: forcing a failure. [ 789.745292][T20552] name failslab, interval 1, probability 0, space 0, times 0 [ 789.758341][T20552] CPU: 0 PID: 20552 Comm: syz.3.4987 Not tainted syzkaller #0 [ 789.765842][T20552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.775900][T20552] Call Trace: [ 789.779190][T20552] [ 789.782129][T20552] dump_stack_lvl+0x188/0x24e [ 789.786831][T20552] ? skb_copy_bits+0x83/0x750 [ 789.791532][T20552] ? show_regs_print_info+0x12/0x12 [ 789.796751][T20552] ? load_image+0x410/0x410 [ 789.801259][T20552] ? verify_lock_unused+0x140/0x140 [ 789.806466][T20552] ? perf_trace_lock_acquire+0x101/0x3f0 [ 789.812104][T20552] should_fail_ex+0x390/0x4c0 [ 789.816782][T20552] should_failslab+0x5/0x20 [ 789.821292][T20552] slab_pre_alloc_hook+0x59/0x300 [ 789.826323][T20552] kmem_cache_alloc+0x56/0x2f0 [ 789.831083][T20552] ? skb_clone+0x1e7/0x370 [ 789.835500][T20552] skb_clone+0x1e7/0x370 [ 789.839744][T20552] maybe_deliver+0x98/0x150 [ 789.844336][T20552] br_flood+0x2fc/0x450 [ 789.848498][T20552] br_dev_xmit+0xb44/0x16e0 [ 789.852999][T20552] ? br_dev_xmit+0x186/0x16e0 [ 789.857676][T20552] ? br_net_exit_batch+0x210/0x210 [ 789.862783][T20552] ? validate_xmit_xfrm+0xb4/0x11d0 [ 789.868043][T20552] ? xfrm_init_replay+0x2a0/0x2a0 [ 789.873075][T20552] dev_hard_start_xmit+0x292/0x8b0 [ 789.878229][T20552] ? validate_xmit_skb_list+0x120/0x120 [ 789.883775][T20552] __dev_queue_xmit+0x1b4b/0x3810 [ 789.888794][T20552] ? copyin+0xe7/0x120 [ 789.892857][T20552] ? __dev_queue_xmit+0x281/0x3810 [ 789.897960][T20552] ? _copy_from_iter+0x5df/0x1130 [ 789.902976][T20552] ? skb_copy_bits+0x83/0x750 [ 789.907659][T20552] ? netdev_core_pick_tx+0x360/0x360 [ 789.912938][T20552] ? packet_parse_headers+0x7ca/0xad0 [ 789.918307][T20552] ? packet_parse_headers+0x85d/0xad0 [ 789.923670][T20552] ? __virt_addr_valid+0x188/0x540 [ 789.928783][T20552] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 789.934323][T20552] ? skb_copy_datagram_from_iter+0x5c7/0x6b0 [ 789.940297][T20552] ? dev_get_by_index+0x1e/0x2d0 [ 789.945229][T20552] ? skb_put+0x10e/0x200 [ 789.949472][T20552] packet_sendmsg+0x3b95/0x4de0 [ 789.954314][T20552] ? aa_sk_perm+0x950/0x950 [ 789.958820][T20552] ? __might_sleep+0xd0/0xd0 [ 789.963400][T20552] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 789.969983][T20552] ? verify_lock_unused+0x140/0x140 [ 789.975179][T20552] ? aa_sk_perm+0x81f/0x950 [ 789.979682][T20552] ? aa_af_perm+0x340/0x340 [ 789.984173][T20552] ? packet_getsockopt+0x980/0x980 [ 789.989280][T20552] ? apparmor_socket_sendmsg+0x8a/0x330 [ 789.994818][T20552] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 790.000091][T20552] ? security_socket_sendmsg+0x7c/0xa0 [ 790.005542][T20552] ? packet_getsockopt+0x980/0x980 [ 790.010645][T20552] ____sys_sendmsg+0x5ed/0x9a0 [ 790.015415][T20552] ? __sys_sendmsg_sock+0x30/0x30 [ 790.020432][T20552] ? __import_iovec+0x306/0x510 [ 790.025283][T20552] ? import_iovec+0x6f/0xa0 [ 790.029781][T20552] ___sys_sendmsg+0x2a2/0x360 [ 790.034456][T20552] ? __sys_sendmsg+0x2a0/0x2a0 [ 790.039228][T20552] ? __lock_acquire+0x7c40/0x7c40 [ 790.044269][T20552] __se_sys_sendmsg+0x1c3/0x2b0 [ 790.049117][T20552] ? __x64_sys_sendmsg+0x80/0x80 [ 790.054062][T20552] ? lockdep_hardirqs_on+0x94/0x140 [ 790.059270][T20552] do_syscall_64+0x4c/0xa0 [ 790.063680][T20552] ? clear_bhb_loop+0x60/0xb0 [ 790.068347][T20552] ? clear_bhb_loop+0x60/0xb0 [ 790.073018][T20552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.078901][T20552] RIP: 0033:0x7f2a8159e0d9 [ 790.083305][T20552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.102901][T20552] RSP: 002b:00007f2a823b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.111306][T20552] RAX: ffffffffffffffda RBX: 00007f2a81825fa0 RCX: 00007f2a8159e0d9 [ 790.119268][T20552] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 790.127228][T20552] RBP: 00007f2a823b4090 R08: 0000000000000000 R09: 0000000000000000 [ 790.135193][T20552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.143151][T20552] R13: 00007f2a81826038 R14: 00007f2a81825fa0 R15: 00007ffda30f65e8 [ 790.151127][T20552] [ 790.341635][T20564] FAULT_INJECTION: forcing a failure. [ 790.341635][T20564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.379083][T20564] CPU: 0 PID: 20564 Comm: syz.3.4990 Not tainted syzkaller #0 [ 790.386606][T20564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 790.396674][T20564] Call Trace: [ 790.399945][T20564] [ 790.402864][T20564] dump_stack_lvl+0x188/0x24e [ 790.407546][T20564] ? show_regs_print_info+0x12/0x12 [ 790.412743][T20564] ? load_image+0x410/0x410 [ 790.417243][T20564] ? ___ratelimit+0x6/0x610 [ 790.421772][T20564] should_fail_ex+0x390/0x4c0 [ 790.426447][T20564] _copy_from_user+0x2c/0x170 [ 790.431116][T20564] bpf_prog_test_run_skb+0x263/0x18e0 [ 790.436482][T20564] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 790.442636][T20564] ? lockdep_hardirqs_on+0x94/0x140 [ 790.447824][T20564] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 790.453975][T20564] ? cpu_online+0xa0/0xa0 [ 790.458294][T20564] bpf_prog_test_run+0x31c/0x390 [ 790.463236][T20564] __sys_bpf+0x62b/0x780 [ 790.467471][T20564] ? bpf_link_show_fdinfo+0x380/0x380 [ 790.472842][T20564] ? lock_chain_count+0x20/0x20 [ 790.477694][T20564] __x64_sys_bpf+0x78/0x90 [ 790.482103][T20564] do_syscall_64+0x4c/0xa0 [ 790.486512][T20564] ? clear_bhb_loop+0x60/0xb0 [ 790.491179][T20564] ? clear_bhb_loop+0x60/0xb0 [ 790.495850][T20564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.501736][T20564] RIP: 0033:0x7f2a8159e0d9 [ 790.506141][T20564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.525736][T20564] RSP: 002b:00007f2a823b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.534147][T20564] RAX: ffffffffffffffda RBX: 00007f2a81825fa0 RCX: 00007f2a8159e0d9 [ 790.542106][T20564] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 790.550065][T20564] RBP: 00007f2a823b4090 R08: 0000000000000000 R09: 0000000000000000 [ 790.558027][T20564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.565985][T20564] R13: 00007f2a81826038 R14: 00007f2a81825fa0 R15: 00007ffda30f65e8 [ 790.573956][T20564] [ 790.765038][T20568] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4992'. [ 791.040340][T20582] netlink: 'syz.3.4994': attribute type 29 has an invalid length. [ 791.077718][T20582] netlink: 'syz.3.4994': attribute type 29 has an invalid length. [ 791.232122][T20591] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5000'. [ 791.270169][T20591] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 791.295334][T20591] CPU: 1 PID: 20591 Comm: syz.0.5000 Not tainted syzkaller #0 [ 791.302856][T20591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.312935][T20591] Call Trace: [ 791.316230][T20591] [ 791.319175][T20591] dump_stack_lvl+0x188/0x24e [ 791.323882][T20591] ? show_regs_print_info+0x12/0x12 [ 791.329106][T20591] ? load_image+0x410/0x410 [ 791.333646][T20591] sysfs_warn_dup+0x8a/0xa0 [ 791.338177][T20591] sysfs_do_create_link_sd+0xc0/0x110 [ 791.343577][T20591] device_add+0x83b/0x1050 [ 791.348025][T20591] wiphy_register+0x1d8b/0x2aa0 [ 791.352908][T20591] ? cfg80211_event_work+0x40/0x40 [ 791.358032][T20591] ? minstrel_ht_alloc+0x894/0xa20 [ 791.363173][T20591] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 791.369255][T20591] ieee80211_register_hw+0x2d48/0x39f0 [ 791.374741][T20591] ? ieee80211_register_hw+0xee1/0x39f0 [ 791.380297][T20591] ? ieee80211_register_hw+0xee1/0x39f0 [ 791.385859][T20591] ? ieee80211_tasklet_handler+0x20/0x20 [ 791.391507][T20591] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 791.397416][T20591] ? __debug_object_init+0xed/0x440 [ 791.402637][T20591] ? memset+0x1e/0x40 [ 791.406633][T20591] ? __hrtimer_init+0x189/0x270 [ 791.411504][T20591] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 791.417246][T20591] ? memcpy+0x3c/0x60 [ 791.421243][T20591] hwsim_new_radio_nl+0xab7/0xc90 [ 791.426296][T20591] genl_family_rcv_msg_doit+0x22f/0x350 [ 791.431856][T20591] ? end_current_label_crit_section+0x170/0x170 [ 791.438151][T20591] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 791.444065][T20591] ? bpf_lsm_capable+0x5/0x10 [ 791.448754][T20591] ? security_capable+0x85/0xb0 [ 791.453633][T20591] genl_rcv_msg+0x601/0x790 [ 791.458153][T20591] ? genl_bind+0x360/0x360 [ 791.462574][T20591] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 791.469051][T20591] netlink_rcv_skb+0x1ef/0x440 [ 791.473832][T20591] ? genl_bind+0x360/0x360 [ 791.478259][T20591] ? netlink_ack+0x1160/0x1160 [ 791.483064][T20591] ? down_read+0x1a8/0x2d0 [ 791.487492][T20591] genl_rcv+0x24/0x40 [ 791.491484][T20591] netlink_unicast+0x7ad/0x920 [ 791.496273][T20591] netlink_sendmsg+0x8ad/0xbd0 [ 791.501062][T20591] ? netlink_getsockopt+0x550/0x550 [ 791.506278][T20591] ? apparmor_socket_sendmsg+0x8a/0x330 [ 791.511842][T20591] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 791.517136][T20591] ? security_socket_sendmsg+0x7c/0xa0 [ 791.522602][T20591] ? netlink_getsockopt+0x550/0x550 [ 791.527816][T20591] ____sys_sendmsg+0x5ed/0x9a0 [ 791.532609][T20591] ? __sys_sendmsg_sock+0x30/0x30 [ 791.537648][T20591] ? __import_iovec+0x306/0x510 [ 791.542524][T20591] ? import_iovec+0x6f/0xa0 [ 791.547047][T20591] ___sys_sendmsg+0x2a2/0x360 [ 791.551745][T20591] ? __sys_sendmsg+0x2a0/0x2a0 [ 791.556545][T20591] ? trace_call_bpf+0xbf/0x6b0 [ 791.561349][T20591] __se_sys_sendmsg+0x1c3/0x2b0 [ 791.566216][T20591] ? ct_nmi_exit+0x145/0x1c0 [ 791.570818][T20591] ? __x64_sys_sendmsg+0x80/0x80 [ 791.575787][T20591] ? lockdep_hardirqs_on+0x94/0x140 [ 791.580993][T20591] do_syscall_64+0x4c/0xa0 [ 791.585418][T20591] ? clear_bhb_loop+0x60/0xb0 [ 791.590112][T20591] ? clear_bhb_loop+0x60/0xb0 [ 791.594804][T20591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.600711][T20591] RIP: 0033:0x7faf1419e0d9 [ 791.605135][T20591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.624747][T20591] RSP: 002b:00007faf14fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.633172][T20591] RAX: ffffffffffffffda RBX: 00007faf14425fa0 RCX: 00007faf1419e0d9 [ 791.641149][T20591] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 791.649124][T20591] RBP: 00007faf14235024 R08: 0000000000000000 R09: 0000000000000000 [ 791.657102][T20591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.665088][T20591] R13: 00007faf14426038 R14: 00007faf14425fa0 R15: 00007ffce7078268 [ 791.673081][T20591] [ 791.725541][T20593] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4999'. [ 791.819021][T20593] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 791.843509][T20593] CPU: 0 PID: 20593 Comm: syz.1.4999 Not tainted syzkaller #0 [ 791.851024][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.861088][T20593] Call Trace: [ 791.864365][T20593] [ 791.867324][T20593] dump_stack_lvl+0x188/0x24e [ 791.872018][T20593] ? show_regs_print_info+0x12/0x12 [ 791.877230][T20593] ? load_image+0x410/0x410 [ 791.881742][T20593] sysfs_warn_dup+0x8a/0xa0 [ 791.886248][T20593] sysfs_do_create_link_sd+0xc0/0x110 [ 791.891619][T20593] device_add+0x83b/0x1050 [ 791.896038][T20593] wiphy_register+0x1d8b/0x2aa0 [ 791.900888][T20593] ? __rtnl_unlock+0x14/0xe0 [ 791.905575][T20593] ? cfg80211_event_work+0x40/0x40 [ 791.910683][T20593] ? minstrel_ht_alloc+0x894/0xa20 [ 791.915797][T20593] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 791.921857][T20593] ieee80211_register_hw+0x2d48/0x39f0 [ 791.927319][T20593] ? ieee80211_register_hw+0xee1/0x39f0 [ 791.932860][T20593] ? ieee80211_register_hw+0xee1/0x39f0 [ 791.938402][T20593] ? ieee80211_tasklet_handler+0x20/0x20 [ 791.944029][T20593] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 791.949916][T20593] ? __debug_object_init+0xed/0x440 [ 791.955118][T20593] ? memset+0x1e/0x40 [ 791.959091][T20593] ? __hrtimer_init+0x189/0x270 [ 791.963939][T20593] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 791.969668][T20593] ? memcpy+0x3c/0x60 [ 791.973646][T20593] hwsim_new_radio_nl+0xab7/0xc90 [ 791.978677][T20593] genl_family_rcv_msg_doit+0x22f/0x350 [ 791.984212][T20593] ? end_current_label_crit_section+0x170/0x170 [ 791.990451][T20593] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 791.996342][T20593] ? bpf_lsm_capable+0x5/0x10 [ 792.001007][T20593] ? security_capable+0x85/0xb0 [ 792.005860][T20593] genl_rcv_msg+0x601/0x790 [ 792.010359][T20593] ? genl_bind+0x360/0x360 [ 792.014764][T20593] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 792.021094][T20593] netlink_rcv_skb+0x1ef/0x440 [ 792.025854][T20593] ? genl_bind+0x360/0x360 [ 792.030260][T20593] ? netlink_ack+0x1160/0x1160 [ 792.035027][T20593] ? down_read+0x1a8/0x2d0 [ 792.039435][T20593] genl_rcv+0x24/0x40 [ 792.043407][T20593] netlink_unicast+0x7ad/0x920 [ 792.048172][T20593] netlink_sendmsg+0x8ad/0xbd0 [ 792.052940][T20593] ? netlink_getsockopt+0x550/0x550 [ 792.058140][T20593] ? apparmor_socket_sendmsg+0x8a/0x330 [ 792.063682][T20593] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 792.068963][T20593] ? security_socket_sendmsg+0x7c/0xa0 [ 792.074412][T20593] ? netlink_getsockopt+0x550/0x550 [ 792.079607][T20593] ____sys_sendmsg+0x5ed/0x9a0 [ 792.084373][T20593] ? __sys_sendmsg_sock+0x30/0x30 [ 792.089390][T20593] ? __import_iovec+0x306/0x510 [ 792.094242][T20593] ? import_iovec+0x6f/0xa0 [ 792.098745][T20593] ___sys_sendmsg+0x2a2/0x360 [ 792.103422][T20593] ? __sys_sendmsg+0x2a0/0x2a0 [ 792.108194][T20593] ? ktime_get+0x7b/0x270 [ 792.112536][T20593] __se_sys_sendmsg+0x1c3/0x2b0 [ 792.117378][T20593] ? ct_nmi_exit+0x145/0x1c0 [ 792.121970][T20593] ? __x64_sys_sendmsg+0x80/0x80 [ 792.126915][T20593] ? lockdep_hardirqs_on+0x94/0x140 [ 792.132110][T20593] do_syscall_64+0x4c/0xa0 [ 792.136519][T20593] ? clear_bhb_loop+0x60/0xb0 [ 792.141186][T20593] ? clear_bhb_loop+0x60/0xb0 [ 792.145875][T20593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.151763][T20593] RIP: 0033:0x7f0d3739e0d9 [ 792.156168][T20593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.175765][T20593] RSP: 002b:00007f0d38249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.184168][T20593] RAX: ffffffffffffffda RBX: 00007f0d37626090 RCX: 00007f0d3739e0d9 [ 792.192127][T20593] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 792.200090][T20593] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 792.208052][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.216010][T20593] R13: 00007f0d37626128 R14: 00007f0d37626090 R15: 00007ffe08067238 [ 792.223984][T20593] [ 793.661871][T20628] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5009'. [ 793.989312][T20646] netlink: 'syz.0.5014': attribute type 29 has an invalid length. [ 794.008897][T20646] netlink: 'syz.0.5014': attribute type 29 has an invalid length. [ 794.021376][T20647] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5015'. [ 794.037819][T20647] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 794.049903][T20647] CPU: 0 PID: 20647 Comm: syz.3.5015 Not tainted syzkaller #0 [ 794.057369][T20647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.067411][T20647] Call Trace: [ 794.070685][T20647] [ 794.073630][T20647] dump_stack_lvl+0x188/0x24e [ 794.078323][T20647] ? show_regs_print_info+0x12/0x12 [ 794.083529][T20647] ? load_image+0x410/0x410 [ 794.088048][T20647] sysfs_warn_dup+0x8a/0xa0 [ 794.092544][T20647] sysfs_do_create_link_sd+0xc0/0x110 [ 794.097914][T20647] device_add+0x83b/0x1050 [ 794.102376][T20647] wiphy_register+0x1d8b/0x2aa0 [ 794.107250][T20647] ? cfg80211_event_work+0x40/0x40 [ 794.112355][T20647] ? minstrel_ht_alloc+0x894/0xa20 [ 794.117475][T20647] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 794.123544][T20647] ieee80211_register_hw+0x2d48/0x39f0 [ 794.129025][T20647] ? ieee80211_register_hw+0xee1/0x39f0 [ 794.134592][T20647] ? ieee80211_register_hw+0xee1/0x39f0 [ 794.140168][T20647] ? ieee80211_tasklet_handler+0x20/0x20 [ 794.145821][T20647] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 794.151706][T20647] ? __debug_object_init+0xed/0x440 [ 794.156914][T20647] ? memset+0x1e/0x40 [ 794.160900][T20647] ? __hrtimer_init+0x189/0x270 [ 794.165752][T20647] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 794.171510][T20647] ? memcpy+0x3c/0x60 [ 794.175494][T20647] hwsim_new_radio_nl+0xab7/0xc90 [ 794.180540][T20647] genl_family_rcv_msg_doit+0x22f/0x350 [ 794.186078][T20647] ? end_current_label_crit_section+0x170/0x170 [ 794.192340][T20647] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 794.198245][T20647] ? bpf_lsm_capable+0x5/0x10 [ 794.202916][T20647] ? security_capable+0x85/0xb0 [ 794.207765][T20647] genl_rcv_msg+0x601/0x790 [ 794.212267][T20647] ? genl_bind+0x360/0x360 [ 794.216715][T20647] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 794.223064][T20647] netlink_rcv_skb+0x1ef/0x440 [ 794.227827][T20647] ? genl_bind+0x360/0x360 [ 794.232243][T20647] ? netlink_ack+0x1160/0x1160 [ 794.237029][T20647] ? down_read+0x1a8/0x2d0 [ 794.241452][T20647] genl_rcv+0x24/0x40 [ 794.245429][T20647] netlink_unicast+0x7ad/0x920 [ 794.250211][T20647] netlink_sendmsg+0x8ad/0xbd0 [ 794.254994][T20647] ? netlink_getsockopt+0x550/0x550 [ 794.260206][T20647] ? apparmor_socket_sendmsg+0x8a/0x330 [ 794.265755][T20647] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 794.271047][T20647] ? security_socket_sendmsg+0x7c/0xa0 [ 794.276502][T20647] ? netlink_getsockopt+0x550/0x550 [ 794.281715][T20647] ____sys_sendmsg+0x5ed/0x9a0 [ 794.286488][T20647] ? __sys_sendmsg_sock+0x30/0x30 [ 794.291510][T20647] ? __import_iovec+0x306/0x510 [ 794.296369][T20647] ? import_iovec+0x6f/0xa0 [ 794.300871][T20647] ___sys_sendmsg+0x2a2/0x360 [ 794.305550][T20647] ? __sys_sendmsg+0x2a0/0x2a0 [ 794.310345][T20647] __se_sys_sendmsg+0x1c3/0x2b0 [ 794.315189][T20647] ? ct_nmi_exit+0x145/0x1c0 [ 794.319777][T20647] ? __x64_sys_sendmsg+0x80/0x80 [ 794.324727][T20647] ? lockdep_hardirqs_on+0x94/0x140 [ 794.329944][T20647] do_syscall_64+0x4c/0xa0 [ 794.334355][T20647] ? clear_bhb_loop+0x60/0xb0 [ 794.339035][T20647] ? clear_bhb_loop+0x60/0xb0 [ 794.343706][T20647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.349589][T20647] RIP: 0033:0x7f2a8159e0d9 [ 794.353997][T20647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.373590][T20647] RSP: 002b:00007f2a823b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.381996][T20647] RAX: ffffffffffffffda RBX: 00007f2a81825fa0 RCX: 00007f2a8159e0d9 [ 794.389958][T20647] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 794.397917][T20647] RBP: 00007f2a81635024 R08: 0000000000000000 R09: 0000000000000000 [ 794.405876][T20647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.413838][T20647] R13: 00007f2a81826038 R14: 00007f2a81825fa0 R15: 00007ffda30f65e8 [ 794.421812][T20647] [ 794.629804][T20652] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5016'. [ 794.688848][T20652] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 795.123537][T20654] delete_channel: no stack [ 795.276740][T20673] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5024'. [ 795.592239][T20687] netlink: 'syz.2.5028': attribute type 10 has an invalid length. [ 795.710928][T20695] netlink: 'syz.1.5030': attribute type 29 has an invalid length. [ 795.734020][T20695] netlink: 'syz.1.5030': attribute type 29 has an invalid length. [ 796.495695][T20714] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5038'. [ 797.183143][T20737] FAULT_INJECTION: forcing a failure. [ 797.183143][T20737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.202360][T20737] CPU: 1 PID: 20737 Comm: syz.4.5047 Not tainted syzkaller #0 [ 797.209858][T20737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.219929][T20737] Call Trace: [ 797.223226][T20737] [ 797.226206][T20737] dump_stack_lvl+0x188/0x24e [ 797.230914][T20737] ? show_regs_print_info+0x12/0x12 [ 797.236135][T20737] ? load_image+0x410/0x410 [ 797.240659][T20737] ? __lock_acquire+0x7c40/0x7c40 [ 797.245722][T20737] should_fail_ex+0x390/0x4c0 [ 797.250428][T20737] _copy_from_user+0x2c/0x170 [ 797.255130][T20737] __sys_bpf+0x2ea/0x780 [ 797.259401][T20737] ? bpf_link_show_fdinfo+0x380/0x380 [ 797.264824][T20737] ? lock_chain_count+0x20/0x20 [ 797.269712][T20737] __x64_sys_bpf+0x78/0x90 [ 797.274151][T20737] do_syscall_64+0x4c/0xa0 [ 797.278585][T20737] ? clear_bhb_loop+0x60/0xb0 [ 797.283279][T20737] ? clear_bhb_loop+0x60/0xb0 [ 797.287977][T20737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.293887][T20737] RIP: 0033:0x7f0a0479e0d9 [ 797.298316][T20737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.317935][T20737] RSP: 002b:00007f0a0567b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.326370][T20737] RAX: ffffffffffffffda RBX: 00007f0a04a25fa0 RCX: 00007f0a0479e0d9 [ 797.334357][T20737] RDX: 0000000000000018 RSI: 0000200000000780 RDI: 0000000000000011 [ 797.342343][T20737] RBP: 00007f0a0567b090 R08: 0000000000000000 R09: 0000000000000000 [ 797.350325][T20737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.358309][T20737] R13: 00007f0a04a26038 R14: 00007f0a04a25fa0 R15: 00007fffea205c68 [ 797.366322][T20737] [ 797.915172][T20746] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5051'. [ 798.504826][T20760] : port 1(ip6gretap0) entered blocking state [ 798.515266][T20760] : port 1(ip6gretap0) entered disabled state [ 798.528362][T20760] device ip6gretap0 entered promiscuous mode [ 798.570959][T20761] device ip6gretap0 left promiscuous mode [ 798.583847][T20761] : port 1(ip6gretap0) entered disabled state [ 798.821159][T20767] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.5057'. [ 799.523751][T20790] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5065'. [ 799.590855][T20793] : port 1(ip6gretap0) entered blocking state [ 799.598549][T20793] : port 1(ip6gretap0) entered disabled state [ 799.625495][T20793] device ip6gretap0 entered promiscuous mode [ 799.651928][T20796] device ip6gretap0 left promiscuous mode [ 799.666377][T20796] : port 1(ip6gretap0) entered disabled state [ 799.967840][T20808] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5074'. [ 800.005676][T20810] netlink: 'syz.4.5073': attribute type 29 has an invalid length. [ 800.026597][T20810] netlink: 'syz.4.5073': attribute type 29 has an invalid length. [ 800.101066][T20808] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 800.128533][T20808] CPU: 1 PID: 20808 Comm: syz.1.5074 Not tainted syzkaller #0 [ 800.136085][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 800.146161][T20808] Call Trace: [ 800.149451][T20808] [ 800.152394][T20808] dump_stack_lvl+0x188/0x24e [ 800.157111][T20808] ? show_regs_print_info+0x12/0x12 [ 800.162340][T20808] ? load_image+0x410/0x410 [ 800.166881][T20808] sysfs_warn_dup+0x8a/0xa0 [ 800.171414][T20808] sysfs_do_create_link_sd+0xc0/0x110 [ 800.176823][T20808] device_add+0x83b/0x1050 [ 800.181271][T20808] wiphy_register+0x1d8b/0x2aa0 [ 800.186165][T20808] ? cfg80211_event_work+0x40/0x40 [ 800.191294][T20808] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 800.197461][T20808] ieee80211_register_hw+0x2d48/0x39f0 [ 800.202914][T20808] ? ieee80211_register_hw+0xee1/0x39f0 [ 800.208444][T20808] ? ieee80211_register_hw+0xee1/0x39f0 [ 800.213998][T20808] ? ieee80211_tasklet_handler+0x20/0x20 [ 800.219620][T20808] ? __hrtimer_init+0x189/0x270 [ 800.224459][T20808] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 800.229901][T20808] ? __hrtimer_init+0x189/0x270 [ 800.234755][T20808] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 800.240516][T20808] ? memcpy+0x3c/0x60 [ 800.244497][T20808] hwsim_new_radio_nl+0xab7/0xc90 [ 800.249521][T20808] genl_family_rcv_msg_doit+0x22f/0x350 [ 800.255077][T20808] ? end_current_label_crit_section+0x170/0x170 [ 800.261312][T20808] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 800.267218][T20808] ? bpf_lsm_capable+0x5/0x10 [ 800.271883][T20808] ? security_capable+0x85/0xb0 [ 800.276725][T20808] genl_rcv_msg+0x601/0x790 [ 800.281224][T20808] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 800.287390][T20808] ? genl_bind+0x360/0x360 [ 800.291793][T20808] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 800.298123][T20808] ? lock_acquire+0x225/0x4a0 [ 800.302795][T20808] netlink_rcv_skb+0x1ef/0x440 [ 800.307553][T20808] ? genl_bind+0x360/0x360 [ 800.311955][T20808] ? netlink_ack+0x1160/0x1160 [ 800.316719][T20808] ? down_read+0x1a8/0x2d0 [ 800.321137][T20808] genl_rcv+0x24/0x40 [ 800.325117][T20808] netlink_unicast+0x7ad/0x920 [ 800.329877][T20808] netlink_sendmsg+0x8ad/0xbd0 [ 800.334657][T20808] ? netlink_getsockopt+0x550/0x550 [ 800.339892][T20808] ? apparmor_socket_sendmsg+0x8a/0x330 [ 800.345448][T20808] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 800.350717][T20808] ? security_socket_sendmsg+0x7c/0xa0 [ 800.356162][T20808] ? netlink_getsockopt+0x550/0x550 [ 800.361357][T20808] ____sys_sendmsg+0x5ed/0x9a0 [ 800.366117][T20808] ? __sys_sendmsg_sock+0x30/0x30 [ 800.371128][T20808] ? __import_iovec+0x306/0x510 [ 800.375977][T20808] ? import_iovec+0x6f/0xa0 [ 800.380469][T20808] ___sys_sendmsg+0x2a2/0x360 [ 800.385142][T20808] ? __sys_sendmsg+0x2a0/0x2a0 [ 800.389997][T20808] ? ktime_get+0x7b/0x270 [ 800.394341][T20808] __se_sys_sendmsg+0x1c3/0x2b0 [ 800.399191][T20808] ? perf_trace_preemptirq_template+0x268/0x320 [ 800.405425][T20808] ? __x64_sys_sendmsg+0x80/0x80 [ 800.410371][T20808] ? lockdep_hardirqs_on+0x94/0x140 [ 800.415559][T20808] do_syscall_64+0x4c/0xa0 [ 800.419968][T20808] ? clear_bhb_loop+0x60/0xb0 [ 800.424665][T20808] ? clear_bhb_loop+0x60/0xb0 [ 800.429335][T20808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.435236][T20808] RIP: 0033:0x7f0d3739e0d9 [ 800.439642][T20808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.459239][T20808] RSP: 002b:00007f0d38249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.467643][T20808] RAX: ffffffffffffffda RBX: 00007f0d37626090 RCX: 00007f0d3739e0d9 [ 800.475605][T20808] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 800.483564][T20808] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 800.491528][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.499484][T20808] R13: 00007f0d37626128 R14: 00007f0d37626090 R15: 00007ffe08067238 [ 800.507454][T20808] [ 800.593591][T20810] netlink: 'syz.4.5073': attribute type 29 has an invalid length. [ 801.436929][T20836] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5081'. [ 803.003576][T20852] : port 1(ip6gretap0) entered blocking state [ 803.082649][T20852] : port 1(ip6gretap0) entered disabled state [ 803.180994][T20852] device ip6gretap0 entered promiscuous mode [ 803.670909][T20855] device ip6gretap0 left promiscuous mode [ 803.709417][T20855] : port 1(ip6gretap0) entered disabled state [ 804.056447][T20869] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5089'. [ 804.180302][T20869] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 804.265269][T20869] CPU: 1 PID: 20869 Comm: syz.1.5089 Not tainted syzkaller #0 [ 804.272780][T20869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 804.282844][T20869] Call Trace: [ 804.286131][T20869] [ 804.289068][T20869] dump_stack_lvl+0x188/0x24e [ 804.293780][T20869] ? show_regs_print_info+0x12/0x12 [ 804.299004][T20869] ? load_image+0x410/0x410 [ 804.303538][T20869] sysfs_warn_dup+0x8a/0xa0 [ 804.308061][T20869] sysfs_do_create_link_sd+0xc0/0x110 [ 804.313449][T20869] device_add+0x83b/0x1050 [ 804.317891][T20869] wiphy_register+0x1d8b/0x2aa0 [ 804.322777][T20869] ? cfg80211_event_work+0x40/0x40 [ 804.327902][T20869] ? minstrel_ht_alloc+0x894/0xa20 [ 804.333045][T20869] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 804.339131][T20869] ieee80211_register_hw+0x2d48/0x39f0 [ 804.344609][T20869] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 804.350828][T20869] ? ieee80211_register_hw+0xee1/0x39f0 [ 804.356413][T20869] ? ieee80211_register_hw+0xee1/0x39f0 [ 804.361985][T20869] ? ieee80211_tasklet_handler+0x20/0x20 [ 804.367640][T20869] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 804.373551][T20869] ? __debug_object_init+0xed/0x440 [ 804.378771][T20869] ? memset+0x1e/0x40 [ 804.382765][T20869] ? __hrtimer_init+0x189/0x270 [ 804.387630][T20869] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 804.393389][T20869] hwsim_new_radio_nl+0xab7/0xc90 [ 804.398444][T20869] genl_family_rcv_msg_doit+0x22f/0x350 [ 804.404005][T20869] ? end_current_label_crit_section+0x170/0x170 [ 804.410275][T20869] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 804.416192][T20869] ? bpf_lsm_capable+0x5/0x10 [ 804.420883][T20869] ? security_capable+0x85/0xb0 [ 804.425758][T20869] genl_rcv_msg+0x601/0x790 [ 804.430280][T20869] ? genl_bind+0x360/0x360 [ 804.434704][T20869] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 804.441068][T20869] netlink_rcv_skb+0x1ef/0x440 [ 804.445850][T20869] ? genl_bind+0x360/0x360 [ 804.450278][T20869] ? netlink_ack+0x1160/0x1160 [ 804.455067][T20869] ? down_read+0x1a8/0x2d0 [ 804.459494][T20869] genl_rcv+0x24/0x40 [ 804.463483][T20869] netlink_unicast+0x7ad/0x920 [ 804.468281][T20869] netlink_sendmsg+0x8ad/0xbd0 [ 804.473072][T20869] ? netlink_getsockopt+0x550/0x550 [ 804.478297][T20869] ? audit_tree_destroy_watch+0x20/0x20 [ 804.483858][T20869] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 804.489153][T20869] ? security_socket_sendmsg+0x7c/0xa0 [ 804.494628][T20869] ? netlink_getsockopt+0x550/0x550 [ 804.499844][T20869] ____sys_sendmsg+0x5ed/0x9a0 [ 804.504634][T20869] ? __sys_sendmsg_sock+0x30/0x30 [ 804.509671][T20869] ? __import_iovec+0x306/0x510 [ 804.514547][T20869] ? import_iovec+0x6f/0xa0 [ 804.519069][T20869] ___sys_sendmsg+0x2a2/0x360 [ 804.523771][T20869] ? __sys_sendmsg+0x2a0/0x2a0 [ 804.528571][T20869] ? ktime_get+0x7b/0x270 [ 804.532954][T20869] __se_sys_sendmsg+0x1c3/0x2b0 [ 804.537830][T20869] ? perf_trace_preemptirq_template+0x268/0x320 [ 804.544091][T20869] ? __x64_sys_sendmsg+0x80/0x80 [ 804.549063][T20869] ? lockdep_hardirqs_on+0x94/0x140 [ 804.554273][T20869] do_syscall_64+0x4c/0xa0 [ 804.558702][T20869] ? clear_bhb_loop+0x60/0xb0 [ 804.563393][T20869] ? clear_bhb_loop+0x60/0xb0 [ 804.568087][T20869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.573991][T20869] RIP: 0033:0x7f0d3739e0d9 [ 804.578422][T20869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.598039][T20869] RSP: 002b:00007f0d38249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.606465][T20869] RAX: ffffffffffffffda RBX: 00007f0d37626090 RCX: 00007f0d3739e0d9 [ 804.614445][T20869] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 804.622422][T20869] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 804.630401][T20869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.638383][T20869] R13: 00007f0d37626128 R14: 00007f0d37626090 R15: 00007ffe08067238 [ 804.646381][T20869] [ 805.388521][T20887] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5094'. [ 805.901994][T20905] netlink: 'syz.4.5097': attribute type 29 has an invalid length. [ 805.939831][T20905] netlink: 'syz.4.5097': attribute type 29 has an invalid length. [ 806.029326][T20904] : port 1(ip6gretap0) entered blocking state [ 806.044105][T20904] : port 1(ip6gretap0) entered disabled state [ 806.077294][T20904] device ip6gretap0 entered promiscuous mode [ 806.137454][T20909] device ip6gretap0 left promiscuous mode [ 806.166436][T20909] : port 1(ip6gretap0) entered disabled state [ 807.078338][T20929] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5108'. [ 807.116304][T20933] netlink: 'syz.3.5110': attribute type 2 has an invalid length. [ 807.128371][T20933] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5110'. [ 807.764618][T20932] delete_channel: no stack [ 807.870591][T20946] FAULT_INJECTION: forcing a failure. [ 807.870591][T20946] name failslab, interval 1, probability 0, space 0, times 0 [ 807.893351][T20946] CPU: 1 PID: 20946 Comm: syz.3.5116 Not tainted syzkaller #0 [ 807.900856][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 807.910924][T20946] Call Trace: [ 807.914202][T20946] [ 807.917126][T20946] dump_stack_lvl+0x188/0x24e [ 807.921807][T20946] ? show_regs_print_info+0x12/0x12 [ 807.927001][T20946] ? load_image+0x410/0x410 [ 807.931499][T20946] ? __might_sleep+0xd0/0xd0 [ 807.936078][T20946] ? __lock_acquire+0x7c40/0x7c40 [ 807.941132][T20946] should_fail_ex+0x390/0x4c0 [ 807.945836][T20946] should_failslab+0x5/0x20 [ 807.950330][T20946] slab_pre_alloc_hook+0x59/0x300 [ 807.955347][T20946] ? __lock_acquire+0x138a/0x7c40 [ 807.960365][T20946] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 807.966076][T20946] __kmem_cache_alloc_node+0x4f/0x270 [ 807.971445][T20946] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 807.977154][T20946] __kmalloc+0xa3/0x240 [ 807.981306][T20946] tomoyo_realpath_from_path+0xe2/0x5c0 [ 807.986846][T20946] ? tomoyo_domain+0xd2/0x120 [ 807.991521][T20946] ? tomoyo_path_number_perm+0x205/0x650 [ 807.997152][T20946] tomoyo_path_number_perm+0x22f/0x650 [ 808.002603][T20946] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 808.008056][T20946] ? ksys_write+0x1ce/0x260 [ 808.012551][T20946] ? common_file_perm+0x171/0x1c0 [ 808.017594][T20946] ? __fget_files+0x28/0x460 [ 808.022187][T20946] security_file_ioctl+0x6c/0xa0 [ 808.027119][T20946] __se_sys_ioctl+0x48/0x170 [ 808.031708][T20946] do_syscall_64+0x4c/0xa0 [ 808.036117][T20946] ? clear_bhb_loop+0x60/0xb0 [ 808.040785][T20946] ? clear_bhb_loop+0x60/0xb0 [ 808.045454][T20946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.051336][T20946] RIP: 0033:0x7f2a8159e0d9 [ 808.055744][T20946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.075344][T20946] RSP: 002b:00007f2a823b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.083748][T20946] RAX: ffffffffffffffda RBX: 00007f2a81825fa0 RCX: 00007f2a8159e0d9 [ 808.091718][T20946] RDX: 00002000000013c0 RSI: 0000000000008902 RDI: 0000000000000004 [ 808.099679][T20946] RBP: 00007f2a823b4090 R08: 0000000000000000 R09: 0000000000000000 [ 808.107673][T20946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.115638][T20946] R13: 00007f2a81826038 R14: 00007f2a81825fa0 R15: 00007ffda30f65e8 [ 808.123614][T20946] [ 808.153681][T20946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 808.255358][T20949] : port 1(ip6gretap0) entered blocking state [ 808.265672][T20949] : port 1(ip6gretap0) entered disabled state [ 808.298455][T20949] device ip6gretap0 entered promiscuous mode [ 808.339282][T20951] device ip6gretap0 left promiscuous mode [ 808.352760][T20951] : port 1(ip6gretap0) entered disabled state [ 808.615734][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.622083][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.730891][T20964] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5122'. [ 809.124700][T20976] FAULT_INJECTION: forcing a failure. [ 809.124700][T20976] name failslab, interval 1, probability 0, space 0, times 0 [ 809.179545][T20976] CPU: 1 PID: 20976 Comm: syz.4.5125 Not tainted syzkaller #0 [ 809.187076][T20976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.197149][T20976] Call Trace: [ 809.200443][T20976] [ 809.203399][T20976] dump_stack_lvl+0x188/0x24e [ 809.208105][T20976] ? sctp_sendmsg+0x1686/0x2940 [ 809.212989][T20976] ? ___sys_sendmsg+0x2a2/0x360 [ 809.217871][T20976] ? show_regs_print_info+0x12/0x12 [ 809.223082][T20976] ? load_image+0x410/0x410 [ 809.227612][T20976] should_fail_ex+0x390/0x4c0 [ 809.232310][T20976] should_failslab+0x5/0x20 [ 809.236819][T20976] slab_pre_alloc_hook+0x59/0x300 [ 809.241846][T20976] ? sctp_add_bind_addr+0x89/0x350 [ 809.246968][T20976] __kmem_cache_alloc_node+0x4f/0x270 [ 809.252341][T20976] ? sctp_add_bind_addr+0x89/0x350 [ 809.257457][T20976] kmalloc_trace+0x26/0xe0 [ 809.261879][T20976] sctp_add_bind_addr+0x89/0x350 [ 809.266821][T20976] sctp_copy_local_addr_list+0x317/0x4d0 [ 809.272456][T20976] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 809.278179][T20976] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 809.284251][T20976] ? sctp_v6_is_any+0x60/0x70 [ 809.288929][T20976] ? sctp_copy_one_addr+0x93/0x660 [ 809.294049][T20976] sctp_bind_addr_copy+0xaf/0x3c0 [ 809.299101][T20976] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 809.305437][T20976] sctp_connect_new_asoc+0x2f5/0x6a0 [ 809.310729][T20976] ? __sctp_connect+0xd80/0xd80 [ 809.315582][T20976] ? __local_bh_enable_ip+0x136/0x1c0 [ 809.320988][T20976] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 809.326532][T20976] ? security_sctp_bind_connect+0x85/0xb0 [ 809.332258][T20976] sctp_sendmsg+0x1686/0x2940 [ 809.336956][T20976] ? sctp_getsockopt+0x8a0/0x8a0 [ 809.341894][T20976] ? __might_fault+0xa6/0x120 [ 809.346578][T20976] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 809.352992][T20976] ? aa_sock_msg_perm+0x94/0x150 [ 809.357938][T20976] ? inet_sendmsg+0xca/0x2a0 [ 809.362526][T20976] ? inet_send_prepare+0x250/0x250 [ 809.367637][T20976] ____sys_sendmsg+0x5ed/0x9a0 [ 809.372448][T20976] ? __sys_sendmsg_sock+0x30/0x30 [ 809.377478][T20976] ? __import_iovec+0x306/0x510 [ 809.382344][T20976] ? import_iovec+0x6f/0xa0 [ 809.386853][T20976] ___sys_sendmsg+0x2a2/0x360 [ 809.391541][T20976] ? __sys_sendmsg+0x2a0/0x2a0 [ 809.396335][T20976] ? __lock_acquire+0x7c40/0x7c40 [ 809.401394][T20976] __se_sys_sendmsg+0x1c3/0x2b0 [ 809.406251][T20976] ? __x64_sys_sendmsg+0x80/0x80 [ 809.411211][T20976] ? lockdep_hardirqs_on+0x94/0x140 [ 809.416423][T20976] do_syscall_64+0x4c/0xa0 [ 809.420836][T20976] ? clear_bhb_loop+0x60/0xb0 [ 809.425514][T20976] ? clear_bhb_loop+0x60/0xb0 [ 809.430196][T20976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 809.436086][T20976] RIP: 0033:0x7f0a0479e0d9 [ 809.440500][T20976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.460102][T20976] RSP: 002b:00007f0a0567b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.468515][T20976] RAX: ffffffffffffffda RBX: 00007f0a04a25fa0 RCX: 00007f0a0479e0d9 [ 809.476487][T20976] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 809.484454][T20976] RBP: 00007f0a0567b090 R08: 0000000000000000 R09: 0000000000000000 [ 809.492423][T20976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.500389][T20976] R13: 00007f0a04a26038 R14: 00007f0a04a25fa0 R15: 00007fffea205c68 [ 809.508380][T20976] [ 809.985150][T20991] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5129'. [ 810.075003][T20991] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 810.125889][T20991] CPU: 0 PID: 20991 Comm: syz.3.5129 Not tainted syzkaller #0 [ 810.133415][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 810.143484][T20991] Call Trace: [ 810.146776][T20991] [ 810.149711][T20991] dump_stack_lvl+0x188/0x24e [ 810.154410][T20991] ? show_regs_print_info+0x12/0x12 [ 810.159633][T20991] ? load_image+0x410/0x410 [ 810.164170][T20991] sysfs_warn_dup+0x8a/0xa0 [ 810.168700][T20991] sysfs_do_create_link_sd+0xc0/0x110 [ 810.174099][T20991] device_add+0x83b/0x1050 [ 810.178552][T20991] wiphy_register+0x1d8b/0x2aa0 [ 810.183444][T20991] ? cfg80211_event_work+0x40/0x40 [ 810.188577][T20991] ? minstrel_ht_alloc+0x894/0xa20 [ 810.193721][T20991] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 810.199812][T20991] ieee80211_register_hw+0x2d48/0x39f0 [ 810.205312][T20991] ? ieee80211_register_hw+0xee1/0x39f0 [ 810.210883][T20991] ? ieee80211_register_hw+0xee1/0x39f0 [ 810.216460][T20991] ? ieee80211_tasklet_handler+0x20/0x20 [ 810.222122][T20991] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 810.228039][T20991] ? __debug_object_init+0xed/0x440 [ 810.233277][T20991] ? memset+0x1e/0x40 [ 810.237274][T20991] ? __hrtimer_init+0x189/0x270 [ 810.242145][T20991] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 810.247900][T20991] ? memcpy+0x3c/0x60 [ 810.251905][T20991] hwsim_new_radio_nl+0xab7/0xc90 [ 810.256969][T20991] genl_family_rcv_msg_doit+0x22f/0x350 [ 810.262539][T20991] ? end_current_label_crit_section+0x170/0x170 [ 810.268810][T20991] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 810.274732][T20991] ? bpf_lsm_capable+0x5/0x10 [ 810.279431][T20991] ? security_capable+0x85/0xb0 [ 810.284313][T20991] genl_rcv_msg+0x601/0x790 [ 810.288829][T20991] ? lockdep_hardirqs_on+0x94/0x140 [ 810.294044][T20991] ? genl_bind+0x360/0x360 [ 810.298478][T20991] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 810.304844][T20991] netlink_rcv_skb+0x1ef/0x440 [ 810.309625][T20991] ? genl_bind+0x360/0x360 [ 810.314056][T20991] ? netlink_ack+0x1160/0x1160 [ 810.318854][T20991] ? down_read+0x1a8/0x2d0 [ 810.323281][T20991] genl_rcv+0x24/0x40 [ 810.327272][T20991] netlink_unicast+0x7ad/0x920 [ 810.332060][T20991] netlink_sendmsg+0x8ad/0xbd0 [ 810.336854][T20991] ? netlink_getsockopt+0x550/0x550 [ 810.342068][T20991] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 810.347365][T20991] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 810.352837][T20991] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 810.358127][T20991] ? security_socket_sendmsg+0x7c/0xa0 [ 810.363597][T20991] ? netlink_getsockopt+0x550/0x550 [ 810.368807][T20991] ____sys_sendmsg+0x5ed/0x9a0 [ 810.373595][T20991] ? __sys_sendmsg_sock+0x30/0x30 [ 810.378628][T20991] ? __import_iovec+0x306/0x510 [ 810.383514][T20991] ? import_iovec+0x6f/0xa0 [ 810.388075][T20991] ___sys_sendmsg+0x2a2/0x360 [ 810.392764][T20991] ? __fget_files+0x28/0x460 [ 810.397368][T20991] ? __sys_sendmsg+0x2a0/0x2a0 [ 810.402161][T20991] ? ktime_get+0x7b/0x270 [ 810.406521][T20991] __se_sys_sendmsg+0x1c3/0x2b0 [ 810.411382][T20991] ? perf_trace_preemptirq_template+0x268/0x320 [ 810.417638][T20991] ? __x64_sys_sendmsg+0x80/0x80 [ 810.422604][T20991] ? lockdep_hardirqs_on+0x94/0x140 [ 810.427807][T20991] do_syscall_64+0x4c/0xa0 [ 810.432231][T20991] ? clear_bhb_loop+0x60/0xb0 [ 810.436915][T20991] ? clear_bhb_loop+0x60/0xb0 [ 810.441601][T20991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 810.447499][T20991] RIP: 0033:0x7f2a8159e0d9 [ 810.451923][T20991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.471533][T20991] RSP: 002b:00007f2a82393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.479956][T20991] RAX: ffffffffffffffda RBX: 00007f2a81826090 RCX: 00007f2a8159e0d9 [ 810.487936][T20991] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 810.495909][T20991] RBP: 00007f2a81635024 R08: 0000000000000000 R09: 0000000000000000 [ 810.503883][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.511858][T20991] R13: 00007f2a81826128 R14: 00007f2a81826090 R15: 00007ffda30f65e8 [ 810.519852][T20991] [ 810.609948][T21004] : port 1(ip6gretap0) entered blocking state [ 810.628424][T21004] : port 1(ip6gretap0) entered disabled state [ 810.667929][T21004] device ip6gretap0 entered promiscuous mode [ 810.740214][T21005] device ip6gretap0 left promiscuous mode [ 810.767223][T21005] : port 1(ip6gretap0) entered disabled state [ 810.945942][T20992] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5127'. [ 811.038182][T20992] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 811.050112][T20992] CPU: 0 PID: 20992 Comm: syz.4.5127 Not tainted syzkaller #0 [ 811.057610][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 811.067680][T20992] Call Trace: [ 811.070968][T20992] [ 811.073921][T20992] dump_stack_lvl+0x188/0x24e [ 811.078638][T20992] ? show_regs_print_info+0x12/0x12 [ 811.083862][T20992] ? load_image+0x410/0x410 [ 811.088392][T20992] sysfs_warn_dup+0x8a/0xa0 [ 811.092914][T20992] sysfs_do_create_link_sd+0xc0/0x110 [ 811.098318][T20992] device_add+0x83b/0x1050 [ 811.102764][T20992] wiphy_register+0x1d8b/0x2aa0 [ 811.107655][T20992] ? cfg80211_event_work+0x40/0x40 [ 811.112792][T20992] ? minstrel_ht_alloc+0x894/0xa20 [ 811.117938][T20992] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 811.124037][T20992] ieee80211_register_hw+0x2d48/0x39f0 [ 811.129543][T20992] ? ieee80211_register_hw+0xee1/0x39f0 [ 811.135113][T20992] ? ieee80211_register_hw+0xee1/0x39f0 [ 811.140694][T20992] ? ieee80211_tasklet_handler+0x20/0x20 [ 811.146353][T20992] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 811.152270][T20992] ? __debug_object_init+0xed/0x440 [ 811.157500][T20992] ? memset+0x1e/0x40 [ 811.161499][T20992] ? __hrtimer_init+0x189/0x270 [ 811.166373][T20992] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 811.172124][T20992] ? memcpy+0x3c/0x60 [ 811.176138][T20992] hwsim_new_radio_nl+0xab7/0xc90 [ 811.181201][T20992] genl_family_rcv_msg_doit+0x22f/0x350 [ 811.186762][T20992] ? end_current_label_crit_section+0x170/0x170 [ 811.193030][T20992] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 811.198956][T20992] ? bpf_lsm_capable+0x5/0x10 [ 811.203658][T20992] ? security_capable+0x85/0xb0 [ 811.208545][T20992] genl_rcv_msg+0x601/0x790 [ 811.213077][T20992] ? genl_bind+0x360/0x360 [ 811.217513][T20992] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 811.223881][T20992] netlink_rcv_skb+0x1ef/0x440 [ 811.228675][T20992] ? genl_bind+0x360/0x360 [ 811.233112][T20992] ? netlink_ack+0x1160/0x1160 [ 811.237920][T20992] ? down_read+0x1a8/0x2d0 [ 811.242359][T20992] genl_rcv+0x24/0x40 [ 811.246359][T20992] netlink_unicast+0x7ad/0x920 [ 811.251161][T20992] netlink_sendmsg+0x8ad/0xbd0 [ 811.255970][T20992] ? netlink_getsockopt+0x550/0x550 [ 811.261201][T20992] ? apparmor_socket_sendmsg+0x8a/0x330 [ 811.266771][T20992] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 811.272074][T20992] ? security_socket_sendmsg+0x7c/0xa0 [ 811.277554][T20992] ? netlink_getsockopt+0x550/0x550 [ 811.282784][T20992] ____sys_sendmsg+0x5ed/0x9a0 [ 811.287585][T20992] ? __sys_sendmsg_sock+0x30/0x30 [ 811.292632][T20992] ? __import_iovec+0x306/0x510 [ 811.297518][T20992] ? import_iovec+0x6f/0xa0 [ 811.302047][T20992] ___sys_sendmsg+0x2a2/0x360 [ 811.306756][T20992] ? __sys_sendmsg+0x2a0/0x2a0 [ 811.311571][T20992] ? ktime_get+0x7b/0x270 [ 811.315959][T20992] __se_sys_sendmsg+0x1c3/0x2b0 [ 811.320836][T20992] ? perf_trace_preemptirq_template+0x268/0x320 [ 811.327105][T20992] ? __x64_sys_sendmsg+0x80/0x80 [ 811.332090][T20992] ? lockdep_hardirqs_on+0x94/0x140 [ 811.337311][T20992] do_syscall_64+0x4c/0xa0 [ 811.341752][T20992] ? clear_bhb_loop+0x60/0xb0 [ 811.346449][T20992] ? clear_bhb_loop+0x60/0xb0 [ 811.351152][T20992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.357067][T20992] RIP: 0033:0x7f0a0479e0d9 [ 811.361502][T20992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.381135][T20992] RSP: 002b:00007f0a0565a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.389580][T20992] RAX: ffffffffffffffda RBX: 00007f0a04a26090 RCX: 00007f0a0479e0d9 [ 811.397577][T20992] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 811.405570][T20992] RBP: 00007f0a04835024 R08: 0000000000000000 R09: 0000000000000000 [ 811.413566][T20992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.421562][T20992] R13: 00007f0a04a26128 R14: 00007f0a04a26090 R15: 00007fffea205c68 [ 811.429574][T20992] [ 811.441639][T21018] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5135'. [ 811.917506][T21032] netlink: 'syz.0.5140': attribute type 7 has an invalid length. [ 812.171150][T21038] FAULT_INJECTION: forcing a failure. [ 812.171150][T21038] name failslab, interval 1, probability 0, space 0, times 0 [ 812.238621][T21038] CPU: 0 PID: 21038 Comm: syz.0.5143 Not tainted syzkaller #0 [ 812.246162][T21038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.256245][T21038] Call Trace: [ 812.259545][T21038] [ 812.262492][T21038] dump_stack_lvl+0x188/0x24e [ 812.267211][T21038] ? show_regs_print_info+0x12/0x12 [ 812.272431][T21038] ? load_image+0x410/0x410 [ 812.277004][T21038] ? __might_sleep+0xd0/0xd0 [ 812.281616][T21038] ? __lock_acquire+0x7c40/0x7c40 [ 812.286690][T21038] should_fail_ex+0x390/0x4c0 [ 812.291410][T21038] should_failslab+0x5/0x20 [ 812.295948][T21038] slab_pre_alloc_hook+0x59/0x300 [ 812.300999][T21038] kmem_cache_alloc_lru+0x49/0x2e0 [ 812.306122][T21038] ? sock_alloc_inode+0x24/0xc0 [ 812.311019][T21038] sock_alloc_inode+0x24/0xc0 [ 812.315744][T21038] ? sockfs_init_fs_context+0xa0/0xa0 [ 812.321138][T21038] new_inode_pseudo+0x5f/0x1c0 [ 812.325929][T21038] __sock_create+0x129/0x940 [ 812.330557][T21038] ? memset+0x1e/0x40 [ 812.334583][T21038] udp_sock_create4+0xc2/0x480 [ 812.339481][T21038] ? free_zapped_rcu+0x1f0/0x1f0 [ 812.344465][T21038] ? erspan_exit_batch_net+0x20/0x20 [ 812.349782][T21038] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 812.355718][T21038] ? rcu_is_watching+0x11/0xa0 [ 812.360552][T21038] rxrpc_lookup_local+0xe00/0x1600 [ 812.365729][T21038] ? rxrpc_process_local_events+0xa40/0xa40 [ 812.371678][T21038] ? lockdep_hardirqs_on+0x94/0x140 [ 812.376920][T21038] ? _local_bh_enable+0xa0/0xa0 [ 812.381826][T21038] rxrpc_sendmsg+0x3e7/0x890 [ 812.386466][T21038] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 812.391782][T21038] ? rxrpc_getsockopt+0x150/0x150 [ 812.396851][T21038] ____sys_sendmsg+0x5ed/0x9a0 [ 812.401644][T21038] ? __lock_acquire+0x7c40/0x7c40 [ 812.406699][T21038] ? __sys_sendmsg_sock+0x30/0x30 [ 812.411750][T21038] ? __import_iovec+0x306/0x510 [ 812.416635][T21038] ? import_iovec+0x6f/0xa0 [ 812.421189][T21038] ___sys_sendmsg+0x2a2/0x360 [ 812.425922][T21038] ? __sys_sendmsg+0x2a0/0x2a0 [ 812.430765][T21038] ? __lock_acquire+0x7c40/0x7c40 [ 812.435877][T21038] __se_sys_sendmsg+0x1c3/0x2b0 [ 812.440768][T21038] ? __x64_sys_sendmsg+0x80/0x80 [ 812.445777][T21038] ? lockdep_hardirqs_on+0x94/0x140 [ 812.451009][T21038] do_syscall_64+0x4c/0xa0 [ 812.455462][T21038] ? clear_bhb_loop+0x60/0xb0 [ 812.460171][T21038] ? clear_bhb_loop+0x60/0xb0 [ 812.464869][T21038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.470771][T21038] RIP: 0033:0x7faf1419e0d9 [ 812.475198][T21038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.494806][T21038] RSP: 002b:00007faf14fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.503227][T21038] RAX: ffffffffffffffda RBX: 00007faf14425fa0 RCX: 00007faf1419e0d9 [ 812.511205][T21038] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 812.519179][T21038] RBP: 00007faf14fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 812.527152][T21038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.535127][T21038] R13: 00007faf14426038 R14: 00007faf14425fa0 R15: 00007ffce7078268 [ 812.543127][T21038] [ 812.697425][T21043] : port 1(ip6gretap0) entered blocking state [ 812.728473][T21043] : port 1(ip6gretap0) entered disabled state [ 812.759287][T21038] socket: no more sockets [ 812.778019][T21043] device ip6gretap0 entered promiscuous mode [ 812.805055][T21045] device ip6gretap0 left promiscuous mode [ 812.862042][T21045] : port 1(ip6gretap0) entered disabled state [ 812.951452][T21052] netlink: 'syz.4.5146': attribute type 29 has an invalid length. [ 813.055814][T21052] netlink: 'syz.4.5146': attribute type 29 has an invalid length. [ 813.206138][T21054] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.5148'. [ 813.285047][T21061] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5149'. [ 813.360621][T21061] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 813.422219][T21061] CPU: 0 PID: 21061 Comm: syz.3.5149 Not tainted syzkaller #0 [ 813.429747][T21061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.439817][T21061] Call Trace: [ 813.443102][T21061] [ 813.446042][T21061] dump_stack_lvl+0x188/0x24e [ 813.450830][T21061] ? show_regs_print_info+0x12/0x12 [ 813.456043][T21061] ? load_image+0x410/0x410 [ 813.460569][T21061] sysfs_warn_dup+0x8a/0xa0 [ 813.465088][T21061] sysfs_do_create_link_sd+0xc0/0x110 [ 813.470476][T21061] device_add+0x83b/0x1050 [ 813.474913][T21061] wiphy_register+0x1d8b/0x2aa0 [ 813.479796][T21061] ? cfg80211_event_work+0x40/0x40 [ 813.484916][T21061] ? minstrel_ht_alloc+0x894/0xa20 [ 813.490043][T21061] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 813.496121][T21061] ieee80211_register_hw+0x2d48/0x39f0 [ 813.501650][T21061] ? ieee80211_register_hw+0xee1/0x39f0 [ 813.507202][T21061] ? ieee80211_register_hw+0xee1/0x39f0 [ 813.512770][T21061] ? ieee80211_tasklet_handler+0x20/0x20 [ 813.518412][T21061] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 813.524316][T21061] ? __debug_object_init+0xed/0x440 [ 813.529530][T21061] ? memset+0x1e/0x40 [ 813.533516][T21061] ? __hrtimer_init+0x189/0x270 [ 813.538383][T21061] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 813.544125][T21061] ? memcpy+0x3c/0x60 [ 813.548113][T21061] hwsim_new_radio_nl+0xab7/0xc90 [ 813.553160][T21061] genl_family_rcv_msg_doit+0x22f/0x350 [ 813.558715][T21061] ? end_current_label_crit_section+0x170/0x170 [ 813.565004][T21061] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 813.570910][T21061] ? bpf_lsm_capable+0x5/0x10 [ 813.575592][T21061] ? security_capable+0x85/0xb0 [ 813.580457][T21061] genl_rcv_msg+0x601/0x790 [ 813.584964][T21061] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 813.591134][T21061] ? genl_bind+0x360/0x360 [ 813.595553][T21061] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 813.601897][T21061] ? lock_acquire+0x225/0x4a0 [ 813.606590][T21061] netlink_rcv_skb+0x1ef/0x440 [ 813.611367][T21061] ? genl_bind+0x360/0x360 [ 813.615789][T21061] ? netlink_ack+0x1160/0x1160 [ 813.620574][T21061] ? down_read+0x1a8/0x2d0 [ 813.625008][T21061] genl_rcv+0x24/0x40 [ 813.629005][T21061] netlink_unicast+0x7ad/0x920 [ 813.633796][T21061] netlink_sendmsg+0x8ad/0xbd0 [ 813.638589][T21061] ? netlink_getsockopt+0x550/0x550 [ 813.643807][T21061] ? apparmor_socket_sendmsg+0x8a/0x330 [ 813.649367][T21061] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 813.654662][T21061] ? security_socket_sendmsg+0x7c/0xa0 [ 813.660130][T21061] ? netlink_getsockopt+0x550/0x550 [ 813.665342][T21061] ____sys_sendmsg+0x5ed/0x9a0 [ 813.670126][T21061] ? __sys_sendmsg_sock+0x30/0x30 [ 813.675160][T21061] ? __import_iovec+0x306/0x510 [ 813.680028][T21061] ? import_iovec+0x6f/0xa0 [ 813.684544][T21061] ___sys_sendmsg+0x2a2/0x360 [ 813.689256][T21061] ? __sys_sendmsg+0x2a0/0x2a0 [ 813.694058][T21061] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 813.700076][T21061] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 813.706261][T21061] ? __fdget+0x17c/0x200 [ 813.710522][T21061] ? __fdget+0x17c/0x200 [ 813.714790][T21061] __se_sys_sendmsg+0x1c3/0x2b0 [ 813.719658][T21061] ? ct_nmi_exit+0x145/0x1c0 [ 813.724258][T21061] ? __x64_sys_sendmsg+0x80/0x80 [ 813.729223][T21061] ? lockdep_hardirqs_on+0x94/0x140 [ 813.734431][T21061] do_syscall_64+0x4c/0xa0 [ 813.738856][T21061] ? clear_bhb_loop+0x60/0xb0 [ 813.743538][T21061] ? clear_bhb_loop+0x60/0xb0 [ 813.748228][T21061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.754126][T21061] RIP: 0033:0x7f2a8159e0d9 [ 813.758544][T21061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.778157][T21061] RSP: 002b:00007f2a82393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.786577][T21061] RAX: ffffffffffffffda RBX: 00007f2a81826090 RCX: 00007f2a8159e0d9 [ 813.794554][T21061] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 813.802524][T21061] RBP: 00007f2a81635024 R08: 0000000000000000 R09: 0000000000000000 [ 813.810498][T21061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.818481][T21061] R13: 00007f2a81826128 R14: 00007f2a81826090 R15: 00007ffda30f65e8 [ 813.826489][T21061] [ 814.365659][T21067] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5150'. [ 814.412814][T21074] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5151'. [ 815.066055][T21097] netlink: 'syz.2.5158': attribute type 29 has an invalid length. [ 815.126226][T21097] netlink: 'syz.2.5158': attribute type 29 has an invalid length. [ 815.477242][T21110] netlink: 'syz.1.5162': attribute type 29 has an invalid length. [ 815.520996][T21110] netlink: 'syz.1.5162': attribute type 29 has an invalid length. [ 815.790740][T21117] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5166'. [ 816.031919][T21128] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5168'. [ 816.118452][T21128] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 816.201273][T21128] CPU: 0 PID: 21128 Comm: syz.3.5168 Not tainted syzkaller #0 [ 816.208800][T21128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.218871][T21128] Call Trace: [ 816.222154][T21128] [ 816.225090][T21128] dump_stack_lvl+0x188/0x24e [ 816.229803][T21128] ? show_regs_print_info+0x12/0x12 [ 816.235030][T21128] ? load_image+0x410/0x410 [ 816.239561][T21128] sysfs_warn_dup+0x8a/0xa0 [ 816.244090][T21128] sysfs_do_create_link_sd+0xc0/0x110 [ 816.249495][T21128] device_add+0x83b/0x1050 [ 816.253936][T21128] wiphy_register+0x1d8b/0x2aa0 [ 816.258837][T21128] ? cfg80211_event_work+0x40/0x40 [ 816.263980][T21128] ? minstrel_ht_alloc+0x894/0xa20 [ 816.269124][T21128] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 816.275218][T21128] ieee80211_register_hw+0x2d48/0x39f0 [ 816.280718][T21128] ? ieee80211_register_hw+0xee1/0x39f0 [ 816.286292][T21128] ? ieee80211_register_hw+0xee1/0x39f0 [ 816.291870][T21128] ? ieee80211_tasklet_handler+0x20/0x20 [ 816.297524][T21128] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 816.303437][T21128] ? __debug_object_init+0xed/0x440 [ 816.308662][T21128] ? memset+0x1e/0x40 [ 816.312643][T21128] ? __hrtimer_init+0x189/0x270 [ 816.317497][T21128] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 816.323238][T21128] hwsim_new_radio_nl+0xab7/0xc90 [ 816.328286][T21128] genl_family_rcv_msg_doit+0x22f/0x350 [ 816.333828][T21128] ? end_current_label_crit_section+0x170/0x170 [ 816.340070][T21128] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 816.345965][T21128] ? bpf_lsm_capable+0x5/0x10 [ 816.350636][T21128] ? security_capable+0x85/0xb0 [ 816.355486][T21128] genl_rcv_msg+0x601/0x790 [ 816.359988][T21128] ? genl_bind+0x360/0x360 [ 816.364396][T21128] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 816.370728][T21128] netlink_rcv_skb+0x1ef/0x440 [ 816.375488][T21128] ? genl_bind+0x360/0x360 [ 816.379895][T21128] ? netlink_ack+0x1160/0x1160 [ 816.384662][T21128] ? down_read+0x1a8/0x2d0 [ 816.389071][T21128] genl_rcv+0x24/0x40 [ 816.393049][T21128] netlink_unicast+0x7ad/0x920 [ 816.397838][T21128] netlink_sendmsg+0x8ad/0xbd0 [ 816.402609][T21128] ? netlink_getsockopt+0x550/0x550 [ 816.407808][T21128] ? apparmor_socket_sendmsg+0x8a/0x330 [ 816.413355][T21128] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 816.418633][T21128] ? security_socket_sendmsg+0x7c/0xa0 [ 816.424108][T21128] ? netlink_getsockopt+0x550/0x550 [ 816.429307][T21128] ____sys_sendmsg+0x5ed/0x9a0 [ 816.434105][T21128] ? __sys_sendmsg_sock+0x30/0x30 [ 816.439145][T21128] ? __import_iovec+0x306/0x510 [ 816.444003][T21128] ? import_iovec+0x6f/0xa0 [ 816.448504][T21128] ___sys_sendmsg+0x2a2/0x360 [ 816.453190][T21128] ? __sys_sendmsg+0x2a0/0x2a0 [ 816.457996][T21128] __se_sys_sendmsg+0x1c3/0x2b0 [ 816.462875][T21128] ? __x64_sys_sendmsg+0x80/0x80 [ 816.467830][T21128] do_syscall_64+0x4c/0xa0 [ 816.472247][T21128] ? clear_bhb_loop+0x60/0xb0 [ 816.476921][T21128] ? clear_bhb_loop+0x60/0xb0 [ 816.481601][T21128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.487488][T21128] RIP: 0033:0x7f2a8159e0d9 [ 816.491896][T21128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.511492][T21128] RSP: 002b:00007f2a82393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.519902][T21128] RAX: ffffffffffffffda RBX: 00007f2a81826090 RCX: 00007f2a8159e0d9 [ 816.527867][T21128] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 816.535830][T21128] RBP: 00007f2a81635024 R08: 0000000000000000 R09: 0000000000000000 [ 816.543794][T21128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.551758][T21128] R13: 00007f2a81826128 R14: 00007f2a81826090 R15: 00007ffda30f65e8 [ 816.559738][T21128] [ 816.654935][T21134] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5170'. [ 817.085356][T21154] FAULT_INJECTION: forcing a failure. [ 817.085356][T21154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.126831][T21154] CPU: 1 PID: 21154 Comm: syz.4.5177 Not tainted syzkaller #0 [ 817.134355][T21154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.144419][T21154] Call Trace: [ 817.147702][T21154] [ 817.150637][T21154] dump_stack_lvl+0x188/0x24e [ 817.155335][T21154] ? show_regs_print_info+0x12/0x12 [ 817.160549][T21154] ? load_image+0x410/0x410 [ 817.165065][T21154] ? __lock_acquire+0x7c40/0x7c40 [ 817.170104][T21154] should_fail_ex+0x390/0x4c0 [ 817.174798][T21154] _copy_from_user+0x2c/0x170 [ 817.179486][T21154] bpf_test_init+0xde/0x140 [ 817.184002][T21154] bpf_prog_test_run_xdp+0x488/0xf80 [ 817.189300][T21154] ? __lock_acquire+0x7c40/0x7c40 [ 817.194345][T21154] ? dev_put+0x80/0x80 [ 817.198436][T21154] ? dev_put+0x80/0x80 [ 817.202523][T21154] bpf_prog_test_run+0x31c/0x390 [ 817.207488][T21154] __sys_bpf+0x62b/0x780 [ 817.211746][T21154] ? bpf_link_show_fdinfo+0x380/0x380 [ 817.217142][T21154] ? lock_chain_count+0x20/0x20 [ 817.222000][T21154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 817.227996][T21154] __x64_sys_bpf+0x78/0x90 [ 817.232424][T21154] do_syscall_64+0x4c/0xa0 [ 817.236853][T21154] ? clear_bhb_loop+0x60/0xb0 [ 817.241542][T21154] ? clear_bhb_loop+0x60/0xb0 [ 817.246235][T21154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.252142][T21154] RIP: 0033:0x7f0a0479e0d9 [ 817.256564][T21154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.276182][T21154] RSP: 002b:00007f0a0565a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.284613][T21154] RAX: ffffffffffffffda RBX: 00007f0a04a26090 RCX: 00007f0a0479e0d9 [ 817.292589][T21154] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 817.300569][T21154] RBP: 00007f0a0565a090 R08: 0000000000000000 R09: 0000000000000000 [ 817.308546][T21154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.316520][T21154] R13: 00007f0a04a26128 R14: 00007f0a04a26090 R15: 00007fffea205c68 [ 817.324510][T21154] [ 817.530704][T21164] netlink: 'syz.0.5179': attribute type 29 has an invalid length. [ 817.602741][T21164] netlink: 'syz.0.5179': attribute type 29 has an invalid length. [ 817.655839][T21170] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5181'. [ 819.129219][T21195] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5188'. [ 819.213065][T21195] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 819.293623][T21195] CPU: 0 PID: 21195 Comm: syz.0.5188 Not tainted syzkaller #0 [ 819.301141][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.311211][T21195] Call Trace: [ 819.314509][T21195] [ 819.317458][T21195] dump_stack_lvl+0x188/0x24e [ 819.322161][T21195] ? show_regs_print_info+0x12/0x12 [ 819.327385][T21195] ? load_image+0x410/0x410 [ 819.331924][T21195] sysfs_warn_dup+0x8a/0xa0 [ 819.336455][T21195] sysfs_do_create_link_sd+0xc0/0x110 [ 819.341856][T21195] device_add+0x83b/0x1050 [ 819.346307][T21195] wiphy_register+0x1d8b/0x2aa0 [ 819.351184][T21195] ? __rtnl_unlock+0x14/0xe0 [ 819.355818][T21195] ? cfg80211_event_work+0x40/0x40 [ 819.360950][T21195] ? minstrel_ht_alloc+0x894/0xa20 [ 819.366090][T21195] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 819.372174][T21195] ieee80211_register_hw+0x2d48/0x39f0 [ 819.377653][T21195] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 819.383843][T21195] ? ieee80211_register_hw+0xee1/0x39f0 [ 819.389391][T21195] ? ieee80211_register_hw+0xee1/0x39f0 [ 819.394942][T21195] ? ieee80211_tasklet_handler+0x20/0x20 [ 819.400568][T21195] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 819.406459][T21195] ? __debug_object_init+0xed/0x440 [ 819.411659][T21195] ? memset+0x1e/0x40 [ 819.415635][T21195] ? __hrtimer_init+0x189/0x270 [ 819.420485][T21195] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 819.426208][T21195] ? memcpy+0x3c/0x60 [ 819.430185][T21195] hwsim_new_radio_nl+0xab7/0xc90 [ 819.435219][T21195] genl_family_rcv_msg_doit+0x22f/0x350 [ 819.440758][T21195] ? end_current_label_crit_section+0x170/0x170 [ 819.447003][T21195] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 819.452893][T21195] ? bpf_lsm_capable+0x5/0x10 [ 819.457567][T21195] ? security_capable+0x85/0xb0 [ 819.462452][T21195] genl_rcv_msg+0x601/0x790 [ 819.466956][T21195] ? genl_bind+0x360/0x360 [ 819.471389][T21195] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 819.477726][T21195] netlink_rcv_skb+0x1ef/0x440 [ 819.482488][T21195] ? genl_bind+0x360/0x360 [ 819.486902][T21195] ? netlink_ack+0x1160/0x1160 [ 819.491670][T21195] ? down_read+0x1a8/0x2d0 [ 819.496080][T21195] genl_rcv+0x24/0x40 [ 819.500054][T21195] netlink_unicast+0x7ad/0x920 [ 819.504824][T21195] netlink_sendmsg+0x8ad/0xbd0 [ 819.509591][T21195] ? netlink_getsockopt+0x550/0x550 [ 819.514801][T21195] ? netlink_getsockopt+0x550/0x550 [ 819.519999][T21195] ____sys_sendmsg+0x5ed/0x9a0 [ 819.524770][T21195] ? __sys_sendmsg_sock+0x30/0x30 [ 819.529798][T21195] ? __import_iovec+0x306/0x510 [ 819.534648][T21195] ? import_iovec+0x6f/0xa0 [ 819.539156][T21195] ___sys_sendmsg+0x2a2/0x360 [ 819.543838][T21195] ? __sys_sendmsg+0x2a0/0x2a0 [ 819.548616][T21195] ? ktime_get+0x7b/0x270 [ 819.552957][T21195] __se_sys_sendmsg+0x1c3/0x2b0 [ 819.557829][T21195] ? perf_trace_preemptirq_template+0x268/0x320 [ 819.564069][T21195] ? __x64_sys_sendmsg+0x80/0x80 [ 819.569014][T21195] ? lockdep_hardirqs_on+0x94/0x140 [ 819.574220][T21195] do_syscall_64+0x4c/0xa0 [ 819.578635][T21195] ? clear_bhb_loop+0x60/0xb0 [ 819.583314][T21195] ? clear_bhb_loop+0x60/0xb0 [ 819.587988][T21195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.593873][T21195] RIP: 0033:0x7faf1419e0d9 [ 819.598284][T21195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.617881][T21195] RSP: 002b:00007faf14fbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.626293][T21195] RAX: ffffffffffffffda RBX: 00007faf14426090 RCX: 00007faf1419e0d9 [ 819.634257][T21195] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 819.642234][T21195] RBP: 00007faf14235024 R08: 0000000000000000 R09: 0000000000000000 [ 819.650216][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.658193][T21195] R13: 00007faf14426128 R14: 00007faf14426090 R15: 00007ffce7078268 [ 819.666178][T21195] [ 820.009206][T21214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5193'. [ 820.576680][T21235] netlink: 'syz.0.5198': attribute type 29 has an invalid length. [ 820.624060][T21235] netlink: 'syz.0.5198': attribute type 29 has an invalid length. [ 820.659084][T21239] : port 1(ip6gretap0) entered blocking state [ 820.701605][T21239] : port 1(ip6gretap0) entered disabled state [ 820.737601][T21239] device ip6gretap0 entered promiscuous mode [ 821.487066][T21251] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5203'. [ 821.609826][T21251] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 821.674246][T21251] CPU: 1 PID: 21251 Comm: syz.3.5203 Not tainted syzkaller #0 [ 821.681778][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.691879][T21251] Call Trace: [ 821.695203][T21251] [ 821.698178][T21251] dump_stack_lvl+0x188/0x24e [ 821.702923][T21251] ? show_regs_print_info+0x12/0x12 [ 821.708183][T21251] ? load_image+0x410/0x410 [ 821.712775][T21251] sysfs_warn_dup+0x8a/0xa0 [ 821.717427][T21251] sysfs_do_create_link_sd+0xc0/0x110 [ 821.722863][T21251] device_add+0x83b/0x1050 [ 821.727354][T21251] wiphy_register+0x1d8b/0x2aa0 [ 821.732311][T21251] ? cfg80211_event_work+0x40/0x40 [ 821.737471][T21251] ? minstrel_ht_alloc+0x894/0xa20 [ 821.742656][T21251] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 821.748785][T21251] ieee80211_register_hw+0x2d48/0x39f0 [ 821.754336][T21251] ? ieee80211_register_hw+0xee1/0x39f0 [ 821.759927][T21251] ? ieee80211_register_hw+0xee1/0x39f0 [ 821.765537][T21251] ? ieee80211_tasklet_handler+0x20/0x20 [ 821.771248][T21251] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 821.777203][T21251] ? __debug_object_init+0xed/0x440 [ 821.782457][T21251] ? memset+0x1e/0x40 [ 821.786479][T21251] ? __hrtimer_init+0x189/0x270 [ 821.791378][T21251] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 821.797167][T21251] ? memcpy+0x3c/0x60 [ 821.801206][T21251] hwsim_new_radio_nl+0xab7/0xc90 [ 821.806318][T21251] genl_family_rcv_msg_doit+0x22f/0x350 [ 821.811900][T21251] ? end_current_label_crit_section+0x170/0x170 [ 821.818199][T21251] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 821.824163][T21251] ? bpf_lsm_capable+0x5/0x10 [ 821.828879][T21251] ? security_capable+0x85/0xb0 [ 821.833801][T21251] genl_rcv_msg+0x601/0x790 [ 821.838378][T21251] ? genl_bind+0x360/0x360 [ 821.842828][T21251] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 821.849252][T21251] netlink_rcv_skb+0x1ef/0x440 [ 821.854063][T21251] ? genl_bind+0x360/0x360 [ 821.858520][T21251] ? netlink_ack+0x1160/0x1160 [ 821.863341][T21251] ? down_read+0x1a8/0x2d0 [ 821.867787][T21251] genl_rcv+0x24/0x40 [ 821.871799][T21251] netlink_unicast+0x7ad/0x920 [ 821.876631][T21251] netlink_sendmsg+0x8ad/0xbd0 [ 821.881466][T21251] ? netlink_getsockopt+0x550/0x550 [ 821.886713][T21251] ? apparmor_socket_sendmsg+0x8a/0x330 [ 821.892308][T21251] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 821.897615][T21251] ? security_socket_sendmsg+0x7c/0xa0 [ 821.903107][T21251] ? netlink_getsockopt+0x550/0x550 [ 821.908343][T21251] ____sys_sendmsg+0x5ed/0x9a0 [ 821.913179][T21251] ? __sys_sendmsg_sock+0x30/0x30 [ 821.918232][T21251] ? __import_iovec+0x306/0x510 [ 821.923150][T21251] ? import_iovec+0x6f/0xa0 [ 821.927697][T21251] ___sys_sendmsg+0x2a2/0x360 [ 821.932426][T21251] ? __sys_sendmsg+0x2a0/0x2a0 [ 821.937390][T21251] __se_sys_sendmsg+0x1c3/0x2b0 [ 821.942286][T21251] ? __x64_sys_sendmsg+0x80/0x80 [ 821.947327][T21251] do_syscall_64+0x4c/0xa0 [ 821.951772][T21251] ? clear_bhb_loop+0x60/0xb0 [ 821.956475][T21251] ? clear_bhb_loop+0x60/0xb0 [ 821.961191][T21251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.967157][T21251] RIP: 0033:0x7f2a8159e0d9 [ 821.971602][T21251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.991234][T21251] RSP: 002b:00007f2a82393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.999679][T21251] RAX: ffffffffffffffda RBX: 00007f2a81826090 RCX: 00007f2a8159e0d9 [ 822.007678][T21251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 822.015673][T21251] RBP: 00007f2a81635024 R08: 0000000000000000 R09: 0000000000000000 [ 822.023669][T21251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.031658][T21251] R13: 00007f2a81826128 R14: 00007f2a81826090 R15: 00007ffda30f65e8 [ 822.039706][T21251] [ 822.101143][T21256] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5204'. [ 822.191236][T21266] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5207'. [ 822.941718][T21287] netlink: 'syz.1.5214': attribute type 29 has an invalid length. [ 822.980120][T21287] netlink: 'syz.1.5214': attribute type 29 has an invalid length. [ 823.963043][T21306] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5220'. [ 824.129147][T21313] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5222'. [ 824.280150][T21313] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 824.288760][T21313] CPU: 1 PID: 21313 Comm: syz.2.5222 Not tainted syzkaller #0 [ 824.296249][T21313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.298696][T21320] FAULT_INJECTION: forcing a failure. [ 824.298696][T21320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.306299][T21313] Call Trace: [ 824.306309][T21313] [ 824.306318][T21313] dump_stack_lvl+0x188/0x24e [ 824.306352][T21313] ? show_regs_print_info+0x12/0x12 [ 824.335425][T21313] ? load_image+0x410/0x410 [ 824.339959][T21313] sysfs_warn_dup+0x8a/0xa0 [ 824.344478][T21313] sysfs_do_create_link_sd+0xc0/0x110 [ 824.349860][T21313] device_add+0x83b/0x1050 [ 824.354294][T21313] wiphy_register+0x1d8b/0x2aa0 [ 824.359160][T21313] ? cfg80211_event_work+0x40/0x40 [ 824.364271][T21313] ? minstrel_ht_alloc+0x894/0xa20 [ 824.369392][T21313] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 824.375460][T21313] ieee80211_register_hw+0x2d48/0x39f0 [ 824.380931][T21313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 824.387099][T21313] ? ieee80211_register_hw+0xee1/0x39f0 [ 824.392647][T21313] ? ieee80211_register_hw+0xee1/0x39f0 [ 824.398210][T21313] ? ieee80211_tasklet_handler+0x20/0x20 [ 824.403860][T21313] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 824.409769][T21313] ? __debug_object_init+0xed/0x440 [ 824.414980][T21313] ? memset+0x1e/0x40 [ 824.418962][T21313] ? __hrtimer_init+0x189/0x270 [ 824.423818][T21313] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 824.429550][T21313] ? memcpy+0x3c/0x60 [ 824.433535][T21313] hwsim_new_radio_nl+0xab7/0xc90 [ 824.438590][T21313] genl_family_rcv_msg_doit+0x22f/0x350 [ 824.444153][T21313] ? end_current_label_crit_section+0x170/0x170 [ 824.450424][T21313] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 824.456329][T21313] ? bpf_lsm_capable+0x5/0x10 [ 824.461008][T21313] ? security_capable+0x85/0xb0 [ 824.465872][T21313] genl_rcv_msg+0x601/0x790 [ 824.470399][T21313] ? genl_bind+0x360/0x360 [ 824.474813][T21313] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 824.481165][T21313] netlink_rcv_skb+0x1ef/0x440 [ 824.485939][T21313] ? genl_bind+0x360/0x360 [ 824.490357][T21313] ? netlink_ack+0x1160/0x1160 [ 824.495153][T21313] ? down_read+0x1a8/0x2d0 [ 824.499588][T21313] genl_rcv+0x24/0x40 [ 824.503578][T21313] netlink_unicast+0x7ad/0x920 [ 824.508363][T21313] netlink_sendmsg+0x8ad/0xbd0 [ 824.513154][T21313] ? netlink_getsockopt+0x550/0x550 [ 824.518364][T21313] ? apparmor_socket_sendmsg+0x8a/0x330 [ 824.523919][T21313] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 824.529203][T21313] ? security_socket_sendmsg+0x7c/0xa0 [ 824.534659][T21313] ? netlink_getsockopt+0x550/0x550 [ 824.539863][T21313] ____sys_sendmsg+0x5ed/0x9a0 [ 824.544733][T21313] ? __sys_sendmsg_sock+0x30/0x30 [ 824.549771][T21313] ? __import_iovec+0x306/0x510 [ 824.554651][T21313] ? import_iovec+0x6f/0xa0 [ 824.559169][T21313] ___sys_sendmsg+0x2a2/0x360 [ 824.563856][T21313] ? __sys_sendmsg+0x2a0/0x2a0 [ 824.568644][T21313] ? ktime_get+0x7b/0x270 [ 824.572998][T21313] __se_sys_sendmsg+0x1c3/0x2b0 [ 824.577850][T21313] ? perf_trace_preemptirq_template+0x268/0x320 [ 824.584092][T21313] ? __x64_sys_sendmsg+0x80/0x80 [ 824.589044][T21313] ? lockdep_hardirqs_on+0x94/0x140 [ 824.594248][T21313] do_syscall_64+0x4c/0xa0 [ 824.598677][T21313] ? clear_bhb_loop+0x60/0xb0 [ 824.603362][T21313] ? clear_bhb_loop+0x60/0xb0 [ 824.608049][T21313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.613948][T21313] RIP: 0033:0x7fc3a139e0d9 [ 824.618363][T21313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.637981][T21313] RSP: 002b:00007fc3a2301028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.646415][T21313] RAX: ffffffffffffffda RBX: 00007fc3a1626090 RCX: 00007fc3a139e0d9 [ 824.654409][T21313] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 824.662385][T21313] RBP: 00007fc3a1435024 R08: 0000000000000000 R09: 0000000000000000 [ 824.670359][T21313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.678338][T21313] R13: 00007fc3a1626128 R14: 00007fc3a1626090 R15: 00007ffd7d1b6598 [ 824.686347][T21313] [ 824.689377][T21320] CPU: 0 PID: 21320 Comm: syz.1.5224 Not tainted syzkaller #0 [ 824.696856][T21320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.706907][T21320] Call Trace: [ 824.710179][T21320] [ 824.713100][T21320] dump_stack_lvl+0x188/0x24e [ 824.717778][T21320] ? show_regs_print_info+0x12/0x12 [ 824.722970][T21320] ? load_image+0x410/0x410 [ 824.727552][T21320] ? __lock_acquire+0x7c40/0x7c40 [ 824.732577][T21320] should_fail_ex+0x390/0x4c0 [ 824.737251][T21320] _copy_to_user+0x2c/0x130 [ 824.741745][T21320] bpf_test_finish+0x266/0x600 [ 824.746509][T21320] ? convert_skb_to___skb+0x420/0x420 [ 824.751876][T21320] ? bpf_test_init+0x119/0x140 [ 824.756635][T21320] bpf_prog_test_run_xdp+0x827/0xf80 [ 824.761910][T21320] ? __lock_acquire+0x7c40/0x7c40 [ 824.766935][T21320] ? dev_put+0x80/0x80 [ 824.771002][T21320] ? dev_put+0x80/0x80 [ 824.775061][T21320] bpf_prog_test_run+0x31c/0x390 [ 824.779991][T21320] __sys_bpf+0x62b/0x780 [ 824.784225][T21320] ? bpf_link_show_fdinfo+0x380/0x380 [ 824.789605][T21320] ? lock_chain_count+0x20/0x20 [ 824.794455][T21320] __x64_sys_bpf+0x78/0x90 [ 824.798864][T21320] do_syscall_64+0x4c/0xa0 [ 824.803274][T21320] ? clear_bhb_loop+0x60/0xb0 [ 824.807944][T21320] ? clear_bhb_loop+0x60/0xb0 [ 824.812613][T21320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.818497][T21320] RIP: 0033:0x7f0d3739e0d9 [ 824.822901][T21320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.842510][T21320] RSP: 002b:00007f0d3826a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.850922][T21320] RAX: ffffffffffffffda RBX: 00007f0d37625fa0 RCX: 00007f0d3739e0d9 [ 824.858907][T21320] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 824.866885][T21320] RBP: 00007f0d3826a090 R08: 0000000000000000 R09: 0000000000000000 [ 824.874855][T21320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.882823][T21320] R13: 00007f0d37626038 R14: 00007f0d37625fa0 R15: 00007ffe08067238 [ 824.890810][T21320] [ 825.589258][T21346] netlink: 'syz.0.5231': attribute type 29 has an invalid length. [ 825.617712][T21345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5233'. [ 825.665042][T21346] netlink: 'syz.0.5231': attribute type 29 has an invalid length. [ 825.666991][T21347] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5232'. [ 825.818857][T21351] device syzkaller0 entered promiscuous mode [ 825.840149][T21347] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 825.866969][T21347] CPU: 0 PID: 21347 Comm: syz.1.5232 Not tainted syzkaller #0 [ 825.874484][T21347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.884547][T21347] Call Trace: [ 825.887824][T21347] [ 825.890749][T21347] dump_stack_lvl+0x188/0x24e [ 825.895431][T21347] ? show_regs_print_info+0x12/0x12 [ 825.900627][T21347] ? load_image+0x410/0x410 [ 825.905133][T21347] sysfs_warn_dup+0x8a/0xa0 [ 825.909637][T21347] sysfs_do_create_link_sd+0xc0/0x110 [ 825.915006][T21347] device_add+0x83b/0x1050 [ 825.919426][T21347] wiphy_register+0x1d8b/0x2aa0 [ 825.924294][T21347] ? cfg80211_event_work+0x40/0x40 [ 825.929407][T21347] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 825.935469][T21347] ieee80211_register_hw+0x2d48/0x39f0 [ 825.940926][T21347] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 825.947093][T21347] ? ieee80211_register_hw+0xee1/0x39f0 [ 825.952636][T21347] ? ieee80211_register_hw+0xee1/0x39f0 [ 825.958185][T21347] ? ieee80211_tasklet_handler+0x20/0x20 [ 825.963811][T21347] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 825.969704][T21347] ? __debug_object_init+0xed/0x440 [ 825.974905][T21347] ? memset+0x1e/0x40 [ 825.978879][T21347] ? __hrtimer_init+0x189/0x270 [ 825.983724][T21347] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 825.989449][T21347] ? memcpy+0x3c/0x60 [ 825.993430][T21347] hwsim_new_radio_nl+0xab7/0xc90 [ 825.998458][T21347] genl_family_rcv_msg_doit+0x22f/0x350 [ 826.003997][T21347] ? end_current_label_crit_section+0x170/0x170 [ 826.010238][T21347] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 826.016134][T21347] ? bpf_lsm_capable+0x5/0x10 [ 826.020810][T21347] ? security_capable+0x85/0xb0 [ 826.025752][T21347] genl_rcv_msg+0x601/0x790 [ 826.030248][T21347] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 826.036408][T21347] ? genl_bind+0x360/0x360 [ 826.040822][T21347] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 826.047151][T21347] ? lock_acquire+0x225/0x4a0 [ 826.051825][T21347] netlink_rcv_skb+0x1ef/0x440 [ 826.056587][T21347] ? genl_bind+0x360/0x360 [ 826.060992][T21347] ? netlink_ack+0x1160/0x1160 [ 826.065767][T21347] ? down_read+0x1a8/0x2d0 [ 826.070174][T21347] genl_rcv+0x24/0x40 [ 826.074146][T21347] netlink_unicast+0x7ad/0x920 [ 826.079001][T21347] netlink_sendmsg+0x8ad/0xbd0 [ 826.083769][T21347] ? netlink_getsockopt+0x550/0x550 [ 826.088964][T21347] ? apparmor_socket_sendmsg+0x8a/0x330 [ 826.094507][T21347] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 826.099783][T21347] ? security_socket_sendmsg+0x7c/0xa0 [ 826.105234][T21347] ? netlink_getsockopt+0x550/0x550 [ 826.110434][T21347] ____sys_sendmsg+0x5ed/0x9a0 [ 826.115200][T21347] ? __sys_sendmsg_sock+0x30/0x30 [ 826.120219][T21347] ? __import_iovec+0x306/0x510 [ 826.125074][T21347] ? import_iovec+0x6f/0xa0 [ 826.129572][T21347] ___sys_sendmsg+0x2a2/0x360 [ 826.134247][T21347] ? __sys_sendmsg+0x2a0/0x2a0 [ 826.139028][T21347] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 826.144764][T21347] __se_sys_sendmsg+0x1c3/0x2b0 [ 826.149614][T21347] ? __x64_sys_sendmsg+0x80/0x80 [ 826.154559][T21347] ? syscall_enter_from_user_mode+0x2a/0x80 [ 826.160445][T21347] do_syscall_64+0x4c/0xa0 [ 826.164857][T21347] ? clear_bhb_loop+0x60/0xb0 [ 826.169527][T21347] ? clear_bhb_loop+0x60/0xb0 [ 826.174201][T21347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.180085][T21347] RIP: 0033:0x7f0d3739e0d9 [ 826.184491][T21347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.204088][T21347] RSP: 002b:00007f0d38249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.212494][T21347] RAX: ffffffffffffffda RBX: 00007f0d37626090 RCX: 00007f0d3739e0d9 [ 826.220457][T21347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 826.228447][T21347] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 826.236408][T21347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.244369][T21347] R13: 00007f0d37626128 R14: 00007f0d37626090 R15: 00007ffe08067238 [ 826.252344][T21347] [ 826.562873][T21361] netlink: 'syz.3.5235': attribute type 29 has an invalid length. [ 826.606279][T21361] netlink: 'syz.3.5235': attribute type 29 has an invalid length. [ 826.800123][T21369] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5239'. [ 828.620835][T21367] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5237'. [ 828.632339][T21369] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 828.653416][T21369] CPU: 0 PID: 21369 Comm: syz.1.5239 Not tainted syzkaller #0 [ 828.660916][T21369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.670986][T21369] Call Trace: [ 828.674279][T21369] [ 828.677219][T21369] dump_stack_lvl+0x188/0x24e [ 828.681922][T21369] ? show_regs_print_info+0x12/0x12 [ 828.687149][T21369] ? load_image+0x410/0x410 [ 828.691691][T21369] sysfs_warn_dup+0x8a/0xa0 [ 828.696221][T21369] sysfs_do_create_link_sd+0xc0/0x110 [ 828.701621][T21369] device_add+0x83b/0x1050 [ 828.706066][T21369] wiphy_register+0x1d8b/0x2aa0 [ 828.710951][T21369] ? cfg80211_event_work+0x40/0x40 [ 828.716084][T21369] ? minstrel_ht_alloc+0x894/0xa20 [ 828.721227][T21369] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 828.727317][T21369] ieee80211_register_hw+0x2d48/0x39f0 [ 828.732805][T21369] ? ieee80211_register_hw+0xee1/0x39f0 [ 828.738369][T21369] ? ieee80211_register_hw+0xee1/0x39f0 [ 828.743948][T21369] ? ieee80211_tasklet_handler+0x20/0x20 [ 828.749598][T21369] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 828.755509][T21369] ? __debug_object_init+0xed/0x440 [ 828.760712][T21369] ? memset+0x1e/0x40 [ 828.764686][T21369] ? __hrtimer_init+0x189/0x270 [ 828.769531][T21369] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 828.775255][T21369] ? memcpy+0x3c/0x60 [ 828.779232][T21369] hwsim_new_radio_nl+0xab7/0xc90 [ 828.784262][T21369] genl_family_rcv_msg_doit+0x22f/0x350 [ 828.789796][T21369] ? end_current_label_crit_section+0x170/0x170 [ 828.796034][T21369] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 828.801929][T21369] ? bpf_lsm_capable+0x5/0x10 [ 828.806602][T21369] ? security_capable+0x85/0xb0 [ 828.811456][T21369] genl_rcv_msg+0x601/0x790 [ 828.815959][T21369] ? genl_bind+0x360/0x360 [ 828.820370][T21369] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 828.826705][T21369] netlink_rcv_skb+0x1ef/0x440 [ 828.831466][T21369] ? genl_bind+0x360/0x360 [ 828.835875][T21369] ? netlink_ack+0x1160/0x1160 [ 828.840641][T21369] ? down_read+0x1a8/0x2d0 [ 828.845049][T21369] genl_rcv+0x24/0x40 [ 828.849020][T21369] netlink_unicast+0x7ad/0x920 [ 828.853788][T21369] netlink_sendmsg+0x8ad/0xbd0 [ 828.858578][T21369] ? netlink_getsockopt+0x550/0x550 [ 828.863814][T21369] ? apparmor_socket_sendmsg+0x8a/0x330 [ 828.869366][T21369] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 828.874647][T21369] ? security_socket_sendmsg+0x7c/0xa0 [ 828.880108][T21369] ? netlink_getsockopt+0x550/0x550 [ 828.885313][T21369] ____sys_sendmsg+0x5ed/0x9a0 [ 828.890087][T21369] ? __sys_sendmsg_sock+0x30/0x30 [ 828.895114][T21369] ? __import_iovec+0x306/0x510 [ 828.899970][T21369] ? import_iovec+0x6f/0xa0 [ 828.904473][T21369] ___sys_sendmsg+0x2a2/0x360 [ 828.909152][T21369] ? __sys_sendmsg+0x2a0/0x2a0 [ 828.913931][T21369] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 828.919668][T21369] __se_sys_sendmsg+0x1c3/0x2b0 [ 828.924519][T21369] ? __x64_sys_sendmsg+0x80/0x80 [ 828.929471][T21369] ? syscall_enter_from_user_mode+0x2a/0x80 [ 828.935358][T21369] do_syscall_64+0x4c/0xa0 [ 828.939767][T21369] ? clear_bhb_loop+0x60/0xb0 [ 828.944439][T21369] ? clear_bhb_loop+0x60/0xb0 [ 828.949111][T21369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.954994][T21369] RIP: 0033:0x7f0d3739e0d9 [ 828.959403][T21369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.979012][T21369] RSP: 002b:00007f0d38249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.987424][T21369] RAX: ffffffffffffffda RBX: 00007f0d37626090 RCX: 00007f0d3739e0d9 [ 828.995386][T21369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 829.003351][T21369] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 829.011317][T21369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.019281][T21369] R13: 00007f0d37626128 R14: 00007f0d37626090 R15: 00007ffe08067238 [ 829.027256][T21369] [ 829.065172][T21376] : port 1(ip6gretap0) entered blocking state [ 829.071542][T21376] : port 1(ip6gretap0) entered disabled state [ 829.081072][T21376] device ip6gretap0 entered promiscuous mode [ 829.088332][T21377] device ip6gretap0 left promiscuous mode [ 829.103829][T21377] : port 1(ip6gretap0) entered disabled state [ 829.185683][T21390] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5246'. [ 829.326272][T21399] netlink: 'syz.3.5247': attribute type 29 has an invalid length. [ 829.354684][T21398] netlink: 'syz.1.5249': attribute type 2 has an invalid length. [ 829.355911][T21399] netlink: 'syz.3.5247': attribute type 29 has an invalid length. [ 829.362510][T21398] netlink: 148216 bytes leftover after parsing attributes in process `syz.1.5249'. [ 829.403572][T21400] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5248'. [ 829.494354][T21400] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 829.502276][T21400] CPU: 1 PID: 21400 Comm: syz.2.5248 Not tainted syzkaller #0 [ 829.509751][T21400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.519819][T21400] Call Trace: [ 829.523114][T21400] [ 829.526054][T21400] dump_stack_lvl+0x188/0x24e [ 829.530761][T21400] ? show_regs_print_info+0x12/0x12 [ 829.535978][T21400] ? load_image+0x410/0x410 [ 829.540501][T21400] sysfs_warn_dup+0x8a/0xa0 [ 829.545021][T21400] sysfs_do_create_link_sd+0xc0/0x110 [ 829.550418][T21400] device_add+0x83b/0x1050 [ 829.554856][T21400] wiphy_register+0x1d8b/0x2aa0 [ 829.559734][T21400] ? cfg80211_event_work+0x40/0x40 [ 829.564860][T21400] ? minstrel_ht_alloc+0x894/0xa20 [ 829.569988][T21400] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 829.576068][T21400] ieee80211_register_hw+0x2d48/0x39f0 [ 829.581555][T21400] ? ieee80211_register_hw+0xee1/0x39f0 [ 829.587112][T21400] ? ieee80211_register_hw+0xee1/0x39f0 [ 829.592675][T21400] ? ieee80211_tasklet_handler+0x20/0x20 [ 829.598317][T21400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 829.604221][T21400] ? __debug_object_init+0xed/0x440 [ 829.609437][T21400] ? memset+0x1e/0x40 [ 829.614310][T21400] ? __hrtimer_init+0x189/0x270 [ 829.619185][T21400] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 829.624957][T21400] ? memcpy+0x3c/0x60 [ 829.629114][T21400] hwsim_new_radio_nl+0xab7/0xc90 [ 829.634187][T21400] genl_family_rcv_msg_doit+0x22f/0x350 [ 829.639745][T21400] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 829.645921][T21400] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 829.651831][T21400] ? bpf_lsm_capable+0x5/0x10 [ 829.656520][T21400] ? security_capable+0x85/0xb0 [ 829.661393][T21400] genl_rcv_msg+0x601/0x790 [ 829.665902][T21400] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 829.672079][T21400] ? genl_bind+0x360/0x360 [ 829.676505][T21400] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 829.682854][T21400] ? kasan_check_range+0x84/0x290 [ 829.687905][T21400] netlink_rcv_skb+0x1ef/0x440 [ 829.692683][T21400] ? genl_bind+0x360/0x360 [ 829.697106][T21400] ? netlink_ack+0x1160/0x1160 [ 829.701883][T21400] ? rcu_read_unlock_special+0x1/0x510 [ 829.707351][T21400] ? down_read+0x1a8/0x2d0 [ 829.711777][T21400] genl_rcv+0x24/0x40 [ 829.715763][T21400] netlink_unicast+0x7ad/0x920 [ 829.720551][T21400] netlink_sendmsg+0x8ad/0xbd0 [ 829.725336][T21400] ? netlink_getsockopt+0x550/0x550 [ 829.730549][T21400] ? apparmor_socket_sendmsg+0x8a/0x330 [ 829.736110][T21400] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 829.741396][T21400] ? security_socket_sendmsg+0x7c/0xa0 [ 829.746862][T21400] ? netlink_getsockopt+0x550/0x550 [ 829.752091][T21400] ____sys_sendmsg+0x5ed/0x9a0 [ 829.756894][T21400] ? __sys_sendmsg_sock+0x30/0x30 [ 829.761940][T21400] ? __import_iovec+0x306/0x510 [ 829.766832][T21400] ? import_iovec+0x6f/0xa0 [ 829.771353][T21400] ___sys_sendmsg+0x2a2/0x360 [ 829.776054][T21400] ? __sys_sendmsg+0x2a0/0x2a0 [ 829.780851][T21400] ? ktime_get+0x7b/0x270 [ 829.785213][T21400] __se_sys_sendmsg+0x1c3/0x2b0 [ 829.790074][T21400] ? ct_nmi_exit+0x145/0x1c0 [ 829.794673][T21400] ? __x64_sys_sendmsg+0x80/0x80 [ 829.799640][T21400] ? lockdep_hardirqs_on+0x94/0x140 [ 829.804846][T21400] do_syscall_64+0x4c/0xa0 [ 829.809278][T21400] ? clear_bhb_loop+0x60/0xb0 [ 829.813968][T21400] ? clear_bhb_loop+0x60/0xb0 [ 829.818688][T21400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.824607][T21400] RIP: 0033:0x7fc3a139e0d9 [ 829.829039][T21400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.848653][T21400] RSP: 002b:00007fc3a2301028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.857075][T21400] RAX: ffffffffffffffda RBX: 00007fc3a1626090 RCX: 00007fc3a139e0d9 [ 829.865053][T21400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 829.873031][T21400] RBP: 00007fc3a1435024 R08: 0000000000000000 R09: 0000000000000000 [ 829.881006][T21400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.888985][T21400] R13: 00007fc3a1626128 R14: 00007fc3a1626090 R15: 00007ffd7d1b6598 [ 829.896986][T21400] [ 829.925484][T21402] FAULT_INJECTION: forcing a failure. [ 829.925484][T21402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.971770][T21402] CPU: 0 PID: 21402 Comm: syz.0.5250 Not tainted syzkaller #0 [ 829.979281][T21402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.989347][T21402] Call Trace: [ 829.992628][T21402] [ 829.995554][T21402] dump_stack_lvl+0x188/0x24e [ 830.000230][T21402] ? show_regs_print_info+0x12/0x12 [ 830.005420][T21402] ? load_image+0x410/0x410 [ 830.009916][T21402] ? __lock_acquire+0x7c40/0x7c40 [ 830.014946][T21402] should_fail_ex+0x390/0x4c0 [ 830.019620][T21402] _copy_from_user+0x2c/0x170 [ 830.024288][T21402] map_update_elem+0x473/0x6a0 [ 830.029051][T21402] __sys_bpf+0x4ec/0x780 [ 830.033289][T21402] ? bpf_link_show_fdinfo+0x380/0x380 [ 830.038662][T21402] ? lock_chain_count+0x20/0x20 [ 830.043509][T21402] __x64_sys_bpf+0x78/0x90 [ 830.047921][T21402] do_syscall_64+0x4c/0xa0 [ 830.052327][T21402] ? clear_bhb_loop+0x60/0xb0 [ 830.056994][T21402] ? clear_bhb_loop+0x60/0xb0 [ 830.061667][T21402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.067549][T21402] RIP: 0033:0x7faf1419e0d9 [ 830.071956][T21402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.091551][T21402] RSP: 002b:00007faf14fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 830.099952][T21402] RAX: ffffffffffffffda RBX: 00007faf14425fa0 RCX: 00007faf1419e0d9 [ 830.107912][T21402] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002 [ 830.115871][T21402] RBP: 00007faf14fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 830.123837][T21402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.131796][T21402] R13: 00007faf14426038 R14: 00007faf14425fa0 R15: 00007ffce7078268 [ 830.139768][T21402] [ 830.832497][T21427] netlink: 'syz.4.5256': attribute type 29 has an invalid length. [ 830.880255][T21427] netlink: 'syz.4.5256': attribute type 29 has an invalid length. [ 831.073649][T21430] device ip6gretap0 left promiscuous mode [ 831.080638][T21430] : port 1(ip6gretap0) entered disabled state [ 831.376689][T21439] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5261'. [ 831.838780][T21448] netlink: 'syz.1.5264': attribute type 29 has an invalid length. [ 831.871000][T21457] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5266'. [ 831.891818][T21448] netlink: 'syz.1.5264': attribute type 29 has an invalid length. [ 831.939294][T21457] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 832.013322][T21457] CPU: 1 PID: 21457 Comm: syz.4.5266 Not tainted syzkaller #0 [ 832.020848][T21457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.030932][T21457] Call Trace: [ 832.034220][T21457] [ 832.037166][T21457] dump_stack_lvl+0x188/0x24e [ 832.041879][T21457] ? show_regs_print_info+0x12/0x12 [ 832.047096][T21457] ? load_image+0x410/0x410 [ 832.051633][T21457] sysfs_warn_dup+0x8a/0xa0 [ 832.056164][T21457] sysfs_do_create_link_sd+0xc0/0x110 [ 832.061563][T21457] device_add+0x83b/0x1050 [ 832.066001][T21457] wiphy_register+0x1d8b/0x2aa0 [ 832.070886][T21457] ? cfg80211_event_work+0x40/0x40 [ 832.075993][T21457] ? minstrel_ht_alloc+0x894/0xa20 [ 832.081110][T21457] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 832.087175][T21457] ieee80211_register_hw+0x2d48/0x39f0 [ 832.092646][T21457] ? ieee80211_register_hw+0xee1/0x39f0 [ 832.098185][T21457] ? ieee80211_register_hw+0xee1/0x39f0 [ 832.103732][T21457] ? ieee80211_tasklet_handler+0x20/0x20 [ 832.109362][T21457] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 832.115255][T21457] ? __debug_object_init+0xed/0x440 [ 832.120457][T21457] ? memset+0x1e/0x40 [ 832.124432][T21457] ? __hrtimer_init+0x189/0x270 [ 832.129278][T21457] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 832.135008][T21457] ? memcpy+0x3c/0x60 [ 832.138989][T21457] hwsim_new_radio_nl+0xab7/0xc90 [ 832.144024][T21457] genl_family_rcv_msg_doit+0x22f/0x350 [ 832.149565][T21457] ? end_current_label_crit_section+0x170/0x170 [ 832.155808][T21457] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 832.161697][T21457] ? bpf_lsm_capable+0x5/0x10 [ 832.166368][T21457] ? security_capable+0x85/0xb0 [ 832.171221][T21457] genl_rcv_msg+0x601/0x790 [ 832.175719][T21457] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 832.181879][T21457] ? genl_bind+0x360/0x360 [ 832.186284][T21457] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 832.192614][T21457] ? lock_acquire+0x225/0x4a0 [ 832.197294][T21457] netlink_rcv_skb+0x1ef/0x440 [ 832.202055][T21457] ? genl_bind+0x360/0x360 [ 832.206468][T21457] ? netlink_ack+0x1160/0x1160 [ 832.211238][T21457] ? down_read+0x1a8/0x2d0 [ 832.215649][T21457] genl_rcv+0x24/0x40 [ 832.219622][T21457] netlink_unicast+0x7ad/0x920 [ 832.224391][T21457] netlink_sendmsg+0x8ad/0xbd0 [ 832.229158][T21457] ? netlink_getsockopt+0x550/0x550 [ 832.234373][T21457] ? apparmor_socket_sendmsg+0x8a/0x330 [ 832.240005][T21457] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 832.245278][T21457] ? security_socket_sendmsg+0x7c/0xa0 [ 832.250729][T21457] ? netlink_getsockopt+0x550/0x550 [ 832.255934][T21457] ____sys_sendmsg+0x5ed/0x9a0 [ 832.260706][T21457] ? __sys_sendmsg_sock+0x30/0x30 [ 832.265725][T21457] ? __import_iovec+0x306/0x510 [ 832.270581][T21457] ? import_iovec+0x6f/0xa0 [ 832.275086][T21457] ___sys_sendmsg+0x2a2/0x360 [ 832.279767][T21457] ? __sys_sendmsg+0x2a0/0x2a0 [ 832.284541][T21457] ? ktime_get+0x7b/0x270 [ 832.288891][T21457] __se_sys_sendmsg+0x1c3/0x2b0 [ 832.293734][T21457] ? ct_nmi_exit+0x145/0x1c0 [ 832.298319][T21457] ? __x64_sys_sendmsg+0x80/0x80 [ 832.303264][T21457] ? lockdep_hardirqs_on+0x94/0x140 [ 832.308456][T21457] do_syscall_64+0x4c/0xa0 [ 832.312904][T21457] ? clear_bhb_loop+0x60/0xb0 [ 832.317585][T21457] ? clear_bhb_loop+0x60/0xb0 [ 832.322260][T21457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.328145][T21457] RIP: 0033:0x7f0a0479e0d9 [ 832.332553][T21457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.352152][T21457] RSP: 002b:00007f0a0565a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.360573][T21457] RAX: ffffffffffffffda RBX: 00007f0a04a26090 RCX: 00007f0a0479e0d9 [ 832.368535][T21457] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 832.376497][T21457] RBP: 00007f0a04835024 R08: 0000000000000000 R09: 0000000000000000 [ 832.384461][T21457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.392424][T21457] R13: 00007f0a04a26128 R14: 00007f0a04a26090 R15: 00007fffea205c68 [ 832.400400][T21457] [ 832.505673][T21448] pimreg: tun_chr_ioctl cmd 2147767511 [ 832.532965][T21453] netlink: 'syz.0.5263': attribute type 2 has an invalid length. [ 832.563840][T21453] netlink: 148216 bytes leftover after parsing attributes in process `syz.0.5263'. [ 833.537256][T21483] : port 1(ip6gretap0) entered blocking state [ 833.588876][T21490] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5273'. [ 833.599322][T21483] : port 1(ip6gretap0) entered disabled state [ 833.612710][T21483] device ip6gretap0 entered promiscuous mode [ 833.652991][T21490] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 833.703424][T21490] CPU: 1 PID: 21490 Comm: syz.3.5273 Not tainted syzkaller #0 [ 833.710948][T21490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.721025][T21490] Call Trace: [ 833.724322][T21490] [ 833.727271][T21490] dump_stack_lvl+0x188/0x24e [ 833.731977][T21490] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 833.738160][T21490] ? show_regs_print_info+0x12/0x12 [ 833.743393][T21490] ? load_image+0x410/0x410 [ 833.747922][T21490] ? sysfs_warn_dup+0x61/0xa0 [ 833.752628][T21490] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.758722][T21490] sysfs_warn_dup+0x8a/0xa0 [ 833.763250][T21490] sysfs_do_create_link_sd+0xc0/0x110 [ 833.768649][T21490] device_add+0x83b/0x1050 [ 833.773087][T21490] wiphy_register+0x1d8b/0x2aa0 [ 833.777953][T21490] ? cfg80211_event_work+0x40/0x40 [ 833.783064][T21490] ? minstrel_ht_alloc+0x894/0xa20 [ 833.788178][T21490] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 833.794249][T21490] ieee80211_register_hw+0x2d48/0x39f0 [ 833.799711][T21490] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 833.805872][T21490] ? ieee80211_register_hw+0xee1/0x39f0 [ 833.811412][T21490] ? ieee80211_register_hw+0xee1/0x39f0 [ 833.816962][T21490] ? ieee80211_tasklet_handler+0x20/0x20 [ 833.822592][T21490] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 833.828490][T21490] ? __debug_object_init+0xed/0x440 [ 833.833698][T21490] ? memset+0x1e/0x40 [ 833.837672][T21490] ? __hrtimer_init+0x189/0x270 [ 833.842519][T21490] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 833.848271][T21490] ? memcpy+0x3c/0x60 [ 833.852262][T21490] hwsim_new_radio_nl+0xab7/0xc90 [ 833.857306][T21490] genl_family_rcv_msg_doit+0x22f/0x350 [ 833.862855][T21490] ? end_current_label_crit_section+0x170/0x170 [ 833.869108][T21490] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 833.875004][T21490] ? bpf_lsm_capable+0x5/0x10 [ 833.879677][T21490] ? security_capable+0x85/0xb0 [ 833.884530][T21490] genl_rcv_msg+0x601/0x790 [ 833.889033][T21490] ? genl_bind+0x360/0x360 [ 833.893441][T21490] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 833.899780][T21490] netlink_rcv_skb+0x1ef/0x440 [ 833.904546][T21490] ? genl_bind+0x360/0x360 [ 833.908953][T21490] ? netlink_ack+0x1160/0x1160 [ 833.913756][T21490] ? down_read+0x1a8/0x2d0 [ 833.918170][T21490] genl_rcv+0x24/0x40 [ 833.922142][T21490] netlink_unicast+0x7ad/0x920 [ 833.926914][T21490] netlink_sendmsg+0x8ad/0xbd0 [ 833.931681][T21490] ? netlink_getsockopt+0x550/0x550 [ 833.936879][T21490] ? apparmor_socket_sendmsg+0x8a/0x330 [ 833.942427][T21490] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 833.947703][T21490] ? security_socket_sendmsg+0x7c/0xa0 [ 833.953153][T21490] ? netlink_getsockopt+0x550/0x550 [ 833.958356][T21490] ____sys_sendmsg+0x5ed/0x9a0 [ 833.963123][T21490] ? __sys_sendmsg_sock+0x30/0x30 [ 833.968148][T21490] ? __import_iovec+0x306/0x510 [ 833.973010][T21490] ? import_iovec+0x6f/0xa0 [ 833.977513][T21490] ___sys_sendmsg+0x2a2/0x360 [ 833.982190][T21490] ? __sys_sendmsg+0x2a0/0x2a0 [ 833.986956][T21490] ? irqentry_enter+0x33/0x50 [ 833.991635][T21490] ? rcu_is_watching+0x11/0xa0 [ 833.996420][T21490] __se_sys_sendmsg+0x1c3/0x2b0 [ 834.001269][T21490] ? perf_trace_preemptirq_template+0x268/0x320 [ 834.007515][T21490] ? __x64_sys_sendmsg+0x80/0x80 [ 834.012471][T21490] ? lockdep_hardirqs_on+0x94/0x140 [ 834.017670][T21490] do_syscall_64+0x4c/0xa0 [ 834.022083][T21490] ? clear_bhb_loop+0x60/0xb0 [ 834.026756][T21490] ? clear_bhb_loop+0x60/0xb0 [ 834.031432][T21490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.037317][T21490] RIP: 0033:0x7f2a8159e0d9 [ 834.041723][T21490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.061321][T21490] RSP: 002b:00007f2a82393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.069729][T21490] RAX: ffffffffffffffda RBX: 00007f2a81826090 RCX: 00007f2a8159e0d9 [ 834.077692][T21490] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 834.085655][T21490] RBP: 00007f2a81635024 R08: 0000000000000000 R09: 0000000000000000 [ 834.093620][T21490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.101585][T21490] R13: 00007f2a81826128 R14: 00007f2a81826090 R15: 00007ffda30f65e8 [ 834.109566][T21490] [ 834.155886][T21492] device ip6gretap0 left promiscuous mode [ 834.186418][T21492] : port 1(ip6gretap0) entered disabled state [ 834.225816][T21493] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5275'. [ 834.672355][T21514] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5280'. [ 834.710966][T21506] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.5277'. [ 834.747097][T21517] netlink: 'syz.2.5276': attribute type 29 has an invalid length. [ 834.747150][T21514] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 834.791849][T21506] openvswitch: netlink: Flow actions attr not present in new flow. [ 834.826285][T21514] CPU: 0 PID: 21514 Comm: syz.1.5280 Not tainted syzkaller #0 [ 834.833805][T21514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.843883][T21514] Call Trace: [ 834.847180][T21514] [ 834.850134][T21514] dump_stack_lvl+0x188/0x24e [ 834.854838][T21514] ? show_regs_print_info+0x12/0x12 [ 834.860062][T21514] ? load_image+0x410/0x410 [ 834.864602][T21514] sysfs_warn_dup+0x8a/0xa0 [ 834.869130][T21514] sysfs_do_create_link_sd+0xc0/0x110 [ 834.874537][T21514] device_add+0x83b/0x1050 [ 834.878981][T21514] wiphy_register+0x1d8b/0x2aa0 [ 834.883881][T21514] ? cfg80211_event_work+0x40/0x40 [ 834.889018][T21514] ? minstrel_ht_alloc+0x894/0xa20 [ 834.894158][T21514] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 834.900245][T21514] ieee80211_register_hw+0x2d48/0x39f0 [ 834.905740][T21514] ? ieee80211_register_hw+0xee1/0x39f0 [ 834.911308][T21514] ? ieee80211_register_hw+0xee1/0x39f0 [ 834.916884][T21514] ? ieee80211_tasklet_handler+0x20/0x20 [ 834.922546][T21514] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 834.928746][T21514] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 834.934504][T21514] ? memcpy+0x3c/0x60 [ 834.938513][T21514] hwsim_new_radio_nl+0xab7/0xc90 [ 834.943582][T21514] genl_family_rcv_msg_doit+0x22f/0x350 [ 834.949149][T21514] ? end_current_label_crit_section+0x170/0x170 [ 834.955421][T21514] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 834.961342][T21514] ? bpf_lsm_capable+0x5/0x10 [ 834.966045][T21514] ? security_capable+0x85/0xb0 [ 834.970936][T21514] genl_rcv_msg+0x601/0x790 [ 834.975469][T21514] ? genl_bind+0x360/0x360 [ 834.979905][T21514] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 834.986261][T21514] netlink_rcv_skb+0x1ef/0x440 [ 834.991033][T21514] ? genl_bind+0x360/0x360 [ 834.995452][T21514] ? netlink_ack+0x1160/0x1160 [ 835.000229][T21514] ? down_read+0x1a8/0x2d0 [ 835.004640][T21514] genl_rcv+0x24/0x40 [ 835.008611][T21514] netlink_unicast+0x7ad/0x920 [ 835.013381][T21514] netlink_sendmsg+0x8ad/0xbd0 [ 835.018147][T21514] ? netlink_getsockopt+0x550/0x550 [ 835.023346][T21514] ? apparmor_socket_sendmsg+0x8a/0x330 [ 835.028889][T21514] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 835.034163][T21514] ? security_socket_sendmsg+0x7c/0xa0 [ 835.039614][T21514] ? netlink_getsockopt+0x550/0x550 [ 835.044809][T21514] ____sys_sendmsg+0x5ed/0x9a0 [ 835.049583][T21514] ? __sys_sendmsg_sock+0x30/0x30 [ 835.054605][T21514] ? __import_iovec+0x306/0x510 [ 835.059457][T21514] ? import_iovec+0x6f/0xa0 [ 835.063956][T21514] ___sys_sendmsg+0x2a2/0x360 [ 835.068638][T21514] ? __sys_sendmsg+0x2a0/0x2a0 [ 835.073411][T21514] ? ktime_get+0x7b/0x270 [ 835.077754][T21514] __se_sys_sendmsg+0x1c3/0x2b0 [ 835.082607][T21514] ? perf_trace_preemptirq_template+0x268/0x320 [ 835.088845][T21514] ? __x64_sys_sendmsg+0x80/0x80 [ 835.093794][T21514] ? lockdep_hardirqs_on+0x94/0x140 [ 835.098984][T21514] do_syscall_64+0x4c/0xa0 [ 835.103397][T21514] ? clear_bhb_loop+0x60/0xb0 [ 835.108067][T21514] ? clear_bhb_loop+0x60/0xb0 [ 835.112743][T21514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.118630][T21514] RIP: 0033:0x7f0d3739e0d9 [ 835.123037][T21514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.142636][T21514] RSP: 002b:00007f0d38249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.151049][T21514] RAX: ffffffffffffffda RBX: 00007f0d37626090 RCX: 00007f0d3739e0d9 [ 835.159016][T21514] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 835.166977][T21514] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 835.174940][T21514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.182900][T21514] R13: 00007f0d37626128 R14: 00007f0d37626090 R15: 00007ffe08067238 [ 835.190876][T21514] [ 835.259098][T21517] netlink: 'syz.2.5276': attribute type 29 has an invalid length. [ 835.299230][T21506] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5277'. [ 835.354066][T21524] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5281'. [ 835.436501][T21524] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 835.467600][T21524] CPU: 1 PID: 21524 Comm: syz.4.5281 Not tainted syzkaller #0 [ 835.475128][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.485210][T21524] Call Trace: [ 835.488509][T21524] [ 835.491468][T21524] dump_stack_lvl+0x188/0x24e [ 835.496181][T21524] ? show_regs_print_info+0x12/0x12 [ 835.501405][T21524] ? load_image+0x410/0x410 [ 835.505948][T21524] sysfs_warn_dup+0x8a/0xa0 [ 835.510478][T21524] sysfs_do_create_link_sd+0xc0/0x110 [ 835.516395][T21524] device_add+0x83b/0x1050 [ 835.520827][T21524] wiphy_register+0x1d8b/0x2aa0 [ 835.525712][T21524] ? cfg80211_event_work+0x40/0x40 [ 835.530824][T21524] ? minstrel_ht_alloc+0x894/0xa20 [ 835.535939][T21524] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 835.542001][T21524] ieee80211_register_hw+0x2d48/0x39f0 [ 835.547495][T21524] ? ieee80211_register_hw+0xee1/0x39f0 [ 835.553040][T21524] ? ieee80211_register_hw+0xee1/0x39f0 [ 835.558585][T21524] ? ieee80211_tasklet_handler+0x20/0x20 [ 835.564215][T21524] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 835.570109][T21524] ? __debug_object_init+0xed/0x440 [ 835.575310][T21524] ? memset+0x1e/0x40 [ 835.579288][T21524] ? __hrtimer_init+0x189/0x270 [ 835.584133][T21524] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 835.589858][T21524] ? memcpy+0x3c/0x60 [ 835.593833][T21524] hwsim_new_radio_nl+0xab7/0xc90 [ 835.598870][T21524] genl_family_rcv_msg_doit+0x22f/0x350 [ 835.604410][T21524] ? end_current_label_crit_section+0x170/0x170 [ 835.610977][T21524] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 835.616872][T21524] ? bpf_lsm_capable+0x5/0x10 [ 835.621544][T21524] ? security_capable+0x85/0xb0 [ 835.626412][T21524] genl_rcv_msg+0x601/0x790 [ 835.630929][T21524] ? genl_bind+0x360/0x360 [ 835.635347][T21524] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 835.641709][T21524] netlink_rcv_skb+0x1ef/0x440 [ 835.646487][T21524] ? genl_bind+0x360/0x360 [ 835.650910][T21524] ? netlink_ack+0x1160/0x1160 [ 835.655691][T21524] ? down_read+0x1a8/0x2d0 [ 835.660106][T21524] genl_rcv+0x24/0x40 [ 835.664081][T21524] netlink_unicast+0x7ad/0x920 [ 835.668848][T21524] netlink_sendmsg+0x8ad/0xbd0 [ 835.673617][T21524] ? netlink_getsockopt+0x550/0x550 [ 835.678817][T21524] ? apparmor_socket_sendmsg+0x8a/0x330 [ 835.684362][T21524] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 835.689639][T21524] ? security_socket_sendmsg+0x7c/0xa0 [ 835.695090][T21524] ? netlink_getsockopt+0x550/0x550 [ 835.700286][T21524] ____sys_sendmsg+0x5ed/0x9a0 [ 835.705062][T21524] ? __sys_sendmsg_sock+0x30/0x30 [ 835.710121][T21524] ? __import_iovec+0x306/0x510 [ 835.714979][T21524] ? import_iovec+0x6f/0xa0 [ 835.719479][T21524] ___sys_sendmsg+0x2a2/0x360 [ 835.724161][T21524] ? __sys_sendmsg+0x2a0/0x2a0 [ 835.728936][T21524] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 835.734670][T21524] __se_sys_sendmsg+0x1c3/0x2b0 [ 835.739521][T21524] ? __x64_sys_sendmsg+0x80/0x80 [ 835.744474][T21524] ? syscall_enter_from_user_mode+0x2a/0x80 [ 835.750360][T21524] do_syscall_64+0x4c/0xa0 [ 835.754771][T21524] ? clear_bhb_loop+0x60/0xb0 [ 835.759443][T21524] ? clear_bhb_loop+0x60/0xb0 [ 835.764114][T21524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.769996][T21524] RIP: 0033:0x7f0a0479e0d9 [ 835.774405][T21524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.794007][T21524] RSP: 002b:00007f0a0565a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.802410][T21524] RAX: ffffffffffffffda RBX: 00007f0a04a26090 RCX: 00007f0a0479e0d9 [ 835.810395][T21524] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 835.818358][T21524] RBP: 00007f0a04835024 R08: 0000000000000000 R09: 0000000000000000 [ 835.826328][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.834301][T21524] R13: 00007f0a04a26128 R14: 00007f0a04a26090 R15: 00007fffea205c68 [ 835.842291][T21524] [ 835.900643][T21533] netlink: 'syz.3.5282': attribute type 2 has an invalid length. [ 835.910327][T21533] netlink: 148216 bytes leftover after parsing attributes in process `syz.3.5282'. [ 836.392647][ C0] [ 836.392655][ C0] ================================ [ 836.392660][ C0] WARNING: inconsistent lock state [ 836.392679][ C0] syzkaller #0 Not tainted [ 836.392687][ C0] -------------------------------- [ 836.392691][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 836.392697][ C0] syz.1.5285/21546 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 836.392713][ C0] ffff888057f5d218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 836.392753][ C0] {INITIAL USE} state was registered at: [ 836.392758][ C0] lock_acquire+0x1bb/0x4a0 [ 836.392776][ C0] _raw_spin_lock+0x2a/0x40 [ 836.392790][ C0] htab_lock_bucket+0x179/0x2f0 [ 836.392804][ C0] htab_lru_map_update_elem+0x2eb/0xe60 [ 836.392819][ C0] bpf_map_update_value+0x59d/0x670 [ 836.392834][ C0] generic_map_update_batch+0x52e/0x7f0 [ 836.392850][ C0] bpf_map_do_batch+0x475/0x5f0 [ 836.392868][ C0] __sys_bpf+0x6f7/0x780 [ 836.392884][ C0] __x64_sys_bpf+0x78/0x90 [ 836.392900][ C0] do_syscall_64+0x4c/0xa0 [ 836.392919][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.392940][ C0] irq event stamp: 9704 [ 836.392945][ C0] hardirqs last enabled at (9703): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.392969][ C0] hardirqs last disabled at (9704): [] exc_debug+0x6e/0x130 [ 836.392991][ C0] softirqs last enabled at (9342): [] __irq_exit_rcu+0x13b/0x230 [ 836.393009][ C0] softirqs last disabled at (9019): [] __irq_exit_rcu+0x13b/0x230 [ 836.393026][ C0] [ 836.393026][ C0] other info that might help us debug this: [ 836.393030][ C0] Possible unsafe locking scenario: [ 836.393030][ C0] [ 836.393034][ C0] CPU0 [ 836.393037][ C0] ---- [ 836.393040][ C0] lock(&htab->lockdep_key); [ 836.393048][ C0] [ 836.393051][ C0] lock(&htab->lockdep_key); [ 836.393061][ C0] [ 836.393061][ C0] *** DEADLOCK *** [ 836.393061][ C0] [ 836.393064][ C0] no locks held by syz.1.5285/21546. [ 836.393071][ C0] [ 836.393071][ C0] stack backtrace: [ 836.393076][ C0] CPU: 0 PID: 21546 Comm: syz.1.5285 Not tainted syzkaller #0 [ 836.393090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.393098][ C0] Call Trace: [ 836.393104][ C0] <#DB> [ 836.393110][ C0] dump_stack_lvl+0x188/0x24e [ 836.393131][ C0] ? show_regs_print_info+0x12/0x12 [ 836.393153][ C0] ? print_usage_bug+0x42a/0x690 [ 836.393173][ C0] ? verify_lock_unused+0x15/0x140 [ 836.393194][ C0] lock_acquire+0x2df/0x4a0 [ 836.393215][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 836.393232][ C0] ? read_lock_is_recursive+0x10/0x10 [ 836.393289][ C0] ? rcu_is_watching+0x11/0xa0 [ 836.393311][ C0] ? lock_release+0xcf/0x920 [ 836.393331][ C0] ? rcu_read_unlock+0x8c/0xa0 [ 836.393349][ C0] ? perf_output_begin_forward+0xa7/0xa70 [ 836.393370][ C0] _raw_spin_lock+0x2a/0x40 [ 836.393385][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 836.393402][ C0] htab_lock_bucket+0x179/0x2f0 [ 836.393420][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 836.393438][ C0] ? look_up_lock_class+0x75/0x140 [ 836.393454][ C0] ? verify_lock_unused+0x15/0x140 [ 836.393473][ C0] ? htab_map_hash+0x329/0x6d0 [ 836.393491][ C0] htab_lru_map_delete_elem+0x1a1/0x760 [ 836.393509][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 836.393531][ C0] ? htab_lru_map_update_elem+0xe60/0xe60 [ 836.393552][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 836.393569][ C0] bpf_overflow_handler+0x6d1/0x790 [ 836.393586][ C0] ? perf_get_page_size+0x430/0x430 [ 836.393608][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 836.393624][ C0] ? perf_swevent_overflow+0x230/0x230 [ 836.393643][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 836.393666][ C0] __perf_event_overflow+0x457/0x630 [ 836.393691][ C0] perf_swevent_event+0x315/0x570 [ 836.393713][ C0] ? perf_tp_event+0xc10/0xc10 [ 836.393738][ C0] perf_bp_event+0x311/0x3f0 [ 836.393761][ C0] ? perf_trace_lock_acquire+0x101/0x3f0 [ 836.393778][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 836.393811][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 836.393829][ C0] ? read_lock_is_recursive+0x10/0x10 [ 836.393852][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 836.393958][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 836.393976][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 836.393994][ C0] notify_die+0x141/0x1a0 [ 836.394012][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 836.394033][ C0] notify_debug+0x20/0x30 [ 836.394077][ C0] exc_debug+0xd9/0x130 [ 836.394099][ C0] asm_exc_debug+0x1a/0x40 [ 836.394117][ C0] RIP: 0010:copy_user_short_string+0x24/0x40 [ 836.394139][ C0] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb [ 836.394152][ C0] RSP: 0018:ffffc90005cf7bc8 EFLAGS: 00040202 [ 836.394166][ C0] RAX: ffffffff8415c36e RBX: 0000000000000006 RCX: 0000000000000004 [ 836.394177][ C0] RDX: 0000000000000006 RSI: 0000200000000300 RDI: ffff88807dae3f2a [ 836.394188][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000006 [ 836.394197][ C0] R10: dffffc0000000000 R11: ffffed100fb5c7e5 R12: 00007fffffffeffa [ 836.394209][ C0] R13: 1ffff92000b9ef90 R14: ffff88807dae3f28 R15: 00002000000002fe [ 836.394224][ C0] ? _copy_from_user+0x8e/0x170 [ 836.394243][ C0] [ 836.394248][ C0] [ 836.394253][ C0] _copy_from_user+0xf4/0x170 [ 836.394270][ C0] generic_map_update_batch+0x48d/0x7f0 [ 836.394293][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 836.394313][ C0] ? __fdget+0x17c/0x200 [ 836.394334][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 836.394352][ C0] bpf_map_do_batch+0x475/0x5f0 [ 836.394374][ C0] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 836.394394][ C0] __sys_bpf+0x6f7/0x780 [ 836.394414][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 836.394440][ C0] ? lock_chain_count+0x20/0x20 [ 836.394461][ C0] __x64_sys_bpf+0x78/0x90 [ 836.394478][ C0] do_syscall_64+0x4c/0xa0 [ 836.394495][ C0] ? clear_bhb_loop+0x60/0xb0 [ 836.394513][ C0] ? clear_bhb_loop+0x60/0xb0 [ 836.394536][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.394553][ C0] RIP: 0033:0x7f0d3739e0d9 [ 836.394564][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.394576][ C0] RSP: 002b:00007f0d3826a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 836.394591][ C0] RAX: ffffffffffffffda RBX: 00007f0d37625fa0 RCX: 00007f0d3739e0d9 [ 836.394602][ C0] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 836.394613][ C0] RBP: 00007f0d37435024 R08: 0000000000000000 R09: 0000000000000000 [ 836.394622][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.394631][ C0] R13: 00007f0d37626038 R14: 00007f0d37625fa0 R15: 00007ffe08067238 [ 836.394647][ C0] [ 837.146065][T21553] FAULT_INJECTION: forcing a failure. [ 837.146065][T21553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.159304][T21553] CPU: 1 PID: 21553 Comm: syz.3.5288 Not tainted syzkaller #0 [ 837.166757][T21553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.176799][T21553] Call Trace: [ 837.180066][T21553] [ 837.182986][T21553] dump_stack_lvl+0x188/0x24e [ 837.187655][T21553] ? show_regs_print_info+0x12/0x12 [ 837.192846][T21553] ? load_image+0x410/0x410 [ 837.197339][T21553] ? perf_trace_buf_update+0xa8/0x230 [ 837.202720][T21553] ? __lock_acquire+0x7c40/0x7c40 [ 837.207744][T21553] ? perf_trace_lock_acquire+0x101/0x3f0 [ 837.213383][T21553] should_fail_ex+0x390/0x4c0 [ 837.218084][T21553] _copy_from_user+0x2c/0x170 [ 837.222757][T21553] ___sys_sendmsg+0x1c3/0x360 [ 837.227438][T21553] ? __sys_sendmsg+0x2a0/0x2a0 [ 837.232198][T21553] ? lock_release+0xcf/0x920 [ 837.236792][T21553] ? __lock_acquire+0x7c40/0x7c40 [ 837.241827][T21553] __se_sys_sendmsg+0x1c3/0x2b0 [ 837.246671][T21553] ? perf_trace_preemptirq_template+0x268/0x320 [ 837.252909][T21553] ? __x64_sys_sendmsg+0x80/0x80 [ 837.257849][T21553] ? rcu_is_watching+0x11/0xa0 [ 837.262645][T21553] do_syscall_64+0x4c/0xa0 [ 837.267057][T21553] ? clear_bhb_loop+0x60/0xb0 [ 837.271726][T21553] ? clear_bhb_loop+0x60/0xb0 [ 837.276398][T21553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.282287][T21553] RIP: 0033:0x7f2a8159e0d9 [ 837.286695][T21553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.306296][T21553] RSP: 002b:00007f2a823b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.314706][T21553] RAX: ffffffffffffffda RBX: 00007f2a81825fa0 RCX: 00007f2a8159e0d9 [ 837.322671][T21553] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 837.330631][T21553] RBP: 00007f2a823b4090 R08: 0000000000000000 R09: 0000000000000000 [ 837.338590][T21553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.346553][T21553] R13: 00007f2a81826038 R14: 00007f2a81825fa0 R15: 00007ffda30f65e8 [ 837.354530][T21553]