last executing test programs: 20.377366683s ago: executing program 3 (id=3643): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xa, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900000000000000000000002020204c124924b74fd67b1af8ff00000006000000000000000007010000f8ffffffb702000008000000b7030000fdffffff8500"], &(0x7f0000000940)='syzkaller\x00', 0xa}, 0x94) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f00000009c0)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x4080) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x8a, &(0x7f0000000340)=""/138, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x8, 0xac}, 0x10, 0x25c3d, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000680)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 20.128901188s ago: executing program 3 (id=3647): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x30}, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="010000000500000000fffb0009000000f04ffd4adc4eee2cb13509728f01000000", @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000007a1000033d18030e0f60f1850c7a032d6ff438ffbe69e96a576bda57822b46b1b705b4dc4fbb041d9c9b59dffa9d5578b1e13026604a3ea1ab72333d89b05485f73b500620fe399669cd17c78242d88484204acda0c41a0b399dc415724062047f5e4a2ff5b67bad2a45cced6da7acbcfbeea51484709134ec5ab169215e477164be22e7d9db88b0f3f7ef1f7a2953cf65367635cb89608"], 0x50) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0xf8, &(0x7f00000006c0)=""/248, 0x0, 0x2c}, 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001880)={0x0, 0x0}) close(r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001b40)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001bc0)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000001c00), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001c40)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000001cc0), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000001d00)={0x0, 0x0}) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0x4, &(0x7f0000001e00)=ANY=[@ANYBLOB="180000000a00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000001e40)=r6, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001ec0)={&(0x7f0000001f00)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x4003, 0xffffff00}}, 0x10, 0x0}, 0x4040005) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x9100, 0x80000000005, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x100000}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) 20.039917967s ago: executing program 0 (id=3648): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000f00), 0x4) sendmsg$kcm(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc", 0xb8}, {&(0x7f00000010c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 19.91509511s ago: executing program 3 (id=3649): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x27b28}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 19.801657491s ago: executing program 1 (id=3651): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02001800000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x25) 19.734849428s ago: executing program 3 (id=3652): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000140)}, 0x40040) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = getpid() socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9", 0x43}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0xa, r1, 0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0xce, r2}, 0x38) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0xe, 0x0, &(0x7f0000000940)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 19.645016807s ago: executing program 0 (id=3653): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000033c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x1c, &(0x7f0000000780)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xa00}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.600183512s ago: executing program 1 (id=3654): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x7, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 19.52864918s ago: executing program 2 (id=3655): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0xfffe, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000012c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x20}, 0x4000805) 19.370801406s ago: executing program 0 (id=3656): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xa, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900000000000000000000002020204c124924b74fd67b1af8ff00000006000000000000000007010000f8ffffffb702000008000000b7030000fdffffff8500"], &(0x7f0000000940)='syzkaller\x00', 0xa}, 0x94) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f00000009c0)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x4080) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x8a, &(0x7f0000000340)=""/138, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x8, 0xac}, 0x10, 0x25c3d, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000680)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 19.361926097s ago: executing program 2 (id=3657): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x2000c001}, 0x810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x804, 0x3, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=""/3, 0x2}, 0x20) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000440)={r3, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000001000400000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 19.190579974s ago: executing program 1 (id=3658): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) r1 = perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000b00), 0x4) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x2, &(0x7f0000000c00), 0x10) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="000000000000000002000000000000", @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000cc0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000e40)={'veth0_vlan\x00', @random="010000201000"}) 19.126865561s ago: executing program 2 (id=3659): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000400)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000003880)="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", 0xa06}], 0x1}, 0xe900) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, 0x0, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8040) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000163b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) 19.088635735s ago: executing program 3 (id=3660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x4, &(0x7f0000000880)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x900}, 0x80) 19.082222435s ago: executing program 0 (id=3661): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000f00), 0x4) sendmsg$kcm(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f", 0xc5}, {&(0x7f00000010c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 18.906755163s ago: executing program 3 (id=3662): perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1d9dc7f3e18a95a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x5, 0x4, 0x80, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffdf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) (async) r2 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) sendmsg$kcm(r1, &(0x7f0000000c80)={0x0, 0xfffffffffffffecc, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="e03f03003b000b05d25a806c8c6394f90424fc60100005fb0b000900053582c137153e370c0280fc0b1000f80b00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000a00)={[{0x2d, 'net'}, {0x2b, 'rdma'}]}, 0xb) (async, rerun: 32) setsockopt$sock_attach_bpf(r4, 0x0, 0xa, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa133, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000140), 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000024be539043bf76ed2b295ec8a92b02f6230a08ed6b05112a670a67f8322eff676828a94e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xb, 0x0, &(0x7f0000000640)="e0b9547ed387dbe9abc89b", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000a40), 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r7}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r9, &(0x7f0000000a00), 0x0}, 0x20) 18.906374854s ago: executing program 1 (id=3663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="00ffb00000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.595660755s ago: executing program 0 (id=3664): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) r1 = perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000b00), 0x4) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x2, &(0x7f0000000c00), 0x10) r5 = socket$kcm(0x2c, 0x3, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="000000000000000002000000000000", @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000cc0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000e40)={'veth0_vlan\x00', @random="010000201000"}) 18.595536075s ago: executing program 2 (id=3665): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00034000089bbc7a46e363e4a79e37988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0f56a20ff27fdf00", 0x89}], 0x1}, 0x0) 18.396819906s ago: executing program 1 (id=3666): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x7, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 18.206813055s ago: executing program 2 (id=3667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xc, 0x4, 0x4, 0x75040000, 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x1c, &(0x7f0000001340)=ANY=[@ANYBLOB="1808000042000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09100000000000450901003f2000009500000000000000b7020000feffffff7b9af8ff00000000b6090000000000107baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.920625404s ago: executing program 1 (id=3668): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffff00000000) 17.782882249s ago: executing program 2 (id=3669): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xa, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900000000000000000000002020204c124924b74fd67b1af8ff00000006000000000000000007010000f8ffffffb702000008000000b7030000fdffffff8500"], &(0x7f0000000940)='syzkaller\x00', 0xa}, 0x94) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f00000009c0)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x4080) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x8a, &(0x7f0000000340)=""/138, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x8, 0xac}, 0x10, 0x25c3d, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000680)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.25306ms ago: executing program 0 (id=3670): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x56, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x900}, 0x48) 636.571µs ago: executing program 32 (id=3662): perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1d9dc7f3e18a95a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x5, 0x4, 0x80, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffdf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) (async) r2 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) sendmsg$kcm(r1, &(0x7f0000000c80)={0x0, 0xfffffffffffffecc, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="e03f03003b000b05d25a806c8c6394f90424fc60100005fb0b000900053582c137153e370c0280fc0b1000f80b00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000a00)={[{0x2d, 'net'}, {0x2b, 'rdma'}]}, 0xb) (async, rerun: 32) setsockopt$sock_attach_bpf(r4, 0x0, 0xa, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa133, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000140), 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000024be539043bf76ed2b295ec8a92b02f6230a08ed6b05112a670a67f8322eff676828a94e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xb, 0x0, &(0x7f0000000640)="e0b9547ed387dbe9abc89b", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000a40), 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r7}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r9, &(0x7f0000000a00), 0x0}, 0x20) 459.8µs ago: executing program 33 (id=3670): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x56, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x900}, 0x48) 357.531µs ago: executing program 34 (id=3668): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffff00000000) 0s ago: executing program 35 (id=3669): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xa, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900000000000000000000002020204c124924b74fd67b1af8ff00000006000000000000000007010000f8ffffffb702000008000000b7030000fdffffff8500"], &(0x7f0000000940)='syzkaller\x00', 0xa}, 0x94) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f00000009c0)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, 0x0, 0x4080) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x8a, &(0x7f0000000340)=""/138, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x8, 0xac}, 0x10, 0x25c3d, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000680)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) kernel console output (not intermixed with test programs): 0 [ 608.196959][T14835] do_syscall_64+0x55/0xb0 [ 608.201433][T14835] ? clear_bhb_loop+0x40/0x90 [ 608.206164][T14835] ? clear_bhb_loop+0x40/0x90 [ 608.210899][T14835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.216864][T14835] RIP: 0033:0x7f407139fb19 [ 608.221359][T14835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.241012][T14835] RSP: 002b:00007f406f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.249495][T14835] RAX: ffffffffffffffda RBX: 00007f4071625fa0 RCX: 00007f407139fb19 [ 608.257518][T14835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 608.265547][T14835] RBP: 00007f4071437b70 R08: 0000000000000000 R09: 0000000000000000 [ 608.273574][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.281578][T14835] R13: 00007f4071626038 R14: 00007f4071625fa0 R15: 00007ffdc00fc858 [ 608.289786][T14835] [ 608.608645][T14845] netlink: 'syz.3.2877': attribute type 10 has an invalid length. [ 608.627707][T14845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2877'. [ 609.074360][T14855] netlink: 'syz.3.2882': attribute type 10 has an invalid length. [ 609.640102][T14880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.653146][T14880] netlink: 'syz.0.2893': attribute type 9 has an invalid length. [ 609.713287][T14884] netlink: 'syz.0.2893': attribute type 9 has an invalid length. [ 611.811030][T14920] netlink: 'syz.1.2908': attribute type 10 has an invalid length. [ 611.819381][T14920] __nla_validate_parse: 3 callbacks suppressed [ 611.819420][T14920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2908'. [ 612.743147][T14936] netlink: 203100 bytes leftover after parsing attributes in process `syz.1.2914'. [ 612.843915][T14936] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 612.855220][T14936] CPU: 1 PID: 14936 Comm: syz.1.2914 Not tainted syzkaller #0 [ 612.862770][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 612.872969][T14936] Call Trace: [ 612.876332][T14936] [ 612.879314][T14936] dump_stack_lvl+0x18c/0x250 [ 612.884073][T14936] ? show_regs_print_info+0x20/0x20 [ 612.889344][T14936] ? load_image+0x420/0x420 [ 612.893929][T14936] sysfs_warn_dup+0x8e/0xa0 [ 612.898493][T14936] sysfs_do_create_link_sd+0xc0/0x110 [ 612.903946][T14936] device_add_class_symlinks+0x1cf/0x240 [ 612.909746][T14936] device_add+0x4f9/0xc40 [ 612.914246][T14936] wiphy_register+0x1f24/0x2c70 [ 612.919213][T14936] ? cfg80211_event_work+0x40/0x40 [ 612.924395][T14936] ? minstrel_ht_alloc+0x88a/0x990 [ 612.929597][T14936] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 612.935771][T14936] ieee80211_register_hw+0x2f3d/0x3cb0 [ 612.941350][T14936] ? ieee80211_register_hw+0xf51/0x3cb0 [ 612.947005][T14936] ? ieee80211_tasklet_handler+0x20/0x20 [ 612.952706][T14936] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 612.958678][T14936] ? __debug_object_init+0xec/0x450 [ 612.963951][T14936] ? __asan_memset+0x22/0x40 [ 612.968612][T14936] ? __hrtimer_init+0x189/0x270 [ 612.973517][T14936] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 612.979311][T14936] ? mac80211_hwsim_free+0x220/0x220 [ 612.984814][T14936] ? rcu_is_watching+0x15/0xb0 [ 612.989646][T14936] ? kstrndup+0xbd/0x140 [ 612.993952][T14936] hwsim_new_radio_nl+0xdad/0x1a70 [ 612.999111][T14936] ? __nla_validate+0x50/0x50 [ 613.004018][T14936] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 613.010400][T14936] ? __nla_parse+0x40/0x50 [ 613.015060][T14936] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 613.021632][T14936] genl_family_rcv_msg_doit+0x21a/0x310 [ 613.027253][T14936] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 613.033218][T14936] ? bpf_lsm_capable+0x9/0x10 [ 613.037936][T14936] ? security_capable+0x89/0xb0 [ 613.042846][T14936] genl_rcv_msg+0x611/0x7a0 [ 613.047399][T14936] ? genl_bind+0x360/0x360 [ 613.051855][T14936] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 613.058312][T14936] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 613.064952][T14936] ? perf_trace_lock+0xfc/0x3b0 [ 613.069874][T14936] netlink_rcv_skb+0x235/0x4c0 [ 613.074793][T14936] ? genl_bind+0x360/0x360 [ 613.079274][T14936] ? netlink_ack+0x1160/0x1160 [ 613.084135][T14936] ? __lock_acquire+0x7eb0/0x7eb0 [ 613.089239][T14936] ? down_read+0x1ac/0x2e0 [ 613.093792][T14936] genl_rcv+0x28/0x40 [ 613.097851][T14936] netlink_unicast+0x856/0x9e0 [ 613.102702][T14936] netlink_sendmsg+0x8d0/0xbf0 [ 613.107516][T14936] ? netlink_getsockopt+0x590/0x590 [ 613.112848][T14936] ? apparmor_socket_sendmsg+0x8e/0x330 [ 613.118455][T14936] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 613.123790][T14936] ? security_socket_sendmsg+0x80/0xa0 [ 613.129330][T14936] ? netlink_getsockopt+0x590/0x590 [ 613.134571][T14936] ____sys_sendmsg+0x61b/0x980 [ 613.139386][T14936] ? __asan_memset+0x22/0x40 [ 613.144057][T14936] ? __sys_sendmsg_sock+0x30/0x30 [ 613.149120][T14936] ? __import_iovec+0x5f2/0x850 [ 613.154023][T14936] ? import_iovec+0x73/0xa0 [ 613.158652][T14936] ___sys_sendmsg+0x2a6/0x360 [ 613.163376][T14936] ? __sys_sendmsg+0x2b0/0x2b0 [ 613.168285][T14936] ? map_lookup_elem+0x653/0x7f0 [ 613.173264][T14936] ? trace_call_bpf+0xc3/0x6c0 [ 613.178097][T14936] __se_sys_sendmsg+0x1d0/0x2c0 [ 613.182990][T14936] ? perf_trace_preemptirq_template+0x269/0x330 [ 613.189289][T14936] ? __x64_sys_sendmsg+0x80/0x80 [ 613.194336][T14936] ? lockdep_hardirqs_on+0x98/0x150 [ 613.199592][T14936] do_syscall_64+0x55/0xb0 [ 613.204061][T14936] ? clear_bhb_loop+0x40/0x90 [ 613.208902][T14936] ? clear_bhb_loop+0x40/0x90 [ 613.213928][T14936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.219883][T14936] RIP: 0033:0x7f31ddd9fb19 [ 613.224343][T14936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.243999][T14936] RSP: 002b:00007f31ded59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.252458][T14936] RAX: ffffffffffffffda RBX: 00007f31de025fa0 RCX: 00007f31ddd9fb19 [ 613.260472][T14936] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 613.268486][T14936] RBP: 00007f31dde37b70 R08: 0000000000000000 R09: 0000000000000000 [ 613.276491][T14936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.284496][T14936] R13: 00007f31de026038 R14: 00007f31de025fa0 R15: 00007ffe60d7b968 [ 613.292525][T14936] [ 615.082902][T14972] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2925'. [ 615.543826][T14972] netlink: 'syz.2.2925': attribute type 1 has an invalid length. [ 615.581689][T14972] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2925'. [ 617.190122][T14997] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 617.225019][T14997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2933'. [ 618.202178][T15006] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2937'. [ 619.817782][T15020] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2940'. [ 619.990420][T15018] netlink: 'syz.3.2941': attribute type 10 has an invalid length. [ 620.011302][T15018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2941'. [ 620.328903][T15035] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2946'. [ 620.483435][T15038] : port 1(ip6gretap0) entered blocking state [ 620.501937][T15038] : port 1(ip6gretap0) entered disabled state [ 620.580845][T15038] ip6gretap0: entered allmulticast mode [ 620.588122][T15038] ip6gretap0: entered promiscuous mode [ 620.699579][T15038] ip6gretap0: left allmulticast mode [ 620.722119][T15038] ip6gretap0: left promiscuous mode [ 620.744346][T15038] : port 1(ip6gretap0) entered disabled state [ 621.875835][T15040] netlink: 'syz.3.2949': attribute type 10 has an invalid length. [ 621.920612][T15040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2949'. [ 622.175188][T15053] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2954'. [ 622.269028][T15056] netlink: 203100 bytes leftover after parsing attributes in process `syz.1.2953'. [ 622.323545][T15056] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 622.368073][T15056] CPU: 1 PID: 15056 Comm: syz.1.2953 Not tainted syzkaller #0 [ 622.375746][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 622.385954][T15056] Call Trace: [ 622.389289][T15056] [ 622.392293][T15056] dump_stack_lvl+0x18c/0x250 [ 622.397064][T15056] ? show_regs_print_info+0x20/0x20 [ 622.402313][T15056] ? load_image+0x420/0x420 [ 622.406886][T15056] sysfs_warn_dup+0x8e/0xa0 [ 622.411478][T15056] sysfs_do_create_link_sd+0xc0/0x110 [ 622.416925][T15056] device_add_class_symlinks+0x1cf/0x240 [ 622.422628][T15056] device_add+0x4f9/0xc40 [ 622.427024][T15056] wiphy_register+0x1f24/0x2c70 [ 622.431963][T15056] ? cfg80211_event_work+0x40/0x40 [ 622.437140][T15056] ? minstrel_ht_alloc+0x88a/0x990 [ 622.442319][T15056] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 622.448744][T15056] ieee80211_register_hw+0x2f3d/0x3cb0 [ 622.454370][T15056] ? ieee80211_register_hw+0xf51/0x3cb0 [ 622.460103][T15056] ? ieee80211_tasklet_handler+0x20/0x20 [ 622.465830][T15056] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 622.471875][T15056] ? __debug_object_init+0xec/0x450 [ 622.477127][T15056] ? __asan_memset+0x22/0x40 [ 622.481789][T15056] ? __hrtimer_init+0x189/0x270 [ 622.486698][T15056] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 622.492500][T15056] ? mac80211_hwsim_free+0x220/0x220 [ 622.497851][T15056] ? rcu_is_watching+0x15/0xb0 [ 622.502774][T15056] ? kstrndup+0xbd/0x140 [ 622.507083][T15056] hwsim_new_radio_nl+0xdad/0x1a70 [ 622.512254][T15056] ? __nla_validate+0x50/0x50 [ 622.517002][T15056] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 622.523401][T15056] ? __nla_parse+0x40/0x50 [ 622.527883][T15056] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 622.534274][T15056] genl_family_rcv_msg_doit+0x21a/0x310 [ 622.539886][T15056] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 622.545842][T15056] ? bpf_lsm_capable+0x9/0x10 [ 622.550661][T15056] ? security_capable+0x89/0xb0 [ 622.555580][T15056] genl_rcv_msg+0x611/0x7a0 [ 622.560145][T15056] ? genl_bind+0x360/0x360 [ 622.564616][T15056] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 622.570999][T15056] ? ref_tracker_free+0x686/0x830 [ 622.576282][T15056] ? __kasan_kmalloc_large+0x8b/0xa0 [ 622.581744][T15056] netlink_rcv_skb+0x235/0x4c0 [ 622.586587][T15056] ? genl_bind+0x360/0x360 [ 622.591078][T15056] ? netlink_ack+0x1160/0x1160 [ 622.596001][T15056] ? __lock_acquire+0x7eb0/0x7eb0 [ 622.601203][T15056] ? down_read+0x1ac/0x2e0 [ 622.605697][T15056] genl_rcv+0x28/0x40 [ 622.609746][T15056] netlink_unicast+0x856/0x9e0 [ 622.614621][T15056] netlink_sendmsg+0x8d0/0xbf0 [ 622.619539][T15056] ? netlink_getsockopt+0x590/0x590 [ 622.624873][T15056] ? apparmor_socket_sendmsg+0x8e/0x330 [ 622.630491][T15056] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 622.635844][T15056] ? security_socket_sendmsg+0x80/0xa0 [ 622.641383][T15056] ? netlink_getsockopt+0x590/0x590 [ 622.646637][T15056] ____sys_sendmsg+0x61b/0x980 [ 622.651561][T15056] ? __asan_memset+0x22/0x40 [ 622.656206][T15056] ? __sys_sendmsg_sock+0x30/0x30 [ 622.661404][T15056] ? __import_iovec+0x5f2/0x850 [ 622.666333][T15056] ? import_iovec+0x73/0xa0 [ 622.670898][T15056] ___sys_sendmsg+0x2a6/0x360 [ 622.675670][T15056] ? __sys_sendmsg+0x2b0/0x2b0 [ 622.680550][T15056] __se_sys_sendmsg+0x1d0/0x2c0 [ 622.685472][T15056] ? __x64_sys_sendmsg+0x80/0x80 [ 622.690480][T15056] ? lockdep_hardirqs_on+0x98/0x150 [ 622.695831][T15056] do_syscall_64+0x55/0xb0 [ 622.700313][T15056] ? clear_bhb_loop+0x40/0x90 [ 622.705047][T15056] ? clear_bhb_loop+0x40/0x90 [ 622.709794][T15056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.715741][T15056] RIP: 0033:0x7f31ddd9fb19 [ 622.720198][T15056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.739873][T15056] RSP: 002b:00007f31ded38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.748354][T15056] RAX: ffffffffffffffda RBX: 00007f31de026090 RCX: 00007f31ddd9fb19 [ 622.756398][T15056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 622.764422][T15056] RBP: 00007f31dde37b70 R08: 0000000000000000 R09: 0000000000000000 [ 622.772498][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.780544][T15056] R13: 00007f31de026128 R14: 00007f31de026090 R15: 00007ffe60d7b968 [ 622.788585][T15056] [ 622.795180][T15055] netlink: 'syz.0.2955': attribute type 10 has an invalid length. [ 622.809268][T15055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2955'. [ 623.098244][T15068] netlink: 'syz.1.2960': attribute type 10 has an invalid length. [ 623.130916][T15068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2960'. [ 623.499238][T15080] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2965'. [ 623.501066][T15081] netlink: 'syz.0.2972': attribute type 10 has an invalid length. [ 623.777296][T15091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2969'. [ 623.801994][T15091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2969'. [ 623.812923][T15091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2969'. [ 624.035375][T15093] netlink: 'syz.2.2970': attribute type 10 has an invalid length. [ 624.046370][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2970'. [ 624.122023][T15099] netlink: 'syz.0.2971': attribute type 10 has an invalid length. [ 624.151274][T15099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2971'. [ 624.445454][T15111] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2977'. [ 624.654974][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.661548][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.730850][T15113] FAULT_INJECTION: forcing a failure. [ 624.730850][T15113] name failslab, interval 1, probability 0, space 0, times 0 [ 624.761281][T15113] CPU: 0 PID: 15113 Comm: syz.1.2978 Not tainted syzkaller #0 [ 624.768860][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 624.778994][T15113] Call Trace: [ 624.782343][T15113] [ 624.785333][T15113] dump_stack_lvl+0x18c/0x250 [ 624.790096][T15113] ? show_regs_print_info+0x20/0x20 [ 624.795373][T15113] ? load_image+0x420/0x420 [ 624.799948][T15113] ? __might_sleep+0xe0/0xe0 [ 624.804618][T15113] ? __lock_acquire+0x7eb0/0x7eb0 [ 624.809732][T15113] should_fail_ex+0x394/0x4c0 [ 624.814523][T15113] should_failslab+0x9/0x20 [ 624.819113][T15113] slab_pre_alloc_hook+0x59/0x300 [ 624.824212][T15113] ? vmemdup_user+0x49/0x1e0 [ 624.828880][T15113] ? vmemdup_user+0x49/0x1e0 [ 624.833536][T15113] __kmem_cache_alloc_node+0x53/0x260 [ 624.838976][T15113] ? vmemdup_user+0x49/0x1e0 [ 624.843635][T15113] __kmalloc_node+0xa6/0x240 [ 624.848299][T15113] vmemdup_user+0x49/0x1e0 [ 624.852790][T15113] map_lookup_elem+0x28a/0x7f0 [ 624.857653][T15113] ? __might_fault+0xaa/0x120 [ 624.862394][T15113] ? bpf_lsm_bpf+0x9/0x10 [ 624.866808][T15113] __sys_bpf+0x438/0x890 [ 624.871130][T15113] ? bpf_link_show_fdinfo+0x560/0x560 [ 624.876579][T15113] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 624.882822][T15113] __x64_sys_bpf+0x7c/0x90 [ 624.887303][T15113] do_syscall_64+0x55/0xb0 [ 624.891791][T15113] ? clear_bhb_loop+0x40/0x90 [ 624.896604][T15113] ? clear_bhb_loop+0x40/0x90 [ 624.901355][T15113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.907310][T15113] RIP: 0033:0x7f31ddd9fb19 [ 624.911787][T15113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.931467][T15113] RSP: 002b:00007f31ded59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.939947][T15113] RAX: ffffffffffffffda RBX: 00007f31de025fa0 RCX: 00007f31ddd9fb19 [ 624.947987][T15113] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000001 [ 624.956042][T15113] RBP: 00007f31ded59090 R08: 0000000000000000 R09: 0000000000000000 [ 624.964066][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.972085][T15113] R13: 00007f31de026038 R14: 00007f31de025fa0 R15: 00007ffe60d7b968 [ 624.980169][T15113] [ 625.301824][T15127] netlink: 'syz.0.2982': attribute type 10 has an invalid length. [ 625.468901][T15130] netlink: 'syz.2.2984': attribute type 10 has an invalid length. [ 625.927774][T15142] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 625.949170][T15146] netlink: 'syz.1.2989': attribute type 29 has an invalid length. [ 625.980778][T15146] netlink: 'syz.1.2989': attribute type 29 has an invalid length. [ 625.990842][T15143] netlink: 'syz.1.2989': attribute type 29 has an invalid length. [ 626.382076][T15152] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 626.428921][T15152] CPU: 1 PID: 15152 Comm: syz.1.2991 Not tainted syzkaller #0 [ 626.436530][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 626.446675][T15152] Call Trace: [ 626.450026][T15152] [ 626.453015][T15152] dump_stack_lvl+0x18c/0x250 [ 626.457777][T15152] ? show_regs_print_info+0x20/0x20 [ 626.463134][T15152] ? load_image+0x420/0x420 [ 626.467719][T15152] sysfs_warn_dup+0x8e/0xa0 [ 626.472291][T15152] sysfs_do_create_link_sd+0xc0/0x110 [ 626.477732][T15152] device_add_class_symlinks+0x1cf/0x240 [ 626.483451][T15152] device_add+0x4f9/0xc40 [ 626.487853][T15152] wiphy_register+0x1f24/0x2c70 [ 626.492788][T15152] ? cfg80211_event_work+0x40/0x40 [ 626.497941][T15152] ? minstrel_ht_alloc+0x88a/0x990 [ 626.503124][T15152] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 626.509271][T15152] ieee80211_register_hw+0x2f3d/0x3cb0 [ 626.514788][T15152] ? ieee80211_register_hw+0xf51/0x3cb0 [ 626.520393][T15152] ? ieee80211_tasklet_handler+0x20/0x20 [ 626.526099][T15152] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 626.532037][T15152] ? __debug_object_init+0xec/0x450 [ 626.537279][T15152] ? __asan_memset+0x22/0x40 [ 626.541916][T15152] ? __hrtimer_init+0x189/0x270 [ 626.546818][T15152] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 626.552859][T15152] ? mac80211_hwsim_free+0x220/0x220 [ 626.558192][T15152] ? rcu_is_watching+0x15/0xb0 [ 626.563007][T15152] ? kstrndup+0xbd/0x140 [ 626.567306][T15152] hwsim_new_radio_nl+0xdad/0x1a70 [ 626.572480][T15152] ? __nla_validate+0x50/0x50 [ 626.577251][T15152] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 626.583658][T15152] ? __nla_parse+0x40/0x50 [ 626.588131][T15152] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 626.594767][T15152] genl_family_rcv_msg_doit+0x21a/0x310 [ 626.600405][T15152] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 626.606354][T15152] ? bpf_lsm_capable+0x9/0x10 [ 626.611081][T15152] ? security_capable+0x89/0xb0 [ 626.615977][T15152] genl_rcv_msg+0x611/0x7a0 [ 626.620547][T15152] ? genl_bind+0x360/0x360 [ 626.625026][T15152] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 626.631410][T15152] ? ref_tracker_free+0x686/0x830 [ 626.636481][T15152] ? __kasan_kmalloc_large+0x8b/0xa0 [ 626.642283][T15152] netlink_rcv_skb+0x235/0x4c0 [ 626.647093][T15152] ? genl_bind+0x360/0x360 [ 626.651742][T15152] ? netlink_ack+0x1160/0x1160 [ 626.656590][T15152] ? __lock_acquire+0x7eb0/0x7eb0 [ 626.661674][T15152] ? down_read+0x1ac/0x2e0 [ 626.666144][T15152] genl_rcv+0x28/0x40 [ 626.670185][T15152] netlink_unicast+0x856/0x9e0 [ 626.675028][T15152] netlink_sendmsg+0x8d0/0xbf0 [ 626.679845][T15152] ? netlink_getsockopt+0x590/0x590 [ 626.685092][T15152] ? apparmor_socket_sendmsg+0x8e/0x330 [ 626.690712][T15152] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 626.696124][T15152] ? security_socket_sendmsg+0x80/0xa0 [ 626.701710][T15152] ? netlink_getsockopt+0x590/0x590 [ 626.707228][T15152] ____sys_sendmsg+0x61b/0x980 [ 626.712039][T15152] ? __asan_memset+0x22/0x40 [ 626.716789][T15152] ? __sys_sendmsg_sock+0x30/0x30 [ 626.721854][T15152] ? __import_iovec+0x5f2/0x850 [ 626.726762][T15152] ? import_iovec+0x73/0xa0 [ 626.731315][T15152] ___sys_sendmsg+0x2a6/0x360 [ 626.736074][T15152] ? __sys_sendmsg+0x2b0/0x2b0 [ 626.740922][T15152] __se_sys_sendmsg+0x1d0/0x2c0 [ 626.745987][T15152] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.751230][T15152] ? __x64_sys_sendmsg+0x80/0x80 [ 626.756237][T15152] ? lockdep_hardirqs_on+0x98/0x150 [ 626.762019][T15152] do_syscall_64+0x55/0xb0 [ 626.766662][T15152] ? clear_bhb_loop+0x40/0x90 [ 626.771385][T15152] ? clear_bhb_loop+0x40/0x90 [ 626.776190][T15152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.782126][T15152] RIP: 0033:0x7f31ddd9fb19 [ 626.786598][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.806263][T15152] RSP: 002b:00007f31ded59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.814720][T15152] RAX: ffffffffffffffda RBX: 00007f31de025fa0 RCX: 00007f31ddd9fb19 [ 626.822732][T15152] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 626.830737][T15152] RBP: 00007f31dde37b70 R08: 0000000000000000 R09: 0000000000000000 [ 626.838928][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.846953][T15152] R13: 00007f31de026038 R14: 00007f31de025fa0 R15: 00007ffe60d7b968 [ 626.854978][T15152] [ 627.070712][T15151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.890491][T15188] validate_nla: 1 callbacks suppressed [ 627.890556][T15188] netlink: 'syz.0.3004': attribute type 10 has an invalid length. [ 628.130883][T15188] __nla_validate_parse: 7 callbacks suppressed [ 628.130928][T15188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3004'. [ 628.223219][T15195] netlink: 'syz.2.3005': attribute type 10 has an invalid length. [ 628.248984][T15195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3005'. [ 628.425329][T15202] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3006'. [ 628.604465][T15208] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3010'. [ 629.401829][T15218] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3013'. [ 629.617780][T15222] netlink: 'syz.1.3015': attribute type 10 has an invalid length. [ 629.650695][T15222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3015'. [ 629.852057][T15226] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 629.874097][T15226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3017'. [ 629.898566][T15235] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3019'. [ 629.963161][T15220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 630.241495][T15248] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3025'. [ 630.483106][T15253] netlink: 'syz.0.3026': attribute type 10 has an invalid length. [ 630.499740][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3026'. [ 630.791644][T15257] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 630.819262][T15257] CPU: 1 PID: 15257 Comm: syz.2.3027 Not tainted syzkaller #0 [ 630.826832][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 630.837041][T15257] Call Trace: [ 630.840383][T15257] [ 630.843367][T15257] dump_stack_lvl+0x18c/0x250 [ 630.848122][T15257] ? show_regs_print_info+0x20/0x20 [ 630.853399][T15257] ? load_image+0x420/0x420 [ 630.858000][T15257] sysfs_warn_dup+0x8e/0xa0 [ 630.862600][T15257] sysfs_do_create_link_sd+0xc0/0x110 [ 630.868048][T15257] device_add_class_symlinks+0x1cf/0x240 [ 630.873780][T15257] device_add+0x4f9/0xc40 [ 630.878205][T15257] wiphy_register+0x1f24/0x2c70 [ 630.883182][T15257] ? cfg80211_event_work+0x40/0x40 [ 630.888357][T15257] ? minstrel_ht_alloc+0x88a/0x990 [ 630.893522][T15257] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 630.899639][T15257] ieee80211_register_hw+0x2f3d/0x3cb0 [ 630.905242][T15257] ? ieee80211_register_hw+0xf51/0x3cb0 [ 630.910843][T15257] ? ieee80211_tasklet_handler+0x20/0x20 [ 630.916516][T15257] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 630.922474][T15257] ? __debug_object_init+0xec/0x450 [ 630.927723][T15257] ? __asan_memset+0x22/0x40 [ 630.932361][T15257] ? __hrtimer_init+0x189/0x270 [ 630.937280][T15257] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 630.943067][T15257] ? mac80211_hwsim_free+0x220/0x220 [ 630.948616][T15257] ? rcu_is_watching+0x15/0xb0 [ 630.953533][T15257] ? kstrndup+0xbd/0x140 [ 630.957841][T15257] hwsim_new_radio_nl+0xdad/0x1a70 [ 630.963006][T15257] ? __nla_validate+0x50/0x50 [ 630.967767][T15257] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 630.974163][T15257] ? __nla_parse+0x40/0x50 [ 630.978639][T15257] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 630.985062][T15257] genl_family_rcv_msg_doit+0x21a/0x310 [ 630.990686][T15257] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 630.996824][T15257] ? bpf_lsm_capable+0x9/0x10 [ 631.001566][T15257] ? security_capable+0x89/0xb0 [ 631.006493][T15257] genl_rcv_msg+0x611/0x7a0 [ 631.011063][T15257] ? genl_bind+0x360/0x360 [ 631.015525][T15257] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 631.021998][T15257] netlink_rcv_skb+0x235/0x4c0 [ 631.027009][T15257] ? genl_bind+0x360/0x360 [ 631.031470][T15257] ? netlink_ack+0x1160/0x1160 [ 631.036293][T15257] ? __lock_acquire+0x7eb0/0x7eb0 [ 631.041383][T15257] ? down_read+0x1ac/0x2e0 [ 631.045845][T15257] genl_rcv+0x28/0x40 [ 631.049865][T15257] netlink_unicast+0x856/0x9e0 [ 631.054803][T15257] netlink_sendmsg+0x8d0/0xbf0 [ 631.059713][T15257] ? netlink_getsockopt+0x590/0x590 [ 631.065058][T15257] ? apparmor_socket_sendmsg+0x8e/0x330 [ 631.070838][T15257] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 631.076190][T15257] ? security_socket_sendmsg+0x80/0xa0 [ 631.081702][T15257] ? netlink_getsockopt+0x590/0x590 [ 631.086946][T15257] ____sys_sendmsg+0x61b/0x980 [ 631.091760][T15257] ? __asan_memset+0x22/0x40 [ 631.096397][T15257] ? __sys_sendmsg_sock+0x30/0x30 [ 631.101487][T15257] ? __import_iovec+0x5f2/0x850 [ 631.106475][T15257] ? import_iovec+0x73/0xa0 [ 631.111071][T15257] ___sys_sendmsg+0x2a6/0x360 [ 631.116126][T15257] ? __sys_sendmsg+0x2b0/0x2b0 [ 631.120976][T15257] ? ktime_get+0x7f/0x280 [ 631.125403][T15257] __se_sys_sendmsg+0x1d0/0x2c0 [ 631.130566][T15257] ? __x64_sys_sendmsg+0x80/0x80 [ 631.135737][T15257] ? lockdep_hardirqs_on+0x98/0x150 [ 631.141012][T15257] do_syscall_64+0x55/0xb0 [ 631.145568][T15257] ? clear_bhb_loop+0x40/0x90 [ 631.150298][T15257] ? clear_bhb_loop+0x40/0x90 [ 631.155048][T15257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.161005][T15257] RIP: 0033:0x7f407139fb19 [ 631.165504][T15257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.185260][T15257] RSP: 002b:00007f406f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.193817][T15257] RAX: ffffffffffffffda RBX: 00007f4071625fa0 RCX: 00007f407139fb19 [ 631.201831][T15257] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 631.209941][T15257] RBP: 00007f4071437b70 R08: 0000000000000000 R09: 0000000000000000 [ 631.217946][T15257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.225951][T15257] R13: 00007f4071626038 R14: 00007f4071625fa0 R15: 00007ffdc00fc858 [ 631.233977][T15257] [ 631.276465][T15255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.771828][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 631.998485][T15272] netlink: 'syz.2.3031': attribute type 10 has an invalid length. [ 632.037689][T15273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.046498][T15268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.458270][T15289] netlink: 'syz.2.3038': attribute type 10 has an invalid length. [ 632.775689][T15292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.165305][T15310] netlink: 'syz.1.3044': attribute type 10 has an invalid length. [ 636.173496][T15310] __nla_validate_parse: 5 callbacks suppressed [ 636.173512][T15310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3044'. [ 636.189880][T15316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.463556][T15323] netlink: 203100 bytes leftover after parsing attributes in process `syz.3.3049'. [ 636.499928][T15327] netlink: 'syz.2.3050': attribute type 10 has an invalid length. [ 636.521877][T15327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3050'. [ 636.555229][T15323] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 636.570334][T15323] CPU: 0 PID: 15323 Comm: syz.3.3049 Not tainted syzkaller #0 [ 636.577904][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 636.588021][T15323] Call Trace: [ 636.591362][T15323] [ 636.594366][T15323] dump_stack_lvl+0x18c/0x250 [ 636.599124][T15323] ? show_regs_print_info+0x20/0x20 [ 636.604400][T15323] ? load_image+0x420/0x420 [ 636.609083][T15323] sysfs_warn_dup+0x8e/0xa0 [ 636.613662][T15323] sysfs_do_create_link_sd+0xc0/0x110 [ 636.619113][T15323] device_add_class_symlinks+0x1cf/0x240 [ 636.624823][T15323] device_add+0x4f9/0xc40 [ 636.629232][T15323] wiphy_register+0x1f24/0x2c70 [ 636.634188][T15323] ? cfg80211_event_work+0x40/0x40 [ 636.639375][T15323] ? minstrel_ht_alloc+0x88a/0x990 [ 636.644580][T15323] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 636.650733][T15323] ieee80211_register_hw+0x2f3d/0x3cb0 [ 636.656276][T15323] ? ieee80211_register_hw+0xf51/0x3cb0 [ 636.661905][T15323] ? ieee80211_tasklet_handler+0x20/0x20 [ 636.667623][T15323] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 636.673625][T15323] ? __debug_object_init+0xec/0x450 [ 636.678906][T15323] ? __asan_memset+0x22/0x40 [ 636.683638][T15323] ? __hrtimer_init+0x189/0x270 [ 636.688535][T15323] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 636.694325][T15323] ? mac80211_hwsim_free+0x220/0x220 [ 636.699667][T15323] ? rcu_is_watching+0x15/0xb0 [ 636.704478][T15323] ? kstrndup+0xbd/0x140 [ 636.708780][T15323] hwsim_new_radio_nl+0xdad/0x1a70 [ 636.713952][T15323] ? __nla_validate+0x50/0x50 [ 636.718685][T15323] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 636.725075][T15323] ? __nla_parse+0x40/0x50 [ 636.729661][T15323] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 636.736041][T15323] genl_family_rcv_msg_doit+0x21a/0x310 [ 636.741735][T15323] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 636.747669][T15323] ? bpf_lsm_capable+0x9/0x10 [ 636.752464][T15323] ? security_capable+0x89/0xb0 [ 636.757368][T15323] genl_rcv_msg+0x611/0x7a0 [ 636.761915][T15323] ? genl_bind+0x360/0x360 [ 636.766362][T15323] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 636.772727][T15323] ? perf_trace_preemptirq_template+0xac/0x330 [ 636.778921][T15323] ? rcu_read_unlock_special+0xf7/0x4d0 [ 636.784516][T15323] netlink_rcv_skb+0x235/0x4c0 [ 636.789316][T15323] ? genl_bind+0x360/0x360 [ 636.793767][T15323] ? netlink_ack+0x1160/0x1160 [ 636.798573][T15323] ? __lock_acquire+0x7eb0/0x7eb0 [ 636.803659][T15323] ? down_read+0x1ac/0x2e0 [ 636.808107][T15323] genl_rcv+0x28/0x40 [ 636.812126][T15323] netlink_unicast+0x856/0x9e0 [ 636.816971][T15323] netlink_sendmsg+0x8d0/0xbf0 [ 636.821796][T15323] ? netlink_getsockopt+0x590/0x590 [ 636.827031][T15323] ? apparmor_socket_sendmsg+0x8e/0x330 [ 636.832625][T15323] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 636.837948][T15323] ? security_socket_sendmsg+0x80/0xa0 [ 636.843456][T15323] ? netlink_getsockopt+0x590/0x590 [ 636.848693][T15323] ____sys_sendmsg+0x61b/0x980 [ 636.853519][T15323] ? __asan_memset+0x22/0x40 [ 636.858170][T15323] ? __sys_sendmsg_sock+0x30/0x30 [ 636.863262][T15323] ? __import_iovec+0x5f2/0x850 [ 636.868180][T15323] ? import_iovec+0x73/0xa0 [ 636.872741][T15323] ___sys_sendmsg+0x2a6/0x360 [ 636.877469][T15323] ? __sys_sendmsg+0x2b0/0x2b0 [ 636.882333][T15323] __se_sys_sendmsg+0x1d0/0x2c0 [ 636.887375][T15323] ? __x64_sys_sendmsg+0x80/0x80 [ 636.892364][T15323] ? lockdep_hardirqs_on+0x98/0x150 [ 636.897601][T15323] do_syscall_64+0x55/0xb0 [ 636.902055][T15323] ? clear_bhb_loop+0x40/0x90 [ 636.906770][T15323] ? clear_bhb_loop+0x40/0x90 [ 636.911535][T15323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.917479][T15323] RIP: 0033:0x7f8d0b59fb19 [ 636.921929][T15323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.941576][T15323] RSP: 002b:00007f8d0c396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.950032][T15323] RAX: ffffffffffffffda RBX: 00007f8d0b825fa0 RCX: 00007f8d0b59fb19 [ 636.958298][T15323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 636.966306][T15323] RBP: 00007f8d0b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 636.974412][T15323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.982428][T15323] R13: 00007f8d0b826038 R14: 00007f8d0b825fa0 R15: 00007ffc0861fec8 [ 636.990493][T15323] [ 637.096151][T15335] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3052'. [ 637.319363][T15331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 637.624587][T15352] netlink: 'syz.0.3056': attribute type 10 has an invalid length. [ 637.640633][T15352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3056'. [ 637.979256][T15369] FAULT_INJECTION: forcing a failure. [ 637.979256][T15369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.001356][T15369] CPU: 0 PID: 15369 Comm: syz.2.3062 Not tainted syzkaller #0 [ 638.008895][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 638.019462][T15369] Call Trace: [ 638.022794][T15369] [ 638.025801][T15369] dump_stack_lvl+0x18c/0x250 [ 638.030553][T15369] ? show_regs_print_info+0x20/0x20 [ 638.035819][T15369] ? load_image+0x420/0x420 [ 638.040386][T15369] ? __might_fault+0xaa/0x120 [ 638.045130][T15369] ? __lock_acquire+0x7eb0/0x7eb0 [ 638.050232][T15369] ? __virt_addr_valid+0x10c/0x380 [ 638.055476][T15369] should_fail_ex+0x394/0x4c0 [ 638.060237][T15369] _copy_from_user+0x2f/0xe0 [ 638.064879][T15369] vmemdup_user+0xac/0x1e0 [ 638.069616][T15369] map_lookup_elem+0x28a/0x7f0 [ 638.074468][T15369] ? __might_fault+0xaa/0x120 [ 638.079223][T15369] ? bpf_lsm_bpf+0x9/0x10 [ 638.083622][T15369] __sys_bpf+0x438/0x890 [ 638.087939][T15369] ? bpf_link_show_fdinfo+0x560/0x560 [ 638.093572][T15369] __x64_sys_bpf+0x7c/0x90 [ 638.098056][T15369] do_syscall_64+0x55/0xb0 [ 638.102529][T15369] ? clear_bhb_loop+0x40/0x90 [ 638.107364][T15369] ? clear_bhb_loop+0x40/0x90 [ 638.112340][T15369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.118295][T15369] RIP: 0033:0x7f407139fb19 [ 638.123033][T15369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.142698][T15369] RSP: 002b:00007f406f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.151265][T15369] RAX: ffffffffffffffda RBX: 00007f4071625fa0 RCX: 00007f407139fb19 [ 638.159378][T15369] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000001 [ 638.167407][T15369] RBP: 00007f406f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 638.175426][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.183447][T15369] R13: 00007f4071626038 R14: 00007f4071625fa0 R15: 00007ffdc00fc858 [ 638.191487][T15369] [ 638.224157][T15373] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3063'. [ 638.493357][T15372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.218919][T15403] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3074'. [ 639.247228][T15401] netlink: 203100 bytes leftover after parsing attributes in process `syz.3.3073'. [ 639.316441][T15401] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 639.344604][T15401] CPU: 0 PID: 15401 Comm: syz.3.3073 Not tainted syzkaller #0 [ 639.352171][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 639.362303][T15401] Call Trace: [ 639.365637][T15401] [ 639.368619][T15401] dump_stack_lvl+0x18c/0x250 [ 639.373378][T15401] ? show_regs_print_info+0x20/0x20 [ 639.379029][T15401] ? load_image+0x420/0x420 [ 639.383620][T15401] sysfs_warn_dup+0x8e/0xa0 [ 639.388192][T15401] sysfs_do_create_link_sd+0xc0/0x110 [ 639.393681][T15401] device_add_class_symlinks+0x1cf/0x240 [ 639.399399][T15401] device_add+0x4f9/0xc40 [ 639.403814][T15401] wiphy_register+0x1f24/0x2c70 [ 639.408738][T15401] ? cfg80211_event_work+0x40/0x40 [ 639.413903][T15401] ? minstrel_ht_alloc+0x88a/0x990 [ 639.419086][T15401] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 639.425220][T15401] ieee80211_register_hw+0x2f3d/0x3cb0 [ 639.430829][T15401] ? ieee80211_register_hw+0xf51/0x3cb0 [ 639.436455][T15401] ? ieee80211_tasklet_handler+0x20/0x20 [ 639.442260][T15401] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 639.448214][T15401] ? __debug_object_init+0xec/0x450 [ 639.453464][T15401] ? __asan_memset+0x22/0x40 [ 639.458104][T15401] ? __hrtimer_init+0x189/0x270 [ 639.463035][T15401] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 639.468913][T15401] ? mac80211_hwsim_free+0x220/0x220 [ 639.474240][T15401] ? rcu_is_watching+0x15/0xb0 [ 639.479048][T15401] ? kstrndup+0xbd/0x140 [ 639.483346][T15401] hwsim_new_radio_nl+0xdad/0x1a70 [ 639.488501][T15401] ? __nla_validate+0x50/0x50 [ 639.493235][T15401] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 639.499642][T15401] ? __nla_parse+0x40/0x50 [ 639.504126][T15401] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 639.510511][T15401] genl_family_rcv_msg_doit+0x21a/0x310 [ 639.516114][T15401] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 639.522055][T15401] ? bpf_lsm_capable+0x9/0x10 [ 639.526879][T15401] ? security_capable+0x89/0xb0 [ 639.531776][T15401] genl_rcv_msg+0x611/0x7a0 [ 639.536322][T15401] ? genl_bind+0x360/0x360 [ 639.540769][T15401] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 639.547136][T15401] ? perf_trace_lock+0xfc/0x3b0 [ 639.552107][T15401] ? __kasan_kmalloc_large+0x8b/0xa0 [ 639.557447][T15401] netlink_rcv_skb+0x235/0x4c0 [ 639.562259][T15401] ? genl_bind+0x360/0x360 [ 639.566711][T15401] ? netlink_ack+0x1160/0x1160 [ 639.571538][T15401] ? __lock_acquire+0x7eb0/0x7eb0 [ 639.576692][T15401] ? down_read+0x1ac/0x2e0 [ 639.581173][T15401] genl_rcv+0x28/0x40 [ 639.585210][T15401] netlink_unicast+0x856/0x9e0 [ 639.590032][T15401] netlink_sendmsg+0x8d0/0xbf0 [ 639.594854][T15401] ? netlink_getsockopt+0x590/0x590 [ 639.600091][T15401] ? apparmor_socket_sendmsg+0x8e/0x330 [ 639.605857][T15401] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 639.611180][T15401] ? security_socket_sendmsg+0x80/0xa0 [ 639.616853][T15401] ? netlink_getsockopt+0x590/0x590 [ 639.622090][T15401] ____sys_sendmsg+0x61b/0x980 [ 639.626900][T15401] ? __asan_memset+0x22/0x40 [ 639.631563][T15401] ? __sys_sendmsg_sock+0x30/0x30 [ 639.636623][T15401] ? __import_iovec+0x5f2/0x850 [ 639.641522][T15401] ? import_iovec+0x73/0xa0 [ 639.646064][T15401] ___sys_sendmsg+0x2a6/0x360 [ 639.650802][T15401] ? __sys_sendmsg+0x2b0/0x2b0 [ 639.655648][T15401] __se_sys_sendmsg+0x1d0/0x2c0 [ 639.660539][T15401] ? __x64_sys_sendmsg+0x80/0x80 [ 639.665528][T15401] ? lockdep_hardirqs_on+0x98/0x150 [ 639.670852][T15401] do_syscall_64+0x55/0xb0 [ 639.675307][T15401] ? clear_bhb_loop+0x40/0x90 [ 639.680024][T15401] ? clear_bhb_loop+0x40/0x90 [ 639.684749][T15401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.690689][T15401] RIP: 0033:0x7f8d0b59fb19 [ 639.695241][T15401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.715069][T15401] RSP: 002b:00007f8d0c396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.723541][T15401] RAX: ffffffffffffffda RBX: 00007f8d0b825fa0 RCX: 00007f8d0b59fb19 [ 639.731654][T15401] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 639.739682][T15401] RBP: 00007f8d0b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 639.747704][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.755706][T15401] R13: 00007f8d0b826038 R14: 00007f8d0b825fa0 R15: 00007ffc0861fec8 [ 639.763731][T15401] [ 639.822131][T15407] netlink: 'syz.0.3076': attribute type 21 has an invalid length. [ 640.083951][T15408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.429009][T15418] netlink: 'syz.0.3081': attribute type 10 has an invalid length. [ 640.477327][T15418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3081'. [ 641.088122][T15433] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3085'. [ 643.004919][T15444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.882750][T15460] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3092'. [ 643.909059][T15460] openvswitch: netlink: IP tunnel dst address not specified [ 644.222438][T15469] netlink: 'syz.3.3095': attribute type 10 has an invalid length. [ 644.240886][T15469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3095'. [ 644.292092][T15474] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3097'. [ 644.672893][T15478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.428415][T15497] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.3105'. [ 645.505145][T15497] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 645.516707][T15497] CPU: 0 PID: 15497 Comm: syz.2.3105 Not tainted syzkaller #0 [ 645.524263][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 645.534384][T15497] Call Trace: [ 645.537751][T15497] [ 645.540773][T15497] dump_stack_lvl+0x18c/0x250 [ 645.545549][T15497] ? show_regs_print_info+0x20/0x20 [ 645.550825][T15497] ? load_image+0x420/0x420 [ 645.555421][T15497] sysfs_warn_dup+0x8e/0xa0 [ 645.560030][T15497] sysfs_do_create_link_sd+0xc0/0x110 [ 645.565769][T15497] device_add_class_symlinks+0x1cf/0x240 [ 645.571486][T15497] device_add+0x4f9/0xc40 [ 645.575887][T15497] wiphy_register+0x1f24/0x2c70 [ 645.580837][T15497] ? cfg80211_event_work+0x40/0x40 [ 645.586195][T15497] ? minstrel_ht_alloc+0x88a/0x990 [ 645.591360][T15497] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 645.597487][T15497] ieee80211_register_hw+0x2f3d/0x3cb0 [ 645.603005][T15497] ? ieee80211_register_hw+0xf51/0x3cb0 [ 645.608607][T15497] ? ieee80211_tasklet_handler+0x20/0x20 [ 645.614281][T15497] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 645.620327][T15497] ? __debug_object_init+0xec/0x450 [ 645.625663][T15497] ? __asan_memset+0x22/0x40 [ 645.630297][T15497] ? __hrtimer_init+0x189/0x270 [ 645.635192][T15497] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 645.640972][T15497] ? mac80211_hwsim_free+0x220/0x220 [ 645.646293][T15497] ? rcu_is_watching+0x15/0xb0 [ 645.651123][T15497] ? kstrndup+0xbd/0x140 [ 645.655426][T15497] hwsim_new_radio_nl+0xdad/0x1a70 [ 645.660603][T15497] ? __nla_validate+0x50/0x50 [ 645.665438][T15497] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 645.671818][T15497] ? __nla_parse+0x40/0x50 [ 645.676275][T15497] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 645.682663][T15497] genl_family_rcv_msg_doit+0x21a/0x310 [ 645.688263][T15497] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 645.694209][T15497] ? bpf_lsm_capable+0x9/0x10 [ 645.698919][T15497] ? security_capable+0x89/0xb0 [ 645.703811][T15497] genl_rcv_msg+0x611/0x7a0 [ 645.708360][T15497] ? genl_bind+0x360/0x360 [ 645.712832][T15497] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 645.719227][T15497] netlink_rcv_skb+0x235/0x4c0 [ 645.724042][T15497] ? genl_bind+0x360/0x360 [ 645.728491][T15497] ? netlink_ack+0x1160/0x1160 [ 645.733292][T15497] ? __lock_acquire+0x7eb0/0x7eb0 [ 645.738537][T15497] ? down_read+0x1ac/0x2e0 [ 645.742992][T15497] genl_rcv+0x28/0x40 [ 645.747011][T15497] netlink_unicast+0x856/0x9e0 [ 645.751835][T15497] netlink_sendmsg+0x8d0/0xbf0 [ 645.756643][T15497] ? netlink_getsockopt+0x590/0x590 [ 645.761900][T15497] ? apparmor_socket_sendmsg+0x8e/0x330 [ 645.767493][T15497] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 645.772998][T15497] ? security_socket_sendmsg+0x80/0xa0 [ 645.778502][T15497] ? netlink_getsockopt+0x590/0x590 [ 645.783742][T15497] ____sys_sendmsg+0x61b/0x980 [ 645.788595][T15497] ? __asan_memset+0x22/0x40 [ 645.793237][T15497] ? __sys_sendmsg_sock+0x30/0x30 [ 645.798303][T15497] ? __import_iovec+0x5f2/0x850 [ 645.803214][T15497] ? import_iovec+0x73/0xa0 [ 645.807833][T15497] ___sys_sendmsg+0x2a6/0x360 [ 645.812557][T15497] ? __sys_sendmsg+0x2b0/0x2b0 [ 645.817433][T15497] __se_sys_sendmsg+0x1d0/0x2c0 [ 645.822327][T15497] ? __x64_sys_sendmsg+0x80/0x80 [ 645.827326][T15497] ? lockdep_hardirqs_on+0x98/0x150 [ 645.832569][T15497] do_syscall_64+0x55/0xb0 [ 645.837048][T15497] ? clear_bhb_loop+0x40/0x90 [ 645.841767][T15497] ? clear_bhb_loop+0x40/0x90 [ 645.846487][T15497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.852420][T15497] RIP: 0033:0x7f407139fb19 [ 645.856876][T15497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.876803][T15497] RSP: 002b:00007f406f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.885259][T15497] RAX: ffffffffffffffda RBX: 00007f4071625fa0 RCX: 00007f407139fb19 [ 645.893383][T15497] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 645.901395][T15497] RBP: 00007f4071437b70 R08: 0000000000000000 R09: 0000000000000000 [ 645.909410][T15497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.917429][T15497] R13: 00007f4071626038 R14: 00007f4071625fa0 R15: 00007ffdc00fc858 [ 645.925456][T15497] [ 645.975266][T15508] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3109'. [ 646.490542][T15515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 646.677441][T15529] netlink: 'syz.1.3118': attribute type 10 has an invalid length. [ 646.688428][T15529] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.3118'. [ 646.699339][T15524] netlink: 203100 bytes leftover after parsing attributes in process `syz.3.3117'. [ 646.749628][T15524] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 646.762629][T15524] CPU: 0 PID: 15524 Comm: syz.3.3117 Not tainted syzkaller #0 [ 646.770198][T15524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 646.780571][T15524] Call Trace: [ 646.783903][T15524] [ 646.786970][T15524] dump_stack_lvl+0x18c/0x250 [ 646.791726][T15524] ? show_regs_print_info+0x20/0x20 [ 646.797083][T15524] ? load_image+0x420/0x420 [ 646.801691][T15524] sysfs_warn_dup+0x8e/0xa0 [ 646.806269][T15524] sysfs_do_create_link_sd+0xc0/0x110 [ 646.811718][T15524] device_add_class_symlinks+0x1cf/0x240 [ 646.817428][T15524] device_add+0x4f9/0xc40 [ 646.821824][T15524] wiphy_register+0x1f24/0x2c70 [ 646.826778][T15524] ? cfg80211_event_work+0x40/0x40 [ 646.831955][T15524] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.838205][T15524] ieee80211_register_hw+0x2f3d/0x3cb0 [ 646.843752][T15524] ? ieee80211_register_hw+0xf51/0x3cb0 [ 646.849376][T15524] ? ieee80211_tasklet_handler+0x20/0x20 [ 646.855076][T15524] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 646.861047][T15524] ? __debug_object_init+0xec/0x450 [ 646.866358][T15524] ? __asan_memset+0x22/0x40 [ 646.871032][T15524] ? __hrtimer_init+0x189/0x270 [ 646.875990][T15524] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 646.881888][T15524] ? mac80211_hwsim_free+0x220/0x220 [ 646.887237][T15524] ? rcu_is_watching+0x15/0xb0 [ 646.892066][T15524] ? kstrndup+0xbd/0x140 [ 646.896418][T15524] hwsim_new_radio_nl+0xdad/0x1a70 [ 646.901601][T15524] ? __nla_validate+0x50/0x50 [ 646.906398][T15524] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 646.912845][T15524] ? __nla_parse+0x40/0x50 [ 646.917695][T15524] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 646.924131][T15524] genl_family_rcv_msg_doit+0x21a/0x310 [ 646.929763][T15524] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 646.935744][T15524] ? bpf_lsm_capable+0x9/0x10 [ 646.940484][T15524] ? security_capable+0x89/0xb0 [ 646.945407][T15524] genl_rcv_msg+0x611/0x7a0 [ 646.949996][T15524] ? genl_bind+0x360/0x360 [ 646.954475][T15524] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 646.960875][T15524] ? ref_tracker_free+0x686/0x830 [ 646.965973][T15524] ? __kasan_kmalloc_large+0x8b/0xa0 [ 646.971349][T15524] netlink_rcv_skb+0x235/0x4c0 [ 646.976201][T15524] ? genl_bind+0x360/0x360 [ 646.980682][T15524] ? netlink_ack+0x1160/0x1160 [ 646.985526][T15524] ? __lock_acquire+0x7eb0/0x7eb0 [ 646.990632][T15524] ? down_read+0x1ac/0x2e0 [ 646.995113][T15524] genl_rcv+0x28/0x40 [ 646.999166][T15524] netlink_unicast+0x856/0x9e0 [ 647.004120][T15524] netlink_sendmsg+0x8d0/0xbf0 [ 647.009077][T15524] ? netlink_getsockopt+0x590/0x590 [ 647.014354][T15524] ? apparmor_socket_sendmsg+0x8e/0x330 [ 647.020070][T15524] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 647.025431][T15524] ? security_socket_sendmsg+0x80/0xa0 [ 647.030965][T15524] ? netlink_getsockopt+0x590/0x590 [ 647.036252][T15524] ____sys_sendmsg+0x61b/0x980 [ 647.041094][T15524] ? __asan_memset+0x22/0x40 [ 647.045774][T15524] ? __sys_sendmsg_sock+0x30/0x30 [ 647.050865][T15524] ? __import_iovec+0x5f2/0x850 [ 647.055799][T15524] ? import_iovec+0x73/0xa0 [ 647.060374][T15524] ___sys_sendmsg+0x2a6/0x360 [ 647.065119][T15524] ? __sys_sendmsg+0x2b0/0x2b0 [ 647.070008][T15524] __se_sys_sendmsg+0x1d0/0x2c0 [ 647.074934][T15524] ? __x64_sys_sendmsg+0x80/0x80 [ 647.080016][T15524] do_syscall_64+0x55/0xb0 [ 647.084507][T15524] ? clear_bhb_loop+0x40/0x90 [ 647.089281][T15524] ? clear_bhb_loop+0x40/0x90 [ 647.094030][T15524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.099995][T15524] RIP: 0033:0x7f8d0b59fb19 [ 647.104471][T15524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.124166][T15524] RSP: 002b:00007f8d0c396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.132688][T15524] RAX: ffffffffffffffda RBX: 00007f8d0b825fa0 RCX: 00007f8d0b59fb19 [ 647.140814][T15524] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 647.148937][T15524] RBP: 00007f8d0b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 647.157065][T15524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.165115][T15524] R13: 00007f8d0b826038 R14: 00007f8d0b825fa0 R15: 00007ffc0861fec8 [ 647.173221][T15524] [ 647.416704][T15543] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3122'. [ 647.492410][T15545] netlink: 'syz.2.3120': attribute type 4 has an invalid length. [ 647.500271][T15545] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3120'. [ 647.573648][T15545] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 647.649923][T15551] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3124'. [ 647.952011][T15555] netlink: 'syz.1.3126': attribute type 10 has an invalid length. [ 648.786130][T15555] team0 (unregistering): Port device team_slave_0 removed [ 648.867694][T15555] team0 (unregistering): Port device team_slave_1 removed [ 649.162097][T15577] __nla_validate_parse: 1 callbacks suppressed [ 649.162115][T15577] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3133'. [ 649.795160][T15593] netlink: 'syz.3.3142': attribute type 10 has an invalid length. [ 650.306414][T15599] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3144'. [ 650.350540][T15599] openvswitch: netlink: Message has 20476 unknown bytes. [ 650.607077][T15593] team0 (unregistering): Port device team_slave_0 removed [ 650.626493][T15593] team0 (unregistering): Port device team_slave_1 removed [ 650.639513][T15607] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3147'. [ 651.097372][T15619] netlink: 'syz.3.3151': attribute type 10 has an invalid length. [ 651.106512][T15619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3151'. [ 651.636036][T15630] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3156'. [ 651.774748][T15635] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3166'. [ 651.891852][T15636] netlink: 'syz.2.3158': attribute type 10 has an invalid length. [ 652.264226][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 652.912952][T15636] team0 (unregistering): Port device team_slave_0 removed [ 652.964800][T15636] team0 (unregistering): Port device team_slave_1 removed [ 652.986738][T15636] team0 (unregistering): Port device bond0 removed [ 653.017704][T15639] netlink: 'syz.0.3159': attribute type 10 has an invalid length. [ 653.033971][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.046770][T15639] bridge_slave_1: left allmulticast mode [ 653.055277][T15639] bridge_slave_1: left promiscuous mode [ 653.061790][T15639] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.087185][T15639] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 653.115276][T15648] netlink: 'syz.3.3161': attribute type 10 has an invalid length. [ 653.130637][T15648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3161'. [ 653.562007][T15663] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3169'. [ 654.668289][T15683] netlink: 'syz.3.3173': attribute type 10 has an invalid length. [ 655.549523][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.570907][T15683] bridge_slave_1: left allmulticast mode [ 655.576694][T15683] bridge_slave_1: left promiscuous mode [ 655.601548][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.646598][T15683] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 655.695424][T15687] netlink: 'syz.0.3175': attribute type 10 has an invalid length. [ 655.713028][T15687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3175'. [ 656.206014][T15699] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3179'. [ 657.331795][T15721] netlink: 'syz.1.3188': attribute type 10 has an invalid length. [ 657.340135][T15721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3188'. [ 657.428901][T15725] netlink: 'syz.3.3190': attribute type 10 has an invalid length. [ 657.508412][T15728] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3191'. [ 657.532634][T15731] FAULT_INJECTION: forcing a failure. [ 657.532634][T15731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.555871][T15731] CPU: 0 PID: 15731 Comm: syz.1.3192 Not tainted syzkaller #0 [ 657.563426][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 657.573536][T15731] Call Trace: [ 657.576861][T15731] [ 657.579835][T15731] dump_stack_lvl+0x18c/0x250 [ 657.584581][T15731] ? show_regs_print_info+0x20/0x20 [ 657.589838][T15731] ? load_image+0x420/0x420 [ 657.594402][T15731] ? __might_fault+0xaa/0x120 [ 657.599150][T15731] ? __lock_acquire+0x7eb0/0x7eb0 [ 657.604250][T15731] should_fail_ex+0x394/0x4c0 [ 657.609000][T15731] _copy_from_user+0x2f/0xe0 [ 657.613629][T15731] __sys_bpf+0x23e/0x890 [ 657.617911][T15731] ? bpf_link_show_fdinfo+0x560/0x560 [ 657.623337][T15731] ? lock_chain_count+0x20/0x20 [ 657.628236][T15731] __x64_sys_bpf+0x7c/0x90 [ 657.632691][T15731] do_syscall_64+0x55/0xb0 [ 657.637231][T15731] ? clear_bhb_loop+0x40/0x90 [ 657.641950][T15731] ? clear_bhb_loop+0x40/0x90 [ 657.646672][T15731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.652611][T15731] RIP: 0033:0x7f31ddd9fb19 [ 657.657060][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.676972][T15731] RSP: 002b:00007f31ded59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.685552][T15731] RAX: ffffffffffffffda RBX: 00007f31de025fa0 RCX: 00007f31ddd9fb19 [ 657.693561][T15731] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 657.701573][T15731] RBP: 00007f31ded59090 R08: 0000000000000000 R09: 0000000000000000 [ 657.709656][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.717774][T15731] R13: 00007f31de026038 R14: 00007f31de025fa0 R15: 00007ffe60d7b968 [ 657.725797][T15731] [ 658.168994][T15740] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.3196'. [ 658.246007][T15740] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 658.330954][T15740] CPU: 0 PID: 15740 Comm: syz.0.3196 Not tainted syzkaller #0 [ 658.338522][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 658.348629][T15740] Call Trace: [ 658.351961][T15740] [ 658.354946][T15740] dump_stack_lvl+0x18c/0x250 [ 658.359701][T15740] ? show_regs_print_info+0x20/0x20 [ 658.364976][T15740] ? load_image+0x420/0x420 [ 658.369562][T15740] sysfs_warn_dup+0x8e/0xa0 [ 658.374144][T15740] sysfs_do_create_link_sd+0xc0/0x110 [ 658.379583][T15740] device_add_class_symlinks+0x1cf/0x240 [ 658.385294][T15740] device_add+0x4f9/0xc40 [ 658.389990][T15740] wiphy_register+0x1f24/0x2c70 [ 658.394957][T15740] ? cfg80211_event_work+0x40/0x40 [ 658.400309][T15740] ? minstrel_ht_alloc+0x88a/0x990 [ 658.405619][T15740] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 658.411855][T15740] ieee80211_register_hw+0x2f3d/0x3cb0 [ 658.417402][T15740] ? ieee80211_register_hw+0xf51/0x3cb0 [ 658.423067][T15740] ? ieee80211_tasklet_handler+0x20/0x20 [ 658.428769][T15740] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 658.434737][T15740] ? __debug_object_init+0xec/0x450 [ 658.439998][T15740] ? __asan_memset+0x22/0x40 [ 658.444701][T15740] ? __hrtimer_init+0x189/0x270 [ 658.449623][T15740] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 658.455507][T15740] ? mac80211_hwsim_free+0x220/0x220 [ 658.460860][T15740] ? rcu_is_watching+0x15/0xb0 [ 658.465714][T15740] ? kstrndup+0xbd/0x140 [ 658.470033][T15740] hwsim_new_radio_nl+0xdad/0x1a70 [ 658.475219][T15740] ? __nla_validate+0x50/0x50 [ 658.479982][T15740] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 658.486402][T15740] ? __nla_parse+0x40/0x50 [ 658.490976][T15740] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 658.497656][T15740] genl_family_rcv_msg_doit+0x21a/0x310 [ 658.503287][T15740] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 658.509267][T15740] ? bpf_lsm_capable+0x9/0x10 [ 658.514004][T15740] ? security_capable+0x89/0xb0 [ 658.518917][T15740] genl_rcv_msg+0x611/0x7a0 [ 658.523495][T15740] ? genl_bind+0x360/0x360 [ 658.527995][T15740] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 658.534388][T15740] ? ref_tracker_free+0x686/0x830 [ 658.539492][T15740] ? __kasan_kmalloc_large+0x8b/0xa0 [ 658.544889][T15740] netlink_rcv_skb+0x235/0x4c0 [ 658.549713][T15740] ? genl_bind+0x360/0x360 [ 658.554188][T15740] ? netlink_ack+0x1160/0x1160 [ 658.559023][T15740] ? __lock_acquire+0x7eb0/0x7eb0 [ 658.564214][T15740] ? down_read+0x1ac/0x2e0 [ 658.568693][T15740] genl_rcv+0x28/0x40 [ 658.572732][T15740] netlink_unicast+0x856/0x9e0 [ 658.577594][T15740] netlink_sendmsg+0x8d0/0xbf0 [ 658.582436][T15740] ? netlink_getsockopt+0x590/0x590 [ 658.587717][T15740] ? apparmor_socket_sendmsg+0x8e/0x330 [ 658.593446][T15740] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 658.598802][T15740] ? security_socket_sendmsg+0x80/0xa0 [ 658.604337][T15740] ? netlink_getsockopt+0x590/0x590 [ 658.609601][T15740] ____sys_sendmsg+0x61b/0x980 [ 658.614458][T15740] ? __asan_memset+0x22/0x40 [ 658.619204][T15740] ? __sys_sendmsg_sock+0x30/0x30 [ 658.624290][T15740] ? __import_iovec+0x5f2/0x850 [ 658.629250][T15740] ? import_iovec+0x73/0xa0 [ 658.633943][T15740] ___sys_sendmsg+0x2a6/0x360 [ 658.638689][T15740] ? __sys_sendmsg+0x2b0/0x2b0 [ 658.643578][T15740] __se_sys_sendmsg+0x1d0/0x2c0 [ 658.648501][T15740] ? __x64_sys_sendmsg+0x80/0x80 [ 658.653518][T15740] ? lockdep_hardirqs_on+0x98/0x150 [ 658.658773][T15740] do_syscall_64+0x55/0xb0 [ 658.663253][T15740] ? clear_bhb_loop+0x40/0x90 [ 658.667995][T15740] ? clear_bhb_loop+0x40/0x90 [ 658.672739][T15740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 658.678695][T15740] RIP: 0033:0x7f5b11d9fb19 [ 658.683165][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.702861][T15740] RSP: 002b:00007f5b12c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.711354][T15740] RAX: ffffffffffffffda RBX: 00007f5b12026090 RCX: 00007f5b11d9fb19 [ 658.719649][T15740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 658.727690][T15740] RBP: 00007f5b11e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 658.735898][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.743933][T15740] R13: 00007f5b12026128 R14: 00007f5b12026090 R15: 00007ffd1c0403f8 [ 658.751990][T15740] [ 659.183166][T15761] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3201'. [ 659.845765][T15776] netlink: 'syz.1.3209': attribute type 21 has an invalid length. [ 659.946527][T15784] netlink: 'syz.1.3209': attribute type 21 has an invalid length. [ 660.506814][T15802] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3213'. [ 661.248024][T15811] FAULT_INJECTION: forcing a failure. [ 661.248024][T15811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.262777][T15811] CPU: 1 PID: 15811 Comm: syz.3.3217 Not tainted syzkaller #0 [ 661.270316][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 661.280461][T15811] Call Trace: [ 661.283788][T15811] [ 661.286765][T15811] dump_stack_lvl+0x18c/0x250 [ 661.291687][T15811] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.297919][T15811] ? show_regs_print_info+0x20/0x20 [ 661.303187][T15811] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.309454][T15811] should_fail_ex+0x394/0x4c0 [ 661.314236][T15811] _copy_to_user+0x2f/0xa0 [ 661.318705][T15811] simple_read_from_buffer+0xe7/0x150 [ 661.324260][T15811] proc_fail_nth_read+0x1e8/0x260 [ 661.329368][T15811] ? proc_fault_inject_write+0x360/0x360 [ 661.335071][T15811] ? fsnotify_perm+0x271/0x5e0 [ 661.339891][T15811] ? proc_fault_inject_write+0x360/0x360 [ 661.345594][T15811] vfs_read+0x298/0x990 [ 661.349853][T15811] ? kernel_read+0x1e0/0x1e0 [ 661.354504][T15811] ? __fget_files+0x28/0x460 [ 661.359195][T15811] ? __fget_files+0x3fc/0x460 [ 661.364125][T15811] ? __fdget_pos+0x2a3/0x330 [ 661.368771][T15811] ? ksys_read+0x74/0x260 [ 661.373175][T15811] ksys_read+0x151/0x260 [ 661.377513][T15811] ? vfs_write+0x9a0/0x9a0 [ 661.381996][T15811] ? lockdep_hardirqs_on+0x98/0x150 [ 661.387254][T15811] do_syscall_64+0x55/0xb0 [ 661.391729][T15811] ? clear_bhb_loop+0x40/0x90 [ 661.396462][T15811] ? clear_bhb_loop+0x40/0x90 [ 661.401204][T15811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.407158][T15811] RIP: 0033:0x7f8d0b56034e [ 661.411624][T15811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.431311][T15811] RSP: 002b:00007f8d0c395fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.439790][T15811] RAX: ffffffffffffffda RBX: 00007f8d0c3966c0 RCX: 00007f8d0b56034e [ 661.447824][T15811] RDX: 000000000000000f RSI: 00007f8d0c3960a0 RDI: 0000000000000008 [ 661.455878][T15811] RBP: 00007f8d0c396090 R08: 0000000000000000 R09: 0000000000000000 [ 661.463900][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.471919][T15811] R13: 00007f8d0b826038 R14: 00007f8d0b825fa0 R15: 00007ffc0861fec8 [ 661.479957][T15811] [ 661.780956][T15822] netlink: 'syz.0.3221': attribute type 9 has an invalid length. [ 661.840669][T15822] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3221'. [ 662.247225][T15833] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3224'. [ 662.405066][T15843] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3224'. [ 662.433128][T15843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.513003][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 662.561061][T15846] netlink: 'syz.0.3228': attribute type 10 has an invalid length. [ 662.569018][T15846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3228'. [ 662.783609][T15851] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3230'. [ 663.354108][T15860] netlink: 203100 bytes leftover after parsing attributes in process `syz.3.3232'. [ 663.436767][T15860] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 663.451069][T15860] CPU: 0 PID: 15860 Comm: syz.3.3232 Not tainted syzkaller #0 [ 663.458617][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 663.468736][T15860] Call Trace: [ 663.472069][T15860] [ 663.475505][T15860] dump_stack_lvl+0x18c/0x250 [ 663.480265][T15860] ? show_regs_print_info+0x20/0x20 [ 663.485554][T15860] ? load_image+0x420/0x420 [ 663.490250][T15860] sysfs_warn_dup+0x8e/0xa0 [ 663.494821][T15860] sysfs_do_create_link_sd+0xc0/0x110 [ 663.500281][T15860] device_add_class_symlinks+0x1cf/0x240 [ 663.506039][T15860] device_add+0x4f9/0xc40 [ 663.510449][T15860] wiphy_register+0x1f24/0x2c70 [ 663.515476][T15860] ? cfg80211_event_work+0x40/0x40 [ 663.520726][T15860] ? minstrel_ht_alloc+0x88a/0x990 [ 663.525914][T15860] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 663.532073][T15860] ieee80211_register_hw+0x2f3d/0x3cb0 [ 663.537616][T15860] ? ieee80211_register_hw+0xf51/0x3cb0 [ 663.543269][T15860] ? ieee80211_tasklet_handler+0x20/0x20 [ 663.548973][T15860] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 663.554951][T15860] ? __debug_object_init+0xec/0x450 [ 663.560222][T15860] ? __asan_memset+0x22/0x40 [ 663.564884][T15860] ? __hrtimer_init+0x189/0x270 [ 663.569804][T15860] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 663.575612][T15860] ? mac80211_hwsim_free+0x220/0x220 [ 663.581147][T15860] ? rcu_is_watching+0x15/0xb0 [ 663.585980][T15860] ? kstrndup+0xbd/0x140 [ 663.590387][T15860] hwsim_new_radio_nl+0xdad/0x1a70 [ 663.595563][T15860] ? __nla_validate+0x50/0x50 [ 663.600333][T15860] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 663.606739][T15860] ? __nla_parse+0x40/0x50 [ 663.611240][T15860] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 663.617648][T15860] genl_family_rcv_msg_doit+0x21a/0x310 [ 663.623276][T15860] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 663.629281][T15860] ? bpf_lsm_capable+0x9/0x10 [ 663.634019][T15860] ? security_capable+0x89/0xb0 [ 663.639029][T15860] genl_rcv_msg+0x611/0x7a0 [ 663.643601][T15860] ? genl_bind+0x360/0x360 [ 663.648077][T15860] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 663.654453][T15860] ? ref_tracker_free+0x686/0x830 [ 663.659528][T15860] netlink_rcv_skb+0x235/0x4c0 [ 663.664356][T15860] ? genl_bind+0x360/0x360 [ 663.668835][T15860] ? netlink_ack+0x1160/0x1160 [ 663.673642][T15860] ? __lock_acquire+0x7eb0/0x7eb0 [ 663.678730][T15860] ? down_read+0x1ac/0x2e0 [ 663.683180][T15860] genl_rcv+0x28/0x40 [ 663.687196][T15860] netlink_unicast+0x856/0x9e0 [ 663.692035][T15860] netlink_sendmsg+0x8d0/0xbf0 [ 663.696846][T15860] ? netlink_getsockopt+0x590/0x590 [ 663.702109][T15860] ? apparmor_socket_sendmsg+0x8e/0x330 [ 663.707703][T15860] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 663.713051][T15860] ? security_socket_sendmsg+0x80/0xa0 [ 663.718546][T15860] ? netlink_getsockopt+0x590/0x590 [ 663.724036][T15860] ____sys_sendmsg+0x61b/0x980 [ 663.728849][T15860] ? __asan_memset+0x22/0x40 [ 663.733485][T15860] ? __sys_sendmsg_sock+0x30/0x30 [ 663.738545][T15860] ? __import_iovec+0x5f2/0x850 [ 663.743446][T15860] ? import_iovec+0x73/0xa0 [ 663.748180][T15860] ___sys_sendmsg+0x2a6/0x360 [ 663.752915][T15860] ? __sys_sendmsg+0x2b0/0x2b0 [ 663.757760][T15860] __se_sys_sendmsg+0x1d0/0x2c0 [ 663.762647][T15860] ? __x64_sys_sendmsg+0x80/0x80 [ 663.767657][T15860] ? lockdep_hardirqs_on+0x98/0x150 [ 663.772888][T15860] do_syscall_64+0x55/0xb0 [ 663.777338][T15860] ? clear_bhb_loop+0x40/0x90 [ 663.782143][T15860] ? clear_bhb_loop+0x40/0x90 [ 663.786870][T15860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.792799][T15860] RIP: 0033:0x7f8d0b59fb19 [ 663.797250][T15860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.816905][T15860] RSP: 002b:00007f8d0c396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.825450][T15860] RAX: ffffffffffffffda RBX: 00007f8d0b825fa0 RCX: 00007f8d0b59fb19 [ 663.833543][T15860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 663.841719][T15860] RBP: 00007f8d0b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 663.849746][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.857938][T15860] R13: 00007f8d0b826038 R14: 00007f8d0b825fa0 R15: 00007ffc0861fec8 [ 663.865973][T15860] [ 664.132886][T15872] netlink: 'syz.1.3236': attribute type 10 has an invalid length. [ 664.159174][T15872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3236'. [ 664.299127][T15874] netlink: 'syz.2.3237': attribute type 10 has an invalid length. [ 664.345308][T15874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3237'. [ 664.422714][T15876] netlink: 'syz.3.3238': attribute type 10 has an invalid length. [ 664.447546][T15876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3238'. [ 664.632706][T15886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3241'. [ 665.215157][T15894] syzkaller0: entered promiscuous mode [ 665.221059][T15894] syzkaller0: entered allmulticast mode [ 665.300111][T15902] netlink: 'syz.0.3248': attribute type 10 has an invalid length. [ 665.592798][T15909] netlink: 'syz.0.3250': attribute type 10 has an invalid length. [ 668.900112][T15933] __nla_validate_parse: 2 callbacks suppressed [ 668.900134][T15933] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3266'. [ 669.064834][T15939] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 669.082576][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3259'. [ 669.187108][T15940] netlink: 'syz.1.3260': attribute type 10 has an invalid length. [ 669.212095][T15940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3260'. [ 669.412179][T15951] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3265'. [ 669.447922][T15951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3265'. [ 669.500139][T15955] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3265'. [ 669.554408][T15960] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3265'. [ 669.846413][T15968] FAULT_INJECTION: forcing a failure. [ 669.846413][T15968] name failslab, interval 1, probability 0, space 0, times 0 [ 669.873347][T15968] CPU: 1 PID: 15968 Comm: syz.1.3272 Not tainted syzkaller #0 [ 669.880939][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 669.891060][T15968] Call Trace: [ 669.894390][T15968] [ 669.897371][T15968] dump_stack_lvl+0x18c/0x250 [ 669.902147][T15968] ? show_regs_print_info+0x20/0x20 [ 669.907499][T15968] ? load_image+0x420/0x420 [ 669.912059][T15968] ? __might_sleep+0xe0/0xe0 [ 669.916744][T15968] ? __lock_acquire+0x7eb0/0x7eb0 [ 669.921905][T15968] ? mark_lock+0x94/0x320 [ 669.926291][T15968] should_fail_ex+0x394/0x4c0 [ 669.931027][T15968] should_failslab+0x9/0x20 [ 669.935596][T15968] slab_pre_alloc_hook+0x59/0x300 [ 669.940772][T15968] ? __get_vm_area_node+0x125/0x370 [ 669.946035][T15968] __kmem_cache_alloc_node+0x53/0x260 [ 669.951642][T15968] ? __get_vm_area_node+0x125/0x370 [ 669.956906][T15968] kmalloc_node_trace+0x26/0xe0 [ 669.961826][T15968] __get_vm_area_node+0x125/0x370 [ 669.966924][T15968] __vmalloc_node_range+0x36f/0x1320 [ 669.972282][T15968] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 669.977890][T15968] ? mark_lock+0x94/0x320 [ 669.982290][T15968] ? __lock_acquire+0x1431/0x7eb0 [ 669.987387][T15968] ? aa_get_newest_label+0xfd/0x5c0 [ 669.992640][T15968] ? free_vm_area+0x50/0x50 [ 669.997214][T15968] ? end_current_label_crit_section+0x170/0x170 [ 670.003524][T15968] ? verify_lock_unused+0x140/0x140 [ 670.008772][T15968] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 670.014453][T15968] __vmalloc+0x7a/0x90 [ 670.018604][T15968] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 670.024215][T15968] bpf_prog_alloc_no_stats+0x46/0x460 [ 670.029647][T15968] bpf_prog_alloc+0x3d/0x1a0 [ 670.034286][T15968] bpf_prog_load+0x6b2/0x1610 [ 670.039022][T15968] ? map_freeze+0x420/0x420 [ 670.043667][T15968] ? __might_fault+0xaa/0x120 [ 670.048483][T15968] ? __lock_acquire+0x7eb0/0x7eb0 [ 670.053646][T15968] ? file_end_write+0x159/0x250 [ 670.058552][T15968] ? __might_fault+0xaa/0x120 [ 670.063279][T15968] ? __might_fault+0xc6/0x120 [ 670.067995][T15968] ? __might_fault+0xaa/0x120 [ 670.072712][T15968] ? bpf_lsm_bpf+0x9/0x10 [ 670.077094][T15968] ? security_bpf+0x7e/0xa0 [ 670.081645][T15968] __sys_bpf+0x5ba/0x890 [ 670.086013][T15968] ? bpf_link_show_fdinfo+0x560/0x560 [ 670.091544][T15968] ? lock_chain_count+0x20/0x20 [ 670.096531][T15968] __x64_sys_bpf+0x7c/0x90 [ 670.100989][T15968] do_syscall_64+0x55/0xb0 [ 670.105460][T15968] ? clear_bhb_loop+0x40/0x90 [ 670.110187][T15968] ? clear_bhb_loop+0x40/0x90 [ 670.114916][T15968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.120869][T15968] RIP: 0033:0x7f31ddd9fb19 [ 670.125338][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.145084][T15968] RSP: 002b:00007f31ded59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.153543][T15968] RAX: ffffffffffffffda RBX: 00007f31de025fa0 RCX: 00007f31ddd9fb19 [ 670.161577][T15968] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 670.169640][T15968] RBP: 00007f31ded59090 R08: 0000000000000000 R09: 0000000000000000 [ 670.177671][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.185689][T15968] R13: 00007f31de026038 R14: 00007f31de025fa0 R15: 00007ffe60d7b968 [ 670.193744][T15968] [ 670.213078][T15968] syz.1.3272: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 670.234332][T15968] CPU: 0 PID: 15968 Comm: syz.1.3272 Not tainted syzkaller #0 [ 670.241885][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 670.252079][T15968] Call Trace: [ 670.255399][T15968] [ 670.258587][T15968] dump_stack_lvl+0x18c/0x250 [ 670.263431][T15968] ? show_regs_print_info+0x20/0x20 [ 670.268676][T15968] ? load_image+0x420/0x420 [ 670.273258][T15968] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 670.279759][T15968] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 670.286322][T15968] warn_alloc+0x246/0x340 [ 670.290706][T15968] ? __get_vm_area_node+0x125/0x370 [ 670.295962][T15968] ? zone_watermark_ok_safe+0x230/0x230 [ 670.301721][T15968] ? rcu_is_watching+0x15/0xb0 [ 670.306546][T15968] ? __get_vm_area_node+0x356/0x370 [ 670.311819][T15968] __vmalloc_node_range+0x394/0x1320 [ 670.317169][T15968] ? mark_lock+0x94/0x320 [ 670.321652][T15968] ? __lock_acquire+0x1431/0x7eb0 [ 670.326750][T15968] ? aa_get_newest_label+0xfd/0x5c0 [ 670.332002][T15968] ? free_vm_area+0x50/0x50 [ 670.336570][T15968] ? end_current_label_crit_section+0x170/0x170 [ 670.342900][T15968] ? verify_lock_unused+0x140/0x140 [ 670.348251][T15968] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 670.353851][T15968] __vmalloc+0x7a/0x90 [ 670.357979][T15968] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 670.363581][T15968] bpf_prog_alloc_no_stats+0x46/0x460 [ 670.369011][T15968] bpf_prog_alloc+0x3d/0x1a0 [ 670.373647][T15968] bpf_prog_load+0x6b2/0x1610 [ 670.378387][T15968] ? map_freeze+0x420/0x420 [ 670.382947][T15968] ? __might_fault+0xaa/0x120 [ 670.387676][T15968] ? __lock_acquire+0x7eb0/0x7eb0 [ 670.392757][T15968] ? file_end_write+0x159/0x250 [ 670.397659][T15968] ? __might_fault+0xaa/0x120 [ 670.402726][T15968] ? __might_fault+0xc6/0x120 [ 670.407447][T15968] ? __might_fault+0xaa/0x120 [ 670.412173][T15968] ? bpf_lsm_bpf+0x9/0x10 [ 670.416561][T15968] ? security_bpf+0x7e/0xa0 [ 670.421121][T15968] __sys_bpf+0x5ba/0x890 [ 670.425413][T15968] ? bpf_link_show_fdinfo+0x560/0x560 [ 670.430859][T15968] ? lock_chain_count+0x20/0x20 [ 670.435766][T15968] __x64_sys_bpf+0x7c/0x90 [ 670.440349][T15968] do_syscall_64+0x55/0xb0 [ 670.444912][T15968] ? clear_bhb_loop+0x40/0x90 [ 670.449645][T15968] ? clear_bhb_loop+0x40/0x90 [ 670.454378][T15968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.460322][T15968] RIP: 0033:0x7f31ddd9fb19 [ 670.464869][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.484529][T15968] RSP: 002b:00007f31ded59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.493003][T15968] RAX: ffffffffffffffda RBX: 00007f31de025fa0 RCX: 00007f31ddd9fb19 [ 670.501024][T15968] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 670.509130][T15968] RBP: 00007f31ded59090 R08: 0000000000000000 R09: 0000000000000000 [ 670.517151][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.525189][T15968] R13: 00007f31de026038 R14: 00007f31de025fa0 R15: 00007ffe60d7b968 [ 670.533313][T15968] [ 670.554415][T15968] Mem-Info: [ 670.557606][T15968] active_anon:5613 inactive_anon:0 isolated_anon:0 [ 670.557606][T15968] active_file:17574 inactive_file:40194 isolated_file:0 [ 670.557606][T15968] unevictable:768 dirty:214 writeback:0 [ 670.557606][T15968] slab_reclaimable:10919 slab_unreclaimable:97032 [ 670.557606][T15968] mapped:24837 shmem:1364 pagetables:539 [ 670.557606][T15968] sec_pagetables:0 bounce:0 [ 670.557606][T15968] kernel_misc_reclaimable:0 [ 670.557606][T15968] free:1338600 free_pcp:9099 free_cma:0 [ 670.628644][T15968] Node 0 active_anon:22452kB inactive_anon:0kB active_file:70296kB inactive_file:160576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99348kB dirty:856kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11424kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no [ 670.682627][T15968] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 670.716935][T15968] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.744643][T15968] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 670.760592][T15968] Node 0 DMA32 free:1439840kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:22416kB inactive_anon:0kB active_file:70296kB inactive_file:159744kB unevictable:1536kB writepending:856kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:13408kB local_pcp:7352kB free_cma:0kB [ 670.795655][T15968] lowmem_reserve[]: 0 0 0 0 0 [ 670.803537][T15968] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.831122][T15968] lowmem_reserve[]: 0 0 0 0 0 [ 670.836186][T15968] Node 1 Normal free:3898944kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23136kB local_pcp:11072kB free_cma:0kB [ 670.885411][T15968] lowmem_reserve[]: 0 0 0 0 0 [ 670.897703][T15968] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 670.950688][T15968] Node 0 DMA32: 428*4kB (UM) 1830*8kB (UME) 1054*16kB (UME) 501*32kB (UME) 554*64kB (UME) 491*128kB (UME) 262*256kB (UM) 135*512kB (UM) 57*1024kB (UM) 4*2048kB (UM) 266*4096kB (M) = 1439840kB [ 670.995338][T15968] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 671.008971][T15968] Node 1 Normal: 206*4kB (UME) 51*8kB (UME) 39*16kB (UME) 78*32kB (UME) 15*64kB (UME) 5*128kB (UE) 1*256kB (U) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 949*4096kB (M) = 3898944kB [ 671.027946][T15968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.041288][T15968] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 671.051206][T15968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.061281][T15968] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 671.100676][T15968] 59132 total pagecache pages [ 671.116168][T15968] 0 pages in swap cache [ 671.145843][T15968] Free swap = 124996kB [ 671.150107][T15968] Total swap = 124996kB [ 671.165085][T15968] 2097051 pages RAM [ 671.169008][T15968] 0 pages HighMem/MovableOnly [ 671.219778][T15968] 421729 pages reserved [ 671.243613][T15983] netlink: 'syz.3.3277': attribute type 10 has an invalid length. [ 671.243721][T15968] 0 pages cma reserved [ 671.271800][T15983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3277'. [ 671.317265][T15980] netlink: 'syz.0.3275': attribute type 10 has an invalid length. [ 671.370832][T15980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3275'. [ 671.860457][T15999] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.3282'. [ 671.902664][T15999] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 671.921136][T15999] CPU: 1 PID: 15999 Comm: syz.0.3282 Not tainted syzkaller #0 [ 671.928703][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 671.938818][T15999] Call Trace: [ 671.942136][T15999] [ 671.945101][T15999] dump_stack_lvl+0x18c/0x250 [ 671.949834][T15999] ? show_regs_print_info+0x20/0x20 [ 671.955078][T15999] ? load_image+0x420/0x420 [ 671.959632][T15999] sysfs_warn_dup+0x8e/0xa0 [ 671.964268][T15999] sysfs_do_create_link_sd+0xc0/0x110 [ 671.969680][T15999] device_add_class_symlinks+0x1cf/0x240 [ 671.975482][T15999] device_add+0x4f9/0xc40 [ 671.979850][T15999] wiphy_register+0x1f24/0x2c70 [ 671.984791][T15999] ? cfg80211_event_work+0x40/0x40 [ 671.990032][T15999] ? minstrel_ht_alloc+0x88a/0x990 [ 671.995192][T15999] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 672.001397][T15999] ieee80211_register_hw+0x2f3d/0x3cb0 [ 672.006923][T15999] ? ieee80211_register_hw+0xf51/0x3cb0 [ 672.012520][T15999] ? ieee80211_tasklet_handler+0x20/0x20 [ 672.018190][T15999] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 672.024125][T15999] ? __debug_object_init+0xec/0x450 [ 672.029368][T15999] ? __asan_memset+0x22/0x40 [ 672.034010][T15999] ? __hrtimer_init+0x189/0x270 [ 672.038925][T15999] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 672.044706][T15999] ? mac80211_hwsim_free+0x220/0x220 [ 672.050022][T15999] ? rcu_is_watching+0x15/0xb0 [ 672.055091][T15999] ? kstrndup+0xbd/0x140 [ 672.059378][T15999] hwsim_new_radio_nl+0xdad/0x1a70 [ 672.064537][T15999] ? __nla_validate+0x50/0x50 [ 672.069352][T15999] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 672.075838][T15999] ? __nla_parse+0x40/0x50 [ 672.080316][T15999] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 672.086736][T15999] genl_family_rcv_msg_doit+0x21a/0x310 [ 672.092349][T15999] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 672.098301][T15999] ? bpf_lsm_capable+0x9/0x10 [ 672.103106][T15999] ? security_capable+0x89/0xb0 [ 672.108002][T15999] genl_rcv_msg+0x611/0x7a0 [ 672.112578][T15999] ? genl_bind+0x360/0x360 [ 672.117034][T15999] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 672.123403][T15999] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 672.130052][T15999] ? ref_tracker_free+0x686/0x830 [ 672.135142][T15999] netlink_rcv_skb+0x235/0x4c0 [ 672.139970][T15999] ? genl_bind+0x360/0x360 [ 672.144441][T15999] ? netlink_ack+0x1160/0x1160 [ 672.149265][T15999] ? __lock_acquire+0x7eb0/0x7eb0 [ 672.154359][T15999] ? down_read+0x1ac/0x2e0 [ 672.158817][T15999] genl_rcv+0x28/0x40 [ 672.162833][T15999] netlink_unicast+0x856/0x9e0 [ 672.167659][T15999] netlink_sendmsg+0x8d0/0xbf0 [ 672.172556][T15999] ? netlink_getsockopt+0x590/0x590 [ 672.177794][T15999] ? apparmor_socket_sendmsg+0x8e/0x330 [ 672.183397][T15999] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 672.188753][T15999] ? security_socket_sendmsg+0x80/0xa0 [ 672.194252][T15999] ? netlink_getsockopt+0x590/0x590 [ 672.199494][T15999] ____sys_sendmsg+0x61b/0x980 [ 672.204397][T15999] ? __asan_memset+0x22/0x40 [ 672.209056][T15999] ? __sys_sendmsg_sock+0x30/0x30 [ 672.214139][T15999] ? __import_iovec+0x5f2/0x850 [ 672.219059][T15999] ? import_iovec+0x73/0xa0 [ 672.223636][T15999] ___sys_sendmsg+0x2a6/0x360 [ 672.228378][T15999] ? __sys_sendmsg+0x2b0/0x2b0 [ 672.233336][T15999] __se_sys_sendmsg+0x1d0/0x2c0 [ 672.238256][T15999] ? __x64_sys_sendmsg+0x80/0x80 [ 672.243245][T15999] ? lockdep_hardirqs_on+0x98/0x150 [ 672.248623][T15999] do_syscall_64+0x55/0xb0 [ 672.253112][T15999] ? clear_bhb_loop+0x40/0x90 [ 672.257838][T15999] ? clear_bhb_loop+0x40/0x90 [ 672.262563][T15999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.268505][T15999] RIP: 0033:0x7f5b11d9fb19 [ 672.272961][T15999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.292612][T15999] RSP: 002b:00007f5b12ca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.301068][T15999] RAX: ffffffffffffffda RBX: 00007f5b12025fa0 RCX: 00007f5b11d9fb19 [ 672.309173][T15999] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 672.317263][T15999] RBP: 00007f5b11e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 672.325272][T15999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.333310][T15999] R13: 00007f5b12026038 R14: 00007f5b12025fa0 R15: 00007ffd1c0403f8 [ 672.341342][T15999] [ 672.808327][T16015] netlink: 'syz.3.3288': attribute type 10 has an invalid length. [ 672.832663][T16019] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 673.127288][T16027] netlink: 'syz.0.3300': attribute type 9 has an invalid length. [ 673.835694][T16043] netlink: 'syz.1.3297': attribute type 10 has an invalid length. [ 673.993484][T16051] netlink: 'syz.3.3301': attribute type 10 has an invalid length. [ 674.013009][T16051] __nla_validate_parse: 7 callbacks suppressed [ 674.013062][T16051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3301'. [ 674.136463][T16056] netlink: 'syz.0.3303': attribute type 28 has an invalid length. [ 674.164019][T16056] netlink: 'syz.0.3303': attribute type 29 has an invalid length. [ 674.174873][T16054] netlink: 'syz.1.3302': attribute type 10 has an invalid length. [ 674.183698][T16054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3302'. [ 674.193387][T16056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3303'. [ 674.245388][T16056] IPv6: : Disabled Multicast RS [ 674.784808][T16066] netlink: 'syz.0.3307': attribute type 10 has an invalid length. [ 674.799542][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3307'. [ 674.833186][T16066] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 674.843567][T16066] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.909091][T16066] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 675.251480][T16081] netlink: 'syz.1.3313': attribute type 10 has an invalid length. [ 675.259516][T16081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3313'. [ 675.417177][T16086] netlink: 'syz.2.3315': attribute type 10 has an invalid length. [ 675.430645][T16086] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3315'. [ 676.229771][T16113] netlink: 'syz.0.3326': attribute type 10 has an invalid length. [ 676.238689][T16113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3326'. [ 676.355587][T16117] netlink: 'syz.1.3328': attribute type 10 has an invalid length. [ 676.365069][T16117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3328'. [ 678.103751][T16149] netlink: 'syz.2.3339': attribute type 10 has an invalid length. [ 678.112125][T16149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3339'. [ 678.793282][T16165] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 678.807797][T16165] veth0_macvtap: left promiscuous mode [ 678.997046][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3348'. [ 679.286876][T16180] validate_nla: 2 callbacks suppressed [ 679.286916][T16180] netlink: 'syz.0.3351': attribute type 10 has an invalid length. [ 679.307676][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3351'. [ 679.984220][T16200] netlink: 'syz.3.3359': attribute type 10 has an invalid length. [ 679.998646][T16200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3359'. [ 680.672046][T16222] netlink: 203100 bytes leftover after parsing attributes in process `syz.1.3369'. [ 680.751464][T16222] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 680.771263][T16222] CPU: 1 PID: 16222 Comm: syz.1.3369 Not tainted syzkaller #0 [ 680.779354][T16222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 680.789475][T16222] Call Trace: [ 680.792854][T16222] [ 680.795837][T16222] dump_stack_lvl+0x18c/0x250 [ 680.800596][T16222] ? show_regs_print_info+0x20/0x20 [ 680.805877][T16222] ? load_image+0x420/0x420 [ 680.810533][T16222] sysfs_warn_dup+0x8e/0xa0 [ 680.815107][T16222] sysfs_do_create_link_sd+0xc0/0x110 [ 680.820566][T16222] device_add_class_symlinks+0x1cf/0x240 [ 680.826267][T16222] device_add+0x4f9/0xc40 [ 680.830678][T16222] wiphy_register+0x1f24/0x2c70 [ 680.835643][T16222] ? cfg80211_event_work+0x40/0x40 [ 680.840818][T16222] ? minstrel_ht_alloc+0x88a/0x990 [ 680.846009][T16222] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 680.852178][T16222] ieee80211_register_hw+0x2f3d/0x3cb0 [ 680.857731][T16222] ? ieee80211_register_hw+0xf51/0x3cb0 [ 680.863468][T16222] ? ieee80211_tasklet_handler+0x20/0x20 [ 680.869264][T16222] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 680.875242][T16222] ? __debug_object_init+0xec/0x450 [ 680.880512][T16222] ? __asan_memset+0x22/0x40 [ 680.885496][T16222] ? __hrtimer_init+0x189/0x270 [ 680.890427][T16222] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 680.896248][T16222] ? mac80211_hwsim_free+0x220/0x220 [ 680.901612][T16222] ? rcu_is_watching+0x15/0xb0 [ 680.906487][T16222] ? kstrndup+0xbd/0x140 [ 680.910804][T16222] hwsim_new_radio_nl+0xdad/0x1a70 [ 680.915989][T16222] ? __nla_validate+0x50/0x50 [ 680.920769][T16222] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 680.927180][T16222] ? __nla_parse+0x40/0x50 [ 680.931693][T16222] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 680.938102][T16222] genl_family_rcv_msg_doit+0x21a/0x310 [ 680.943716][T16222] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 680.949659][T16222] ? bpf_lsm_capable+0x9/0x10 [ 680.954372][T16222] ? security_capable+0x89/0xb0 [ 680.959322][T16222] genl_rcv_msg+0x611/0x7a0 [ 680.963869][T16222] ? genl_bind+0x360/0x360 [ 680.968316][T16222] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 680.974708][T16222] ? ref_tracker_free+0x686/0x830 [ 680.979878][T16222] ? __kasan_kmalloc_large+0x8b/0xa0 [ 680.985314][T16222] netlink_rcv_skb+0x235/0x4c0 [ 680.990144][T16222] ? genl_bind+0x360/0x360 [ 680.994602][T16222] ? netlink_ack+0x1160/0x1160 [ 680.999440][T16222] ? __lock_acquire+0x7eb0/0x7eb0 [ 681.004707][T16222] ? down_read+0x1ac/0x2e0 [ 681.009259][T16222] genl_rcv+0x28/0x40 [ 681.013365][T16222] netlink_unicast+0x856/0x9e0 [ 681.018188][T16222] netlink_sendmsg+0x8d0/0xbf0 [ 681.023010][T16222] ? netlink_getsockopt+0x590/0x590 [ 681.028265][T16222] ? apparmor_socket_sendmsg+0x8e/0x330 [ 681.033875][T16222] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 681.039307][T16222] ? security_socket_sendmsg+0x80/0xa0 [ 681.044856][T16222] ? netlink_getsockopt+0x590/0x590 [ 681.050107][T16222] ____sys_sendmsg+0x61b/0x980 [ 681.054937][T16222] ? __asan_memset+0x22/0x40 [ 681.059576][T16222] ? __sys_sendmsg_sock+0x30/0x30 [ 681.064631][T16222] ? __import_iovec+0x5f2/0x850 [ 681.069535][T16222] ? import_iovec+0x73/0xa0 [ 681.074081][T16222] ___sys_sendmsg+0x2a6/0x360 [ 681.078830][T16222] ? __sys_sendmsg+0x2b0/0x2b0 [ 681.083763][T16222] __se_sys_sendmsg+0x1d0/0x2c0 [ 681.088657][T16222] ? __x64_sys_sendmsg+0x80/0x80 [ 681.093644][T16222] ? lockdep_hardirqs_on+0x98/0x150 [ 681.098882][T16222] do_syscall_64+0x55/0xb0 [ 681.103441][T16222] ? clear_bhb_loop+0x40/0x90 [ 681.108182][T16222] ? clear_bhb_loop+0x40/0x90 [ 681.112943][T16222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.118895][T16222] RIP: 0033:0x7f31ddd9fb19 [ 681.123348][T16222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.142999][T16222] RSP: 002b:00007f31ded59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.151458][T16222] RAX: ffffffffffffffda RBX: 00007f31de025fa0 RCX: 00007f31ddd9fb19 [ 681.159565][T16222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 681.167603][T16222] RBP: 00007f31dde37b70 R08: 0000000000000000 R09: 0000000000000000 [ 681.175612][T16222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.183618][T16222] R13: 00007f31de026038 R14: 00007f31de025fa0 R15: 00007ffe60d7b968 [ 681.191642][T16222] [ 682.342110][T16258] netlink: 'syz.1.3383': attribute type 10 has an invalid length. [ 682.357503][T16258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3383'. [ 683.347486][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 685.848710][T16296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3393'. [ 685.860248][T16296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3393'. [ 685.878013][T16296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3393'. [ 685.908432][T16296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3393'. [ 686.041151][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.048004][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.066334][T16297] netlink: 'syz.1.3393': attribute type 2 has an invalid length. [ 686.215849][T16303] netlink: 'syz.1.3393': attribute type 39 has an invalid length. [ 686.631518][T16303] hsr_slave_1 (unregistering): left promiscuous mode [ 686.757860][T16304] netlink: 'syz.2.3396': attribute type 10 has an invalid length. [ 686.766435][T16304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3396'. [ 686.802603][T16308] netlink: 'syz.3.3397': attribute type 10 has an invalid length. [ 687.097527][T16313] netlink: 'syz.1.3399': attribute type 2 has an invalid length. [ 691.285116][T16360] netlink: 'syz.3.3414': attribute type 2 has an invalid length. [ 691.524324][T16371] netlink: 'syz.1.3417': attribute type 21 has an invalid length. [ 695.106089][T16387] netlink: 'syz.0.3424': attribute type 10 has an invalid length. [ 695.134846][T16387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3424'. [ 695.224267][T16389] netlink: 'syz.2.3425': attribute type 10 has an invalid length. [ 695.250847][T16389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 695.346376][T16393] netlink: 'syz.3.3426': attribute type 10 has an invalid length. [ 695.375579][T16393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3426'. [ 695.800714][T16406] netlink: 'syz.1.3430': attribute type 21 has an invalid length. [ 696.025980][T16408] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.3432'. [ 696.116071][T16408] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 696.159245][T16408] CPU: 0 PID: 16408 Comm: syz.2.3432 Not tainted syzkaller #0 [ 696.166904][T16408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 696.177145][T16408] Call Trace: [ 696.180478][T16408] [ 696.183553][T16408] dump_stack_lvl+0x18c/0x250 [ 696.188356][T16408] ? show_regs_print_info+0x20/0x20 [ 696.193723][T16408] ? load_image+0x420/0x420 [ 696.198312][T16408] sysfs_warn_dup+0x8e/0xa0 [ 696.202919][T16408] sysfs_do_create_link_sd+0xc0/0x110 [ 696.208374][T16408] device_add_class_symlinks+0x1cf/0x240 [ 696.214106][T16408] device_add+0x4f9/0xc40 [ 696.218509][T16408] wiphy_register+0x1f24/0x2c70 [ 696.223457][T16408] ? cfg80211_event_work+0x40/0x40 [ 696.228657][T16408] ? minstrel_ht_alloc+0x88a/0x990 [ 696.233849][T16408] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 696.240098][T16408] ieee80211_register_hw+0x2f3d/0x3cb0 [ 696.245651][T16408] ? ieee80211_register_hw+0xf51/0x3cb0 [ 696.251411][T16408] ? ieee80211_tasklet_handler+0x20/0x20 [ 696.257189][T16408] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 696.263163][T16408] ? __debug_object_init+0xec/0x450 [ 696.268445][T16408] ? __asan_memset+0x22/0x40 [ 696.273103][T16408] ? __hrtimer_init+0x189/0x270 [ 696.278006][T16408] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 696.284657][T16408] ? mac80211_hwsim_free+0x220/0x220 [ 696.290014][T16408] ? rcu_is_watching+0x15/0xb0 [ 696.294840][T16408] ? kstrndup+0xbd/0x140 [ 696.299206][T16408] hwsim_new_radio_nl+0xdad/0x1a70 [ 696.304550][T16408] ? __nla_validate+0x50/0x50 [ 696.309297][T16408] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 696.315701][T16408] ? __nla_parse+0x40/0x50 [ 696.320173][T16408] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 696.326561][T16408] genl_family_rcv_msg_doit+0x21a/0x310 [ 696.332196][T16408] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 696.338151][T16408] ? bpf_lsm_capable+0x9/0x10 [ 696.342888][T16408] ? security_capable+0x89/0xb0 [ 696.347800][T16408] genl_rcv_msg+0x611/0x7a0 [ 696.352649][T16408] ? genl_bind+0x360/0x360 [ 696.357130][T16408] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 696.363507][T16408] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 696.370160][T16408] netlink_rcv_skb+0x235/0x4c0 [ 696.375058][T16408] ? genl_bind+0x360/0x360 [ 696.379519][T16408] ? netlink_ack+0x1160/0x1160 [ 696.384347][T16408] ? __lock_acquire+0x7eb0/0x7eb0 [ 696.389601][T16408] ? down_read+0x1ac/0x2e0 [ 696.394072][T16408] genl_rcv+0x28/0x40 [ 696.398101][T16408] netlink_unicast+0x856/0x9e0 [ 696.402945][T16408] netlink_sendmsg+0x8d0/0xbf0 [ 696.408028][T16408] ? netlink_getsockopt+0x590/0x590 [ 696.413272][T16408] ? apparmor_socket_sendmsg+0x8e/0x330 [ 696.418878][T16408] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 696.424231][T16408] ? security_socket_sendmsg+0x80/0xa0 [ 696.429739][T16408] ? netlink_getsockopt+0x590/0x590 [ 696.435068][T16408] ____sys_sendmsg+0x61b/0x980 [ 696.439886][T16408] ? __asan_memset+0x22/0x40 [ 696.444536][T16408] ? __sys_sendmsg_sock+0x30/0x30 [ 696.449618][T16408] ? __import_iovec+0x5f2/0x850 [ 696.454525][T16408] ? import_iovec+0x73/0xa0 [ 696.459085][T16408] ___sys_sendmsg+0x2a6/0x360 [ 696.463861][T16408] ? __sys_sendmsg+0x2b0/0x2b0 [ 696.468729][T16408] __se_sys_sendmsg+0x1d0/0x2c0 [ 696.473628][T16408] ? __x64_sys_sendmsg+0x80/0x80 [ 696.478625][T16408] ? lockdep_hardirqs_on+0x98/0x150 [ 696.483870][T16408] do_syscall_64+0x55/0xb0 [ 696.488349][T16408] ? clear_bhb_loop+0x40/0x90 [ 696.493084][T16408] ? clear_bhb_loop+0x40/0x90 [ 696.497821][T16408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.503772][T16408] RIP: 0033:0x7f407139fb19 [ 696.508247][T16408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.527900][T16408] RSP: 002b:00007f406f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.536365][T16408] RAX: ffffffffffffffda RBX: 00007f4071625fa0 RCX: 00007f407139fb19 [ 696.544397][T16408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 696.552408][T16408] RBP: 00007f4071437b70 R08: 0000000000000000 R09: 0000000000000000 [ 696.560418][T16408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.568436][T16408] R13: 00007f4071626038 R14: 00007f4071625fa0 R15: 00007ffdc00fc858 [ 696.576471][T16408] [ 697.004237][T16423] netlink: 'syz.2.3436': attribute type 10 has an invalid length. [ 697.030762][T16423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3436'. [ 697.071567][T16422] netlink: 'syz.3.3435': attribute type 10 has an invalid length. [ 697.079899][T16422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3435'. [ 698.092136][T16449] netlink: 'syz.3.3447': attribute type 10 has an invalid length. [ 698.119628][T16449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3447'. [ 698.369930][T16455] netlink: 'syz.2.3449': attribute type 10 has an invalid length. [ 698.399207][T16455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3449'. [ 698.475920][T16457] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 698.492667][T16457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3450'. [ 699.303160][T16482] netlink: 'syz.1.3459': attribute type 10 has an invalid length. [ 699.325413][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3459'. [ 699.809736][T16491] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 699.954760][T16497] netlink: 'syz.0.3465': attribute type 10 has an invalid length. [ 700.718381][T16511] netlink: 'syz.2.3471': attribute type 10 has an invalid length. [ 700.739383][T16511] __nla_validate_parse: 2 callbacks suppressed [ 700.739443][T16511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3471'. [ 700.804707][T16516] netlink: 'syz.3.3470': attribute type 10 has an invalid length. [ 700.841891][T16516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3470'. [ 701.323843][T16528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3476'. [ 701.785761][T16544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3483'. [ 701.959307][T16548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3484'. [ 703.165729][T16583] validate_nla: 2 callbacks suppressed [ 703.165771][T16583] netlink: 'syz.1.3496': attribute type 10 has an invalid length. [ 703.181416][T16583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3496'. [ 705.861592][T16602] netlink: 'syz.1.3501': attribute type 10 has an invalid length. [ 706.058450][T16609] netlink: 'syz.2.3504': attribute type 10 has an invalid length. [ 706.066543][T16609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3504'. [ 706.356119][T16621] netlink: 'syz.3.3509': attribute type 10 has an invalid length. [ 706.365093][T16621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3509'. [ 707.347417][T16643] netlink: 'syz.2.3515': attribute type 10 has an invalid length. [ 707.355908][T16643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3515'. [ 707.717380][T16651] netlink: 'syz.1.3519': attribute type 10 has an invalid length. [ 707.742120][T16651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3519'. [ 707.852975][T16662] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.3523'. [ 708.227223][T16675] netlink: 'syz.1.3528': attribute type 10 has an invalid length. [ 708.384892][T16675] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 708.922077][T16688] netlink: 'syz.1.3532': attribute type 10 has an invalid length. [ 708.974518][T16688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3532'. [ 709.335612][T16692] netlink: 'syz.3.3534': attribute type 10 has an invalid length. [ 709.344370][T16692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3534'. [ 709.484484][T16696] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3535'. [ 710.084346][T16712] netlink: 'syz.2.3543': attribute type 10 has an invalid length. [ 710.104923][T16712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3543'. [ 710.286866][T16718] netlink: 'syz.1.3545': attribute type 10 has an invalid length. [ 710.300746][T16718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3545'. [ 710.428181][T16717] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 710.440044][T16717] CPU: 1 PID: 16717 Comm: syz.0.3544 Not tainted syzkaller #0 [ 710.447719][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 710.457909][T16717] Call Trace: [ 710.461233][T16717] [ 710.464283][T16717] dump_stack_lvl+0x18c/0x250 [ 710.469271][T16717] ? show_regs_print_info+0x20/0x20 [ 710.474514][T16717] ? load_image+0x420/0x420 [ 710.479176][T16717] sysfs_warn_dup+0x8e/0xa0 [ 710.483829][T16717] sysfs_do_create_link_sd+0xc0/0x110 [ 710.489340][T16717] device_add_class_symlinks+0x1cf/0x240 [ 710.495107][T16717] device_add+0x4f9/0xc40 [ 710.499478][T16717] wiphy_register+0x1f24/0x2c70 [ 710.504479][T16717] ? cfg80211_event_work+0x40/0x40 [ 710.509637][T16717] ? minstrel_ht_alloc+0x88a/0x990 [ 710.514789][T16717] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 710.520908][T16717] ieee80211_register_hw+0x2f3d/0x3cb0 [ 710.526508][T16717] ? ieee80211_register_hw+0xf51/0x3cb0 [ 710.532126][T16717] ? ieee80211_tasklet_handler+0x20/0x20 [ 710.537801][T16717] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 710.543832][T16717] ? __debug_object_init+0xec/0x450 [ 710.549073][T16717] ? __asan_memset+0x22/0x40 [ 710.553707][T16717] ? __hrtimer_init+0x189/0x270 [ 710.558597][T16717] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 710.564376][T16717] ? mac80211_hwsim_free+0x220/0x220 [ 710.569694][T16717] ? rcu_is_watching+0x15/0xb0 [ 710.574594][T16717] ? kstrndup+0xbd/0x140 [ 710.578900][T16717] hwsim_new_radio_nl+0xdad/0x1a70 [ 710.584059][T16717] ? __nla_validate+0x50/0x50 [ 710.588783][T16717] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 710.595158][T16717] ? __nla_parse+0x40/0x50 [ 710.599625][T16717] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 710.606086][T16717] genl_family_rcv_msg_doit+0x21a/0x310 [ 710.611675][T16717] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 710.617612][T16717] ? bpf_lsm_capable+0x9/0x10 [ 710.622328][T16717] ? security_capable+0x89/0xb0 [ 710.627317][T16717] genl_rcv_msg+0x611/0x7a0 [ 710.631866][T16717] ? genl_bind+0x360/0x360 [ 710.636336][T16717] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 710.642705][T16717] ? perf_trace_preemptirq_template+0xac/0x330 [ 710.648899][T16717] ? rcu_read_unlock_special+0xf7/0x4d0 [ 710.654485][T16717] netlink_rcv_skb+0x235/0x4c0 [ 710.659289][T16717] ? genl_bind+0x360/0x360 [ 710.663771][T16717] ? netlink_ack+0x1160/0x1160 [ 710.668592][T16717] ? __lock_acquire+0x7eb0/0x7eb0 [ 710.673664][T16717] ? down_read+0x1ac/0x2e0 [ 710.678118][T16717] genl_rcv+0x28/0x40 [ 710.682142][T16717] netlink_unicast+0x856/0x9e0 [ 710.686977][T16717] netlink_sendmsg+0x8d0/0xbf0 [ 710.691792][T16717] ? netlink_getsockopt+0x590/0x590 [ 710.697047][T16717] ? apparmor_socket_sendmsg+0x8e/0x330 [ 710.702645][T16717] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 710.707970][T16717] ? security_socket_sendmsg+0x80/0xa0 [ 710.713462][T16717] ? netlink_getsockopt+0x590/0x590 [ 710.718700][T16717] ____sys_sendmsg+0x61b/0x980 [ 710.723513][T16717] ? __asan_memset+0x22/0x40 [ 710.728153][T16717] ? __sys_sendmsg_sock+0x30/0x30 [ 710.733208][T16717] ? __import_iovec+0x5f2/0x850 [ 710.738101][T16717] ? import_iovec+0x73/0xa0 [ 710.742639][T16717] ___sys_sendmsg+0x2a6/0x360 [ 710.747362][T16717] ? __sys_sendmsg+0x2b0/0x2b0 [ 710.752207][T16717] __se_sys_sendmsg+0x1d0/0x2c0 [ 710.757098][T16717] ? __x64_sys_sendmsg+0x80/0x80 [ 710.762259][T16717] ? lockdep_hardirqs_on+0x98/0x150 [ 710.767491][T16717] do_syscall_64+0x55/0xb0 [ 710.771946][T16717] ? clear_bhb_loop+0x40/0x90 [ 710.776681][T16717] ? clear_bhb_loop+0x40/0x90 [ 710.781402][T16717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.787344][T16717] RIP: 0033:0x7f5b11d9fb19 [ 710.791799][T16717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.811537][T16717] RSP: 002b:00007f5b12ca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.819987][T16717] RAX: ffffffffffffffda RBX: 00007f5b12025fa0 RCX: 00007f5b11d9fb19 [ 710.827991][T16717] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 710.836003][T16717] RBP: 00007f5b11e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 710.844006][T16717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.852016][T16717] R13: 00007f5b12026038 R14: 00007f5b12025fa0 R15: 00007ffd1c0403f8 [ 710.860036][T16717] [ 711.094357][T16727] __nla_validate_parse: 1 callbacks suppressed [ 711.094380][T16727] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.3548'. [ 711.560999][T16738] netlink: 'syz.1.3554': attribute type 10 has an invalid length. [ 711.569319][T16738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3554'. [ 711.808838][T16751] netlink: 'syz.2.3559': attribute type 10 has an invalid length. [ 711.940308][T16757] Q6`Ҙ: renamed from lo (while UP) [ 711.961004][T16758] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.3561'. [ 712.940253][T16772] netlink: 'syz.2.3566': attribute type 10 has an invalid length. [ 712.949018][T16772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3566'. [ 713.368253][T16784] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.3572'. [ 713.390848][T16777] delete_channel: no stack [ 713.604159][T16788] netlink: 'syz.1.3574': attribute type 10 has an invalid length. [ 713.612934][T16788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3574'. [ 714.007591][T16798] netlink: 'syz.3.3580': attribute type 10 has an invalid length. [ 714.019483][T16798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3580'. [ 714.306311][T16808] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.3584'. [ 714.726232][T16816] netlink: 'syz.0.3585': attribute type 10 has an invalid length. [ 714.745504][T16816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3585'. [ 714.766800][T16814] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 714.775923][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3586'. [ 715.122898][T16827] netlink: 'syz.1.3593': attribute type 10 has an invalid length. [ 715.514322][T16841] delete_channel: no stack [ 715.721529][T16844] netlink: 'syz.1.3600': attribute type 10 has an invalid length. [ 715.892641][T16848] netlink: 'syz.2.3602': attribute type 10 has an invalid length. [ 715.973046][T16854] FAULT_INJECTION: forcing a failure. [ 715.973046][T16854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.020871][T16854] CPU: 0 PID: 16854 Comm: syz.0.3605 Not tainted syzkaller #0 [ 716.028471][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 716.038828][T16854] Call Trace: [ 716.042184][T16854] [ 716.045289][T16854] dump_stack_lvl+0x18c/0x250 [ 716.050265][T16854] ? show_regs_print_info+0x20/0x20 [ 716.055577][T16854] ? load_image+0x420/0x420 [ 716.060193][T16854] ? __lock_acquire+0x7eb0/0x7eb0 [ 716.065330][T16854] ? snprintf+0xe9/0x140 [ 716.069715][T16854] should_fail_ex+0x394/0x4c0 [ 716.074509][T16854] _copy_to_user+0x2f/0xa0 [ 716.079119][T16854] simple_read_from_buffer+0xe7/0x150 [ 716.084624][T16854] proc_fail_nth_read+0x1e8/0x260 [ 716.089857][T16854] ? proc_fault_inject_write+0x360/0x360 [ 716.095686][T16854] ? fsnotify_perm+0x271/0x5e0 [ 716.100560][T16854] ? proc_fault_inject_write+0x360/0x360 [ 716.106303][T16854] vfs_read+0x298/0x990 [ 716.110592][T16854] ? kernel_read+0x1e0/0x1e0 [ 716.115300][T16854] ? __fget_files+0x28/0x460 [ 716.120000][T16854] ? __fget_files+0x3fc/0x460 [ 716.124901][T16854] ? __fdget_pos+0x2a3/0x330 [ 716.129620][T16854] ? ksys_read+0x74/0x260 [ 716.134060][T16854] ksys_read+0x151/0x260 [ 716.138444][T16854] ? vfs_write+0x9a0/0x9a0 [ 716.143006][T16854] ? lockdep_hardirqs_on+0x98/0x150 [ 716.148756][T16854] do_syscall_64+0x55/0xb0 [ 716.153356][T16854] ? clear_bhb_loop+0x40/0x90 [ 716.158167][T16854] ? clear_bhb_loop+0x40/0x90 [ 716.163147][T16854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.169232][T16854] RIP: 0033:0x7f5b11d6034e [ 716.174022][T16854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 716.193900][T16854] RSP: 002b:00007f5b12ca6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 716.202420][T16854] RAX: ffffffffffffffda RBX: 00007f5b12ca76c0 RCX: 00007f5b11d6034e [ 716.210494][T16854] RDX: 000000000000000f RSI: 00007f5b12ca70a0 RDI: 0000000000000008 [ 716.218551][T16854] RBP: 00007f5b12ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 716.226615][T16854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.234715][T16854] R13: 00007f5b12026038 R14: 00007f5b12025fa0 R15: 00007ffd1c0403f8 [ 716.242843][T16854] [ 716.272122][T16856] __nla_validate_parse: 5 callbacks suppressed [ 716.272147][T16856] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.3606'. [ 716.667444][T16863] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3608'. [ 716.690328][T16863] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.3608'. [ 716.993252][T16868] delete_channel: no stack [ 717.236148][T16877] netlink: 'syz.1.3615': attribute type 10 has an invalid length. [ 717.256165][T16883] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.3619'. [ 717.285595][T16877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3615'. [ 717.639492][T16890] netlink: 'syz.1.3622': attribute type 10 has an invalid length. [ 717.653066][T16890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3622'. [ 720.752029][T16904] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 720.789749][T16902] netlink: 'syz.1.3634': attribute type 10 has an invalid length. [ 720.800344][T16902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3634'. [ 720.955323][T16900] delete_channel: no stack [ 721.034784][T16907] netlink: 'syz.0.3637': attribute type 10 has an invalid length. [ 721.075223][T16907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3637'. [ 721.153527][T16913] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.3629'. [ 721.233767][T16914] netlink: 'syz.3.3630': attribute type 10 has an invalid length. [ 721.262071][T16914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3630'. [ 721.799832][T16933] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 721.831009][T16933] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 721.943721][T16933] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 722.018611][T16931] netlink: 'syz.0.3638': attribute type 10 has an invalid length. [ 722.050779][T16931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3638'. [ 722.094612][T16933] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 722.232847][T16943] netlink: 'syz.3.3643': attribute type 10 has an invalid length. [ 722.251096][T16943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3643'. [ 722.327381][T16948] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.3644'. [ 723.312984][T16972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3656'. [ 723.597322][T16985] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.3662'. [ 723.719568][T16985] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.3662'. [ 723.795922][T16985] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.3662'. [ 723.843894][T16985] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.3662'. [ 723.890680][T16985] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.3662'. [ 723.931563][T16985] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.3662'. [ 739.401831][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.411977][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.420163][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.429307][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.437491][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 739.445193][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.573657][T17012] rxe_eth0 speed is unknown, defaulting to 1000 [ 740.528650][T17012] chnl_net:caif_netlink_parms(): no params data found [ 740.882307][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.892972][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.901756][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.910004][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.918568][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 740.926201][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 741.531864][ T52] Bluetooth: hci1: command tx timeout [ 741.686630][T17012] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.710780][T17012] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.730826][T17012] bridge_slave_0: entered allmulticast mode [ 741.738492][T17012] bridge_slave_0: entered promiscuous mode [ 741.787450][T17012] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.818238][T17012] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.830299][T17012] bridge_slave_1: entered allmulticast mode [ 741.842583][T17012] bridge_slave_1: entered promiscuous mode [ 741.859208][T17024] rxe_eth0 speed is unknown, defaulting to 1000 [ 741.969299][T17012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.013668][T17012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.132881][T17012] team0: Port device team_slave_0 added [ 742.153873][T17012] team0: Port device team_slave_1 added [ 742.261271][T17012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.268506][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.339059][T17012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.383011][T17012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.390154][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.426659][T17012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.561110][ T5787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 742.572376][ T5787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 742.581338][ T5787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 742.591126][ T5787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 742.598937][ T5787] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 742.606791][ T5787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 742.970723][ T5787] Bluetooth: hci5: command tx timeout [ 743.137143][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 743.153037][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 743.165167][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 743.177688][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 743.189303][ T52] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 743.199917][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 743.610830][ T52] Bluetooth: hci1: command tx timeout [ 744.650807][ T52] Bluetooth: hci6: command tx timeout [ 745.050701][ T52] Bluetooth: hci5: command tx timeout [ 745.290720][ T52] Bluetooth: hci7: command tx timeout [ 745.690606][ T52] Bluetooth: hci1: command tx timeout [ 746.730610][ T52] Bluetooth: hci6: command tx timeout [ 747.130554][ T52] Bluetooth: hci5: command tx timeout [ 747.370539][ T52] Bluetooth: hci7: command tx timeout [ 747.455684][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.469691][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.770564][ T52] Bluetooth: hci1: command tx timeout [ 748.810624][ T52] Bluetooth: hci6: command tx timeout [ 749.210630][ T52] Bluetooth: hci5: command tx timeout [ 749.450567][ T52] Bluetooth: hci7: command tx timeout [ 750.890600][ T52] Bluetooth: hci6: command tx timeout [ 751.530525][ T52] Bluetooth: hci7: command tx timeout [ 800.313863][ T5787] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 800.330704][ T5787] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 800.339069][ T5787] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 800.348410][ T5787] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 800.356370][ T5787] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 800.364020][ T5787] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 801.363782][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 801.374082][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 801.382798][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 801.391380][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 801.399265][ T52] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 801.407155][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 802.409386][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 802.418902][ T52] Bluetooth: hci8: command tx timeout [ 802.437162][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 802.445866][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 802.461950][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 802.469847][ T52] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 802.483871][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 803.450869][T13215] Bluetooth: hci9: command tx timeout [ 803.514106][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 803.528585][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 803.539674][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 803.558379][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 803.568778][ T52] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 803.581529][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 804.490540][ T52] Bluetooth: hci8: command tx timeout [ 804.570642][ T52] Bluetooth: hci10: command tx timeout [ 805.530785][ T52] Bluetooth: hci9: command tx timeout [ 805.610619][ T52] Bluetooth: hci11: command tx timeout [ 806.573017][ T52] Bluetooth: hci8: command tx timeout [ 806.655862][ T52] Bluetooth: hci10: command tx timeout [ 807.610916][ T52] Bluetooth: hci9: command tx timeout [ 807.690526][ T52] Bluetooth: hci11: command tx timeout [ 808.650567][ T52] Bluetooth: hci8: command tx timeout [ 808.730647][ T52] Bluetooth: hci10: command tx timeout [ 808.906056][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.912623][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.690730][ T52] Bluetooth: hci9: command tx timeout [ 809.770514][ T52] Bluetooth: hci11: command tx timeout [ 810.810552][ T52] Bluetooth: hci10: command tx timeout [ 811.850580][ T52] Bluetooth: hci11: command tx timeout [ 847.500409][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 847.507198][ C0] rcu: 0-....: (10494 ticks this GP) idle=fb24/1/0x4000000000000000 softirq=65763/65763 fqs=5248 [ 847.519034][ C0] rcu: hardirqs softirqs csw/system [ 847.525483][ C0] rcu: number: 1254174 0 0 [ 847.531944][ C0] rcu: cputime: 18179 34300 74 ==> 52500(ms) [ 847.539834][ C0] rcu: (t=10502 jiffies g=95405 q=1135 ncpus=2) [ 847.546222][ C0] CPU: 0 PID: 16984 Comm: syz.3.3662 Not tainted syzkaller #0 [ 847.553743][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.563949][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 847.569840][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ba cc c7 f6 48 89 df e8 62 a0 c8 f6 e8 8d bf ec f6 fb bf 01 00 00 00 e2 a1 bb f6 65 8b 05 f3 22 62 75 85 c0 74 02 5b c3 e8 e0 07 5f [ 847.589525][ C0] RSP: 0018:ffffc90000007c90 EFLAGS: 00000286 [ 847.595631][ C0] RAX: a22bb1ad7d16c600 RBX: ffff8880b8c295c0 RCX: a22bb1ad7d16c600 [ 847.603630][ C0] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: 0000000000000001 [ 847.611715][ C0] RBP: ffffc90000007e10 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 847.619872][ C0] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: 1ffff110171852c0 [ 847.627969][ C0] R13: ffff8880b8c295c0 R14: ffff888024bd6da8 R15: ffffc90000007d60 [ 847.636252][ C0] FS: 00007f8d0c3966c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 847.645206][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.651802][ C0] CR2: 0000000100000000 CR3: 0000000040769000 CR4: 00000000003506f0 [ 847.659792][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 847.667888][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 847.675907][ C0] Call Trace: [ 847.679211][ C0] [ 847.682068][ C0] ? curve25519_generate_public+0x80/0x80 [ 847.687953][ C0] __run_timers+0x560/0x810 [ 847.692505][ C0] ? detach_timer+0x2b0/0x2b0 [ 847.697342][ C0] run_timer_softirq+0x67/0xf0 [ 847.702180][ C0] handle_softirqs+0x27d/0x820 [ 847.706971][ C0] ? read_tsc+0x9/0x20 [ 847.711148][ C0] ? ktime_get+0x24b/0x280 [ 847.715595][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 847.720640][ C0] ? do_softirq+0x1a0/0x1a0 [ 847.725191][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 847.730432][ C0] __irq_exit_rcu+0xd3/0x190 [ 847.735131][ C0] ? irq_exit_rcu+0x20/0x20 [ 847.739692][ C0] irq_exit_rcu+0x9/0x20 [ 847.743972][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 847.749767][ C0] [ 847.752824][ C0] [ 847.755792][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 847.761831][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 847.767657][ C0] Code: 39 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 33 7d 43 09 e8 3e 3e 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 847.787396][ C0] RSP: 0018:ffffc9000c6c7880 EFLAGS: 00000282 [ 847.793484][ C0] RAX: a22bb1ad7d16c600 RBX: 0000000000000000 RCX: a22bb1ad7d16c600 [ 847.801471][ C0] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 847.809547][ C0] RBP: ffffc9000c6c78d0 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 847.817536][ C0] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: ffff88802b973c00 [ 847.825524][ C0] R13: 1ffff110171879a1 R14: dffffc0000000000 R15: ffff8880b8c3cd08 [ 847.833535][ C0] __schedule+0x1577/0x4720 [ 847.838082][ C0] ? asan.module_dtor+0x20/0x20 [ 847.842957][ C0] ? futex_wait_queue+0x9d/0x1b0 [ 847.848085][ C0] ? plist_add+0x3db/0x490 [ 847.852564][ C0] schedule+0xbd/0x170 [ 847.856672][ C0] ? futex_wait_queue+0x27/0x1b0 [ 847.861625][ C0] futex_wait_queue+0x138/0x1b0 [ 847.866531][ C0] futex_wait+0x1fc/0x640 [ 847.870882][ C0] ? futex_wait_setup+0x270/0x270 [ 847.875936][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 847.881679][ C0] do_futex+0x2ff/0x3e0 [ 847.885872][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 847.891957][ C0] ? lock_chain_count+0x20/0x20 [ 847.896828][ C0] __se_sys_futex+0x3a9/0x440 [ 847.901558][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 847.907734][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 847.912517][ C0] ? __x64_sys_futex+0x21/0xf0 [ 847.917296][ C0] do_syscall_64+0x55/0xb0 [ 847.921750][ C0] ? clear_bhb_loop+0x40/0x90 [ 847.926456][ C0] ? clear_bhb_loop+0x40/0x90 [ 847.931148][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.937056][ C0] RIP: 0033:0x7f8d0b59fb19 [ 847.941591][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.961298][ C0] RSP: 002b:00007f8d0c3960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 847.969820][ C0] RAX: ffffffffffffffda RBX: 00007f8d0b825fa8 RCX: 00007f8d0b59fb19 [ 847.977812][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d0b825fa8 [ 847.985886][ C0] RBP: 00007f8d0b825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 847.993959][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.002030][ C0] R13: 00007f8d0b826038 R14: 00007ffc0861fde0 R15: 00007ffc0861fec8 [ 848.010115][ C0]