last executing test programs: 42m38.516683385s ago: executing program 1 (id=155): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 42m38.26284138s ago: executing program 1 (id=156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 42m38.09309572s ago: executing program 1 (id=158): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6e}, 0xffffff21) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x2000, 0x64656461}}, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f0000001740)=""/4096, 0x0, 0x1000, 0x0, 0x6}, 0x28) 42m35.766813176s ago: executing program 1 (id=168): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) close(r0) 42m35.71288037s ago: executing program 1 (id=170): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x4000000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 42m35.582322257s ago: executing program 1 (id=171): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xd512d7b0805b023a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg(r1, 0x0, 0x2001) 42m20.50031598s ago: executing program 32 (id=171): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xd512d7b0805b023a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg(r1, 0x0, 0x2001) 41m32.806741362s ago: executing program 4 (id=315): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000c0000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff87}, 0x94) 41m32.447136893s ago: executing program 4 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 41m32.194758928s ago: executing program 4 (id=318): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) 41m31.946954222s ago: executing program 4 (id=321): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41m31.755316953s ago: executing program 4 (id=323): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 41m31.523571767s ago: executing program 4 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000500)=""/226, 0xe2}], 0x1}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 41m15.542820062s ago: executing program 33 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000500)=""/226, 0xe2}], 0x1}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 18m46.554634213s ago: executing program 5 (id=8399): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb2", 0x549}], 0x3}, 0x0) 18m46.460694778s ago: executing program 5 (id=8401): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180bb2000000cd000000000000007fff"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) 18m46.235801652s ago: executing program 5 (id=8405): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 18m46.086064851s ago: executing program 5 (id=8407): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xfe, 0x0, 0xf3, 0x6, 0x0, 0x5, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc20, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) 18m45.969949888s ago: executing program 0 (id=8408): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="9161", 0x2}], 0x1}, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 18m45.838833555s ago: executing program 0 (id=8409): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x549}], 0x3}, 0x0) 18m43.417316737s ago: executing program 5 (id=8410): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 18m43.395981968s ago: executing program 0 (id=8411): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200060001c0cb6caf2c5b8b3d0200bc24eab556a705211e618294ff4051f60a84c9f4d4938037", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18m43.256290666s ago: executing program 0 (id=8414): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 18m43.162546881s ago: executing program 5 (id=8417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 18m43.073661736s ago: executing program 0 (id=8420): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18m39.839946585s ago: executing program 0 (id=8425): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 18m27.559829342s ago: executing program 34 (id=8417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 18m24.138943241s ago: executing program 35 (id=8425): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 17m32.78674197s ago: executing program 3 (id=8680): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x71, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000540), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="9161", 0x2}], 0x1}, 0x800) 17m31.92700214s ago: executing program 3 (id=8683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="9161", 0x2}], 0x1}, 0x800) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 17m31.487528546s ago: executing program 3 (id=8689): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 17m31.282676947s ago: executing program 3 (id=8692): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x71, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000540), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="9161", 0x2}], 0x1}, 0x800) 17m30.454129856s ago: executing program 3 (id=8696): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 17m30.234855858s ago: executing program 3 (id=8697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 17m15.181400908s ago: executing program 36 (id=8697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.736300149s ago: executing program 6 (id=14045): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x6238758b35d0ad05, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xa, 0xa, 0x4, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30008000) close(r3) 2.144220804s ago: executing program 8 (id=14049): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00') close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB='>'], 0x9a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f6b496c478140f5ceef5f350945ab2de5698ddde7c8ab74ba0b7216dd87fec375a49aecc8b567fcf21ac0623e66a5703ec71605f4391864ad34d843844b49adea5b4938a7dc831ef2a364a58e8bbafb70714915d5ed52c8ee222a0ea6ffce0c97b7369042aebfd13ec15ec54360ee7be67dfdb8516cb756c0802537e2ddf899767ebf515625df9e1f7a5f66b564dadd02ea125f25a05f4787b68713faa78f2a7fd63edfe7216072ae45", @ANYRES16], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), 0x0}, 0x20) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x5, 0xcd, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x11011, 0x80005f0, 0x0, 0x0, 0x5, 0x4, 0x8, 0x0, 0x4, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES64], 0x6) 1.971680044s ago: executing program 6 (id=14051): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x723000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'veth1_vlan\x00', @remote}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f", 0x46}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 1.830843183s ago: executing program 8 (id=14054): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000000), 0xff7b) 1.736886578s ago: executing program 8 (id=14056): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001240)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000060000000400000002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40040, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x620401, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000e10b0000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)='7', 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.655348962s ago: executing program 7 (id=14057): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x141086) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) 1.36727238s ago: executing program 2 (id=14059): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x6238758b35d0ad05, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xa, 0xa, 0x4, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30008000) close(r3) 962.608603ms ago: executing program 6 (id=14060): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffe7d9f527}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b2300000", 0x17}], 0x1}, 0x0) 962.492694ms ago: executing program 2 (id=14061): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) 951.936034ms ago: executing program 7 (id=14068): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x17) 846.53547ms ago: executing program 2 (id=14062): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000009000000000000000400000d000000000e0000000000000500000008000000050000fb0000000000000003000000000400000004000000a70000000a0000000100000604000000070000000500000000002e5f2e1e30"], &(0x7f00000008c0)=""/220, 0x79, 0xdc, 0x0, 0x9}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004a0000004a000000070000000f0000000500000f02000000010000000e0000000024aa7856000000130000000900000003000000f5ffffff27000000040000000002000001000000050000000500000009000000fd3a00000000302e2e3000"], &(0x7f00000009c0)=""/236, 0x6b, 0xec, 0x0, 0x8, 0x10000, @value=r4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="11000000ff0100005b000000faffffff00200100", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="b74eca22006b7092c5f5afd32cd200000000040000000100", @ANYRES32=r4, @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0x4, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r5, 0x4, r2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r7], 0x68}, 0x84) setsockopt$sock_attach_bpf(r6, 0x1, 0x35, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="140000", 0x3}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a2, &(0x7f0000000080)) 846.14133ms ago: executing program 7 (id=14063): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sock_ops}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000009000000000000000400000d000000000e0000000000000500000008000000050000fb0000000000000003000000000400000004000000a70000000a0000000100000604000000"], &(0x7f00000008c0)=""/220, 0x79, 0xdc, 0x0, 0x9}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004a0000004a000000070000000f0000000500000f02000000010000000e0000000024aa7856000000130000000900000003000000f5ffffff27000000040000000002000001000000050000000500000009000000fd3a00000000302e2e3000"], &(0x7f00000009c0)=""/236, 0x6b, 0xec, 0x0, 0x8, 0x10000, @value=r4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="11000000ff0100005b000000faffffff00200100", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="b74eca22006b7092c5f5afd32cd200000000040000000100", @ANYRES32=r4, @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0x4, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r5, 0x4, r2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r7], 0x68}, 0x84) setsockopt$sock_attach_bpf(r6, 0x1, 0x35, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="140000", 0x3}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a2, &(0x7f0000000080)) 777.505044ms ago: executing program 8 (id=14064): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0], 0x0, 0x4f, &(0x7f0000000fc0)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000001040), 0x8, 0x99, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x30}, 0x4) sendmsg$sock(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 607.848764ms ago: executing program 6 (id=14065): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000000), 0xff7b) 581.496966ms ago: executing program 8 (id=14066): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (fail_nth: 2) 580.679526ms ago: executing program 2 (id=14067): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000004100faff0000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) 522.905539ms ago: executing program 7 (id=14069): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x36, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @generic={0xfe, 0x6, 0x9, 0x3, 0x4e}, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0xfffffffffffffffc}, @tail_call]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 160.421201ms ago: executing program 2 (id=14070): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 153.335131ms ago: executing program 6 (id=14071): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) 134.028282ms ago: executing program 7 (id=14072): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xa4ff) close(0x3) 46.879847ms ago: executing program 6 (id=14073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x2, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000001c0), 0x0}, 0x20) 46.646197ms ago: executing program 2 (id=14074): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 40.248478ms ago: executing program 8 (id=14075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 0s ago: executing program 7 (id=14076): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='-'], 0x27) kernel console output (not intermixed with test programs): aa_sock_msg_perm+0x94/0x150 [ 2603.959721][T11213] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2603.965070][T11213] ? security_socket_sendmsg+0x80/0xa0 [ 2603.970591][T11213] ? netlink_getsockopt+0x590/0x590 [ 2603.975874][T11213] ____sys_sendmsg+0x5ba/0x960 [ 2603.980730][T11213] ? __asan_memset+0x22/0x40 [ 2603.985419][T11213] ? __sys_sendmsg_sock+0x30/0x30 [ 2603.990530][T11213] ? __import_iovec+0x5f2/0x850 [ 2603.995482][T11213] ? import_iovec+0x73/0xa0 [ 2604.000065][T11213] ___sys_sendmsg+0x2a6/0x360 [ 2604.004825][T11213] ? __sys_sendmsg+0x2a0/0x2a0 [ 2604.009732][T11213] ? debug_mutex_init+0x38/0x70 [ 2604.014725][T11213] __se_sys_sendmsg+0x1c2/0x2b0 [ 2604.019652][T11213] ? __x64_sys_sendmsg+0x80/0x80 [ 2604.024734][T11213] ? lockdep_hardirqs_on+0x98/0x150 [ 2604.030021][T11213] do_syscall_64+0x55/0xa0 [ 2604.034511][T11213] ? clear_bhb_loop+0x40/0x90 [ 2604.039243][T11213] ? clear_bhb_loop+0x40/0x90 [ 2604.043991][T11213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2604.049943][T11213] RIP: 0033:0x7f02a599acb9 [ 2604.054427][T11213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2604.074088][T11213] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2604.082563][T11213] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2604.090610][T11213] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2604.098632][T11213] RBP: 00007f02a5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2604.106657][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2604.114679][T11213] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2604.122756][T11213] [ 2604.664188][T11231] FAULT_INJECTION: forcing a failure. [ 2604.664188][T11231] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.682619][T11231] CPU: 1 PID: 11231 Comm: syz.7.13640 Not tainted syzkaller #0 [ 2604.690249][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2604.700400][T11231] Call Trace: [ 2604.703735][T11231] [ 2604.706718][T11231] dump_stack_lvl+0x18c/0x250 [ 2604.711442][T11231] ? show_regs_print_info+0x20/0x20 [ 2604.716681][T11231] ? load_image+0x400/0x400 [ 2604.721307][T11231] ? __might_sleep+0xe0/0xe0 [ 2604.725931][T11231] ? __lock_acquire+0x7d40/0x7d40 [ 2604.730983][T11231] ? mark_lock+0x94/0x320 [ 2604.735350][T11231] should_fail_ex+0x39d/0x4d0 [ 2604.740064][T11231] should_failslab+0x9/0x20 [ 2604.744601][T11231] slab_pre_alloc_hook+0x59/0x310 [ 2604.749674][T11231] ? __get_vm_area_node+0x125/0x370 [ 2604.754902][T11231] __kmem_cache_alloc_node+0x53/0x250 [ 2604.760308][T11231] ? __get_vm_area_node+0x125/0x370 [ 2604.765547][T11231] kmalloc_node_trace+0x26/0xe0 [ 2604.770440][T11231] __get_vm_area_node+0x125/0x370 [ 2604.775511][T11231] __vmalloc_node_range+0x36e/0x1330 [ 2604.780832][T11231] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2604.786410][T11231] ? mark_lock+0x94/0x320 [ 2604.790770][T11231] ? __lock_acquire+0x1347/0x7d40 [ 2604.795850][T11231] ? free_vm_area+0x50/0x50 [ 2604.800391][T11231] ? end_current_label_crit_section+0x170/0x170 [ 2604.806677][T11231] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2604.812256][T11231] __vmalloc+0x7a/0x90 [ 2604.816418][T11231] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2604.822001][T11231] bpf_prog_alloc_no_stats+0x47/0x440 [ 2604.827428][T11231] ? bpf_prog_alloc+0x2b/0x1a0 [ 2604.832245][T11231] bpf_prog_alloc+0x3d/0x1a0 [ 2604.836886][T11231] bpf_prog_load+0x6eb/0x1670 [ 2604.841635][T11231] ? map_freeze+0x420/0x420 [ 2604.846188][T11231] ? __might_fault+0xaa/0x120 [ 2604.850909][T11231] ? __lock_acquire+0x7d40/0x7d40 [ 2604.855989][T11231] ? file_end_write+0x159/0x250 [ 2604.860901][T11231] ? __might_fault+0xaa/0x120 [ 2604.865617][T11231] ? __might_fault+0xc6/0x120 [ 2604.870335][T11231] ? __might_fault+0xaa/0x120 [ 2604.875045][T11231] ? bpf_lsm_bpf+0x9/0x10 [ 2604.879411][T11231] ? security_bpf+0x7e/0xa0 [ 2604.883951][T11231] __sys_bpf+0x5ba/0x890 [ 2604.888242][T11231] ? bpf_link_show_fdinfo+0x390/0x390 [ 2604.893657][T11231] ? lock_chain_count+0x20/0x20 [ 2604.898538][T11231] __x64_sys_bpf+0x7c/0x90 [ 2604.902989][T11231] do_syscall_64+0x55/0xa0 [ 2604.907448][T11231] ? clear_bhb_loop+0x40/0x90 [ 2604.912158][T11231] ? clear_bhb_loop+0x40/0x90 [ 2604.916873][T11231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2604.922812][T11231] RIP: 0033:0x7f02a599acb9 [ 2604.927264][T11231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2604.946914][T11231] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2604.955355][T11231] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2604.963356][T11231] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 2604.971351][T11231] RBP: 00007f02a67ea090 R08: 0000000000000000 R09: 0000000000000000 [ 2604.979354][T11231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2604.987348][T11231] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2604.995361][T11231] [ 2605.065044][T11231] warn_alloc: 1 callbacks suppressed [ 2605.065064][T11231] syz.7.13640: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 2605.098239][T11231] CPU: 1 PID: 11231 Comm: syz.7.13640 Not tainted syzkaller #0 [ 2605.105882][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2605.115982][T11231] Call Trace: [ 2605.119299][T11231] [ 2605.122307][T11231] dump_stack_lvl+0x18c/0x250 [ 2605.127046][T11231] ? show_regs_print_info+0x20/0x20 [ 2605.132658][T11231] ? load_image+0x400/0x400 [ 2605.137237][T11231] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2605.143713][T11231] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2605.150278][T11231] warn_alloc+0x246/0x340 [ 2605.154682][T11231] ? __get_vm_area_node+0x125/0x370 [ 2605.159955][T11231] ? zone_watermark_ok_safe+0x230/0x230 [ 2605.165568][T11231] ? rcu_is_watching+0x15/0xb0 [ 2605.170397][T11231] ? __get_vm_area_node+0x356/0x370 [ 2605.175662][T11231] __vmalloc_node_range+0x393/0x1330 [ 2605.180998][T11231] ? mark_lock+0x94/0x320 [ 2605.185381][T11231] ? __lock_acquire+0x1347/0x7d40 [ 2605.190478][T11231] ? free_vm_area+0x50/0x50 [ 2605.195031][T11231] ? end_current_label_crit_section+0x170/0x170 [ 2605.201339][T11231] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2605.206939][T11231] __vmalloc+0x7a/0x90 [ 2605.211073][T11231] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2605.216678][T11231] bpf_prog_alloc_no_stats+0x47/0x440 [ 2605.222097][T11231] ? bpf_prog_alloc+0x2b/0x1a0 [ 2605.226917][T11231] bpf_prog_alloc+0x3d/0x1a0 [ 2605.231558][T11231] bpf_prog_load+0x6eb/0x1670 [ 2605.236301][T11231] ? map_freeze+0x420/0x420 [ 2605.240858][T11231] ? __might_fault+0xaa/0x120 [ 2605.245582][T11231] ? __lock_acquire+0x7d40/0x7d40 [ 2605.250664][T11231] ? file_end_write+0x159/0x250 [ 2605.255575][T11231] ? __might_fault+0xaa/0x120 [ 2605.260326][T11231] ? __might_fault+0xc6/0x120 [ 2605.265047][T11231] ? __might_fault+0xaa/0x120 [ 2605.269777][T11231] ? bpf_lsm_bpf+0x9/0x10 [ 2605.274162][T11231] ? security_bpf+0x7e/0xa0 [ 2605.278718][T11231] __sys_bpf+0x5ba/0x890 [ 2605.283019][T11231] ? bpf_link_show_fdinfo+0x390/0x390 [ 2605.288463][T11231] ? lock_chain_count+0x20/0x20 [ 2605.293380][T11231] __x64_sys_bpf+0x7c/0x90 [ 2605.297851][T11231] do_syscall_64+0x55/0xa0 [ 2605.302327][T11231] ? clear_bhb_loop+0x40/0x90 [ 2605.307062][T11231] ? clear_bhb_loop+0x40/0x90 [ 2605.311795][T11231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2605.317748][T11231] RIP: 0033:0x7f02a599acb9 [ 2605.322203][T11231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2605.341857][T11231] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2605.350333][T11231] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2605.358354][T11231] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 2605.366375][T11231] RBP: 00007f02a67ea090 R08: 0000000000000000 R09: 0000000000000000 [ 2605.374402][T11231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2605.382426][T11231] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2605.390488][T11231] [ 2605.425056][T11231] Mem-Info: [ 2605.429571][T11231] active_anon:7878 inactive_anon:0 isolated_anon:0 [ 2605.429571][T11231] active_file:22933 inactive_file:40929 isolated_file:0 [ 2605.429571][T11231] unevictable:768 dirty:297 writeback:0 [ 2605.429571][T11231] slab_reclaimable:11183 slab_unreclaimable:96700 [ 2605.429571][T11231] mapped:24729 shmem:1421 pagetables:873 [ 2605.429571][T11231] sec_pagetables:0 bounce:0 [ 2605.429571][T11231] kernel_misc_reclaimable:0 [ 2605.429571][T11231] free:1336407 free_pcp:4520 free_cma:0 [ 2605.480736][T11231] Node 0 active_anon:31512kB inactive_anon:0kB active_file:91732kB inactive_file:163516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98916kB dirty:1188kB writeback:0kB shmem:4148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12328kB pagetables:3492kB sec_pagetables:0kB all_unreclaimable? no [ 2605.525879][T11231] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2605.557466][T11231] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2605.643196][T11231] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2605.659972][T11231] Node 0 DMA32 free:1426764kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31468kB inactive_anon:0kB active_file:91732kB inactive_file:162688kB unevictable:1536kB writepending:1188kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:10284kB local_pcp:6312kB free_cma:0kB [ 2605.712973][T11231] lowmem_reserve[]: 0 0 0 0 0 [ 2605.727605][T11231] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2605.768929][T11231] lowmem_reserve[]: 0 0 0 0 0 [ 2605.774204][T11231] Node 1 Normal free:3903504kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7616kB local_pcp:7616kB free_cma:0kB [ 2605.809353][T11231] lowmem_reserve[]: 0 0 0 0 0 [ 2605.814637][T11231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2605.831370][T11231] Node 0 DMA32: 1561*4kB (UME) 1061*8kB (UME) 2818*16kB (UME) 3245*32kB (UME) 1808*64kB (UME) 846*128kB (UME) 439*256kB (UM) 180*512kB (UM) 63*1024kB (UME) 18*2048kB (UME) 179*4096kB (UM) = 1426764kB [ 2605.856866][T11231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2605.872076][T11231] Node 1 Normal: 212*4kB (UME) 52*8kB (UME) 48*16kB (UME) 259*32kB (UME) 85*64kB (UME) 15*128kB (UME) 5*256kB (UME) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3903504kB [ 2605.893371][T11231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2605.905151][T11231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2605.975807][T11231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2606.001910][T11231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2606.018828][T11231] 65283 total pagecache pages [ 2606.035330][T11231] 0 pages in swap cache [ 2606.039578][T11231] Free swap = 124996kB [ 2606.053924][T11231] Total swap = 124996kB [ 2606.058290][T11231] 2097051 pages RAM [ 2606.062244][T11231] 0 pages HighMem/MovableOnly [ 2606.080883][T11231] 416922 pages reserved [ 2606.091008][T11231] 0 pages cma reserved [ 2606.329304][T11254] netlink: 'syz.7.13646': attribute type 10 has an invalid length. [ 2606.459162][T11258] netlink: 'syz.7.13649': attribute type 39 has an invalid length. [ 2606.484410][T11258] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13649'. [ 2606.678123][T11262] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.13650'. [ 2606.704334][T11262] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2606.712708][T11262] CPU: 1 PID: 11262 Comm: syz.6.13650 Not tainted syzkaller #0 [ 2606.720338][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2606.730469][T11262] Call Trace: [ 2606.733827][T11262] [ 2606.736833][T11262] dump_stack_lvl+0x18c/0x250 [ 2606.741602][T11262] ? show_regs_print_info+0x20/0x20 [ 2606.746880][T11262] ? load_image+0x400/0x400 [ 2606.751487][T11262] sysfs_warn_dup+0x8e/0xa0 [ 2606.756058][T11262] sysfs_do_create_link_sd+0xc0/0x110 [ 2606.761518][T11262] device_add_class_symlinks+0x1cf/0x240 [ 2606.767255][T11262] device_add+0x507/0xc20 [ 2606.771676][T11262] wiphy_register+0x1dad/0x2ae0 [ 2606.776652][T11262] ? cfg80211_event_work+0x40/0x40 [ 2606.781841][T11262] ? minstrel_ht_alloc+0x88a/0x990 [ 2606.787053][T11262] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2606.793208][T11262] ieee80211_register_hw+0x3464/0x4250 [ 2606.798827][T11262] ? ieee80211_tasklet_handler+0x20/0x20 [ 2606.804537][T11262] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2606.810540][T11262] ? __debug_object_init+0xec/0x450 [ 2606.815819][T11262] ? __asan_memset+0x22/0x40 [ 2606.820495][T11262] ? __hrtimer_init+0x186/0x270 [ 2606.825433][T11262] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2606.831291][T11262] ? mac80211_hwsim_free+0x220/0x220 [ 2606.836653][T11262] ? rcu_is_watching+0x15/0xb0 [ 2606.841491][T11262] ? kstrndup+0xbd/0x140 [ 2606.845840][T11262] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2606.851060][T11262] ? __nla_validate+0x50/0x50 [ 2606.855855][T11262] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2606.862335][T11262] ? __nla_parse+0x40/0x50 [ 2606.866851][T11262] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2606.873281][T11262] genl_family_rcv_msg_doit+0x211/0x310 [ 2606.878923][T11262] ? end_current_label_crit_section+0x170/0x170 [ 2606.885271][T11262] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2606.891294][T11262] ? bpf_lsm_capable+0x9/0x10 [ 2606.896077][T11262] ? security_capable+0x89/0xb0 [ 2606.901028][T11262] genl_rcv_msg+0x619/0x7a0 [ 2606.905653][T11262] ? genl_bind+0x360/0x360 [ 2606.910160][T11262] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2606.916601][T11262] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2606.923303][T11262] netlink_rcv_skb+0x241/0x4d0 [ 2606.928151][T11262] ? genl_bind+0x360/0x360 [ 2606.932647][T11262] ? netlink_ack+0x1180/0x1180 [ 2606.937512][T11262] ? __lock_acquire+0x7d40/0x7d40 [ 2606.942725][T11262] ? down_read+0x1ac/0x2e0 [ 2606.947248][T11262] genl_rcv+0x28/0x40 [ 2606.951290][T11262] netlink_unicast+0x751/0x8d0 [ 2606.956134][T11262] netlink_sendmsg+0x8d0/0xbf0 [ 2606.960964][T11262] ? netlink_getsockopt+0x590/0x590 [ 2606.966230][T11262] ? aa_sock_msg_perm+0x94/0x150 [ 2606.971216][T11262] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2606.976558][T11262] ? security_socket_sendmsg+0x80/0xa0 [ 2606.982064][T11262] ? netlink_getsockopt+0x590/0x590 [ 2606.987324][T11262] ____sys_sendmsg+0x5ba/0x960 [ 2606.992177][T11262] ? __asan_memset+0x22/0x40 [ 2606.996828][T11262] ? __sys_sendmsg_sock+0x30/0x30 [ 2607.001904][T11262] ? __import_iovec+0x5f2/0x850 [ 2607.006826][T11262] ? import_iovec+0x73/0xa0 [ 2607.011383][T11262] ___sys_sendmsg+0x2a6/0x360 [ 2607.016255][T11262] ? __sys_sendmsg+0x2a0/0x2a0 [ 2607.021157][T11262] ? trace_call_bpf+0xc3/0x6c0 [ 2607.026027][T11262] __se_sys_sendmsg+0x1c2/0x2b0 [ 2607.030933][T11262] ? __x64_sys_sendmsg+0x80/0x80 [ 2607.035964][T11262] ? lockdep_hardirqs_on+0x98/0x150 [ 2607.041269][T11262] do_syscall_64+0x55/0xa0 [ 2607.045840][T11262] ? clear_bhb_loop+0x40/0x90 [ 2607.050577][T11262] ? clear_bhb_loop+0x40/0x90 [ 2607.055318][T11262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2607.061265][T11262] RIP: 0033:0x7f0fd779acb9 [ 2607.065723][T11262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2607.085377][T11262] RSP: 002b:00007f0fd8707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2607.093864][T11262] RAX: ffffffffffffffda RBX: 00007f0fd7a15fa0 RCX: 00007f0fd779acb9 [ 2607.101872][T11262] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2607.109882][T11262] RBP: 00007f0fd7808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2607.117893][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2607.125922][T11262] R13: 00007f0fd7a16038 R14: 00007f0fd7a15fa0 R15: 00007ffe976a41d8 [ 2607.133955][T11262] [ 2607.580428][T11277] Ÿë: entered promiscuous mode [ 2607.586465][T11277] Ÿë: entered allmulticast mode [ 2607.792777][T11285] netlink: 'syz.8.13657': attribute type 10 has an invalid length. [ 2608.073432][T11291] netlink: 180 bytes leftover after parsing attributes in process `syz.6.13659'. [ 2608.153657][T11295] Ÿë: port 1(syz_tun) entered blocking state [ 2608.161930][T11295] Ÿë: port 1(syz_tun) entered disabled state [ 2608.168890][T11295] syz_tun: entered allmulticast mode [ 2608.214082][T11295] syz_tun: entered promiscuous mode [ 2608.438107][T11303] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.13664'. [ 2608.476765][T11303] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2608.504643][T11303] CPU: 0 PID: 11303 Comm: syz.7.13664 Not tainted syzkaller #0 [ 2608.512385][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2608.522516][T11303] Call Trace: [ 2608.525858][T11303] [ 2608.528864][T11303] dump_stack_lvl+0x18c/0x250 [ 2608.533625][T11303] ? show_regs_print_info+0x20/0x20 [ 2608.538910][T11303] ? load_image+0x400/0x400 [ 2608.543674][T11303] sysfs_warn_dup+0x8e/0xa0 [ 2608.548257][T11303] sysfs_do_create_link_sd+0xc0/0x110 [ 2608.553710][T11303] device_add_class_symlinks+0x1cf/0x240 [ 2608.559471][T11303] device_add+0x507/0xc20 [ 2608.563895][T11303] wiphy_register+0x1dad/0x2ae0 [ 2608.568877][T11303] ? cfg80211_event_work+0x40/0x40 [ 2608.574069][T11303] ? minstrel_ht_alloc+0x88a/0x990 [ 2608.579277][T11303] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2608.585425][T11303] ieee80211_register_hw+0x3464/0x4250 [ 2608.591033][T11303] ? ieee80211_tasklet_handler+0x20/0x20 [ 2608.596747][T11303] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2608.602721][T11303] ? __debug_object_init+0xec/0x450 [ 2608.608009][T11303] ? __asan_memset+0x22/0x40 [ 2608.612685][T11303] ? __hrtimer_init+0x186/0x270 [ 2608.617629][T11303] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2608.623483][T11303] ? mac80211_hwsim_free+0x220/0x220 [ 2608.628852][T11303] ? rcu_is_watching+0x15/0xb0 [ 2608.633705][T11303] ? kstrndup+0xbd/0x140 [ 2608.638048][T11303] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2608.643280][T11303] ? __nla_validate+0x50/0x50 [ 2608.648174][T11303] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2608.654680][T11303] ? __nla_parse+0x40/0x50 [ 2608.659229][T11303] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2608.665692][T11303] genl_family_rcv_msg_doit+0x211/0x310 [ 2608.671349][T11303] ? end_current_label_crit_section+0x170/0x170 [ 2608.677711][T11303] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2608.683843][T11303] ? bpf_lsm_capable+0x9/0x10 [ 2608.688621][T11303] ? security_capable+0x89/0xb0 [ 2608.693614][T11303] genl_rcv_msg+0x619/0x7a0 [ 2608.698255][T11303] ? genl_bind+0x360/0x360 [ 2608.702777][T11303] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2608.709223][T11303] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2608.715920][T11303] ? ref_tracker_free+0x690/0x840 [ 2608.721084][T11303] netlink_rcv_skb+0x241/0x4d0 [ 2608.725964][T11303] ? genl_bind+0x360/0x360 [ 2608.730485][T11303] ? netlink_ack+0x1180/0x1180 [ 2608.735419][T11303] ? __lock_acquire+0x7d40/0x7d40 [ 2608.740574][T11303] ? down_read+0x1ac/0x2e0 [ 2608.745123][T11303] genl_rcv+0x28/0x40 [ 2608.749218][T11303] netlink_unicast+0x751/0x8d0 [ 2608.754146][T11303] netlink_sendmsg+0x8d0/0xbf0 [ 2608.759063][T11303] ? netlink_getsockopt+0x590/0x590 [ 2608.764386][T11303] ? aa_sock_msg_perm+0x94/0x150 [ 2608.769429][T11303] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2608.774817][T11303] ? security_socket_sendmsg+0x80/0xa0 [ 2608.780369][T11303] ? netlink_getsockopt+0x590/0x590 [ 2608.785684][T11303] ____sys_sendmsg+0x5ba/0x960 [ 2608.790592][T11303] ? __asan_memset+0x22/0x40 [ 2608.795292][T11303] ? __sys_sendmsg_sock+0x30/0x30 [ 2608.800423][T11303] ? __import_iovec+0x5f2/0x850 [ 2608.805419][T11303] ? import_iovec+0x73/0xa0 [ 2608.810046][T11303] ___sys_sendmsg+0x2a6/0x360 [ 2608.814865][T11303] ? __sys_sendmsg+0x2a0/0x2a0 [ 2608.819829][T11303] ? trace_call_bpf+0xc3/0x6c0 [ 2608.824693][T11303] ? debug_mutex_init+0x38/0x70 [ 2608.829747][T11303] __se_sys_sendmsg+0x1c2/0x2b0 [ 2608.834716][T11303] ? __x64_sys_sendmsg+0x80/0x80 [ 2608.839829][T11303] ? lockdep_hardirqs_on+0x98/0x150 [ 2608.845144][T11303] do_syscall_64+0x55/0xa0 [ 2608.849655][T11303] ? clear_bhb_loop+0x40/0x90 [ 2608.854416][T11303] ? clear_bhb_loop+0x40/0x90 [ 2608.859197][T11303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2608.865181][T11303] RIP: 0033:0x7f02a599acb9 [ 2608.869697][T11303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2608.889406][T11303] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2608.898159][T11303] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2608.906232][T11303] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2608.914286][T11303] RBP: 00007f02a5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2608.922341][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2608.930411][T11303] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2608.938566][T11303] [ 2609.253399][T11318] netlink: 'syz.7.13668': attribute type 10 has an invalid length. [ 2610.336117][T11360] netlink: 'syz.6.13678': attribute type 10 has an invalid length. [ 2610.420011][T11363] netlink: 'syz.8.13679': attribute type 39 has an invalid length. [ 2610.742224][T22638] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2611.188975][T11387] FAULT_INJECTION: forcing a failure. [ 2611.188975][T11387] name failslab, interval 1, probability 0, space 0, times 0 [ 2611.209363][T11387] CPU: 0 PID: 11387 Comm: syz.2.13685 Not tainted syzkaller #0 [ 2611.217024][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2611.227125][T11387] Call Trace: [ 2611.230452][T11387] [ 2611.233422][T11387] dump_stack_lvl+0x18c/0x250 [ 2611.238159][T11387] ? show_regs_print_info+0x20/0x20 [ 2611.243421][T11387] ? load_image+0x400/0x400 [ 2611.247982][T11387] ? __might_sleep+0xe0/0xe0 [ 2611.252629][T11387] ? __lock_acquire+0x7d40/0x7d40 [ 2611.257767][T11387] should_fail_ex+0x39d/0x4d0 [ 2611.262546][T11387] should_failslab+0x9/0x20 [ 2611.267103][T11387] slab_pre_alloc_hook+0x59/0x310 [ 2611.272181][T11387] ? perf_trace_lock+0xfc/0x3b0 [ 2611.277085][T11387] ? sock_kmalloc+0x96/0xf0 [ 2611.281634][T11387] ? sock_kmalloc+0x96/0xf0 [ 2611.286232][T11387] __kmem_cache_alloc_node+0x53/0x250 [ 2611.291670][T11387] ? sock_kmalloc+0x96/0xf0 [ 2611.296224][T11387] __kmalloc+0xa4/0x230 [ 2611.300446][T11387] sock_kmalloc+0x96/0xf0 [ 2611.304831][T11387] ____sys_sendmsg+0x1be/0x960 [ 2611.309677][T11387] ? __asan_memset+0x22/0x40 [ 2611.314323][T11387] ? __sys_sendmsg_sock+0x30/0x30 [ 2611.319409][T11387] ? __import_iovec+0x3fa/0x850 [ 2611.324332][T11387] ? import_iovec+0x73/0xa0 [ 2611.328910][T11387] ___sys_sendmsg+0x2a6/0x360 [ 2611.333644][T11387] ? __sys_sendmsg+0x2a0/0x2a0 [ 2611.338465][T11387] ? __lock_acquire+0x7d40/0x7d40 [ 2611.343540][T11387] __se_sys_sendmsg+0x1c2/0x2b0 [ 2611.348430][T11387] ? __x64_sys_sendmsg+0x80/0x80 [ 2611.353414][T11387] ? lockdep_hardirqs_on+0x98/0x150 [ 2611.358652][T11387] do_syscall_64+0x55/0xa0 [ 2611.363113][T11387] ? clear_bhb_loop+0x40/0x90 [ 2611.367828][T11387] ? clear_bhb_loop+0x40/0x90 [ 2611.372542][T11387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2611.378462][T11387] RIP: 0033:0x7fe07c19acb9 [ 2611.382906][T11387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2611.402536][T11387] RSP: 002b:00007fe07cfe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2611.410978][T11387] RAX: ffffffffffffffda RBX: 00007fe07c415fa0 RCX: 00007fe07c19acb9 [ 2611.418976][T11387] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000003 [ 2611.426973][T11387] RBP: 00007fe07cfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 2611.434970][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2611.442971][T11387] R13: 00007fe07c416038 R14: 00007fe07c415fa0 R15: 00007ffdfaac4d48 [ 2611.451043][T11387] [ 2611.614934][T11395] netlink: 'syz.2.13688': attribute type 10 has an invalid length. [ 2611.689334][T11396] netlink: 'syz.6.13689': attribute type 39 has an invalid length. [ 2612.130399][T11406] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13693'. [ 2615.402292][T11434] netlink: 'syz.6.13700': attribute type 10 has an invalid length. [ 2615.521778][T11437] netlink: 'syz.2.13702': attribute type 39 has an invalid length. [ 2615.645732][T11443] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.13704'. [ 2615.684812][T11443] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2615.717429][T11443] CPU: 1 PID: 11443 Comm: syz.6.13704 Not tainted syzkaller #0 [ 2615.725112][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2615.735223][T11443] Call Trace: [ 2615.738558][T11443] [ 2615.741540][T11443] dump_stack_lvl+0x18c/0x250 [ 2615.746303][T11443] ? show_regs_print_info+0x20/0x20 [ 2615.751564][T11443] ? load_image+0x400/0x400 [ 2615.756155][T11443] sysfs_warn_dup+0x8e/0xa0 [ 2615.760712][T11443] sysfs_do_create_link_sd+0xc0/0x110 [ 2615.766129][T11443] device_add_class_symlinks+0x1cf/0x240 [ 2615.771884][T11443] device_add+0x507/0xc20 [ 2615.776286][T11443] wiphy_register+0x1dad/0x2ae0 [ 2615.781233][T11443] ? cfg80211_event_work+0x40/0x40 [ 2615.786422][T11443] ? minstrel_ht_alloc+0x88a/0x990 [ 2615.791593][T11443] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2615.797710][T11443] ieee80211_register_hw+0x3464/0x4250 [ 2615.803250][T11443] ? ieee80211_tasklet_handler+0x20/0x20 [ 2615.808925][T11443] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2615.814873][T11443] ? __debug_object_init+0xec/0x450 [ 2615.820125][T11443] ? __asan_memset+0x22/0x40 [ 2615.824757][T11443] ? __hrtimer_init+0x186/0x270 [ 2615.829648][T11443] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2615.835452][T11443] ? mac80211_hwsim_free+0x220/0x220 [ 2615.840783][T11443] ? rcu_is_watching+0x15/0xb0 [ 2615.845590][T11443] ? kstrndup+0xbd/0x140 [ 2615.849897][T11443] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2615.855080][T11443] ? __nla_validate+0x50/0x50 [ 2615.859839][T11443] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2615.866257][T11443] ? __nla_parse+0x40/0x50 [ 2615.870778][T11443] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2615.877182][T11443] genl_family_rcv_msg_doit+0x211/0x310 [ 2615.882782][T11443] ? end_current_label_crit_section+0x170/0x170 [ 2615.889082][T11443] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2615.895037][T11443] ? bpf_lsm_capable+0x9/0x10 [ 2615.899762][T11443] ? security_capable+0x89/0xb0 [ 2615.904679][T11443] genl_rcv_msg+0x619/0x7a0 [ 2615.909245][T11443] ? genl_bind+0x360/0x360 [ 2615.913701][T11443] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2615.920082][T11443] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2615.926753][T11443] ? ref_tracker_free+0x690/0x840 [ 2615.931849][T11443] netlink_rcv_skb+0x241/0x4d0 [ 2615.936676][T11443] ? genl_bind+0x360/0x360 [ 2615.941156][T11443] ? netlink_ack+0x1180/0x1180 [ 2615.945995][T11443] ? __lock_acquire+0x7d40/0x7d40 [ 2615.951064][T11443] ? down_read+0x1ac/0x2e0 [ 2615.955532][T11443] genl_rcv+0x28/0x40 [ 2615.959562][T11443] netlink_unicast+0x751/0x8d0 [ 2615.964405][T11443] netlink_sendmsg+0x8d0/0xbf0 [ 2615.969250][T11443] ? netlink_getsockopt+0x590/0x590 [ 2615.974503][T11443] ? aa_sock_msg_perm+0x94/0x150 [ 2615.979494][T11443] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2615.984822][T11443] ? security_socket_sendmsg+0x80/0xa0 [ 2615.990318][T11443] ? netlink_getsockopt+0x590/0x590 [ 2615.995593][T11443] ____sys_sendmsg+0x5ba/0x960 [ 2616.000421][T11443] ? __asan_memset+0x22/0x40 [ 2616.005061][T11443] ? __sys_sendmsg_sock+0x30/0x30 [ 2616.010134][T11443] ? __import_iovec+0x5f2/0x850 [ 2616.015046][T11443] ? import_iovec+0x73/0xa0 [ 2616.019601][T11443] ___sys_sendmsg+0x2a6/0x360 [ 2616.024339][T11443] ? __sys_sendmsg+0x2a0/0x2a0 [ 2616.029199][T11443] ? debug_mutex_init+0x38/0x70 [ 2616.034126][T11443] __se_sys_sendmsg+0x1c2/0x2b0 [ 2616.039023][T11443] ? __x64_sys_sendmsg+0x80/0x80 [ 2616.044036][T11443] ? lockdep_hardirqs_on+0x98/0x150 [ 2616.049275][T11443] do_syscall_64+0x55/0xa0 [ 2616.053730][T11443] ? clear_bhb_loop+0x40/0x90 [ 2616.058471][T11443] ? clear_bhb_loop+0x40/0x90 [ 2616.063222][T11443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2616.069178][T11443] RIP: 0033:0x7f0fd779acb9 [ 2616.073641][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2616.093291][T11443] RSP: 002b:00007f0fd8707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2616.101751][T11443] RAX: ffffffffffffffda RBX: 00007f0fd7a15fa0 RCX: 00007f0fd779acb9 [ 2616.109760][T11443] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2616.117765][T11443] RBP: 00007f0fd7808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2616.125803][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2616.133806][T11443] R13: 00007f0fd7a16038 R14: 00007f0fd7a15fa0 R15: 00007ffe976a41d8 [ 2616.141841][T11443] [ 2616.439283][T11448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13705'. [ 2616.455979][T11448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13705'. [ 2616.516600][T11454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13705'. [ 2616.540969][T11448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13705'. [ 2616.926457][T11458] netlink: 180 bytes leftover after parsing attributes in process `syz.7.13707'. [ 2617.397614][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13709'. [ 2617.925566][T11473] netlink: 'syz.7.13713': attribute type 10 has an invalid length. [ 2618.116335][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2618.243825][T11477] FAULT_INJECTION: forcing a failure. [ 2618.243825][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2618.265885][T11477] CPU: 0 PID: 11477 Comm: syz.6.13714 Not tainted syzkaller #0 [ 2618.273540][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2618.283647][T11477] Call Trace: [ 2618.286974][T11477] [ 2618.289971][T11477] dump_stack_lvl+0x18c/0x250 [ 2618.294717][T11477] ? show_regs_print_info+0x20/0x20 [ 2618.296989][T11476] netlink: 'syz.7.13715': attribute type 39 has an invalid length. [ 2618.299958][T11477] ? load_image+0x400/0x400 [ 2618.299997][T11477] ? __might_fault+0xaa/0x120 [ 2618.300022][T11477] ? __lock_acquire+0x7d40/0x7d40 [ 2618.300053][T11477] should_fail_ex+0x39d/0x4d0 [ 2618.300091][T11477] _copy_from_user+0x2f/0xe0 [ 2618.300119][T11477] ___sys_sendmsg+0x1c7/0x360 [ 2618.300152][T11477] ? get_pid_task+0x20/0x1e0 [ 2618.300185][T11477] ? __sys_sendmsg+0x2a0/0x2a0 [ 2618.300242][T11477] ? __lock_acquire+0x7d40/0x7d40 [ 2618.300295][T11477] __se_sys_sendmsg+0x1c2/0x2b0 [ 2618.355784][T11477] ? __x64_sys_sendmsg+0x80/0x80 [ 2618.360825][T11477] ? trace_sys_enter+0x1f/0x80 [ 2618.365648][T11477] do_syscall_64+0x55/0xa0 [ 2618.370124][T11477] ? clear_bhb_loop+0x40/0x90 [ 2618.374843][T11477] ? clear_bhb_loop+0x40/0x90 [ 2618.379568][T11477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2618.385514][T11477] RIP: 0033:0x7f0fd779acb9 [ 2618.390033][T11477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2618.409699][T11477] RSP: 002b:00007f0fd8707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2618.418192][T11477] RAX: ffffffffffffffda RBX: 00007f0fd7a15fa0 RCX: 00007f0fd779acb9 [ 2618.426227][T11477] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 2618.434244][T11477] RBP: 00007f0fd8707090 R08: 0000000000000000 R09: 0000000000000000 [ 2618.442265][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2618.450289][T11477] R13: 00007f0fd7a16038 R14: 00007f0fd7a15fa0 R15: 00007ffe976a41d8 [ 2618.458337][T11477] [ 2618.650921][T11480] netlink: 'syz.6.13716': attribute type 9 has an invalid length. [ 2618.684578][T11480] netlink: 399 bytes leftover after parsing attributes in process `syz.6.13716'. [ 2619.397852][T10408] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 2619.842239][T11495] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.13720'. [ 2620.309132][T11507] netlink: 'syz.6.13724': attribute type 10 has an invalid length. [ 2620.945293][T11512] netlink: 'syz.8.13726': attribute type 39 has an invalid length. [ 2621.346404][T11514] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.13727'. [ 2621.422780][T11514] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2621.446369][T11514] CPU: 1 PID: 11514 Comm: syz.7.13727 Not tainted syzkaller #0 [ 2621.454048][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2621.464191][T11514] Call Trace: [ 2621.467566][T11514] [ 2621.470580][T11514] dump_stack_lvl+0x18c/0x250 [ 2621.475377][T11514] ? show_regs_print_info+0x20/0x20 [ 2621.480672][T11514] ? load_image+0x400/0x400 [ 2621.485367][T11514] sysfs_warn_dup+0x8e/0xa0 [ 2621.489993][T11514] sysfs_do_create_link_sd+0xc0/0x110 [ 2621.495472][T11514] device_add_class_symlinks+0x1cf/0x240 [ 2621.501233][T11514] device_add+0x507/0xc20 [ 2621.505691][T11514] wiphy_register+0x1dad/0x2ae0 [ 2621.510723][T11514] ? cfg80211_event_work+0x40/0x40 [ 2621.515935][T11514] ? minstrel_ht_alloc+0x88a/0x990 [ 2621.521207][T11514] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2621.527381][T11514] ieee80211_register_hw+0x3464/0x4250 [ 2621.533047][T11514] ? ieee80211_tasklet_handler+0x20/0x20 [ 2621.538773][T11514] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2621.544769][T11514] ? __debug_object_init+0xec/0x450 [ 2621.550085][T11514] ? __asan_memset+0x22/0x40 [ 2621.554779][T11514] ? __hrtimer_init+0x186/0x270 [ 2621.559735][T11514] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2621.565659][T11514] ? mac80211_hwsim_free+0x220/0x220 [ 2621.571044][T11514] ? rcu_is_watching+0x15/0xb0 [ 2621.575905][T11514] ? kstrndup+0xbd/0x140 [ 2621.580298][T11514] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2621.585543][T11514] ? __nla_validate+0x50/0x50 [ 2621.590379][T11514] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2621.596869][T11514] ? __nla_parse+0x40/0x50 [ 2621.601406][T11514] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2621.607863][T11514] genl_family_rcv_msg_doit+0x211/0x310 [ 2621.613525][T11514] ? end_current_label_crit_section+0x170/0x170 [ 2621.619906][T11514] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2621.625964][T11514] ? bpf_lsm_capable+0x9/0x10 [ 2621.630736][T11514] ? security_capable+0x89/0xb0 [ 2621.635740][T11514] genl_rcv_msg+0x619/0x7a0 [ 2621.640378][T11514] ? genl_bind+0x360/0x360 [ 2621.644891][T11514] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2621.651336][T11514] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2621.658018][T11514] ? ref_tracker_free+0x690/0x840 [ 2621.663178][T11514] netlink_rcv_skb+0x241/0x4d0 [ 2621.668059][T11514] ? genl_bind+0x360/0x360 [ 2621.672576][T11514] ? netlink_ack+0x1180/0x1180 [ 2621.677528][T11514] ? __lock_acquire+0x7d40/0x7d40 [ 2621.682796][T11514] ? down_read+0x1ac/0x2e0 [ 2621.687328][T11514] genl_rcv+0x28/0x40 [ 2621.691412][T11514] netlink_unicast+0x751/0x8d0 [ 2621.696330][T11514] netlink_sendmsg+0x8d0/0xbf0 [ 2621.701250][T11514] ? netlink_getsockopt+0x590/0x590 [ 2621.706566][T11514] ? aa_sock_msg_perm+0x94/0x150 [ 2621.711612][T11514] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2621.717017][T11514] ? security_socket_sendmsg+0x80/0xa0 [ 2621.722570][T11514] ? netlink_getsockopt+0x590/0x590 [ 2621.727912][T11514] ____sys_sendmsg+0x5ba/0x960 [ 2621.732817][T11514] ? __asan_memset+0x22/0x40 [ 2621.737505][T11514] ? __sys_sendmsg_sock+0x30/0x30 [ 2621.742628][T11514] ? __import_iovec+0x5f2/0x850 [ 2621.747614][T11514] ? import_iovec+0x73/0xa0 [ 2621.752236][T11514] ___sys_sendmsg+0x2a6/0x360 [ 2621.757053][T11514] ? __sys_sendmsg+0x2a0/0x2a0 [ 2621.762191][T11514] __se_sys_sendmsg+0x1c2/0x2b0 [ 2621.767165][T11514] ? __x64_sys_sendmsg+0x80/0x80 [ 2621.772297][T11514] ? trace_sys_enter+0x1f/0x80 [ 2621.777177][T11514] do_syscall_64+0x55/0xa0 [ 2621.781680][T11514] ? clear_bhb_loop+0x40/0x90 [ 2621.786433][T11514] ? clear_bhb_loop+0x40/0x90 [ 2621.791207][T11514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2621.797204][T11514] RIP: 0033:0x7f02a599acb9 [ 2621.801706][T11514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2621.821406][T11514] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2621.829969][T11514] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2621.838026][T11514] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2621.846084][T11514] RBP: 00007f02a5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2621.854164][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2621.862216][T11514] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2621.870354][T11514] [ 2622.882760][T11532] netlink: 'syz.7.13733': attribute type 10 has an invalid length. [ 2623.351088][T11542] netlink: 'syz.8.13737': attribute type 9 has an invalid length. [ 2623.359422][T11542] netlink: 399 bytes leftover after parsing attributes in process `syz.8.13737'. [ 2625.601853][T11562] netlink: 'syz.8.13743': attribute type 10 has an invalid length. [ 2626.899221][T11591] FAULT_INJECTION: forcing a failure. [ 2626.899221][T11591] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.912226][T11591] CPU: 0 PID: 11591 Comm: syz.7.13753 Not tainted syzkaller #0 [ 2626.919845][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2626.929955][T11591] Call Trace: [ 2626.933304][T11591] [ 2626.936272][T11591] dump_stack_lvl+0x18c/0x250 [ 2626.941019][T11591] ? show_regs_print_info+0x20/0x20 [ 2626.946237][T11591] ? load_image+0x400/0x400 [ 2626.950751][T11591] ? __might_sleep+0xe0/0xe0 [ 2626.955359][T11591] ? __lock_acquire+0x7d40/0x7d40 [ 2626.960397][T11591] should_fail_ex+0x39d/0x4d0 [ 2626.965105][T11591] should_failslab+0x9/0x20 [ 2626.969657][T11591] slab_pre_alloc_hook+0x59/0x310 [ 2626.974746][T11591] ? tomoyo_encode+0x28b/0x540 [ 2626.979539][T11591] ? tomoyo_encode+0x28b/0x540 [ 2626.984311][T11591] __kmem_cache_alloc_node+0x53/0x250 [ 2626.989699][T11591] ? tomoyo_encode+0x28b/0x540 [ 2626.994490][T11591] __kmalloc+0xa4/0x230 [ 2626.998664][T11591] tomoyo_encode+0x28b/0x540 [ 2627.003294][T11591] tomoyo_realpath_from_path+0x592/0x5d0 [ 2627.008975][T11591] tomoyo_path_number_perm+0x248/0x620 [ 2627.014473][T11591] ? tomoyo_path_number_perm+0x217/0x620 [ 2627.020172][T11591] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2627.025702][T11591] ? ksys_write+0x1c4/0x260 [ 2627.030281][T11591] ? __fget_files+0x28/0x4b0 [ 2627.034893][T11591] ? __fget_files+0x28/0x4b0 [ 2627.039508][T11591] security_file_ioctl+0x70/0xa0 [ 2627.044472][T11591] __se_sys_ioctl+0x48/0x170 [ 2627.049086][T11591] do_syscall_64+0x55/0xa0 [ 2627.053521][T11591] ? clear_bhb_loop+0x40/0x90 [ 2627.058213][T11591] ? clear_bhb_loop+0x40/0x90 [ 2627.062921][T11591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2627.068869][T11591] RIP: 0033:0x7f02a599acb9 [ 2627.073336][T11591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2627.092999][T11591] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2627.101451][T11591] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2627.109559][T11591] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000003 [ 2627.117561][T11591] RBP: 00007f02a67ea090 R08: 0000000000000000 R09: 0000000000000000 [ 2627.125578][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2627.133582][T11591] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2627.141583][T11591] [ 2627.146844][T11591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2627.277122][T11597] netlink: 'syz.6.13755': attribute type 10 has an invalid length. [ 2627.515650][T11601] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13757'. [ 2627.553106][T11601] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13757'. [ 2627.600284][T11607] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13757'. [ 2627.646982][T11601] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13757'. [ 2628.603011][ T3610] Bluetooth: hci1: command 0x0406 tx timeout [ 2628.691419][T11621] FAULT_INJECTION: forcing a failure. [ 2628.691419][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.742806][T11621] CPU: 0 PID: 11621 Comm: syz.2.13763 Not tainted syzkaller #0 [ 2628.750469][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2628.760606][T11621] Call Trace: [ 2628.763942][T11621] [ 2628.766916][T11621] dump_stack_lvl+0x18c/0x250 [ 2628.771654][T11621] ? show_regs_print_info+0x20/0x20 [ 2628.776905][T11621] ? load_image+0x400/0x400 [ 2628.781462][T11621] ? __might_sleep+0xe0/0xe0 [ 2628.786133][T11621] ? __lock_acquire+0x7d40/0x7d40 [ 2628.791209][T11621] should_fail_ex+0x39d/0x4d0 [ 2628.795948][T11621] should_failslab+0x9/0x20 [ 2628.800508][T11621] slab_pre_alloc_hook+0x59/0x310 [ 2628.805585][T11621] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 2628.811194][T11621] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 2628.816793][T11621] __kmem_cache_alloc_node+0x53/0x250 [ 2628.822254][T11621] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 2628.827848][T11621] __kmalloc+0xa4/0x230 [ 2628.832054][T11621] bpf_prog_test_run_skb+0x238/0x12b0 [ 2628.837464][T11621] ? __fget_files+0x28/0x4b0 [ 2628.842106][T11621] ? __fget_files+0x28/0x4b0 [ 2628.846751][T11621] ? __fget_files+0x43d/0x4b0 [ 2628.851492][T11621] ? cpu_online+0x60/0x60 [ 2628.855879][T11621] bpf_prog_test_run+0x321/0x390 [ 2628.860877][T11621] __sys_bpf+0x49d/0x890 [ 2628.865184][T11621] ? bpf_link_show_fdinfo+0x390/0x390 [ 2628.870624][T11621] ? lock_chain_count+0x20/0x20 [ 2628.874909][T11626] netlink: 830 bytes leftover after parsing attributes in process `syz.8.13765'. [ 2628.875523][T11621] __x64_sys_bpf+0x7c/0x90 [ 2628.889136][T11621] do_syscall_64+0x55/0xa0 [ 2628.893612][T11621] ? clear_bhb_loop+0x40/0x90 [ 2628.898327][T11621] ? clear_bhb_loop+0x40/0x90 [ 2628.903034][T11621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2628.908982][T11621] RIP: 0033:0x7fe07c19acb9 [ 2628.913443][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2628.933118][T11621] RSP: 002b:00007fe07cfe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2628.941601][T11621] RAX: ffffffffffffffda RBX: 00007fe07c415fa0 RCX: 00007fe07c19acb9 [ 2628.949632][T11621] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2628.957662][T11621] RBP: 00007fe07cfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 2628.965686][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2628.965758][T11624] netlink: 763 bytes leftover after parsing attributes in process `syz.7.13764'. [ 2628.973685][T11621] R13: 00007fe07c416038 R14: 00007fe07c415fa0 R15: 00007ffdfaac4d48 [ 2628.973720][T11621] [ 2629.288242][T11629] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.13766'. [ 2629.355848][T11629] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2629.402624][T11629] CPU: 0 PID: 11629 Comm: syz.8.13766 Not tainted syzkaller #0 [ 2629.410290][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2629.420442][T11629] Call Trace: [ 2629.423837][T11629] [ 2629.426829][T11629] dump_stack_lvl+0x18c/0x250 [ 2629.431601][T11629] ? show_regs_print_info+0x20/0x20 [ 2629.436897][T11629] ? load_image+0x400/0x400 [ 2629.441563][T11629] sysfs_warn_dup+0x8e/0xa0 [ 2629.446166][T11629] sysfs_do_create_link_sd+0xc0/0x110 [ 2629.451640][T11629] device_add_class_symlinks+0x1cf/0x240 [ 2629.457387][T11629] device_add+0x507/0xc20 [ 2629.461846][T11629] wiphy_register+0x1dad/0x2ae0 [ 2629.466907][T11629] ? cfg80211_event_work+0x40/0x40 [ 2629.472112][T11629] ? minstrel_ht_alloc+0x88a/0x990 [ 2629.477351][T11629] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2629.483540][T11629] ieee80211_register_hw+0x3464/0x4250 [ 2629.489203][T11629] ? ieee80211_tasklet_handler+0x20/0x20 [ 2629.494955][T11629] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2629.500948][T11629] ? __debug_object_init+0xec/0x450 [ 2629.506226][T11629] ? __asan_memset+0x22/0x40 [ 2629.510877][T11629] ? __hrtimer_init+0x186/0x270 [ 2629.515844][T11629] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2629.521698][T11629] ? mac80211_hwsim_free+0x220/0x220 [ 2629.527054][T11629] ? rcu_is_watching+0x15/0xb0 [ 2629.531885][T11629] ? kstrndup+0xbd/0x140 [ 2629.536229][T11629] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2629.541426][T11629] ? __nla_validate+0x50/0x50 [ 2629.546229][T11629] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2629.552676][T11629] ? __nla_parse+0x40/0x50 [ 2629.557172][T11629] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2629.563603][T11629] genl_family_rcv_msg_doit+0x211/0x310 [ 2629.569227][T11629] ? end_current_label_crit_section+0x170/0x170 [ 2629.575545][T11629] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2629.581549][T11629] ? bpf_lsm_capable+0x9/0x10 [ 2629.586326][T11629] ? security_capable+0x89/0xb0 [ 2629.591263][T11629] genl_rcv_msg+0x619/0x7a0 [ 2629.595866][T11629] ? genl_bind+0x360/0x360 [ 2629.600358][T11629] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2629.606760][T11629] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2629.613425][T11629] ? ref_tracker_free+0x690/0x840 [ 2629.618557][T11629] netlink_rcv_skb+0x241/0x4d0 [ 2629.623400][T11629] ? genl_bind+0x360/0x360 [ 2629.627893][T11629] ? netlink_ack+0x1180/0x1180 [ 2629.632772][T11629] ? __lock_acquire+0x7d40/0x7d40 [ 2629.637890][T11629] ? down_read+0x1ac/0x2e0 [ 2629.642401][T11629] genl_rcv+0x28/0x40 [ 2629.646452][T11629] netlink_unicast+0x751/0x8d0 [ 2629.651317][T11629] netlink_sendmsg+0x8d0/0xbf0 [ 2629.656176][T11629] ? netlink_getsockopt+0x590/0x590 [ 2629.661485][T11629] ? aa_sock_msg_perm+0x94/0x150 [ 2629.666522][T11629] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2629.671863][T11629] ? security_socket_sendmsg+0x80/0xa0 [ 2629.677385][T11629] ? netlink_getsockopt+0x590/0x590 [ 2629.682656][T11629] ____sys_sendmsg+0x5ba/0x960 [ 2629.687518][T11629] ? __asan_memset+0x22/0x40 [ 2629.692182][T11629] ? __sys_sendmsg_sock+0x30/0x30 [ 2629.697271][T11629] ? __import_iovec+0x5f2/0x850 [ 2629.702230][T11629] ? import_iovec+0x73/0xa0 [ 2629.706820][T11629] ___sys_sendmsg+0x2a6/0x360 [ 2629.711586][T11629] ? __sys_sendmsg+0x2a0/0x2a0 [ 2629.716489][T11629] ? debug_mutex_init+0x38/0x70 [ 2629.721488][T11629] __se_sys_sendmsg+0x1c2/0x2b0 [ 2629.726419][T11629] ? __x64_sys_sendmsg+0x80/0x80 [ 2629.731484][T11629] ? lockdep_hardirqs_on+0x98/0x150 [ 2629.736762][T11629] do_syscall_64+0x55/0xa0 [ 2629.741244][T11629] ? clear_bhb_loop+0x40/0x90 [ 2629.745973][T11629] ? clear_bhb_loop+0x40/0x90 [ 2629.750717][T11629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2629.756691][T11629] RIP: 0033:0x7fa4ce39acb9 [ 2629.761179][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2629.780879][T11629] RSP: 002b:00007fa4cf1ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2629.789371][T11629] RAX: ffffffffffffffda RBX: 00007fa4ce615fa0 RCX: 00007fa4ce39acb9 [ 2629.797406][T11629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2629.805436][T11629] RBP: 00007fa4ce408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2629.813470][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2629.821618][T11629] R13: 00007fa4ce616038 R14: 00007fa4ce615fa0 R15: 00007fff80f56fc8 [ 2629.829695][T11629] [ 2629.929952][T11634] netlink: 'syz.6.13768': attribute type 10 has an invalid length. [ 2630.456309][T11643] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13770'. [ 2630.646479][ T4840] Ÿë: port 1(syz_tun) entered disabled state [ 2630.778529][ T4840] syz_tun (unregistering): left allmulticast mode [ 2630.788228][ T4840] syz_tun (unregistering): left promiscuous mode [ 2630.805556][ T4840] Ÿë: port 1(syz_tun) entered disabled state [ 2630.830433][ T3610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2630.841413][ T3610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2630.852111][ T3610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2630.855439][T11651] netlink: 10 bytes leftover after parsing attributes in process `syz.8.13773'. [ 2630.916650][ T3610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2630.931921][ T3610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2630.942711][ T3610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2631.287596][T11656] netlink: 'syz.7.13781': attribute type 9 has an invalid length. [ 2631.303269][T11656] netlink: 399 bytes leftover after parsing attributes in process `syz.7.13781'. [ 2631.517398][T11649] chnl_net:caif_netlink_parms(): no params data found [ 2631.845797][T11665] netlink: 'syz.8.13775': attribute type 39 has an invalid length. [ 2631.864092][T11649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2631.871397][T11649] bridge0: port 1(bridge_slave_0) entered disabled state [ 2631.893712][T11649] bridge_slave_0: entered allmulticast mode [ 2631.911063][T11649] bridge_slave_0: entered promiscuous mode [ 2631.933832][T11649] bridge0: port 2(bridge_slave_1) entered blocking state [ 2631.948234][T11649] bridge0: port 2(bridge_slave_1) entered disabled state [ 2631.963822][T11649] bridge_slave_1: entered allmulticast mode [ 2631.982258][T11649] bridge_slave_1: entered promiscuous mode [ 2632.123064][T11649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2632.164989][T11649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2632.273103][T11649] team0: Port device team_slave_0 added [ 2632.301566][T11649] team0: Port device team_slave_1 added [ 2632.348337][T11649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2632.376290][T11649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2632.412713][T11649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2632.463153][T11649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2632.473414][T11649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2632.533195][T11649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2632.576980][T11683] netlink: 'syz.6.13778': attribute type 10 has an invalid length. [ 2632.671043][T11649] hsr_slave_0: entered promiscuous mode [ 2632.718191][T11649] hsr_slave_1: entered promiscuous mode [ 2632.730882][T11649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2632.742414][T11649] Cannot create hsr debugfs directory [ 2632.824019][T11688] netlink: 'syz.7.13784': attribute type 9 has an invalid length. [ 2632.842799][T11688] netlink: 399 bytes leftover after parsing attributes in process `syz.7.13784'. [ 2632.934895][T11691] netlink: 10 bytes leftover after parsing attributes in process `syz.8.13783'. [ 2633.003026][ T3610] Bluetooth: hci0: command tx timeout [ 2633.159139][T11693] netlink: 830 bytes leftover after parsing attributes in process `syz.6.13785'. [ 2633.340533][T11649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.390876][T11695] netlink: 'syz.7.13786': attribute type 39 has an invalid length. [ 2633.576522][T11649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.779028][T11649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.979688][T11649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.408958][T11716] netlink: 'syz.6.13790': attribute type 10 has an invalid length. [ 2634.556565][T11649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2634.682210][T11649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2634.712838][T11649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2634.742001][T11649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2634.994929][T11729] netlink: 'syz.6.13793': attribute type 9 has an invalid length. [ 2635.046624][T11729] netlink: 399 bytes leftover after parsing attributes in process `syz.6.13793'. [ 2635.088156][ T3610] Bluetooth: hci0: command tx timeout [ 2635.431790][T11649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2635.649084][T11649] 8021q: adding VLAN 0 to HW filter on device team0 [ 2635.817693][T22638] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.824962][T22638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2635.854288][T19246] bridge0: port 2(bridge_slave_1) entered blocking state [ 2635.861518][T19246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2636.094253][T11742] netlink: 156 bytes leftover after parsing attributes in process `syz.8.13797'. [ 2636.184816][T11742] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.13797'. [ 2636.211376][T11740] C: renamed from team_slave_0 (while UP) [ 2636.456150][T11749] netlink: 10 bytes leftover after parsing attributes in process `syz.7.13799'. [ 2637.154453][T11740] netlink: 'syz.6.13796': attribute type 8 has an invalid length. [ 2637.163651][ T3610] Bluetooth: hci0: command tx timeout [ 2637.169347][T11740] net_ratelimit: 782 callbacks suppressed [ 2637.169366][T11740] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2637.209074][T11755] netlink: 'syz.7.13800': attribute type 10 has an invalid length. [ 2637.341615][T11649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2637.437971][T11759] netlink: 'syz.7.13803': attribute type 9 has an invalid length. [ 2637.475069][T11759] netlink: 399 bytes leftover after parsing attributes in process `syz.7.13803'. [ 2637.621885][T11649] veth0_vlan: entered promiscuous mode [ 2637.689749][T11649] veth1_vlan: entered promiscuous mode [ 2637.822734][T11765] netlink: 164 bytes leftover after parsing attributes in process `syz.8.13802'. [ 2637.965605][T11649] veth0_macvtap: entered promiscuous mode [ 2638.009695][T11649] veth1_macvtap: entered promiscuous mode [ 2638.121033][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.148196][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.179564][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.215783][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.249097][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.298866][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.328285][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2638.366012][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.396527][T11649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2638.479076][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2638.502408][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.532505][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2638.552573][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.572446][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2638.596225][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.607400][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2638.618157][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2638.643419][T11649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2638.690305][T11649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.704009][T11649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.714460][T11785] netlink: 10 bytes leftover after parsing attributes in process `syz.8.13807'. [ 2638.724710][T11649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.740905][T11649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2639.026481][T14161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2639.042165][T14161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2639.087128][T19246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2639.109869][T19246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2639.242732][ T3610] Bluetooth: hci0: command tx timeout [ 2639.261673][T11790] netlink: 'syz.6.13810': attribute type 10 has an invalid length. [ 2639.371499][T11789] C: renamed from team_slave_0 (while UP) [ 2639.464946][T11789] netlink: 'syz.7.13809': attribute type 8 has an invalid length. [ 2639.484575][T11789] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2639.583498][T11797] netlink: 'syz.2.13812': attribute type 9 has an invalid length. [ 2639.591655][T11797] netlink: 399 bytes leftover after parsing attributes in process `syz.2.13812'. [ 2640.827835][ T4446] syz_tun (unregistering): left allmulticast mode [ 2640.834983][ T4446] syz_tun (unregistering): left promiscuous mode [ 2640.842066][ T4446] Ÿë: port 1(syz_tun) entered disabled state [ 2640.854679][T10408] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2640.883155][T10408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2640.891717][T10408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2640.901550][T10408] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2640.910799][T10408] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2640.919750][T10408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2640.950471][T11817] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13818'. [ 2640.962254][T11821] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.13818'. [ 2640.972217][T11822] netlink: 'syz.6.13819': attribute type 10 has an invalid length. [ 2641.160008][T14161] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2641.368747][T11833] netlink: 10 bytes leftover after parsing attributes in process `syz.6.13822'. [ 2641.384719][T14161] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2641.492799][T11836] netlink: 'syz.7.13823': attribute type 9 has an invalid length. [ 2641.521372][T11836] netlink: 399 bytes leftover after parsing attributes in process `syz.7.13823'. [ 2641.680475][T14161] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2641.910195][T14161] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2641.958875][T11823] chnl_net:caif_netlink_parms(): no params data found [ 2642.085014][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2642.269875][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 2642.308895][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 2642.317626][T11823] bridge_slave_0: entered allmulticast mode [ 2642.325611][T11823] bridge_slave_0: entered promiscuous mode [ 2642.335869][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 2642.343329][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 2642.352087][T11823] bridge_slave_1: entered allmulticast mode [ 2642.360113][T11823] bridge_slave_1: entered promiscuous mode [ 2642.428677][T11862] netlink: 'syz.2.13828': attribute type 10 has an invalid length. [ 2642.854643][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2642.908831][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2643.022913][T10408] Bluetooth: hci2: command tx timeout [ 2643.044298][T11823] team0: Port device team_slave_0 added [ 2643.054580][T11823] team0: Port device team_slave_1 added [ 2643.186376][T11823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2643.220312][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2643.255520][T11823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2643.365747][T11875] netlink: 'syz.6.13833': attribute type 9 has an invalid length. [ 2643.419626][T11875] netlink: 399 bytes leftover after parsing attributes in process `syz.6.13833'. [ 2643.445065][T11870] netlink: 'syz.7.13831': attribute type 4 has an invalid length. [ 2643.471455][T11870] netlink: 199824 bytes leftover after parsing attributes in process `syz.7.13831'. [ 2643.557015][T11823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2643.578023][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2643.634208][T11823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2644.134636][T11887] netlink: 156 bytes leftover after parsing attributes in process `syz.7.13835'. [ 2644.184772][T11823] hsr_slave_0: entered promiscuous mode [ 2644.209149][T11823] hsr_slave_1: entered promiscuous mode [ 2644.222086][T11823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2644.238253][T11823] Cannot create hsr debugfs directory [ 2644.248598][T11889] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.13835'. [ 2645.083408][T10408] Bluetooth: hci2: command tx timeout [ 2645.696306][T11927] netlink: 'syz.2.13843': attribute type 4 has an invalid length. [ 2645.718604][T11927] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.13843'. [ 2645.875966][T14161] vlan0: left allmulticast mode [ 2645.880939][T14161] veth0_vlan: left allmulticast mode [ 2645.904853][T14161] vlan0: left promiscuous mode [ 2645.916797][T14161] À: port 1(vlan0) entered disabled state [ 2645.936992][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2645.946758][T14161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2645.956740][T14161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2645.972430][T14161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2646.013470][T14161] bridge_slave_1: left allmulticast mode [ 2646.021797][T14161] bridge_slave_1: left promiscuous mode [ 2646.043793][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 2646.083406][T14161] bridge_slave_0: left allmulticast mode [ 2646.089143][T14161] bridge_slave_0: left promiscuous mode [ 2646.115546][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 2646.197403][T14161] veth1_vlan: left allmulticast mode [ 2646.203007][T14161] veth1_vlan: left promiscuous mode [ 2646.208673][T14161] veth0_vlan: left promiscuous mode [ 2646.900484][T14161] team0 (unregistering): Port device macvlan0 removed [ 2647.166778][T10408] Bluetooth: hci2: command tx timeout [ 2647.261322][T14161] team0 (unregistering): Port device team_slave_1 removed [ 2647.327381][T14161] team0 (unregistering): Port device C removed [ 2647.397182][T14161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2647.900855][T14161] bond0 (unregistering): Released all slaves [ 2648.502941][T11957] À: port 1(vlan0) entered blocking state [ 2648.509468][T11957] À: port 1(vlan0) entered disabled state [ 2648.533665][T11957] vlan0: entered allmulticast mode [ 2648.538927][T11957] veth0_vlan: entered allmulticast mode [ 2648.588493][T11957] vlan0: entered promiscuous mode [ 2648.619679][T11823] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2648.685444][T11823] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2648.734100][T11823] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2648.789003][T11823] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2649.216442][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2649.251257][T10408] Bluetooth: hci2: command tx timeout [ 2649.258623][T14161] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2649.295612][T11823] 8021q: adding VLAN 0 to HW filter on device team0 [ 2649.309954][T22638] bridge0: port 1(bridge_slave_0) entered blocking state [ 2649.317235][T22638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2649.366842][T11980] netlink: 'syz.7.13854': attribute type 10 has an invalid length. [ 2649.399407][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2649.406727][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2649.740874][T11992] netlink: 10 bytes leftover after parsing attributes in process `syz.7.13856'. [ 2649.768934][T11985] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13855'. [ 2650.378579][T11823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2651.250794][T12026] netlink: 'syz.6.13863': attribute type 10 has an invalid length. [ 2651.287536][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2651.458412][T12040] netlink: 'syz.2.13865': attribute type 9 has an invalid length. [ 2651.480074][T12026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2651.543168][T12040] netlink: 399 bytes leftover after parsing attributes in process `syz.2.13865'. [ 2651.647852][T12041] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.13864'. [ 2651.934051][T12026] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2651.975680][T12041] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2651.994107][T12041] CPU: 0 PID: 12041 Comm: syz.7.13864 Not tainted syzkaller #0 [ 2652.001809][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2652.012012][T12041] Call Trace: [ 2652.015378][T12041] [ 2652.018388][T12041] dump_stack_lvl+0x18c/0x250 [ 2652.023195][T12041] ? show_regs_print_info+0x20/0x20 [ 2652.028517][T12041] ? load_image+0x400/0x400 [ 2652.033185][T12041] sysfs_warn_dup+0x8e/0xa0 [ 2652.037795][T12041] sysfs_do_create_link_sd+0xc0/0x110 [ 2652.043285][T12041] device_add_class_symlinks+0x1cf/0x240 [ 2652.049054][T12041] device_add+0x507/0xc20 [ 2652.053517][T12041] wiphy_register+0x1dad/0x2ae0 [ 2652.058556][T12041] ? cfg80211_event_work+0x40/0x40 [ 2652.063759][T12041] ? minstrel_ht_alloc+0x88a/0x990 [ 2652.069001][T12041] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2652.075184][T12041] ieee80211_register_hw+0x3464/0x4250 [ 2652.080841][T12041] ? ieee80211_tasklet_handler+0x20/0x20 [ 2652.086560][T12041] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2652.092553][T12041] ? __debug_object_init+0xec/0x450 [ 2652.097896][T12041] ? __asan_memset+0x22/0x40 [ 2652.102591][T12041] ? __hrtimer_init+0x186/0x270 [ 2652.107597][T12041] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2652.113528][T12041] ? mac80211_hwsim_free+0x220/0x220 [ 2652.118914][T12041] ? rcu_is_watching+0x15/0xb0 [ 2652.123780][T12041] ? kstrndup+0xbd/0x140 [ 2652.128175][T12041] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2652.133427][T12041] ? __nla_validate+0x50/0x50 [ 2652.138271][T12041] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2652.144761][T12041] ? __nla_parse+0x40/0x50 [ 2652.149308][T12041] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2652.155806][T12041] genl_family_rcv_msg_doit+0x211/0x310 [ 2652.161471][T12041] ? end_current_label_crit_section+0x170/0x170 [ 2652.167823][T12041] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2652.173861][T12041] ? bpf_lsm_capable+0x9/0x10 [ 2652.178644][T12041] ? security_capable+0x89/0xb0 [ 2652.183630][T12041] genl_rcv_msg+0x619/0x7a0 [ 2652.188265][T12041] ? genl_bind+0x360/0x360 [ 2652.192807][T12041] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2652.199274][T12041] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2652.205966][T12041] ? ref_tracker_free+0x690/0x840 [ 2652.207888][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.211174][T12041] netlink_rcv_skb+0x241/0x4d0 [ 2652.222246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.222243][T12041] ? genl_bind+0x360/0x360 [ 2652.222322][T12041] ? netlink_ack+0x1180/0x1180 [ 2652.237941][T12041] ? __lock_acquire+0x7d40/0x7d40 [ 2652.243106][T12041] ? down_read+0x1ac/0x2e0 [ 2652.247635][T12041] genl_rcv+0x28/0x40 [ 2652.251709][T12041] netlink_unicast+0x751/0x8d0 [ 2652.256625][T12041] netlink_sendmsg+0x8d0/0xbf0 [ 2652.261528][T12041] ? netlink_getsockopt+0x590/0x590 [ 2652.266918][T12041] ? aa_sock_msg_perm+0x94/0x150 [ 2652.271962][T12041] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2652.277333][T12041] ? security_socket_sendmsg+0x80/0xa0 [ 2652.282920][T12041] ? netlink_getsockopt+0x590/0x590 [ 2652.288244][T12041] ____sys_sendmsg+0x5ba/0x960 [ 2652.293161][T12041] ? __asan_memset+0x22/0x40 [ 2652.297864][T12041] ? __sys_sendmsg_sock+0x30/0x30 [ 2652.302986][T12041] ? __import_iovec+0x5f2/0x850 [ 2652.307989][T12041] ? import_iovec+0x73/0xa0 [ 2652.312620][T12041] ___sys_sendmsg+0x2a6/0x360 [ 2652.317440][T12041] ? __sys_sendmsg+0x2a0/0x2a0 [ 2652.322407][T12041] ? trace_call_bpf+0xc3/0x6c0 [ 2652.327376][T12041] __se_sys_sendmsg+0x1c2/0x2b0 [ 2652.332340][T12041] ? __x64_sys_sendmsg+0x80/0x80 [ 2652.337447][T12041] ? lockdep_hardirqs_on+0x98/0x150 [ 2652.342749][T12041] do_syscall_64+0x55/0xa0 [ 2652.347263][T12041] ? clear_bhb_loop+0x40/0x90 [ 2652.352032][T12041] ? clear_bhb_loop+0x40/0x90 [ 2652.356827][T12041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2652.362822][T12041] RIP: 0033:0x7f02a599acb9 [ 2652.367335][T12041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2652.387036][T12041] RSP: 002b:00007f02a67c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2652.395559][T12041] RAX: ffffffffffffffda RBX: 00007f02a5c16090 RCX: 00007f02a599acb9 [ 2652.403616][T12041] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2652.411669][T12041] RBP: 00007f02a5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2652.419731][T12041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2652.427802][T12041] R13: 00007f02a5c16128 R14: 00007f02a5c16090 R15: 00007ffd47b0d988 [ 2652.435941][T12041] [ 2652.540229][T11823] veth0_vlan: entered promiscuous mode [ 2652.600788][T11823] veth1_vlan: entered promiscuous mode [ 2652.720979][T11823] veth0_macvtap: entered promiscuous mode [ 2652.755068][T11823] veth1_macvtap: entered promiscuous mode [ 2652.767438][T12047] netlink: 'syz.6.13866': attribute type 3 has an invalid length. [ 2652.793374][T12047] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13866'. [ 2652.807160][T12047] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2652.896621][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2652.933133][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2652.944516][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2652.956587][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2652.966880][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2652.978700][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2652.993176][T11823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2653.019884][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2653.030770][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.053120][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2653.076704][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.094190][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2653.105133][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.122492][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2653.135079][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2653.147163][T11823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2653.176310][T11823] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2653.189914][T11823] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2653.209280][T11823] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2653.219598][T11823] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2653.247066][T12057] netlink: 'syz.6.13869': attribute type 10 has an invalid length. [ 2653.436132][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2653.466688][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2653.506004][T22643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2653.526883][T22643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2653.612040][T12063] netlink: 'syz.2.13872': attribute type 10 has an invalid length. [ 2653.768612][T12069] netlink: 'syz.2.13874': attribute type 9 has an invalid length. [ 2653.800718][T12069] netlink: 399 bytes leftover after parsing attributes in process `syz.2.13874'. [ 2654.181118][T12072] À: port 1(vlan0) entered blocking state [ 2654.201855][T12072] À: port 1(vlan0) entered disabled state [ 2654.236818][T12072] vlan0: entered allmulticast mode [ 2654.242029][T12072] veth0_vlan: entered allmulticast mode [ 2654.276297][T12072] vlan0: entered promiscuous mode [ 2654.391621][T12071] netlink: 'syz.7.13875': attribute type 10 has an invalid length. [ 2654.446406][T12071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2654.651742][T12083] netlink: 10 bytes leftover after parsing attributes in process `syz.8.13878'. [ 2654.705364][T12071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2654.737156][T12071] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2654.779809][T12085] Ÿë: port 1(syz_tun) entered blocking state [ 2654.786970][T12085] Ÿë: port 1(syz_tun) entered disabled state [ 2654.807343][T12085] syz_tun: entered allmulticast mode [ 2654.824177][T12085] syz_tun: entered promiscuous mode [ 2655.033512][T12092] netlink: 'syz.6.13882': attribute type 10 has an invalid length. [ 2655.128460][T12097] FAULT_INJECTION: forcing a failure. [ 2655.128460][T12097] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.142095][T12097] CPU: 0 PID: 12097 Comm: syz.8.13884 Not tainted syzkaller #0 [ 2655.149699][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2655.159805][T12097] Call Trace: [ 2655.163128][T12097] [ 2655.166105][T12097] dump_stack_lvl+0x18c/0x250 [ 2655.170846][T12097] ? show_regs_print_info+0x20/0x20 [ 2655.176105][T12097] ? load_image+0x400/0x400 [ 2655.180671][T12097] ? __might_sleep+0xe0/0xe0 [ 2655.185319][T12097] ? __lock_acquire+0x7d40/0x7d40 [ 2655.190404][T12097] should_fail_ex+0x39d/0x4d0 [ 2655.195143][T12097] should_failslab+0x9/0x20 [ 2655.199734][T12097] slab_pre_alloc_hook+0x59/0x310 [ 2655.204821][T12097] kmem_cache_alloc_node+0x60/0x320 [ 2655.210077][T12097] ? __alloc_skb+0x103/0x2c0 [ 2655.214731][T12097] __alloc_skb+0x103/0x2c0 [ 2655.219202][T12097] alloc_skb_with_frags+0xca/0x7b0 [ 2655.224363][T12097] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2655.231003][T12097] ? verify_lock_unused+0x140/0x140 [ 2655.236264][T12097] sock_alloc_send_pskb+0x883/0x9a0 [ 2655.241531][T12097] ? sock_kzfree_s+0x50/0x50 [ 2655.246181][T12097] ? do_raw_spin_lock+0x11f/0x2c0 [ 2655.251261][T12097] ? __rwlock_init+0x150/0x150 [ 2655.256083][T12097] ? do_raw_spin_unlock+0x121/0x230 [ 2655.261340][T12097] unix_dgram_sendmsg+0x5a2/0x16d0 [ 2655.266643][T12097] ? verify_lock_unused+0x140/0x140 [ 2655.271889][T12097] ? aa_sk_perm+0x83c/0x970 [ 2655.276453][T12097] ? unix_dgram_poll+0x680/0x680 [ 2655.281440][T12097] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2655.287909][T12097] ? aa_sock_msg_perm+0x94/0x150 [ 2655.292899][T12097] ? unix_seqpacket_sendmsg+0x10c/0x1e0 [ 2655.298505][T12097] ? unix_dgram_peer_wake_me+0x430/0x430 [ 2655.304197][T12097] ____sys_sendmsg+0x5ba/0x960 [ 2655.309020][T12097] ? __asan_memset+0x22/0x40 [ 2655.313664][T12097] ? __sys_sendmsg_sock+0x30/0x30 [ 2655.318787][T12097] ? __import_iovec+0x3fa/0x850 [ 2655.323698][T12097] ? import_iovec+0x73/0xa0 [ 2655.328261][T12097] ___sys_sendmsg+0x2a6/0x360 [ 2655.332995][T12097] ? get_pid_task+0x20/0x1e0 [ 2655.337659][T12097] ? __sys_sendmsg+0x2a0/0x2a0 [ 2655.342576][T12097] ? __lock_acquire+0x7d40/0x7d40 [ 2655.347682][T12097] __se_sys_sendmsg+0x1c2/0x2b0 [ 2655.352601][T12097] ? __x64_sys_sendmsg+0x80/0x80 [ 2655.357615][T12097] ? lockdep_hardirqs_on+0x98/0x150 [ 2655.362895][T12097] do_syscall_64+0x55/0xa0 [ 2655.367380][T12097] ? clear_bhb_loop+0x40/0x90 [ 2655.372116][T12097] ? clear_bhb_loop+0x40/0x90 [ 2655.376847][T12097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2655.382783][T12097] RIP: 0033:0x7f7fcad9acb9 [ 2655.387247][T12097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2655.406914][T12097] RSP: 002b:00007f7fcbcaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2655.415396][T12097] RAX: ffffffffffffffda RBX: 00007f7fcb015fa0 RCX: 00007f7fcad9acb9 [ 2655.423420][T12097] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 2655.431442][T12097] RBP: 00007f7fcbcaa090 R08: 0000000000000000 R09: 0000000000000000 [ 2655.439513][T12097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2655.447721][T12097] R13: 00007f7fcb016038 R14: 00007f7fcb015fa0 R15: 00007ffee04471b8 [ 2655.455762][T12097] [ 2655.491006][T12101] netlink: 'syz.6.13885': attribute type 9 has an invalid length. [ 2655.507184][T12101] netlink: 399 bytes leftover after parsing attributes in process `syz.6.13885'. [ 2655.623062][T12103] sctp: [Deprecated]: syz.2.13886 (pid 12103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2655.623062][T12103] Use struct sctp_sack_info instead [ 2656.180348][T12120] netlink: 10 bytes leftover after parsing attributes in process `syz.6.13889'. [ 2656.254278][T12118] netlink: 'syz.8.13890': attribute type 10 has an invalid length. [ 2656.278787][T12118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2656.591526][T12118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2656.662145][T12118] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2656.862016][T12134] netlink: 'syz.2.13894': attribute type 10 has an invalid length. [ 2657.014193][T12140] netlink: 'syz.8.13898': attribute type 9 has an invalid length. [ 2657.040038][T12140] netlink: 399 bytes leftover after parsing attributes in process `syz.8.13898'. [ 2658.186776][T12164] IPv6: Can't replace route, no match found [ 2658.384213][T12170] FAULT_INJECTION: forcing a failure. [ 2658.384213][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.412506][T12170] CPU: 0 PID: 12170 Comm: syz.8.13906 Not tainted syzkaller #0 [ 2658.420243][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2658.430437][T12170] Call Trace: [ 2658.433844][T12170] [ 2658.436922][T12170] dump_stack_lvl+0x18c/0x250 [ 2658.441794][T12170] ? show_regs_print_info+0x20/0x20 [ 2658.447166][T12170] ? load_image+0x400/0x400 [ 2658.451861][T12170] ? __might_sleep+0xe0/0xe0 [ 2658.456618][T12170] ? __lock_acquire+0x7d40/0x7d40 [ 2658.461838][T12170] should_fail_ex+0x39d/0x4d0 [ 2658.466758][T12170] should_failslab+0x9/0x20 [ 2658.471394][T12170] slab_pre_alloc_hook+0x59/0x310 [ 2658.476622][T12170] ? tomoyo_encode+0x28b/0x540 [ 2658.481539][T12170] ? tomoyo_encode+0x28b/0x540 [ 2658.486470][T12170] __kmem_cache_alloc_node+0x53/0x250 [ 2658.492052][T12170] ? tomoyo_encode+0x28b/0x540 [ 2658.496957][T12170] __kmalloc+0xa4/0x230 [ 2658.501322][T12170] tomoyo_encode+0x28b/0x540 [ 2658.506118][T12170] tomoyo_realpath_from_path+0x592/0x5d0 [ 2658.512023][T12170] tomoyo_path_number_perm+0x248/0x620 [ 2658.517691][T12170] ? tomoyo_path_number_perm+0x217/0x620 [ 2658.523533][T12170] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2658.529179][T12170] ? ksys_write+0x1c4/0x260 [ 2658.534120][T12170] ? __fget_files+0x28/0x4b0 [ 2658.538860][T12170] ? __fget_files+0x28/0x4b0 [ 2658.543728][T12170] security_file_ioctl+0x70/0xa0 [ 2658.548840][T12170] __se_sys_ioctl+0x48/0x170 [ 2658.553612][T12170] do_syscall_64+0x55/0xa0 [ 2658.558181][T12170] ? clear_bhb_loop+0x40/0x90 [ 2658.562990][T12170] ? clear_bhb_loop+0x40/0x90 [ 2658.567836][T12170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2658.573878][T12170] RIP: 0033:0x7f7fcad9acb9 [ 2658.578435][T12170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2658.598188][T12170] RSP: 002b:00007f7fcbcaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2658.606780][T12170] RAX: ffffffffffffffda RBX: 00007f7fcb015fa0 RCX: 00007f7fcad9acb9 [ 2658.614898][T12170] RDX: 0000200000000000 RSI: 0000000000008b0f RDI: 0000000000000004 [ 2658.623017][T12170] RBP: 00007f7fcbcaa090 R08: 0000000000000000 R09: 0000000000000000 [ 2658.631138][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2658.639240][T12170] R13: 00007f7fcb016038 R14: 00007f7fcb015fa0 R15: 00007ffee04471b8 [ 2658.647477][T12170] [ 2658.690308][T12177] netlink: 'syz.7.13908': attribute type 10 has an invalid length. [ 2658.730124][T12170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2658.936024][T12175] netlink: 'syz.2.13907': attribute type 10 has an invalid length. [ 2659.029357][T12175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2659.169512][T12190] netlink: 'syz.6.13911': attribute type 9 has an invalid length. [ 2659.241371][T12190] netlink: 399 bytes leftover after parsing attributes in process `syz.6.13911'. [ 2659.340136][T12175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2659.548302][T12175] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2659.826523][T12194] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.13912'. [ 2659.919768][T12194] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2660.242880][T12205] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.13914'. [ 2660.328216][T12205] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2660.362761][T12205] CPU: 0 PID: 12205 Comm: syz.6.13914 Not tainted syzkaller #0 [ 2660.370459][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2660.380599][T12205] Call Trace: [ 2660.384001][T12205] [ 2660.387008][T12205] dump_stack_lvl+0x18c/0x250 [ 2660.391790][T12205] ? show_regs_print_info+0x20/0x20 [ 2660.397085][T12205] ? load_image+0x400/0x400 [ 2660.401761][T12205] sysfs_warn_dup+0x8e/0xa0 [ 2660.406366][T12205] sysfs_do_create_link_sd+0xc0/0x110 [ 2660.411848][T12205] device_add_class_symlinks+0x1cf/0x240 [ 2660.417698][T12205] device_add+0x507/0xc20 [ 2660.422164][T12205] wiphy_register+0x1dad/0x2ae0 [ 2660.427220][T12205] ? cfg80211_event_work+0x40/0x40 [ 2660.432426][T12205] ? minstrel_ht_alloc+0x88a/0x990 [ 2660.437674][T12205] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2660.443864][T12205] ieee80211_register_hw+0x3464/0x4250 [ 2660.449519][T12205] ? ieee80211_tasklet_handler+0x20/0x20 [ 2660.455263][T12205] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2660.461279][T12205] ? __debug_object_init+0xec/0x450 [ 2660.466600][T12205] ? __asan_memset+0x22/0x40 [ 2660.471282][T12205] ? __hrtimer_init+0x186/0x270 [ 2660.476286][T12205] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2660.482153][T12205] ? mac80211_hwsim_free+0x220/0x220 [ 2660.487508][T12205] ? rcu_is_watching+0x15/0xb0 [ 2660.492347][T12205] ? kstrndup+0xbd/0x140 [ 2660.496688][T12205] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2660.501895][T12205] ? __nla_validate+0x50/0x50 [ 2660.506713][T12205] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2660.513217][T12205] ? __nla_parse+0x40/0x50 [ 2660.517745][T12205] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2660.524177][T12205] genl_family_rcv_msg_doit+0x211/0x310 [ 2660.529808][T12205] ? end_current_label_crit_section+0x170/0x170 [ 2660.536131][T12205] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2660.542217][T12205] ? bpf_lsm_capable+0x9/0x10 [ 2660.546971][T12205] ? security_capable+0x89/0xb0 [ 2660.551911][T12205] genl_rcv_msg+0x619/0x7a0 [ 2660.556520][T12205] ? genl_bind+0x360/0x360 [ 2660.561027][T12205] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2660.567436][T12205] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2660.574105][T12205] ? ref_tracker_free+0x690/0x840 [ 2660.579232][T12205] netlink_rcv_skb+0x241/0x4d0 [ 2660.584080][T12205] ? genl_bind+0x360/0x360 [ 2660.588581][T12205] ? netlink_ack+0x1180/0x1180 [ 2660.593454][T12205] ? __lock_acquire+0x7d40/0x7d40 [ 2660.598573][T12205] ? down_read+0x1ac/0x2e0 [ 2660.603069][T12205] genl_rcv+0x28/0x40 [ 2660.607120][T12205] netlink_unicast+0x751/0x8d0 [ 2660.612012][T12205] netlink_sendmsg+0x8d0/0xbf0 [ 2660.616897][T12205] ? netlink_getsockopt+0x590/0x590 [ 2660.622204][T12205] ? aa_sock_msg_perm+0x94/0x150 [ 2660.627238][T12205] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2660.632679][T12205] ? security_socket_sendmsg+0x80/0xa0 [ 2660.638239][T12205] ? netlink_getsockopt+0x590/0x590 [ 2660.643547][T12205] ____sys_sendmsg+0x5ba/0x960 [ 2660.648411][T12205] ? __asan_memset+0x22/0x40 [ 2660.653067][T12205] ? __sys_sendmsg_sock+0x30/0x30 [ 2660.658164][T12205] ? __import_iovec+0x5f2/0x850 [ 2660.663125][T12205] ? import_iovec+0x73/0xa0 [ 2660.667716][T12205] ___sys_sendmsg+0x2a6/0x360 [ 2660.672500][T12205] ? __sys_sendmsg+0x2a0/0x2a0 [ 2660.677526][T12205] __se_sys_sendmsg+0x1c2/0x2b0 [ 2660.682509][T12205] ? __x64_sys_sendmsg+0x80/0x80 [ 2660.687612][T12205] ? lockdep_hardirqs_on+0x98/0x150 [ 2660.692910][T12205] do_syscall_64+0x55/0xa0 [ 2660.697397][T12205] ? clear_bhb_loop+0x40/0x90 [ 2660.702147][T12205] ? clear_bhb_loop+0x40/0x90 [ 2660.706915][T12205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2660.712890][T12205] RIP: 0033:0x7f0fd779acb9 [ 2660.717412][T12205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2660.737105][T12205] RSP: 002b:00007f0fd8707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2660.745615][T12205] RAX: ffffffffffffffda RBX: 00007f0fd7a15fa0 RCX: 00007f0fd779acb9 [ 2660.753642][T12205] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2660.761668][T12205] RBP: 00007f0fd7808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2660.769700][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2660.777749][T12205] R13: 00007f0fd7a16038 R14: 00007f0fd7a15fa0 R15: 00007ffe976a41d8 [ 2660.785829][T12205] [ 2661.070083][T12214] netlink: 'syz.8.13917': attribute type 10 has an invalid length. [ 2661.426955][T12228] netlink: 'syz.6.13922': attribute type 9 has an invalid length. [ 2661.438890][T12228] netlink: 399 bytes leftover after parsing attributes in process `syz.6.13922'. [ 2663.077322][T12254] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.13929'. [ 2663.167792][T12254] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2663.253471][T12254] CPU: 1 PID: 12254 Comm: syz.7.13929 Not tainted syzkaller #0 [ 2663.261161][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2663.271312][T12254] Call Trace: [ 2663.274676][T12254] [ 2663.277704][T12254] dump_stack_lvl+0x18c/0x250 [ 2663.282497][T12254] ? show_regs_print_info+0x20/0x20 [ 2663.287802][T12254] ? load_image+0x400/0x400 [ 2663.292477][T12254] sysfs_warn_dup+0x8e/0xa0 [ 2663.297088][T12254] sysfs_do_create_link_sd+0xc0/0x110 [ 2663.302571][T12254] device_add_class_symlinks+0x1cf/0x240 [ 2663.308324][T12254] device_add+0x507/0xc20 [ 2663.312784][T12254] wiphy_register+0x1dad/0x2ae0 [ 2663.317831][T12254] ? cfg80211_event_work+0x40/0x40 [ 2663.323136][T12254] ? minstrel_ht_alloc+0x88a/0x990 [ 2663.328384][T12254] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2663.334575][T12254] ieee80211_register_hw+0x3464/0x4250 [ 2663.340229][T12254] ? ieee80211_tasklet_handler+0x20/0x20 [ 2663.345965][T12254] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2663.351932][T12254] ? __debug_object_init+0xec/0x450 [ 2663.357216][T12254] ? __asan_memset+0x22/0x40 [ 2663.361891][T12254] ? __hrtimer_init+0x186/0x270 [ 2663.366816][T12254] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2663.372706][T12254] ? mac80211_hwsim_free+0x220/0x220 [ 2663.378070][T12254] ? rcu_is_watching+0x15/0xb0 [ 2663.382919][T12254] ? kstrndup+0xbd/0x140 [ 2663.387446][T12254] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2663.392654][T12254] ? __nla_validate+0x50/0x50 [ 2663.397442][T12254] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2663.403893][T12254] ? __nla_parse+0x40/0x50 [ 2663.408429][T12254] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2663.414880][T12254] genl_family_rcv_msg_doit+0x211/0x310 [ 2663.420524][T12254] ? end_current_label_crit_section+0x170/0x170 [ 2663.426880][T12254] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2663.432917][T12254] ? bpf_lsm_capable+0x9/0x10 [ 2663.437681][T12254] ? security_capable+0x89/0xb0 [ 2663.442853][T12254] genl_rcv_msg+0x619/0x7a0 [ 2663.447449][T12254] ? genl_bind+0x360/0x360 [ 2663.451932][T12254] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2663.458342][T12254] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2663.465001][T12254] ? ref_tracker_free+0x690/0x840 [ 2663.470142][T12254] netlink_rcv_skb+0x241/0x4d0 [ 2663.474998][T12254] ? genl_bind+0x360/0x360 [ 2663.479509][T12254] ? netlink_ack+0x1180/0x1180 [ 2663.484423][T12254] ? __lock_acquire+0x7d40/0x7d40 [ 2663.489545][T12254] ? down_read+0x1ac/0x2e0 [ 2663.494042][T12254] genl_rcv+0x28/0x40 [ 2663.498096][T12254] netlink_unicast+0x751/0x8d0 [ 2663.502963][T12254] netlink_sendmsg+0x8d0/0xbf0 [ 2663.507828][T12254] ? netlink_getsockopt+0x590/0x590 [ 2663.513109][T12254] ? aa_sock_msg_perm+0x94/0x150 [ 2663.518117][T12254] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2663.523459][T12254] ? security_socket_sendmsg+0x80/0xa0 [ 2663.529014][T12254] ? netlink_getsockopt+0x590/0x590 [ 2663.534297][T12254] ____sys_sendmsg+0x5ba/0x960 [ 2663.539155][T12254] ? __asan_memset+0x22/0x40 [ 2663.543817][T12254] ? __sys_sendmsg_sock+0x30/0x30 [ 2663.548939][T12254] ? __import_iovec+0x5f2/0x850 [ 2663.553893][T12254] ? import_iovec+0x73/0xa0 [ 2663.558490][T12254] ___sys_sendmsg+0x2a6/0x360 [ 2663.563251][T12254] ? __sys_sendmsg+0x2a0/0x2a0 [ 2663.568244][T12254] __se_sys_sendmsg+0x1c2/0x2b0 [ 2663.573176][T12254] ? __x64_sys_sendmsg+0x80/0x80 [ 2663.578266][T12254] ? lockdep_hardirqs_on+0x98/0x150 [ 2663.583553][T12254] do_syscall_64+0x55/0xa0 [ 2663.588035][T12254] ? clear_bhb_loop+0x40/0x90 [ 2663.592772][T12254] ? clear_bhb_loop+0x40/0x90 [ 2663.597513][T12254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2663.603457][T12254] RIP: 0033:0x7f02a599acb9 [ 2663.607930][T12254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2663.627615][T12254] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2663.636097][T12254] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2663.644140][T12254] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2663.652175][T12254] RBP: 00007f02a5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2663.660211][T12254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2663.668236][T12254] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2663.676322][T12254] [ 2663.947533][T12266] netlink: 'syz.8.13932': attribute type 9 has an invalid length. [ 2663.973076][T12266] netlink: 399 bytes leftover after parsing attributes in process `syz.8.13932'. [ 2664.341937][T12269] netlink: 'syz.2.13933': attribute type 10 has an invalid length. [ 2666.680577][T12285] IPv6: Can't replace route, no match found [ 2666.706276][T12296] netlink: 'syz.6.13940': attribute type 10 has an invalid length. [ 2666.987330][T12303] netlink: 'syz.7.13944': attribute type 9 has an invalid length. [ 2667.011203][T12303] netlink: 399 bytes leftover after parsing attributes in process `syz.7.13944'. [ 2667.150019][T12302] netlink: 'syz.6.13942': attribute type 10 has an invalid length. [ 2668.120651][T12319] netlink: 'syz.7.13955': attribute type 9 has an invalid length. [ 2668.162627][T12319] netlink: 399 bytes leftover after parsing attributes in process `syz.7.13955'. [ 2668.357258][T12324] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13945'. [ 2668.445977][T12324] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2668.459424][T12324] CPU: 1 PID: 12324 Comm: syz.2.13945 Not tainted syzkaller #0 [ 2668.467191][T12324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2668.477331][T12324] Call Trace: [ 2668.480737][T12324] [ 2668.483746][T12324] dump_stack_lvl+0x18c/0x250 [ 2668.488533][T12324] ? show_regs_print_info+0x20/0x20 [ 2668.493824][T12324] ? load_image+0x400/0x400 [ 2668.498471][T12324] sysfs_warn_dup+0x8e/0xa0 [ 2668.503065][T12324] sysfs_do_create_link_sd+0xc0/0x110 [ 2668.508529][T12324] device_add_class_symlinks+0x1cf/0x240 [ 2668.514283][T12324] device_add+0x507/0xc20 [ 2668.518738][T12324] wiphy_register+0x1dad/0x2ae0 [ 2668.523769][T12324] ? cfg80211_event_work+0x40/0x40 [ 2668.528996][T12324] ? minstrel_ht_alloc+0x88a/0x990 [ 2668.534240][T12324] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2668.540458][T12324] ieee80211_register_hw+0x3464/0x4250 [ 2668.546114][T12324] ? ieee80211_tasklet_handler+0x20/0x20 [ 2668.551833][T12324] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2668.557817][T12324] ? __debug_object_init+0xec/0x450 [ 2668.563180][T12324] ? __asan_memset+0x22/0x40 [ 2668.567873][T12324] ? __hrtimer_init+0x186/0x270 [ 2668.572790][T12324] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2668.578637][T12324] ? mac80211_hwsim_free+0x220/0x220 [ 2668.583984][T12324] ? rcu_is_watching+0x15/0xb0 [ 2668.588806][T12324] ? kstrndup+0xbd/0x140 [ 2668.593138][T12324] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2668.598338][T12324] ? __nla_validate+0x50/0x50 [ 2668.603135][T12324] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2668.609572][T12324] ? __nla_parse+0x40/0x50 [ 2668.614152][T12324] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2668.620657][T12324] genl_family_rcv_msg_doit+0x211/0x310 [ 2668.626272][T12324] ? end_current_label_crit_section+0x170/0x170 [ 2668.632604][T12324] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2668.638626][T12324] ? bpf_lsm_capable+0x9/0x10 [ 2668.643370][T12324] ? security_capable+0x89/0xb0 [ 2668.648302][T12324] genl_rcv_msg+0x619/0x7a0 [ 2668.652910][T12324] ? genl_bind+0x360/0x360 [ 2668.657386][T12324] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2668.663776][T12324] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2668.670419][T12324] ? ref_tracker_free+0x690/0x840 [ 2668.675526][T12324] netlink_rcv_skb+0x241/0x4d0 [ 2668.680372][T12324] ? genl_bind+0x360/0x360 [ 2668.684855][T12324] ? netlink_ack+0x1180/0x1180 [ 2668.689717][T12324] ? __lock_acquire+0x7d40/0x7d40 [ 2668.694910][T12324] ? down_read+0x1ac/0x2e0 [ 2668.699417][T12324] genl_rcv+0x28/0x40 [ 2668.703562][T12324] netlink_unicast+0x751/0x8d0 [ 2668.708422][T12324] netlink_sendmsg+0x8d0/0xbf0 [ 2668.713268][T12324] ? netlink_getsockopt+0x590/0x590 [ 2668.718540][T12324] ? aa_sock_msg_perm+0x94/0x150 [ 2668.723554][T12324] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2668.728900][T12324] ? security_socket_sendmsg+0x80/0xa0 [ 2668.734420][T12324] ? netlink_getsockopt+0x590/0x590 [ 2668.739688][T12324] ____sys_sendmsg+0x5ba/0x960 [ 2668.744533][T12324] ? __asan_memset+0x22/0x40 [ 2668.749186][T12324] ? __sys_sendmsg_sock+0x30/0x30 [ 2668.754291][T12324] ? __import_iovec+0x5f2/0x850 [ 2668.759236][T12324] ? import_iovec+0x73/0xa0 [ 2668.763827][T12324] ___sys_sendmsg+0x2a6/0x360 [ 2668.768590][T12324] ? __sys_sendmsg+0x2a0/0x2a0 [ 2668.773488][T12324] ? debug_mutex_init+0x38/0x70 [ 2668.778471][T12324] __se_sys_sendmsg+0x1c2/0x2b0 [ 2668.783400][T12324] ? __x64_sys_sendmsg+0x80/0x80 [ 2668.788587][T12324] ? lockdep_hardirqs_on+0x98/0x150 [ 2668.793874][T12324] do_syscall_64+0x55/0xa0 [ 2668.798353][T12324] ? clear_bhb_loop+0x40/0x90 [ 2668.803084][T12324] ? clear_bhb_loop+0x40/0x90 [ 2668.807833][T12324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2668.813790][T12324] RIP: 0033:0x7fcec299acb9 [ 2668.818312][T12324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2668.837978][T12324] RSP: 002b:00007fcec3911028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2668.846452][T12324] RAX: ffffffffffffffda RBX: 00007fcec2c16090 RCX: 00007fcec299acb9 [ 2668.854471][T12324] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2668.862504][T12324] RBP: 00007fcec2a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2668.870537][T12324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2668.878568][T12324] R13: 00007fcec2c16128 R14: 00007fcec2c16090 R15: 00007ffedc4cb2f8 [ 2668.886655][T12324] [ 2669.030179][T12329] netlink: 44 bytes leftover after parsing attributes in process `syz.8.13948'. [ 2669.901698][T12337] IPv6: Can't replace route, no match found [ 2670.260854][T12361] netlink: 'syz.6.13958': attribute type 9 has an invalid length. [ 2670.305595][T12361] netlink: 399 bytes leftover after parsing attributes in process `syz.6.13958'. [ 2670.491471][T12365] netlink: 'syz.7.13959': attribute type 10 has an invalid length. [ 2670.652196][T12369] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.13961'. [ 2670.723682][T12369] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.13961'. [ 2670.781356][T12372] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13962'. [ 2670.833445][T12374] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.13961'. [ 2670.856217][T12369] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.13961'. [ 2671.862390][T12394] IPv6: Can't replace route, no match found [ 2672.058240][T12402] netlink: 'syz.2.13970': attribute type 9 has an invalid length. [ 2672.090293][T12400] netlink: 'syz.6.13971': attribute type 10 has an invalid length. [ 2672.097284][T12402] netlink: 399 bytes leftover after parsing attributes in process `syz.2.13970'. [ 2672.402826][T12408] sock: sock_set_timeout: `syz.8.13973' (pid 12408) tries to set negative timeout [ 2672.703992][T12407] netlink: 'syz.7.13972': attribute type 10 has an invalid length. [ 2672.851701][T12418] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13976'. [ 2673.356922][T12422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2673.413137][T12423] netlink: 'syz.6.13978': attribute type 3 has an invalid length. [ 2674.000341][T12444] Ÿë: port 1(syz_tun) entered blocking state [ 2674.011401][T12444] Ÿë: port 1(syz_tun) entered disabled state [ 2674.018669][T12444] syz_tun: entered allmulticast mode [ 2674.026679][T12444] syz_tun: entered promiscuous mode [ 2674.685240][ T3610] Bluetooth: hci3: command 0x0406 tx timeout [ 2675.319570][T12465] netlink: 'syz.2.13990': attribute type 10 has an invalid length. [ 2676.417323][T12494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2676.504592][T12495] netlink: 'syz.7.13996': attribute type 3 has an invalid length. [ 2676.879837][T12508] sock: sock_set_timeout: `syz.2.14001' (pid 12508) tries to set negative timeout [ 2677.212782][T12513] netlink: 'syz.2.14003': attribute type 9 has an invalid length. [ 2677.220828][T12513] netlink: 399 bytes leftover after parsing attributes in process `syz.2.14003'. [ 2677.471887][T12514] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.14004'. [ 2677.526207][T12514] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2677.555199][T12514] CPU: 1 PID: 12514 Comm: syz.6.14004 Not tainted syzkaller #0 [ 2677.562867][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2677.572991][T12514] Call Trace: [ 2677.576327][T12514] [ 2677.579323][T12514] dump_stack_lvl+0x18c/0x250 [ 2677.584086][T12514] ? show_regs_print_info+0x20/0x20 [ 2677.589368][T12514] ? load_image+0x400/0x400 [ 2677.593981][T12514] sysfs_warn_dup+0x8e/0xa0 [ 2677.598566][T12514] sysfs_do_create_link_sd+0xc0/0x110 [ 2677.604009][T12514] device_add_class_symlinks+0x1cf/0x240 [ 2677.609731][T12514] device_add+0x507/0xc20 [ 2677.614145][T12514] wiphy_register+0x1dad/0x2ae0 [ 2677.619114][T12514] ? cfg80211_event_work+0x40/0x40 [ 2677.624307][T12514] ? minstrel_ht_alloc+0x88a/0x990 [ 2677.629518][T12514] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2677.635714][T12514] ieee80211_register_hw+0x3464/0x4250 [ 2677.641301][T12514] ? ieee80211_tasklet_handler+0x20/0x20 [ 2677.647000][T12514] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2677.652979][T12514] ? __debug_object_init+0xec/0x450 [ 2677.658254][T12514] ? __asan_memset+0x22/0x40 [ 2677.662913][T12514] ? __hrtimer_init+0x186/0x270 [ 2677.667849][T12514] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2677.673734][T12514] ? mac80211_hwsim_free+0x220/0x220 [ 2677.679097][T12514] ? rcu_is_watching+0x15/0xb0 [ 2677.683938][T12514] ? kstrndup+0xbd/0x140 [ 2677.688281][T12514] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2677.693488][T12514] ? __nla_validate+0x50/0x50 [ 2677.698271][T12514] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2677.704715][T12514] ? __nla_parse+0x40/0x50 [ 2677.709217][T12514] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2677.715650][T12514] genl_family_rcv_msg_doit+0x211/0x310 [ 2677.721287][T12514] ? end_current_label_crit_section+0x170/0x170 [ 2677.727615][T12514] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2677.733630][T12514] ? bpf_lsm_capable+0x9/0x10 [ 2677.738377][T12514] ? security_capable+0x89/0xb0 [ 2677.743316][T12514] genl_rcv_msg+0x619/0x7a0 [ 2677.747915][T12514] ? genl_bind+0x360/0x360 [ 2677.752433][T12514] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2677.758881][T12514] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2677.765556][T12514] ? ref_tracker_free+0x690/0x840 [ 2677.770684][T12514] netlink_rcv_skb+0x241/0x4d0 [ 2677.775542][T12514] ? genl_bind+0x360/0x360 [ 2677.780051][T12514] ? netlink_ack+0x1180/0x1180 [ 2677.784931][T12514] ? __lock_acquire+0x7d40/0x7d40 [ 2677.790081][T12514] ? down_read+0x1ac/0x2e0 [ 2677.794592][T12514] genl_rcv+0x28/0x40 [ 2677.798645][T12514] netlink_unicast+0x751/0x8d0 [ 2677.803511][T12514] netlink_sendmsg+0x8d0/0xbf0 [ 2677.808402][T12514] ? netlink_getsockopt+0x590/0x590 [ 2677.813704][T12514] ? aa_sock_msg_perm+0x94/0x150 [ 2677.818746][T12514] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2677.824116][T12514] ? security_socket_sendmsg+0x80/0xa0 [ 2677.829657][T12514] ? netlink_getsockopt+0x590/0x590 [ 2677.834963][T12514] ____sys_sendmsg+0x5ba/0x960 [ 2677.839834][T12514] ? __asan_memset+0x22/0x40 [ 2677.844517][T12514] ? __sys_sendmsg_sock+0x30/0x30 [ 2677.849621][T12514] ? __import_iovec+0x5f2/0x850 [ 2677.854580][T12514] ? import_iovec+0x73/0xa0 [ 2677.859186][T12514] ___sys_sendmsg+0x2a6/0x360 [ 2677.863958][T12514] ? __sys_sendmsg+0x2a0/0x2a0 [ 2677.868913][T12514] __se_sys_sendmsg+0x1c2/0x2b0 [ 2677.873854][T12514] ? __x64_sys_sendmsg+0x80/0x80 [ 2677.879016][T12514] ? lockdep_hardirqs_on+0x98/0x150 [ 2677.884295][T12514] do_syscall_64+0x55/0xa0 [ 2677.888779][T12514] ? clear_bhb_loop+0x40/0x90 [ 2677.893543][T12514] ? clear_bhb_loop+0x40/0x90 [ 2677.898385][T12514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2677.904347][T12514] RIP: 0033:0x7f0fd779acb9 [ 2677.908821][T12514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2677.928503][T12514] RSP: 002b:00007f0fd8707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2677.937010][T12514] RAX: ffffffffffffffda RBX: 00007f0fd7a15fa0 RCX: 00007f0fd779acb9 [ 2677.945063][T12514] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2677.953111][T12514] RBP: 00007f0fd7808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2677.961152][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2677.969189][T12514] R13: 00007f0fd7a16038 R14: 00007f0fd7a15fa0 R15: 00007ffe976a41d8 [ 2677.977322][T12514] [ 2678.555198][T12532] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14007'. [ 2678.595148][T12532] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2678.623535][T12532] CPU: 1 PID: 12532 Comm: syz.2.14007 Not tainted syzkaller #0 [ 2678.631195][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2678.641319][T12532] Call Trace: [ 2678.644642][T12532] [ 2678.647618][T12532] dump_stack_lvl+0x18c/0x250 [ 2678.652362][T12532] ? show_regs_print_info+0x20/0x20 [ 2678.657632][T12532] ? load_image+0x400/0x400 [ 2678.662206][T12532] sysfs_warn_dup+0x8e/0xa0 [ 2678.666754][T12532] sysfs_do_create_link_sd+0xc0/0x110 [ 2678.672173][T12532] device_add_class_symlinks+0x1cf/0x240 [ 2678.677861][T12532] device_add+0x507/0xc20 [ 2678.682243][T12532] wiphy_register+0x1dad/0x2ae0 [ 2678.687180][T12532] ? cfg80211_event_work+0x40/0x40 [ 2678.692347][T12532] ? minstrel_ht_alloc+0x88a/0x990 [ 2678.697527][T12532] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2678.703658][T12532] ieee80211_register_hw+0x3464/0x4250 [ 2678.709203][T12532] ? ieee80211_tasklet_handler+0x20/0x20 [ 2678.714888][T12532] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2678.721012][T12532] ? __debug_object_init+0xec/0x450 [ 2678.726271][T12532] ? __asan_memset+0x22/0x40 [ 2678.730913][T12532] ? __hrtimer_init+0x186/0x270 [ 2678.735824][T12532] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2678.741644][T12532] ? mac80211_hwsim_free+0x220/0x220 [ 2678.747011][T12532] ? rcu_is_watching+0x15/0xb0 [ 2678.751829][T12532] ? kstrndup+0xbd/0x140 [ 2678.756140][T12532] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2678.761353][T12532] ? __nla_validate+0x50/0x50 [ 2678.766102][T12532] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2678.772511][T12532] ? __nla_parse+0x40/0x50 [ 2678.776991][T12532] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2678.783387][T12532] genl_family_rcv_msg_doit+0x211/0x310 [ 2678.788991][T12532] ? end_current_label_crit_section+0x170/0x170 [ 2678.795287][T12532] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2678.801251][T12532] ? bpf_lsm_capable+0x9/0x10 [ 2678.805973][T12532] ? security_capable+0x89/0xb0 [ 2678.810886][T12532] genl_rcv_msg+0x619/0x7a0 [ 2678.815457][T12532] ? genl_bind+0x360/0x360 [ 2678.819925][T12532] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2678.826307][T12532] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2678.832953][T12532] ? ref_tracker_free+0x690/0x840 [ 2678.838062][T12532] netlink_rcv_skb+0x241/0x4d0 [ 2678.842901][T12532] ? genl_bind+0x360/0x360 [ 2678.847409][T12532] ? netlink_ack+0x1180/0x1180 [ 2678.852274][T12532] ? __lock_acquire+0x7d40/0x7d40 [ 2678.857379][T12532] ? down_read+0x1ac/0x2e0 [ 2678.861855][T12532] genl_rcv+0x28/0x40 [ 2678.865919][T12532] netlink_unicast+0x751/0x8d0 [ 2678.870768][T12532] netlink_sendmsg+0x8d0/0xbf0 [ 2678.875606][T12532] ? netlink_getsockopt+0x590/0x590 [ 2678.880869][T12532] ? aa_sock_msg_perm+0x94/0x150 [ 2678.885865][T12532] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2678.891214][T12532] ? security_socket_sendmsg+0x80/0xa0 [ 2678.896718][T12532] ? netlink_getsockopt+0x590/0x590 [ 2678.902028][T12532] ____sys_sendmsg+0x5ba/0x960 [ 2678.906877][T12532] ? __asan_memset+0x22/0x40 [ 2678.911538][T12532] ? __sys_sendmsg_sock+0x30/0x30 [ 2678.916616][T12532] ? __import_iovec+0x5f2/0x850 [ 2678.921530][T12532] ? import_iovec+0x73/0xa0 [ 2678.926093][T12532] ___sys_sendmsg+0x2a6/0x360 [ 2678.930833][T12532] ? __sys_sendmsg+0x2a0/0x2a0 [ 2678.935734][T12532] __se_sys_sendmsg+0x1c2/0x2b0 [ 2678.940654][T12532] ? __x64_sys_sendmsg+0x80/0x80 [ 2678.945679][T12532] ? lockdep_hardirqs_on+0x98/0x150 [ 2678.950927][T12532] do_syscall_64+0x55/0xa0 [ 2678.955392][T12532] ? clear_bhb_loop+0x40/0x90 [ 2678.960115][T12532] ? clear_bhb_loop+0x40/0x90 [ 2678.964836][T12532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2678.970772][T12532] RIP: 0033:0x7fcec299acb9 [ 2678.975234][T12532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2678.994880][T12532] RSP: 002b:00007fcec3932028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2679.003349][T12532] RAX: ffffffffffffffda RBX: 00007fcec2c15fa0 RCX: 00007fcec299acb9 [ 2679.011383][T12532] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2679.019401][T12532] RBP: 00007fcec2a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2679.027430][T12532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2679.035460][T12532] R13: 00007fcec2c16038 R14: 00007fcec2c15fa0 R15: 00007ffedc4cb2f8 [ 2679.043512][T12532] [ 2679.186915][T12535] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.14016'. [ 2679.206787][T12535] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2679.258695][T12535] CPU: 1 PID: 12535 Comm: syz.7.14016 Not tainted syzkaller #0 [ 2679.266377][T12535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2679.276529][T12535] Call Trace: [ 2679.279890][T12535] [ 2679.282902][T12535] dump_stack_lvl+0x18c/0x250 [ 2679.287709][T12535] ? show_regs_print_info+0x20/0x20 [ 2679.293013][T12535] ? load_image+0x400/0x400 [ 2679.297676][T12535] sysfs_warn_dup+0x8e/0xa0 [ 2679.302271][T12535] sysfs_do_create_link_sd+0xc0/0x110 [ 2679.307747][T12535] device_add_class_symlinks+0x1cf/0x240 [ 2679.313497][T12535] device_add+0x507/0xc20 [ 2679.317957][T12535] wiphy_register+0x1dad/0x2ae0 [ 2679.322979][T12535] ? cfg80211_event_work+0x40/0x40 [ 2679.328183][T12535] ? minstrel_ht_alloc+0x88a/0x990 [ 2679.333429][T12535] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2679.339620][T12535] ieee80211_register_hw+0x3464/0x4250 [ 2679.345260][T12535] ? ieee80211_tasklet_handler+0x20/0x20 [ 2679.351535][T12535] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2679.357551][T12535] ? __debug_object_init+0xec/0x450 [ 2679.362882][T12535] ? __asan_memset+0x22/0x40 [ 2679.367565][T12535] ? __hrtimer_init+0x186/0x270 [ 2679.372527][T12535] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2679.378443][T12535] ? mac80211_hwsim_free+0x220/0x220 [ 2679.383841][T12535] ? rcu_is_watching+0x15/0xb0 [ 2679.388701][T12535] ? kstrndup+0xbd/0x140 [ 2679.393078][T12535] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2679.398320][T12535] ? __nla_validate+0x50/0x50 [ 2679.403175][T12535] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2679.409668][T12535] ? __nla_parse+0x40/0x50 [ 2679.414212][T12535] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2679.420684][T12535] genl_family_rcv_msg_doit+0x211/0x310 [ 2679.426345][T12535] ? end_current_label_crit_section+0x170/0x170 [ 2679.432700][T12535] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2679.438738][T12535] ? bpf_lsm_capable+0x9/0x10 [ 2679.443520][T12535] ? security_capable+0x89/0xb0 [ 2679.448508][T12535] genl_rcv_msg+0x619/0x7a0 [ 2679.453149][T12535] ? genl_bind+0x360/0x360 [ 2679.457661][T12535] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2679.464105][T12535] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2679.470793][T12535] ? ref_tracker_free+0x690/0x840 [ 2679.475962][T12535] netlink_rcv_skb+0x241/0x4d0 [ 2679.480835][T12535] ? genl_bind+0x360/0x360 [ 2679.485370][T12535] ? netlink_ack+0x1180/0x1180 [ 2679.490304][T12535] ? __lock_acquire+0x7d40/0x7d40 [ 2679.495466][T12535] ? down_read+0x1ac/0x2e0 [ 2679.499998][T12535] genl_rcv+0x28/0x40 [ 2679.504087][T12535] netlink_unicast+0x751/0x8d0 [ 2679.509001][T12535] netlink_sendmsg+0x8d0/0xbf0 [ 2679.513897][T12535] ? netlink_getsockopt+0x590/0x590 [ 2679.519208][T12535] ? aa_sock_msg_perm+0x94/0x150 [ 2679.524249][T12535] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2679.529621][T12535] ? security_socket_sendmsg+0x80/0xa0 [ 2679.535167][T12535] ? netlink_getsockopt+0x590/0x590 [ 2679.540470][T12535] ____sys_sendmsg+0x5ba/0x960 [ 2679.545363][T12535] ? __asan_memset+0x22/0x40 [ 2679.550062][T12535] ? __sys_sendmsg_sock+0x30/0x30 [ 2679.555170][T12535] ? __import_iovec+0x5f2/0x850 [ 2679.560159][T12535] ? import_iovec+0x73/0xa0 [ 2679.564783][T12535] ___sys_sendmsg+0x2a6/0x360 [ 2679.569592][T12535] ? __sys_sendmsg+0x2a0/0x2a0 [ 2679.574697][T12535] __se_sys_sendmsg+0x1c2/0x2b0 [ 2679.579663][T12535] ? __x64_sys_sendmsg+0x80/0x80 [ 2679.584767][T12535] ? lockdep_hardirqs_on+0x98/0x150 [ 2679.590082][T12535] do_syscall_64+0x55/0xa0 [ 2679.594594][T12535] ? clear_bhb_loop+0x40/0x90 [ 2679.599365][T12535] ? clear_bhb_loop+0x40/0x90 [ 2679.604135][T12535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2679.610105][T12535] RIP: 0033:0x7f02a599acb9 [ 2679.614602][T12535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2679.634292][T12535] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2679.642793][T12535] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2679.650852][T12535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2679.658912][T12535] RBP: 00007f02a5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2679.666991][T12535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2679.675065][T12535] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2679.683199][T12535] [ 2680.059412][T12554] sock: sock_set_timeout: `syz.6.14011' (pid 12554) tries to set negative timeout [ 2680.376271][T22643] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2681.064827][T12575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2681.374889][T12582] netlink: 'syz.2.14020': attribute type 3 has an invalid length. [ 2681.768322][T12588] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.14024'. [ 2681.969389][T12588] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2682.063250][T12588] CPU: 0 PID: 12588 Comm: syz.7.14024 Not tainted syzkaller #0 [ 2682.070943][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2682.081099][T12588] Call Trace: [ 2682.084465][T12588] [ 2682.087499][T12588] dump_stack_lvl+0x18c/0x250 [ 2682.092309][T12588] ? show_regs_print_info+0x20/0x20 [ 2682.097626][T12588] ? load_image+0x400/0x400 [ 2682.102441][T12588] sysfs_warn_dup+0x8e/0xa0 [ 2682.107053][T12588] sysfs_do_create_link_sd+0xc0/0x110 [ 2682.112543][T12588] device_add_class_symlinks+0x1cf/0x240 [ 2682.118304][T12588] device_add+0x507/0xc20 [ 2682.122766][T12588] wiphy_register+0x1dad/0x2ae0 [ 2682.127826][T12588] ? cfg80211_event_work+0x40/0x40 [ 2682.133038][T12588] ? minstrel_ht_alloc+0x88a/0x990 [ 2682.138313][T12588] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2682.144514][T12588] ieee80211_register_hw+0x3464/0x4250 [ 2682.150209][T12588] ? ieee80211_tasklet_handler+0x20/0x20 [ 2682.155949][T12588] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2682.161953][T12588] ? __debug_object_init+0xec/0x450 [ 2682.167279][T12588] ? __asan_memset+0x22/0x40 [ 2682.171984][T12588] ? __hrtimer_init+0x186/0x270 [ 2682.176964][T12588] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2682.182929][T12588] ? mac80211_hwsim_free+0x220/0x220 [ 2682.188325][T12588] ? rcu_is_watching+0x15/0xb0 [ 2682.193227][T12588] ? kstrndup+0xbd/0x140 [ 2682.197618][T12588] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2682.202868][T12588] ? __nla_validate+0x50/0x50 [ 2682.207718][T12588] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2682.214233][T12588] ? __nla_parse+0x40/0x50 [ 2682.218783][T12588] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2682.225276][T12588] genl_family_rcv_msg_doit+0x211/0x310 [ 2682.230947][T12588] ? end_current_label_crit_section+0x170/0x170 [ 2682.237353][T12588] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2682.243405][T12588] ? bpf_lsm_capable+0x9/0x10 [ 2682.248208][T12588] ? security_capable+0x89/0xb0 [ 2682.253201][T12588] genl_rcv_msg+0x619/0x7a0 [ 2682.257849][T12588] ? genl_bind+0x360/0x360 [ 2682.262371][T12588] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2682.268815][T12588] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2682.275521][T12588] ? perf_trace_lock+0xfc/0x3b0 [ 2682.280529][T12588] netlink_rcv_skb+0x241/0x4d0 [ 2682.285429][T12588] ? genl_bind+0x360/0x360 [ 2682.290005][T12588] ? netlink_ack+0x1180/0x1180 [ 2682.294934][T12588] ? __lock_acquire+0x7d40/0x7d40 [ 2682.300110][T12588] ? down_read+0x1ac/0x2e0 [ 2682.304650][T12588] genl_rcv+0x28/0x40 [ 2682.308730][T12588] netlink_unicast+0x751/0x8d0 [ 2682.313652][T12588] netlink_sendmsg+0x8d0/0xbf0 [ 2682.318597][T12588] ? netlink_getsockopt+0x590/0x590 [ 2682.323925][T12588] ? aa_sock_msg_perm+0x94/0x150 [ 2682.328988][T12588] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2682.334362][T12588] ? security_socket_sendmsg+0x80/0xa0 [ 2682.339911][T12588] ? netlink_getsockopt+0x590/0x590 [ 2682.345241][T12588] ____sys_sendmsg+0x5ba/0x960 [ 2682.350146][T12588] ? __asan_memset+0x22/0x40 [ 2682.354849][T12588] ? __sys_sendmsg_sock+0x30/0x30 [ 2682.359979][T12588] ? __import_iovec+0x5f2/0x850 [ 2682.364987][T12588] ? import_iovec+0x73/0xa0 [ 2682.369616][T12588] ___sys_sendmsg+0x2a6/0x360 [ 2682.374429][T12588] ? __sys_sendmsg+0x2a0/0x2a0 [ 2682.379453][T12588] ? debug_mutex_init+0x38/0x70 [ 2682.384531][T12588] __se_sys_sendmsg+0x1c2/0x2b0 [ 2682.389514][T12588] ? __x64_sys_sendmsg+0x80/0x80 [ 2682.394651][T12588] ? lockdep_hardirqs_on+0x98/0x150 [ 2682.399968][T12588] do_syscall_64+0x55/0xa0 [ 2682.404479][T12588] ? clear_bhb_loop+0x40/0x90 [ 2682.409249][T12588] ? clear_bhb_loop+0x40/0x90 [ 2682.414054][T12588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2682.420031][T12588] RIP: 0033:0x7f02a599acb9 [ 2682.424540][T12588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2682.444257][T12588] RSP: 002b:00007f02a67ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2682.452791][T12588] RAX: ffffffffffffffda RBX: 00007f02a5c15fa0 RCX: 00007f02a599acb9 [ 2682.460861][T12588] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2682.468925][T12588] RBP: 00007f02a5a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2682.476996][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2682.485064][T12588] R13: 00007f02a5c16038 R14: 00007f02a5c15fa0 R15: 00007ffd47b0d988 [ 2682.493268][T12588] [ 2682.907641][T12602] netlink: 'syz.6.14029': attribute type 9 has an invalid length. [ 2682.933731][T12602] netlink: 399 bytes leftover after parsing attributes in process `syz.6.14029'. [ 2683.664389][T12621] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14035'. [ 2684.235871][T12639] sock: sock_set_timeout: `syz.6.14042' (pid 12639) tries to set negative timeout [ 2684.260872][T12634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2685.754321][T12676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2686.586912][T12699] FAULT_INJECTION: forcing a failure. [ 2686.586912][T12699] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.646312][T12699] CPU: 0 PID: 12699 Comm: syz.8.14066 Not tainted syzkaller #0 [ 2686.653957][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2686.664082][T12699] Call Trace: [ 2686.667405][T12699] [ 2686.670383][T12699] dump_stack_lvl+0x18c/0x250 [ 2686.675148][T12699] ? show_regs_print_info+0x20/0x20 [ 2686.680413][T12699] ? load_image+0x400/0x400 [ 2686.684979][T12699] ? __might_sleep+0xe0/0xe0 [ 2686.689631][T12699] ? __lock_acquire+0x7d40/0x7d40 [ 2686.694727][T12699] should_fail_ex+0x39d/0x4d0 [ 2686.699478][T12699] should_failslab+0x9/0x20 [ 2686.704048][T12699] slab_pre_alloc_hook+0x59/0x310 [ 2686.709137][T12699] ? __lock_acquire+0x7d40/0x7d40 [ 2686.714211][T12699] kmem_cache_alloc_node+0x60/0x320 [ 2686.719472][T12699] ? __alloc_skb+0x103/0x2c0 [ 2686.724122][T12699] __alloc_skb+0x103/0x2c0 [ 2686.728603][T12699] netlink_sendmsg+0x66a/0xbf0 [ 2686.733431][T12699] ? netlink_getsockopt+0x590/0x590 [ 2686.738688][T12699] ? aa_sock_msg_perm+0x94/0x150 [ 2686.743682][T12699] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2686.749008][T12699] ? security_socket_sendmsg+0x80/0xa0 [ 2686.754493][T12699] ? netlink_getsockopt+0x590/0x590 [ 2686.759728][T12699] ____sys_sendmsg+0x5ba/0x960 [ 2686.764538][T12699] ? __asan_memset+0x22/0x40 [ 2686.769161][T12699] ? __sys_sendmsg_sock+0x30/0x30 [ 2686.774219][T12699] ? __import_iovec+0x5f2/0x850 [ 2686.779123][T12699] ? import_iovec+0x73/0xa0 [ 2686.783670][T12699] ___sys_sendmsg+0x2a6/0x360 [ 2686.788384][T12699] ? get_pid_task+0x20/0x1e0 [ 2686.793021][T12699] ? __sys_sendmsg+0x2a0/0x2a0 [ 2686.797840][T12699] ? __lock_acquire+0x7d40/0x7d40 [ 2686.802933][T12699] __se_sys_sendmsg+0x1c2/0x2b0 [ 2686.807827][T12699] ? __x64_sys_sendmsg+0x80/0x80 [ 2686.812819][T12699] ? lockdep_hardirqs_on+0x98/0x150 [ 2686.818046][T12699] do_syscall_64+0x55/0xa0 [ 2686.822497][T12699] ? clear_bhb_loop+0x40/0x90 [ 2686.827205][T12699] ? clear_bhb_loop+0x40/0x90 [ 2686.831916][T12699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2686.837840][T12699] RIP: 0033:0x7f7fcad9acb9 [ 2686.842283][T12699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2686.861927][T12699] RSP: 002b:00007f7fcbcaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2686.870369][T12699] RAX: ffffffffffffffda RBX: 00007f7fcb015fa0 RCX: 00007f7fcad9acb9 [ 2686.878365][T12699] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 2686.886363][T12699] RBP: 00007f7fcbcaa090 R08: 0000000000000000 R09: 0000000000000000 [ 2686.894359][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2686.902352][T12699] R13: 00007f7fcb016038 R14: 00007f7fcb015fa0 R15: 00007ffee04471b8 [ 2686.910365][T12699] [ 2687.140950][T12715] [ 2687.143812][T12715] ============================= [ 2687.148713][T12715] WARNING: suspicious RCU usage [ 2687.153860][T12715] syzkaller #0 Not tainted [ 2687.158318][T12715] ----------------------------- [ 2687.163550][T12715] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 2687.172125][T12715] [ 2687.172125][T12715] other info that might help us debug this: [ 2687.172125][T12715] [ 2687.182456][T12715] [ 2687.182456][T12715] rcu_scheduler_active = 2, debug_locks = 1 [ 2687.190576][T12715] 1 lock held by syz.2.14074/12715: [ 2687.196055][T12715] #0: ffffffff8d1321c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 2687.206380][T12715] [ 2687.206380][T12715] stack backtrace: [ 2687.212398][T12715] CPU: 0 PID: 12715 Comm: syz.2.14074 Not tainted syzkaller #0 [ 2687.220000][T12715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2687.230107][T12715] Call Trace: [ 2687.233431][T12715] [ 2687.236405][T12715] dump_stack_lvl+0x18c/0x250 [ 2687.241142][T12715] ? show_regs_print_info+0x20/0x20 [ 2687.246401][T12715] ? load_image+0x400/0x400 [ 2687.251011][T12715] lockdep_rcu_suspicious+0x1e1/0x300 [ 2687.256466][T12715] get_callchain_entry+0x2a9/0x3c0 [ 2687.261642][T12715] get_perf_callchain+0xc8/0x4f0 [ 2687.266633][T12715] ? put_callchain_entry+0xb0/0xb0 [ 2687.271818][T12715] ? preempt_schedule_common+0x82/0xc0 [ 2687.277351][T12715] ? preempt_schedule+0xc0/0xd0 [ 2687.282262][T12715] ? schedule_preempt_disabled+0x20/0x20 [ 2687.287966][T12715] __bpf_get_stack+0x2e4/0x540 [ 2687.292804][T12715] ? stack_map_get_build_id_offset+0x720/0x720 [ 2687.299077][T12715] ? __cant_sleep+0x220/0x220 [ 2687.303814][T12715] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 2687.309510][T12715] bpf_get_stack_raw_tp+0x1a9/0x210 [ 2687.314800][T12715] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 2687.320296][T12715] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 2687.325739][T12715] bpf_prog_test_run_syscall+0x317/0x4a0 [ 2687.331420][T12715] ? sock_gen_cookie+0x60/0x60 [ 2687.336222][T12715] ? sock_gen_cookie+0x60/0x60 [ 2687.341022][T12715] bpf_prog_test_run+0x321/0x390 [ 2687.345995][T12715] __sys_bpf+0x49d/0x890 [ 2687.350271][T12715] ? bpf_link_show_fdinfo+0x390/0x390 [ 2687.355685][T12715] ? lock_chain_count+0x20/0x20 [ 2687.360577][T12715] __x64_sys_bpf+0x7c/0x90 [ 2687.365024][T12715] do_syscall_64+0x55/0xa0 [ 2687.369473][T12715] ? clear_bhb_loop+0x40/0x90 [ 2687.374211][T12715] ? clear_bhb_loop+0x40/0x90 [ 2687.378923][T12715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2687.384847][T12715] RIP: 0033:0x7fcec299acb9 [ 2687.389381][T12715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2687.409049][T12715] RSP: 002b:00007fcec3932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2687.417498][T12715] RAX: ffffffffffffffda RBX: 00007fcec2c15fa0 RCX: 00007fcec299acb9 [ 2687.425504][T12715] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 2687.433504][T12715] RBP: 00007fcec2a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2687.441501][T12715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2687.449504][T12715] R13: 00007fcec2c16038 R14: 00007fcec2c15fa0 R15: 00007ffedc4cb2f8 [ 2687.457520][T12715]