last executing test programs: 23.398921014s ago: executing program 3 (id=887): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000, 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) r9 = syz_clone(0x49005080, &(0x7f00000001c0)="6b057210d94c593c5b2a165d2667f78942a3640349fe3b6cea02f48f08d824497f74cac395495382d0e0915439d7c6de2513c81f2730306cb764c9166bbd6cee31f09877cc2ad19b85e7f2", 0x4b, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000001340)="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") syz_open_procfs$namespace(r9, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'erspan0\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 20.910487911s ago: executing program 2 (id=901): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x3) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180700000000f600f400000544000000000000000003000000000000000000e91d01000000120e6f2bda15ed8ca733902eac2265e5897cab756cee3c0800880e545307ebb8bf77a24fcdf2d0bb959661be14ea08d82504c858979e6a81337719c03721105bca554e9a328e70c833cf248b"], 0x0, 0x29, 0x0, 0x1}, 0x28) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000040000000002dc4097f1d31500475b19dba65a18f920e0443aa28ef8a142804b352bef809efb5e86cb1f072bf2e0e843f29b9d76575fcf518d9ea37ca399be9357addffc59429", @ANYRESOCT=r7, @ANYBLOB="00000000d3ec66ecc053c543da5f", @ANYRES64=r4], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff5000009000000000000000000ff003b00000011", 0x2d}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b7000000080000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000280), 0x9) 20.267259281s ago: executing program 2 (id=905): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="9123f220aea984d44d598966133a840f148642e1060adf85c4f6d0ae1ed0df1e9645305d24007151f176cc0bbd2f6e35fb421b16304dafbff6cdad49bfbdce72fb50341370deb8cee4304fc415fade79c55fe3f2969c9d2bfeede29adb489109645f2ebf1246d2a838c3e6defd289053db0ba887e1cf438d74305b30613c72f92f8ccd340b0ed43c1d54ac1ef10845e1998d836bea181ce787204c6f454a34874be8680376460f05700ea5ebf019971edf3243eed4c46a3f79bb82eed4c1090cc402b471919bbd992863cf68ca39adb2b0fae9283ebf32f4d2f711b44467d955e70c34fe17f2875f0c80195ee5bf1a8e445b5ce2313ff1", 0xf7}], 0x1}, 0x40) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000300000018010000696c6c0800000000000000207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800028bb70300000200e4ffc4000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r2, 0xb) 20.163443482s ago: executing program 1 (id=907): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.088325373s ago: executing program 0 (id=908): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8110, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 20.085703243s ago: executing program 3 (id=909): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)="8812876b64a82a2a", 0x8}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_clone(0x40a42e00, &(0x7f0000000240)="4f9841876c55d7d76fba52fbb174fc59bfcc455d32ab01dcff901c6e97d020d810142df81cd4f82ea28cc5f7e9897645fb37bde74b24a519060468bc858a9fc9f57a204d93a20fdb7b5ae5792ca9f2b6e2257a917fb1a37745dfba53c866b98e175c0223faa54b66e54db72c248268b476742072ced8bbf3b29acdb1d6deaf4ee0e5ca048adff508ea982f90fd58aacd90", 0x91, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="7a23b009efa6a30a0c529f1599b5de0dcfc8752a9b11a2f73f2e67b61da47b3a57d9ca50d2b80e66fe5b44f9") bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x10, &(0x7f0000000b00)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x0, 0xd, 0x9a17942ff0e03642, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0xc, 0x6, 0x4, 0xd2}, @jmp={0x5, 0x0, 0x7, 0x6, 0x6, 0x6, 0xfffffffffffffff0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sockopt=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x179, 0x0, &(0x7f0000000900)="b9ff03076044238cb89e14f008000de0ffff00184000631177fbac141412e000002062079f4b4dca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308461757ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000037155ad99d4d546a6a98f1ec72ec25a900e5af6ccf29e866af7700e8b70a2ce57e325ea067092b28cbb544db6cf394928544147642e471fea8bb9babeda787b8475c5827cb880bb958e9c3839a96bdf2e4ca9d32b60c3506455d288145c26b206338a596410279b6910b14141926dc9ef52aed1d6f385d59be51300000000", 0x0, 0x8, 0x60000000, 0x3f, 0x4b, &(0x7f0000000000)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59810352a9415808935423", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e", 0x2, 0x3}, 0x50) r8 = getpid() r9 = syz_clone(0x2800000, &(0x7f0000000bc0)="0516000000000000729588d11503a972de4e9de36d0dbe5763c52b2e097ce508ac286abcc0981beceb6156f47c5caf24fa2dcfd4e150e5b96191e07d52a95e68d0794cb04f75afdd3d9555dbc45fe42802d53170e7c9ba417cbc9960c1abd67d4897aaafd6be98c484172b2e46c1900f31c115c4a19b607f2cb28fb48f123a4eee4631761200"/143, 0x8f, &(0x7f0000000400), &(0x7f00000004c0), &(0x7f0000000580)="99b9a2e4985829cfca1a45c1cd4d04c34976d815cfba17aff0b5df242cdf8108ca945164427916187ee4700e932632d6fc5a5f1b556d9a35d5d74032686b4064afe94e1c0522a1b54404afbd67f4df9b94d80c3043f4127d5f8813142e5e5267124d294c455924ca74536ab22c1ecaae096f2e9a3b4d2c001eafa16ebf4105c12f76f38b") r10 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r11 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r11, r10, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) sendmsg$unix(r4, &(0x7f0000000940)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="c714f07cfeebd3515002609598999dbbff", 0x11}, {&(0x7f00000001c0)="cefc1ac90ca1d1475bd7bb914557", 0xe}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r0, r0, r0, r1, 0xffffffffffffffff, r2, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r2, r2, r6, r0, r2, r7]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0x168, 0x40}, 0x20000000) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="0700000000000000000050eaabb5d8c65ecfcab44cd300000000000000000000e0f19e123b8c9aa3c057c2122dbe0ea4bafe77c1dd58e423e686ac2067fe06bd09443f6d950a238d3a772adda9780135c938649476fe02cd626012486eb49d249bfbdddb6f56f9499a9308519fe1eb6afa2900e05b625019be827e8831cb88980d8b5faf591bebabce7dcec756c1183eda5e2311ac4c8fd4c3db7defa052a014afca3c7503681b8a7fdfe6c89cf38215b7af19130d5e59a1292f187bdae3b5ff723ed9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r15 = syz_clone(0x420000, 0x0, 0xfffffffffffffc52, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x2, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x8}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r17}, &(0x7f0000000780), &(0x7f0000000700)=r16}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xd9b, 0x0, 0x1, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r17, &(0x7f0000000a80)="298c1c2b5fd2c371c303886584ac6b113034ef3eb807bdf7be2d1ad46e20b67afb4050d64a7c8537254848f78d5f3c48e949f65a0ac57abbcd63f9dfdf55bdf2b151423c08381a56de5ef05a70fa512baccd948379708dfe560104", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r14}, &(0x7f0000000180), &(0x7f0000000740)=r1}, 0x20) 20.009940324s ago: executing program 2 (id=910): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x22}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000180)=""/26, 0x1a, 0x0, &(0x7f00000001c0)=""/32, 0x20}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r3, 0x4) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0xfffffffffffffee5, 0x1, 0x4, 0xfe, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18, r4}, 0x18) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@fwd={0x4}, @fwd={0x6}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x37, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @func_proto]}}, 0x0, 0x66, 0x0, 0x1, 0xa28, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0x5e2, '\x00', 0x0, r7, 0x0, 0x0, 0x2}, 0x50) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, 0x0, 0xfdef) close(0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000fc0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r11 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x98) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x104, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r12}, 0x38) sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000000)='\r', 0x1}], 0x1}, 0x4000044) 19.966560375s ago: executing program 0 (id=918): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xc965, 0x90a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\r\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="311a80beb5f079fe1e170e18145b0259cbddb4ae7ae99592ccf8e41e05f9cfe55f60038e8a4839f2ffe4f04d58b9b21159061f6dc0ac00d50e8d506d902896c18d0d054fd951746751f9bc35b90849a37b68c564705f7c17c41107cd8610acb4d990292bcb7d55bb47710dbf26252a93a06523e497b5a58ff88c5a2e94962196433cf2a428ce80268421f0013c13ebae89d24bfa906cd70a132e46f10e10c35ba56302bd853c03619c7ff032ae611d5637a670b5763bfb2b909deccd7a0f375d3232", @ANYRES64=r3], 0x20) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001600)={'vlan1\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xf98ca34) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 19.128234437s ago: executing program 2 (id=911): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d00000000010000"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x4}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 19.088537388s ago: executing program 3 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x80}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 19.030528819s ago: executing program 1 (id=913): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000340)=@xdp={0x2c, 0x6, r3, 0x2d}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)="ee11684a337260d78434806dec63cd0a70f8ef4c2baa0aa7e5c0e3e87b2449309b3b51cd114efc2b7131bc87c3acbce43dd8b8ec415f10b4441cad34b10298bd79c8455752735119028bae255bda108d020ae13d050de8c7dfc687504a47a08ba57509f34c43bf8026004f0d35c0ee2e41020da635e40e46673ad3bbe2d819b4ceeedba5372fbb507762b4c8d744c01c09a50818f8602737a75b2ab508bda494e8139013dec90e971460dab34f390d162dee3e84c37b49a31a589688c8aa304bf6c7c4e5883e62c8e737b725ba37e84e25a34d4562d44d7ca19eb46b193a6205c9fd18f38a08fa52dc71b3706993dff21c", 0xf1}, {&(0x7f0000000540)="04727fb7e34677d9011ed657d32509f00f55acc9a3d3b6a40bab26b01ba45137ba792c9d505c00089a37a45be3490fa4b3c609f98e325007735beb50c67d0de38fbc8fd6dce9796d3c3ddaa68da2b69faab64fe4cf9d39c6bd37c1f3c4d6772c5dfff551eece4e9229c341e1b3d469a0245fd83eb853a29a3ab8a2", 0x7b}], 0x2, &(0x7f0000000780)=[{0x38, 0x103, 0x2, "06ede775529c9e3f612646289fb8f0fd53d5d7361c11548ed696a5de21a7aed68685"}, {0xc0, 0x10c, 0x6, "fb62d24f95de208296ff8cc62d8392e1e632887ebf0e0ce70f32a599ca62523fb93c6e5f7638947ab63a3decbbe10a77cf8f111dffee2387cfc135606f803445a678e6fc521e1943906fabec3b6582c7ada63a47aeb945e629e3bdd3c3ced307120dfcc5e785fb6753c400b4a794159103ef5bf78f4cd6f3f18614640a091c686ff66bbf540c6638b4dd5412f1cc444f068449b5256ed90625d24ed1f49da7befae400b6863d4d7c79"}, {0x78, 0x111, 0x5, "8928af042c20ab9fbed679856f3c3af5f6cdb2d9a320944b2e07befe9b3c1ebe83e93e301555e4e2a01cf2bb89f03576e70743c59f6294fbaff4a642f35c51bb88bacc9d1c8e6e85a5a7d92254047c82be648890c2b1a4add02fdde818fa46a973db3b532976e242"}, {0x28, 0x102, 0x3ff, "198d4417b4e0319c26fa9b15871345266f"}, {0x50, 0x118, 0xffff0000, "08942b9fc7215d9817dc5efaae358b903a31a9576e39ba8350c65c7bfddf485edba8846bec5f0676de276990dbb82d11de4cbf4cdc03637c8f"}], 0x1e8}, 0x20000051) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.929192011s ago: executing program 0 (id=914): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x53}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@ll={0x11, 0x9, 0x0, 0x1, 0x3, 0x6, @broadcast}, 0x80, 0x0}, 0xe07e872400dfefca) socket$kcm(0x10, 0x2, 0x10) 18.91335036s ago: executing program 1 (id=915): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x19, &(0x7f0000000000), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18f8ffffff000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x6, 0x8e, &(0x7f00000002c0)=""/142}, 0x94) 18.618628645s ago: executing program 0 (id=916): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff38}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={r1, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000480), 0x0, 0x5e, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0xe7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@bloom_filter={0x1e, 0x5, 0xb8a1, 0x93a, 0x20000, 0xffffffffffffffff, 0x5, '\x00', r2, r1, 0x5, 0x1, 0x4, 0xe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r2}, 0x94) 18.618436605s ago: executing program 1 (id=917): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000010000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.553863396s ago: executing program 0 (id=919): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8110, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.542320716s ago: executing program 2 (id=920): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020009000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000010) 18.402529048s ago: executing program 1 (id=921): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x43, &(0x7f0000000100), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x15, 0x5, 0x0) write$cgroup_devices(r4, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x80004141) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x2b, 'devices'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2d, 'io'}]}, 0x25) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000), 0x0, 0xffffffff}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 18.402285288s ago: executing program 2 (id=922): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.312232449s ago: executing program 0 (id=923): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000040)="cbb6aa7a8a63ec2bf1dd0d3f0adf33b1f7b98611", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x15, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000040)="cbb6aa7a8a63ec2bf1dd0d3f0adf33b1f7b98611", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) socket$kcm(0x2, 0x922000000001, 0x106) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x15, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) 17.998673884s ago: executing program 3 (id=924): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000340)=@xdp={0x2c, 0x6, r3, 0x2d}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)="ee11684a337260d78434806dec63cd0a70f8ef4c2baa0aa7e5c0e3e87b2449309b3b51cd114efc2b7131bc87c3acbce43dd8b8ec415f10b4441cad34b10298bd79c8455752735119028bae255bda108d020ae13d050de8c7dfc687504a47a08ba57509f34c43bf8026004f0d35c0ee2e41020da635e40e46673ad3bbe2d819b4ceeedba5372fbb507762b4c8d744c01c09a50818f8602737a75b2ab508bda494e8139013dec90e971460dab34f390d162dee3e84c37b49a31a589688c8aa304bf6c7c4e5883e62c8e737b725ba37e84e25a34d4562d44d7ca19eb46b193a6205c9fd18f38a08fa52dc71b3706993dff21c", 0xf1}, {&(0x7f0000000540)="04727fb7e34677d9011ed657d32509f00f55acc9a3d3b6a40bab26b01ba45137ba792c9d505c00089a37a45be3490fa4b3c609f98e325007735beb50c67d0de38fbc8fd6dce9796d3c3ddaa68da2b69faab64fe4cf9d39c6bd37c1f3c4d6772c5dfff551eece4e9229c341e1b3d469a0245fd83eb853a29a3ab8a2", 0x7b}], 0x2, &(0x7f0000000780)=[{0x38, 0x103, 0x2, "06ede775529c9e3f612646289fb8f0fd53d5d7361c11548ed696a5de21a7aed68685"}, {0xc0, 0x10c, 0x6, "fb62d24f95de208296ff8cc62d8392e1e632887ebf0e0ce70f32a599ca62523fb93c6e5f7638947ab63a3decbbe10a77cf8f111dffee2387cfc135606f803445a678e6fc521e1943906fabec3b6582c7ada63a47aeb945e629e3bdd3c3ced307120dfcc5e785fb6753c400b4a794159103ef5bf78f4cd6f3f18614640a091c686ff66bbf540c6638b4dd5412f1cc444f068449b5256ed90625d24ed1f49da7befae400b6863d4d7c79"}, {0x78, 0x111, 0x5, "8928af042c20ab9fbed679856f3c3af5f6cdb2d9a320944b2e07befe9b3c1ebe83e93e301555e4e2a01cf2bb89f03576e70743c59f6294fbaff4a642f35c51bb88bacc9d1c8e6e85a5a7d92254047c82be648890c2b1a4add02fdde818fa46a973db3b532976e242"}, {0x28, 0x102, 0x3ff, "198d4417b4e0319c26fa9b15871345266f"}, {0x50, 0x118, 0xffff0000, "08942b9fc7215d9817dc5efaae358b903a31a9576e39ba8350c65c7bfddf485edba8846bec5f0676de276990dbb82d11de4cbf4cdc03637c8f"}], 0x1e8}, 0x20000051) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.918489765s ago: executing program 1 (id=925): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xc965, 0x90a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\r\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="311a80beb5f079fe1e170e18145b0259cbddb4ae7ae99592ccf8e41e05f9cfe55f60038e8a4839f2ffe4f04d58b9b21159061f6dc0ac00d50e8d506d902896c18d0d054fd951746751f9bc35b90849a37b68c564705f7c17c41107cd8610acb4d990292bcb7d55bb47710dbf26252a93a06523e497b5a58ff88c5a2e94962196433cf2a428ce80268421f0013c13ebae89d24bfa906cd70a132e46f10e10c35ba56302bd853c03619c7ff032ae611d5637a670b5763bfb2b909deccd7a0f375d3232", @ANYRES64=r3], 0x20) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001600)={'vlan1\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xf98ca34) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 17.680455579s ago: executing program 3 (id=926): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020009000200300001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 17.028231859s ago: executing program 3 (id=927): r0 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0xc) r1 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYRESDEC], 0x31) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0x7}, {0x6}]}) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89ef, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8930, &(0x7f0000000040)={'wg2\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0xa, &(0x7f0000000180), 0x4) 3.129996734s ago: executing program 32 (id=923): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000040)="cbb6aa7a8a63ec2bf1dd0d3f0adf33b1f7b98611", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x15, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000160500000001000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000040)="cbb6aa7a8a63ec2bf1dd0d3f0adf33b1f7b98611", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x8020) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) socket$kcm(0x2, 0x922000000001, 0x106) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x15, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) 1.833559273s ago: executing program 33 (id=922): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 582.562602ms ago: executing program 34 (id=925): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xc965, 0x90a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYBLOB='\r\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="311a80beb5f079fe1e170e18145b0259cbddb4ae7ae99592ccf8e41e05f9cfe55f60038e8a4839f2ffe4f04d58b9b21159061f6dc0ac00d50e8d506d902896c18d0d054fd951746751f9bc35b90849a37b68c564705f7c17c41107cd8610acb4d990292bcb7d55bb47710dbf26252a93a06523e497b5a58ff88c5a2e94962196433cf2a428ce80268421f0013c13ebae89d24bfa906cd70a132e46f10e10c35ba56302bd853c03619c7ff032ae611d5637a670b5763bfb2b909deccd7a0f375d3232", @ANYRES64=r3], 0x20) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001600)={'vlan1\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0xf98ca34) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 35 (id=927): r0 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0xc) r1 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYRESDEC], 0x31) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0x7}, {0x6}]}) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89ef, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8930, &(0x7f0000000040)={'wg2\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0xa, &(0x7f0000000180), 0x4) kernel console output (not intermixed with test programs): ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.291079][ T7108] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.299528][ T7108] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 165.307528][ T7108] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 165.315528][ T7108] RBP: 00007fb400632e6f R08: 0000000000000000 R09: 0000000000000000 [ 165.323526][ T7108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.331517][ T7108] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 165.339537][ T7108] [ 165.575528][ T7113] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.431'. [ 165.613373][ T7113] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 165.636823][ T7113] CPU: 1 PID: 7113 Comm: syz.1.431 Not tainted syzkaller #0 [ 165.644217][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.654328][ T7113] Call Trace: [ 165.657669][ T7113] [ 165.660648][ T7113] dump_stack_lvl+0x18c/0x250 [ 165.665394][ T7113] ? show_regs_print_info+0x20/0x20 [ 165.670648][ T7113] ? load_image+0x420/0x420 [ 165.675218][ T7113] sysfs_warn_dup+0x8e/0xa0 [ 165.679769][ T7113] sysfs_do_create_link_sd+0xc0/0x110 [ 165.685195][ T7113] device_add_class_symlinks+0x1cf/0x240 [ 165.690890][ T7113] device_add+0x4f9/0xc40 [ 165.695283][ T7113] wiphy_register+0x1d99/0x2ac0 [ 165.700232][ T7113] ? cfg80211_event_work+0x40/0x40 [ 165.705400][ T7113] ? minstrel_ht_alloc+0x88a/0x990 [ 165.710577][ T7113] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 165.716807][ T7113] ieee80211_register_hw+0x2dd8/0x3b30 [ 165.722342][ T7113] ? ieee80211_register_hw+0xfc1/0x3b30 [ 165.727952][ T7113] ? ieee80211_tasklet_handler+0x20/0x20 [ 165.733633][ T7113] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 165.739608][ T7113] ? __debug_object_init+0xec/0x450 [ 165.744887][ T7113] ? __asan_memset+0x22/0x40 [ 165.749547][ T7113] ? __hrtimer_init+0x189/0x270 [ 165.754465][ T7113] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 165.760270][ T7113] ? mac80211_hwsim_free+0x220/0x220 [ 165.765605][ T7113] ? rcu_is_watching+0x15/0xb0 [ 165.770441][ T7113] ? kstrndup+0xbd/0x140 [ 165.774729][ T7113] hwsim_new_radio_nl+0xdad/0x1a70 [ 165.779888][ T7113] ? __nla_validate+0x50/0x50 [ 165.784608][ T7113] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 165.790989][ T7113] ? __nla_parse+0x40/0x50 [ 165.795440][ T7113] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 165.801810][ T7113] genl_family_rcv_msg_doit+0x21a/0x310 [ 165.807396][ T7113] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 165.813332][ T7113] ? bpf_lsm_capable+0x9/0x10 [ 165.818047][ T7113] ? security_capable+0x89/0xb0 [ 165.822940][ T7113] genl_rcv_msg+0x611/0x7a0 [ 165.827488][ T7113] ? genl_bind+0x360/0x360 [ 165.831937][ T7113] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 165.838308][ T7113] ? mark_lock+0x94/0x320 [ 165.842678][ T7113] netlink_rcv_skb+0x235/0x4c0 [ 165.847475][ T7113] ? genl_bind+0x360/0x360 [ 165.851930][ T7113] ? netlink_ack+0x1160/0x1160 [ 165.856736][ T7113] ? down_read+0x61/0x2e0 [ 165.861106][ T7113] ? down_read+0x1ac/0x2e0 [ 165.865563][ T7113] genl_rcv+0x28/0x40 [ 165.869579][ T7113] netlink_unicast+0x7b1/0x930 [ 165.874392][ T7113] netlink_sendmsg+0x8d0/0xbf0 [ 165.879191][ T7113] ? netlink_getsockopt+0x590/0x590 [ 165.884419][ T7113] ? aa_sock_msg_perm+0x94/0x150 [ 165.889392][ T7113] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 165.894717][ T7113] ? security_socket_sendmsg+0x80/0xa0 [ 165.900220][ T7113] ? netlink_getsockopt+0x590/0x590 [ 165.905457][ T7113] ____sys_sendmsg+0x61b/0x980 [ 165.910256][ T7113] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 165.916452][ T7113] ? __asan_memset+0x22/0x40 [ 165.921079][ T7113] ? __sys_sendmsg_sock+0x30/0x30 [ 165.926132][ T7113] ? __import_iovec+0x5f2/0x850 [ 165.931018][ T7113] ? import_iovec+0x73/0xa0 [ 165.935556][ T7113] ___sys_sendmsg+0x2a6/0x360 [ 165.940269][ T7113] ? __sys_sendmsg+0x2b0/0x2b0 [ 165.945111][ T7113] __se_sys_sendmsg+0x1d0/0x2c0 [ 165.950000][ T7113] ? __x64_sys_sendmsg+0x80/0x80 [ 165.954987][ T7113] ? lockdep_hardirqs_on+0x98/0x150 [ 165.960232][ T7113] do_syscall_64+0x55/0xb0 [ 165.964685][ T7113] ? clear_bhb_loop+0x40/0x90 [ 165.969395][ T7113] ? clear_bhb_loop+0x40/0x90 [ 165.974100][ T7113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.980037][ T7113] RIP: 0033:0x7f296319ce59 [ 165.984487][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.004135][ T7113] RSP: 002b:00007f2964060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.012652][ T7113] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319ce59 [ 166.020660][ T7113] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 166.028664][ T7113] RBP: 00007f2963232e6f R08: 0000000000000000 R09: 0000000000000000 [ 166.036663][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.044670][ T7113] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007fff07c60f68 [ 166.052697][ T7113] [ 166.317174][ T7123] Ÿë: port 1(gretap0) entered blocking state [ 166.326462][ T7123] Ÿë: port 1(gretap0) entered disabled state [ 166.332910][ T7123] gretap0: entered allmulticast mode [ 166.359533][ T7123] gretap0: entered promiscuous mode [ 166.411111][ T7128] netlink: 'syz.1.437': attribute type 11 has an invalid length. [ 166.423274][ T7128] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.437'. [ 166.464094][ T5830] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 166.496994][ T7128] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 166.525025][ T7128] CPU: 1 PID: 7128 Comm: syz.1.437 Not tainted syzkaller #0 [ 166.532444][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.542560][ T7128] Call Trace: [ 166.545893][ T7128] [ 166.548873][ T7128] dump_stack_lvl+0x18c/0x250 [ 166.553622][ T7128] ? show_regs_print_info+0x20/0x20 [ 166.558892][ T7128] ? load_image+0x420/0x420 [ 166.563478][ T7128] sysfs_warn_dup+0x8e/0xa0 [ 166.568053][ T7128] sysfs_do_create_link_sd+0xc0/0x110 [ 166.573496][ T7128] device_add_class_symlinks+0x1cf/0x240 [ 166.579207][ T7128] device_add+0x4f9/0xc40 [ 166.583602][ T7128] wiphy_register+0x1d99/0x2ac0 [ 166.588540][ T7128] ? cfg80211_event_work+0x40/0x40 [ 166.593689][ T7128] ? minstrel_ht_alloc+0x88a/0x990 [ 166.598849][ T7128] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 166.604975][ T7128] ieee80211_register_hw+0x2dd8/0x3b30 [ 166.610519][ T7128] ? ieee80211_register_hw+0xfc1/0x3b30 [ 166.616128][ T7128] ? ieee80211_tasklet_handler+0x20/0x20 [ 166.621802][ T7128] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 166.627746][ T7128] ? __debug_object_init+0xec/0x450 [ 166.633000][ T7128] ? __asan_memset+0x22/0x40 [ 166.637734][ T7128] ? __hrtimer_init+0x189/0x270 [ 166.642638][ T7128] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 166.648431][ T7128] ? mac80211_hwsim_free+0x220/0x220 [ 166.653759][ T7128] ? rcu_is_watching+0x15/0xb0 [ 166.658647][ T7128] ? kstrndup+0xbd/0x140 [ 166.662942][ T7128] hwsim_new_radio_nl+0xdad/0x1a70 [ 166.668106][ T7128] ? __nla_validate+0x50/0x50 [ 166.672833][ T7128] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 166.679225][ T7128] ? __nla_parse+0x40/0x50 [ 166.683691][ T7128] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 166.690083][ T7128] genl_family_rcv_msg_doit+0x21a/0x310 [ 166.695690][ T7128] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 166.701641][ T7128] ? bpf_lsm_capable+0x9/0x10 [ 166.706404][ T7128] ? security_capable+0x89/0xb0 [ 166.711325][ T7128] genl_rcv_msg+0x611/0x7a0 [ 166.715898][ T7128] ? genl_bind+0x360/0x360 [ 166.720366][ T7128] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 166.726738][ T7128] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 166.733464][ T7128] ? ref_tracker_free+0x686/0x830 [ 166.738545][ T7128] netlink_rcv_skb+0x235/0x4c0 [ 166.743357][ T7128] ? genl_bind+0x360/0x360 [ 166.747823][ T7128] ? netlink_ack+0x1160/0x1160 [ 166.752643][ T7128] ? __lock_acquire+0x7d80/0x7d80 [ 166.757720][ T7128] ? down_read+0x1ac/0x2e0 [ 166.762185][ T7128] genl_rcv+0x28/0x40 [ 166.766224][ T7128] netlink_unicast+0x7b1/0x930 [ 166.771051][ T7128] netlink_sendmsg+0x8d0/0xbf0 [ 166.775877][ T7128] ? netlink_getsockopt+0x590/0x590 [ 166.781112][ T7128] ? aa_sock_msg_perm+0x94/0x150 [ 166.786101][ T7128] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.791432][ T7128] ? security_socket_sendmsg+0x80/0xa0 [ 166.796927][ T7128] ? netlink_getsockopt+0x590/0x590 [ 166.802167][ T7128] ____sys_sendmsg+0x61b/0x980 [ 166.806987][ T7128] ? __asan_memset+0x22/0x40 [ 166.811639][ T7128] ? __sys_sendmsg_sock+0x30/0x30 [ 166.816713][ T7128] ? __import_iovec+0x5f2/0x850 [ 166.821623][ T7128] ? import_iovec+0x73/0xa0 [ 166.826169][ T7128] ___sys_sendmsg+0x2a6/0x360 [ 166.830897][ T7128] ? __sys_sendmsg+0x2b0/0x2b0 [ 166.835776][ T7128] __se_sys_sendmsg+0x1d0/0x2c0 [ 166.840668][ T7128] ? perf_trace_preemptirq_template+0x269/0x330 [ 166.846969][ T7128] ? __x64_sys_sendmsg+0x80/0x80 [ 166.851973][ T7128] ? lockdep_hardirqs_on+0x98/0x150 [ 166.857239][ T7128] do_syscall_64+0x55/0xb0 [ 166.861697][ T7128] ? clear_bhb_loop+0x40/0x90 [ 166.866407][ T7128] ? clear_bhb_loop+0x40/0x90 [ 166.871112][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.877054][ T7128] RIP: 0033:0x7f296319ce59 [ 166.881506][ T7128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.901144][ T7128] RSP: 002b:00007f2964060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.909602][ T7128] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319ce59 [ 166.917625][ T7128] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 166.925628][ T7128] RBP: 00007f2963232e6f R08: 0000000000000000 R09: 0000000000000000 [ 166.933643][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.941656][ T7128] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007fff07c60f68 [ 166.949692][ T7128] [ 167.582357][ T7140] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.441'. [ 167.666568][ T7140] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 167.684062][ T7140] CPU: 0 PID: 7140 Comm: syz.1.441 Not tainted syzkaller #0 [ 167.691447][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.701555][ T7140] Call Trace: [ 167.704884][ T7140] [ 167.707866][ T7140] dump_stack_lvl+0x18c/0x250 [ 167.712601][ T7140] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.718834][ T7140] ? show_regs_print_info+0x20/0x20 [ 167.724099][ T7140] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.730346][ T7140] sysfs_warn_dup+0x8e/0xa0 [ 167.734915][ T7140] sysfs_do_create_link_sd+0xc0/0x110 [ 167.740360][ T7140] device_add_class_symlinks+0x1cf/0x240 [ 167.746061][ T7140] device_add+0x4f9/0xc40 [ 167.750461][ T7140] wiphy_register+0x1d99/0x2ac0 [ 167.755400][ T7140] ? cfg80211_event_work+0x40/0x40 [ 167.760571][ T7140] ? minstrel_ht_alloc+0x88a/0x990 [ 167.765749][ T7140] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 167.771907][ T7140] ieee80211_register_hw+0x2dd8/0x3b30 [ 167.777455][ T7140] ? ieee80211_register_hw+0xfc1/0x3b30 [ 167.783085][ T7140] ? ieee80211_tasklet_handler+0x20/0x20 [ 167.788788][ T7140] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 167.794752][ T7140] ? __debug_object_init+0xec/0x450 [ 167.800031][ T7140] ? __asan_memset+0x22/0x40 [ 167.804686][ T7140] ? __hrtimer_init+0x189/0x270 [ 167.809606][ T7140] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 167.815413][ T7140] ? mac80211_hwsim_free+0x220/0x220 [ 167.820755][ T7140] ? rcu_is_watching+0x15/0xb0 [ 167.825580][ T7140] ? kstrndup+0xbd/0x140 [ 167.829891][ T7140] hwsim_new_radio_nl+0xdad/0x1a70 [ 167.835073][ T7140] ? __nla_validate+0x50/0x50 [ 167.839824][ T7140] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 167.846222][ T7140] ? __nla_parse+0x24/0x50 [ 167.850699][ T7140] ? __nla_parse+0x40/0x50 [ 167.855191][ T7140] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 167.861635][ T7140] genl_family_rcv_msg_doit+0x21a/0x310 [ 167.867263][ T7140] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 167.873244][ T7140] ? bpf_lsm_capable+0x9/0x10 [ 167.877993][ T7140] ? security_capable+0x89/0xb0 [ 167.882917][ T7140] genl_rcv_msg+0x611/0x7a0 [ 167.887504][ T7140] ? genl_bind+0x360/0x360 [ 167.891986][ T7140] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 167.898380][ T7140] ? lockdep_hardirqs_on+0x98/0x150 [ 167.903645][ T7140] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.909876][ T7140] netlink_rcv_skb+0x235/0x4c0 [ 167.914712][ T7140] ? genl_bind+0x360/0x360 [ 167.919188][ T7140] ? netlink_ack+0x1160/0x1160 [ 167.924024][ T7140] ? __lock_acquire+0x7d80/0x7d80 [ 167.929110][ T7140] ? down_read+0x1ac/0x2e0 [ 167.933581][ T7140] genl_rcv+0x28/0x40 [ 167.937616][ T7140] netlink_unicast+0x7b1/0x930 [ 167.942452][ T7140] netlink_sendmsg+0x8d0/0xbf0 [ 167.947272][ T7140] ? lockdep_hardirqs_on+0x98/0x150 [ 167.952547][ T7140] ? netlink_getsockopt+0x590/0x590 [ 167.957808][ T7140] ? aa_sock_msg_perm+0x94/0x150 [ 167.962808][ T7140] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 167.968151][ T7140] ? security_socket_sendmsg+0x80/0xa0 [ 167.973661][ T7140] ? netlink_getsockopt+0x590/0x590 [ 167.978919][ T7140] ____sys_sendmsg+0x61b/0x980 [ 167.983771][ T7140] ? __asan_memset+0x22/0x40 [ 167.988444][ T7140] ? __sys_sendmsg_sock+0x30/0x30 [ 167.993532][ T7140] ? __import_iovec+0x5f2/0x850 [ 167.998449][ T7140] ? import_iovec+0x73/0xa0 [ 168.003015][ T7140] ___sys_sendmsg+0x2a6/0x360 [ 168.007763][ T7140] ? __sys_sendmsg+0x2b0/0x2b0 [ 168.012606][ T7140] ? ktime_get+0x7f/0x280 [ 168.017056][ T7140] __se_sys_sendmsg+0x1d0/0x2c0 [ 168.021967][ T7140] ? __x64_sys_sendmsg+0x80/0x80 [ 168.026990][ T7140] ? lockdep_hardirqs_on+0x98/0x150 [ 168.032321][ T7140] do_syscall_64+0x55/0xb0 [ 168.036806][ T7140] ? clear_bhb_loop+0x40/0x90 [ 168.041541][ T7140] ? clear_bhb_loop+0x40/0x90 [ 168.046278][ T7140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.052237][ T7140] RIP: 0033:0x7f296319ce59 [ 168.056711][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.076402][ T7140] RSP: 002b:00007f2964060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.084872][ T7140] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319ce59 [ 168.092921][ T7140] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 168.100930][ T7140] RBP: 00007f2963232e6f R08: 0000000000000000 R09: 0000000000000000 [ 168.108938][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.116939][ T7140] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007fff07c60f68 [ 168.124963][ T7140] [ 168.279865][ T7147] netlink: 'syz.2.446': attribute type 3 has an invalid length. [ 168.288513][ T7147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.446'. [ 169.258980][ T7148] netlink: 140 bytes leftover after parsing attributes in process `syz.2.446'. [ 169.286349][ T7148] netlink: 10 bytes leftover after parsing attributes in process `syz.2.446'. [ 169.299048][ T7148] bond0: (slave bond_slave_0): Releasing backup interface [ 169.318037][ T7148] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 169.394329][ T7155] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 169.433691][ T7161] FAULT_INJECTION: forcing a failure. [ 169.433691][ T7161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.452434][ T7161] CPU: 0 PID: 7161 Comm: syz.3.449 Not tainted syzkaller #0 [ 169.459795][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.469900][ T7161] Call Trace: [ 169.473223][ T7161] [ 169.476193][ T7161] dump_stack_lvl+0x18c/0x250 [ 169.480909][ T7161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.487107][ T7161] ? show_regs_print_info+0x20/0x20 [ 169.492338][ T7161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.498550][ T7161] should_fail_ex+0x394/0x4c0 [ 169.503270][ T7161] _copy_from_user+0x2f/0xe0 [ 169.507894][ T7161] __sys_bpf+0x23e/0x890 [ 169.512168][ T7161] ? bpf_link_show_fdinfo+0x390/0x390 [ 169.517579][ T7161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.523781][ T7161] __x64_sys_bpf+0x7c/0x90 [ 169.528223][ T7161] do_syscall_64+0x55/0xb0 [ 169.532668][ T7161] ? clear_bhb_loop+0x40/0x90 [ 169.537373][ T7161] ? clear_bhb_loop+0x40/0x90 [ 169.542083][ T7161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.548010][ T7161] RIP: 0033:0x7fb40059ce59 [ 169.552487][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.572132][ T7161] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.580581][ T7161] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 169.588606][ T7161] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 169.596602][ T7161] RBP: 00007fb401428090 R08: 0000000000000000 R09: 0000000000000000 [ 169.604594][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.612587][ T7161] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 169.620597][ T7161] [ 171.788002][ T7158] netlink: 128 bytes leftover after parsing attributes in process `syz.0.448'. [ 171.800571][ T7158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.068405][ T7178] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.455'. [ 172.127701][ T7178] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 172.145603][ T7178] CPU: 1 PID: 7178 Comm: syz.1.455 Not tainted syzkaller #0 [ 172.152984][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.163099][ T7178] Call Trace: [ 172.166454][ T7178] [ 172.169450][ T7178] dump_stack_lvl+0x18c/0x250 [ 172.174222][ T7178] ? show_regs_print_info+0x20/0x20 [ 172.179500][ T7178] ? load_image+0x420/0x420 [ 172.184108][ T7178] sysfs_warn_dup+0x8e/0xa0 [ 172.188695][ T7178] sysfs_do_create_link_sd+0xc0/0x110 [ 172.194159][ T7178] device_add_class_symlinks+0x1cf/0x240 [ 172.199888][ T7178] device_add+0x4f9/0xc40 [ 172.204312][ T7178] wiphy_register+0x1d99/0x2ac0 [ 172.209292][ T7178] ? cfg80211_event_work+0x40/0x40 [ 172.214479][ T7178] ? minstrel_ht_alloc+0x88a/0x990 [ 172.219691][ T7178] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 172.225850][ T7178] ieee80211_register_hw+0x2dd8/0x3b30 [ 172.231416][ T7178] ? ieee80211_register_hw+0xfc1/0x3b30 [ 172.237035][ T7178] ? ieee80211_tasklet_handler+0x20/0x20 [ 172.242724][ T7178] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 172.248660][ T7178] ? __debug_object_init+0xec/0x450 [ 172.253959][ T7178] ? __asan_memset+0x22/0x40 [ 172.258650][ T7178] ? __hrtimer_init+0x189/0x270 [ 172.263581][ T7178] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 172.269390][ T7178] ? mac80211_hwsim_free+0x220/0x220 [ 172.274724][ T7178] ? rcu_is_watching+0x15/0xb0 [ 172.279589][ T7178] ? kstrndup+0xbd/0x140 [ 172.283903][ T7178] hwsim_new_radio_nl+0xdad/0x1a70 [ 172.289102][ T7178] ? __nla_validate+0x50/0x50 [ 172.293890][ T7178] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 172.300314][ T7178] ? __nla_parse+0x40/0x50 [ 172.304788][ T7178] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 172.311212][ T7178] genl_family_rcv_msg_doit+0x21a/0x310 [ 172.316850][ T7178] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 172.322861][ T7178] ? bpf_lsm_capable+0x9/0x10 [ 172.327617][ T7178] ? security_capable+0x89/0xb0 [ 172.332556][ T7178] genl_rcv_msg+0x611/0x7a0 [ 172.337160][ T7178] ? genl_bind+0x360/0x360 [ 172.341654][ T7178] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 172.347702][ T7178] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 172.354092][ T7178] ? ref_tracker_free+0x686/0x830 [ 172.359215][ T7178] netlink_rcv_skb+0x235/0x4c0 [ 172.364062][ T7178] ? genl_bind+0x360/0x360 [ 172.368536][ T7178] ? netlink_ack+0x1160/0x1160 [ 172.373351][ T7178] ? __lock_acquire+0x7d80/0x7d80 [ 172.378446][ T7178] ? down_read+0x1ac/0x2e0 [ 172.382947][ T7178] genl_rcv+0x28/0x40 [ 172.386968][ T7178] netlink_unicast+0x7b1/0x930 [ 172.391782][ T7178] netlink_sendmsg+0x8d0/0xbf0 [ 172.396576][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 172.401831][ T7178] ? netlink_getsockopt+0x590/0x590 [ 172.407092][ T7178] ? security_socket_sendmsg+0x37/0xa0 [ 172.412637][ T7178] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 172.417990][ T7178] ? security_socket_sendmsg+0x80/0xa0 [ 172.423515][ T7178] ? netlink_getsockopt+0x590/0x590 [ 172.428774][ T7178] ____sys_sendmsg+0x61b/0x980 [ 172.433609][ T7178] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.439815][ T7178] ? __asan_memset+0x22/0x40 [ 172.444450][ T7178] ? __sys_sendmsg_sock+0x30/0x30 [ 172.449532][ T7178] ? __import_iovec+0x5f2/0x850 [ 172.454445][ T7178] ? import_iovec+0x73/0xa0 [ 172.459027][ T7178] ___sys_sendmsg+0x2a6/0x360 [ 172.463790][ T7178] ? __sys_sendmsg+0x2b0/0x2b0 [ 172.468646][ T7178] ? ktime_get+0x7f/0x280 [ 172.473053][ T7178] __se_sys_sendmsg+0x1d0/0x2c0 [ 172.478171][ T7178] ? __x64_sys_sendmsg+0x80/0x80 [ 172.483196][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 172.488442][ T7178] do_syscall_64+0x55/0xb0 [ 172.492894][ T7178] ? clear_bhb_loop+0x40/0x90 [ 172.497612][ T7178] ? clear_bhb_loop+0x40/0x90 [ 172.502342][ T7178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.508298][ T7178] RIP: 0033:0x7f296319ce59 [ 172.512784][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.532444][ T7178] RSP: 002b:00007f2964060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.540907][ T7178] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319ce59 [ 172.548955][ T7178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 172.556976][ T7178] RBP: 00007f2963232e6f R08: 0000000000000000 R09: 0000000000000000 [ 172.565012][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.573033][ T7178] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007fff07c60f68 [ 172.581098][ T7178] [ 172.612639][ T7180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.456'. [ 172.766933][ T7188] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 172.804338][ T7188] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.459'. [ 173.929337][ T7199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.462'. [ 174.069973][ T7199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.431190][ T7212] netlink: 128 bytes leftover after parsing attributes in process `syz.0.465'. [ 174.453604][ T7212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.477561][ T7214] netlink: 'syz.3.467': attribute type 3 has an invalid length. [ 175.501379][ T7214] netlink: 132 bytes leftover after parsing attributes in process `syz.3.467'. [ 175.767747][ T7220] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.468'. [ 176.089978][ T7220] netlink: 21056 bytes leftover after parsing attributes in process `syz.2.468'. [ 176.120311][ T7220] tipc: Started in network mode [ 176.128851][ T7220] tipc: Node identity 1a, cluster identity 106 [ 176.136059][ T7220] tipc: Node number set to 26 [ 176.143601][ T7219] netlink: 140 bytes leftover after parsing attributes in process `syz.3.467'. [ 176.180557][ T7219] bond0: (slave bond_slave_0): Releasing backup interface [ 176.198402][ T7219] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 177.757969][ T7224] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 177.772142][ T7224] CPU: 0 PID: 7224 Comm: syz.0.469 Not tainted syzkaller #0 [ 177.779528][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.789646][ T7224] Call Trace: [ 177.792980][ T7224] [ 177.795967][ T7224] dump_stack_lvl+0x18c/0x250 [ 177.800720][ T7224] ? show_regs_print_info+0x20/0x20 [ 177.805984][ T7224] ? load_image+0x420/0x420 [ 177.810575][ T7224] sysfs_warn_dup+0x8e/0xa0 [ 177.815172][ T7224] sysfs_do_create_link_sd+0xc0/0x110 [ 177.820613][ T7224] device_add_class_symlinks+0x1cf/0x240 [ 177.826321][ T7224] device_add+0x4f9/0xc40 [ 177.830728][ T7224] wiphy_register+0x1d99/0x2ac0 [ 177.835672][ T7224] ? cfg80211_event_work+0x40/0x40 [ 177.840853][ T7224] ? minstrel_ht_alloc+0x88a/0x990 [ 177.846041][ T7224] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 177.852192][ T7224] ieee80211_register_hw+0x2dd8/0x3b30 [ 177.857738][ T7224] ? ieee80211_register_hw+0xfc1/0x3b30 [ 177.863365][ T7224] ? ieee80211_tasklet_handler+0x20/0x20 [ 177.869063][ T7224] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 177.875038][ T7224] ? __debug_object_init+0xec/0x450 [ 177.880306][ T7224] ? __asan_memset+0x22/0x40 [ 177.884958][ T7224] ? __hrtimer_init+0x189/0x270 [ 177.889875][ T7224] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 177.895699][ T7224] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.901953][ T7224] ? mac80211_hwsim_free+0x220/0x220 [ 177.907303][ T7224] ? rcu_is_watching+0x15/0xb0 [ 177.912140][ T7224] ? kstrndup+0xbd/0x140 [ 177.916486][ T7224] hwsim_new_radio_nl+0xdad/0x1a70 [ 177.921670][ T7224] ? mark_lock+0x94/0x320 [ 177.926074][ T7224] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 177.932458][ T7224] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 177.938773][ T7224] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.945002][ T7224] ? lockdep_hardirqs_on+0x98/0x150 [ 177.950272][ T7224] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.956522][ T7224] genl_family_rcv_msg_doit+0x21a/0x310 [ 177.962154][ T7224] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 177.968133][ T7224] ? ns_capable+0x89/0xe0 [ 177.972536][ T7224] ? __sanitizer_cov_trace_pc+0x5c/0x60 [ 177.978150][ T7224] genl_rcv_msg+0x611/0x7a0 [ 177.982737][ T7224] ? genl_bind+0x360/0x360 [ 177.987221][ T7224] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 177.993614][ T7224] ? kasan_check_range+0x1af/0x290 [ 177.998808][ T7224] netlink_rcv_skb+0x235/0x4c0 [ 178.003636][ T7224] ? genl_bind+0x360/0x360 [ 178.008113][ T7224] ? netlink_ack+0x1160/0x1160 [ 178.012957][ T7224] ? __lock_acquire+0x7d80/0x7d80 [ 178.018050][ T7224] ? down_read+0x1ac/0x2e0 [ 178.022531][ T7224] genl_rcv+0x28/0x40 [ 178.026570][ T7224] netlink_unicast+0x7b1/0x930 [ 178.031406][ T7224] netlink_sendmsg+0x8d0/0xbf0 [ 178.036225][ T7224] ? lockdep_hardirqs_on+0x98/0x150 [ 178.041502][ T7224] ? netlink_getsockopt+0x590/0x590 [ 178.046763][ T7224] ? aa_sock_msg_perm+0x94/0x150 [ 178.051801][ T7224] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.057154][ T7224] ? security_socket_sendmsg+0x80/0xa0 [ 178.062676][ T7224] ? netlink_getsockopt+0x590/0x590 [ 178.067939][ T7224] ____sys_sendmsg+0x61b/0x980 [ 178.072781][ T7224] ? __asan_memset+0x22/0x40 [ 178.077476][ T7224] ? __sys_sendmsg_sock+0x30/0x30 [ 178.082567][ T7224] ? __import_iovec+0x5f2/0x850 [ 178.087491][ T7224] ? import_iovec+0x73/0xa0 [ 178.092058][ T7224] ___sys_sendmsg+0x2a6/0x360 [ 178.096815][ T7224] ? __sys_sendmsg+0x2b0/0x2b0 [ 178.101707][ T7224] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.106624][ T7224] ? __x64_sys_sendmsg+0x80/0x80 [ 178.111645][ T7224] ? syscall_enter_from_user_mode+0x2e/0x80 [ 178.117624][ T7224] do_syscall_64+0x55/0xb0 [ 178.122099][ T7224] ? clear_bhb_loop+0x40/0x90 [ 178.126835][ T7224] ? clear_bhb_loop+0x40/0x90 [ 178.131572][ T7224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.137537][ T7224] RIP: 0033:0x7f2abc59ce59 [ 178.142009][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.161678][ T7224] RSP: 002b:00007f2abd54a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.170169][ T7224] RAX: ffffffffffffffda RBX: 00007f2abc815fa0 RCX: 00007f2abc59ce59 [ 178.178199][ T7224] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 178.186232][ T7224] RBP: 00007f2abc632e6f R08: 0000000000000000 R09: 0000000000000000 [ 178.194282][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.202314][ T7224] R13: 00007f2abc816038 R14: 00007f2abc815fa0 R15: 00007ffccbd0ecc8 [ 178.210374][ T7224] [ 178.432213][ T7236] FAULT_INJECTION: forcing a failure. [ 178.432213][ T7236] name failslab, interval 1, probability 0, space 0, times 0 [ 178.454768][ T7236] CPU: 0 PID: 7236 Comm: syz.2.473 Not tainted syzkaller #0 [ 178.462139][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.472311][ T7236] Call Trace: [ 178.475619][ T7236] [ 178.478580][ T7236] dump_stack_lvl+0x18c/0x250 [ 178.483302][ T7236] ? show_regs_print_info+0x20/0x20 [ 178.488556][ T7236] ? load_image+0x420/0x420 [ 178.493111][ T7236] ? __might_sleep+0xe0/0xe0 [ 178.497770][ T7236] ? __lock_acquire+0x7d80/0x7d80 [ 178.502857][ T7236] should_fail_ex+0x394/0x4c0 [ 178.507629][ T7236] should_failslab+0x9/0x20 [ 178.512188][ T7236] slab_pre_alloc_hook+0x59/0x300 [ 178.517270][ T7236] kmem_cache_alloc+0x5a/0x2c0 [ 178.522073][ T7236] ? security_file_alloc+0x34/0x120 [ 178.527326][ T7236] security_file_alloc+0x34/0x120 [ 178.532416][ T7236] init_file+0x94/0x1f0 [ 178.536632][ T7236] alloc_empty_file+0xb7/0x1d0 [ 178.541456][ T7236] alloc_file+0x5b/0x600 [ 178.545767][ T7236] alloc_file_pseudo+0x184/0x210 [ 178.550780][ T7236] ? alloc_empty_backing_file+0xe0/0xe0 [ 178.556386][ T7236] ? __lock_acquire+0x7d80/0x7d80 [ 178.561461][ T7236] ? __local_bh_enable_ip+0x13a/0x1c0 [ 178.566878][ T7236] ? _local_bh_enable+0xa0/0xa0 [ 178.571776][ T7236] anon_inode_getfile+0xc5/0x1a0 [ 178.576802][ T7236] bpf_link_prime+0xa6/0x1d0 [ 178.581425][ T7236] tcx_link_attach+0x218/0x960 [ 178.586271][ T7236] ? tcx_prog_query+0x140/0x140 [ 178.591337][ T7236] ? __fget_files+0x3fc/0x460 [ 178.596060][ T7236] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 178.602603][ T7236] link_create+0x390/0x720 [ 178.607057][ T7236] __sys_bpf+0x4d7/0x890 [ 178.611335][ T7236] ? bpf_link_show_fdinfo+0x390/0x390 [ 178.616753][ T7236] ? lock_chain_count+0x20/0x20 [ 178.621646][ T7236] __x64_sys_bpf+0x7c/0x90 [ 178.626093][ T7236] do_syscall_64+0x55/0xb0 [ 178.630544][ T7236] ? clear_bhb_loop+0x40/0x90 [ 178.635251][ T7236] ? clear_bhb_loop+0x40/0x90 [ 178.639957][ T7236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.645891][ T7236] RIP: 0033:0x7fb92139ce59 [ 178.650337][ T7236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.669973][ T7236] RSP: 002b:00007fb91f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.678418][ T7236] RAX: ffffffffffffffda RBX: 00007fb921615fa0 RCX: 00007fb92139ce59 [ 178.686439][ T7236] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 000000000000001c [ 178.694439][ T7236] RBP: 00007fb91f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.702440][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.710438][ T7236] R13: 00007fb921616038 R14: 00007fb921615fa0 R15: 00007ffc5babdfa8 [ 178.718449][ T7236] [ 179.265535][ T7247] __nla_validate_parse: 2 callbacks suppressed [ 179.265568][ T7247] netlink: 128 bytes leftover after parsing attributes in process `syz.2.478'. [ 179.366051][ T7247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.009300][ T7265] netlink: 128 bytes leftover after parsing attributes in process `syz.2.491'. [ 180.054169][ T7265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.191196][ T7270] netlink: 'syz.0.484': attribute type 3 has an invalid length. [ 180.211548][ T7270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.484'. [ 180.788262][ T7274] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.485'. [ 180.875349][ T7274] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 180.909477][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.955274][ T7272] netlink: 140 bytes leftover after parsing attributes in process `syz.0.484'. [ 180.986727][ T7272] netlink: 10 bytes leftover after parsing attributes in process `syz.0.484'. [ 181.004160][ T7272] bond0: (slave bond_slave_0): Releasing backup interface [ 181.027569][ T7272] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 183.674142][ T7295] netlink: 'syz.2.493': attribute type 41 has an invalid length. [ 183.894586][ T7300] netlink: 128 bytes leftover after parsing attributes in process `syz.2.495'. [ 183.989866][ T7300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.492211][ T7318] netlink: 'syz.1.500': attribute type 9 has an invalid length. [ 184.507665][ T7318] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.500'. [ 184.577769][ T7318] sctp: [Deprecated]: syz.1.500 (pid 7318) Use of int in max_burst socket option deprecated. [ 184.577769][ T7318] Use struct sctp_assoc_value instead [ 186.589448][ T7350] netlink: 128 bytes leftover after parsing attributes in process `syz.3.512'. [ 186.663086][ T7350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.029709][ T7366] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.517'. [ 188.398180][ T7379] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.529'. [ 188.457487][ T7379] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 188.481400][ T7379] CPU: 0 PID: 7379 Comm: syz.0.529 Not tainted syzkaller #0 [ 188.488781][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.498894][ T7379] Call Trace: [ 188.502217][ T7379] [ 188.505201][ T7379] dump_stack_lvl+0x18c/0x250 [ 188.509951][ T7379] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.516179][ T7379] ? show_regs_print_info+0x20/0x20 [ 188.521455][ T7379] ? _printk+0x11d/0x130 [ 188.525764][ T7379] sysfs_warn_dup+0x8e/0xa0 [ 188.530329][ T7379] sysfs_do_create_link_sd+0xc0/0x110 [ 188.535774][ T7379] device_add_class_symlinks+0x1cf/0x240 [ 188.541480][ T7379] device_add+0x4f9/0xc40 [ 188.545883][ T7379] wiphy_register+0x1d99/0x2ac0 [ 188.550824][ T7379] ? cfg80211_event_work+0x40/0x40 [ 188.556012][ T7379] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 188.562253][ T7379] ? ieee80211_register_hw+0x2c1d/0x3b30 [ 188.567962][ T7379] ieee80211_register_hw+0x2dd8/0x3b30 [ 188.573503][ T7379] ? ieee80211_register_hw+0xfc1/0x3b30 [ 188.579130][ T7379] ? ieee80211_tasklet_handler+0x20/0x20 [ 188.584829][ T7379] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 188.590796][ T7379] ? __debug_object_init+0xec/0x450 [ 188.596066][ T7379] ? __asan_memset+0x22/0x40 [ 188.600697][ T7379] ? __hrtimer_init+0x189/0x270 [ 188.605592][ T7379] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 188.611346][ T7379] ? lock_chain_count+0x20/0x20 [ 188.616245][ T7379] ? mac80211_hwsim_free+0x220/0x220 [ 188.621566][ T7379] ? kstrndup+0xbd/0x140 [ 188.625853][ T7379] hwsim_new_radio_nl+0xdad/0x1a70 [ 188.631017][ T7379] ? __nla_validate+0x50/0x50 [ 188.635733][ T7379] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 188.642103][ T7379] ? __nla_parse+0x40/0x50 [ 188.646563][ T7379] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 188.652933][ T7379] genl_family_rcv_msg_doit+0x21a/0x310 [ 188.658528][ T7379] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 188.664472][ T7379] ? bpf_lsm_capable+0x9/0x10 [ 188.669182][ T7379] ? security_capable+0x89/0xb0 [ 188.674076][ T7379] genl_rcv_msg+0x611/0x7a0 [ 188.678620][ T7379] ? genl_bind+0x360/0x360 [ 188.683061][ T7379] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.689070][ T7379] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 188.695435][ T7379] ? ref_tracker_free+0x686/0x830 [ 188.700498][ T7379] netlink_rcv_skb+0x235/0x4c0 [ 188.705296][ T7379] ? genl_bind+0x360/0x360 [ 188.709744][ T7379] ? netlink_ack+0x1160/0x1160 [ 188.714548][ T7379] ? __lock_acquire+0x7d80/0x7d80 [ 188.719614][ T7379] ? down_read+0x1ac/0x2e0 [ 188.724106][ T7379] genl_rcv+0x28/0x40 [ 188.728160][ T7379] netlink_unicast+0x7b1/0x930 [ 188.732964][ T7379] netlink_sendmsg+0x8d0/0xbf0 [ 188.737784][ T7379] ? lockdep_hardirqs_on+0x98/0x150 [ 188.743034][ T7379] ? netlink_getsockopt+0x590/0x590 [ 188.748274][ T7379] ? netlink_getsockopt+0x590/0x590 [ 188.753507][ T7379] ____sys_sendmsg+0x61b/0x980 [ 188.758315][ T7379] ? __asan_memset+0x22/0x40 [ 188.762934][ T7379] ? __sys_sendmsg_sock+0x30/0x30 [ 188.767992][ T7379] ? __import_iovec+0x5f2/0x850 [ 188.772880][ T7379] ? import_iovec+0x73/0xa0 [ 188.777419][ T7379] ___sys_sendmsg+0x2a6/0x360 [ 188.782147][ T7379] ? __sys_sendmsg+0x2b0/0x2b0 [ 188.786986][ T7379] __se_sys_sendmsg+0x1d0/0x2c0 [ 188.791875][ T7379] ? __x64_sys_sendmsg+0x80/0x80 [ 188.796859][ T7379] ? syscall_enter_from_user_mode+0x2e/0x80 [ 188.802799][ T7379] do_syscall_64+0x55/0xb0 [ 188.807245][ T7379] ? clear_bhb_loop+0x40/0x90 [ 188.811950][ T7379] ? clear_bhb_loop+0x40/0x90 [ 188.816657][ T7379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.822596][ T7379] RIP: 0033:0x7f2abc59ce59 [ 188.827050][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.846688][ T7379] RSP: 002b:00007f2abd54a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.855137][ T7379] RAX: ffffffffffffffda RBX: 00007f2abc815fa0 RCX: 00007f2abc59ce59 [ 188.863139][ T7379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 188.871143][ T7379] RBP: 00007f2abc632e6f R08: 0000000000000000 R09: 0000000000000000 [ 188.879146][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.887149][ T7379] R13: 00007f2abc816038 R14: 00007f2abc815fa0 R15: 00007ffccbd0ecc8 [ 188.895178][ T7379] [ 189.056699][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'. [ 189.448664][ T7394] FAULT_INJECTION: forcing a failure. [ 189.448664][ T7394] name failslab, interval 1, probability 0, space 0, times 0 [ 189.479202][ T7394] CPU: 1 PID: 7394 Comm: syz.3.524 Not tainted syzkaller #0 [ 189.486630][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.496748][ T7394] Call Trace: [ 189.500075][ T7394] [ 189.503058][ T7394] dump_stack_lvl+0x18c/0x250 [ 189.507798][ T7394] ? show_regs_print_info+0x20/0x20 [ 189.513164][ T7394] ? load_image+0x420/0x420 [ 189.517769][ T7394] ? kasan_set_track+0x5f/0x70 [ 189.522582][ T7394] ? __kasan_slab_alloc+0x6c/0x80 [ 189.527672][ T7394] ? kmem_cache_alloc_node+0x1af/0x310 [ 189.533232][ T7394] should_fail_ex+0x394/0x4c0 [ 189.537990][ T7394] should_failslab+0x9/0x20 [ 189.542605][ T7394] slab_pre_alloc_hook+0x59/0x300 [ 189.547704][ T7394] ? inet6_dump_fib+0x277/0xa40 [ 189.552608][ T7394] __kmem_cache_alloc_node+0x53/0x250 [ 189.558050][ T7394] ? inet6_dump_fib+0x277/0xa40 [ 189.563006][ T7394] kmalloc_trace+0x2a/0xe0 [ 189.567504][ T7394] inet6_dump_fib+0x277/0xa40 [ 189.572252][ T7394] ? inet_dump_fib+0x337/0xb50 [ 189.577081][ T7394] ? fib6_run_gc+0x8a0/0x8a0 [ 189.581748][ T7394] ? fib6_run_gc+0x8a0/0x8a0 [ 189.586396][ T7394] rtnl_dump_all+0x31f/0x540 [ 189.591078][ T7394] netlink_dump+0x7b1/0xec0 [ 189.595674][ T7394] ? netlink_lookup+0x200/0x200 [ 189.600599][ T7394] ? slab_free_freelist_hook+0x130/0x1a0 [ 189.606300][ T7394] ? netlink_recvmsg+0x5e7/0xe60 [ 189.611305][ T7394] ? kmem_cache_free+0xf8/0x290 [ 189.616235][ T7394] netlink_recvmsg+0x693/0xe60 [ 189.621068][ T7394] ? netlink_sendmsg+0xbf0/0xbf0 [ 189.626082][ T7394] ? aa_af_perm+0x330/0x330 [ 189.630650][ T7394] ? __lock_acquire+0x1262/0x7d80 [ 189.635785][ T7394] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 189.641133][ T7394] ? security_socket_recvmsg+0x89/0xb0 [ 189.646651][ T7394] ? netlink_sendmsg+0xbf0/0xbf0 [ 189.651650][ T7394] ____sys_recvmsg+0x2bd/0x5d0 [ 189.656494][ T7394] ? __sys_recvmsg_sock+0x50/0x50 [ 189.661603][ T7394] ? import_iovec+0x73/0xa0 [ 189.666167][ T7394] ___sys_recvmsg+0x214/0x590 [ 189.670916][ T7394] ? __sys_recvmsg+0x2a0/0x2a0 [ 189.675746][ T7394] ? ksys_write+0x1d2/0x260 [ 189.680331][ T7394] ? __fget_files+0x3fc/0x460 [ 189.685091][ T7394] __x64_sys_recvmsg+0x21e/0x2f0 [ 189.690094][ T7394] ? ___sys_recvmsg+0x590/0x590 [ 189.695025][ T7394] ? lockdep_hardirqs_on+0x98/0x150 [ 189.700289][ T7394] do_syscall_64+0x55/0xb0 [ 189.704761][ T7394] ? clear_bhb_loop+0x40/0x90 [ 189.709490][ T7394] ? clear_bhb_loop+0x40/0x90 [ 189.714231][ T7394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.720197][ T7394] RIP: 0033:0x7fb40059ce59 [ 189.724670][ T7394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.744380][ T7394] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 189.752869][ T7394] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 189.760906][ T7394] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 189.768942][ T7394] RBP: 00007fb401428090 R08: 0000000000000000 R09: 0000000000000000 [ 189.777006][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.785038][ T7394] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 189.793108][ T7394] [ 189.829471][ T7396] netlink: 128 bytes leftover after parsing attributes in process `syz.1.525'. [ 189.842204][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.726702][ T7411] netlink: 'syz.3.532': attribute type 153 has an invalid length. [ 190.744004][ T7411] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.532'. [ 190.818267][ T7413] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.531'. [ 190.964425][ T7414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.532'. [ 191.013189][ T7414] FAULT_INJECTION: forcing a failure. [ 191.013189][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.057507][ T7414] CPU: 1 PID: 7414 Comm: syz.3.532 Not tainted syzkaller #0 [ 191.064890][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.075005][ T7414] Call Trace: [ 191.078335][ T7414] [ 191.081313][ T7414] dump_stack_lvl+0x18c/0x250 [ 191.086060][ T7414] ? show_regs_print_info+0x20/0x20 [ 191.091322][ T7414] ? load_image+0x420/0x420 [ 191.095877][ T7414] ? __might_fault+0xaa/0x120 [ 191.100619][ T7414] ? __lock_acquire+0x7d80/0x7d80 [ 191.105699][ T7414] should_fail_ex+0x394/0x4c0 [ 191.110449][ T7414] _copy_from_user+0x2f/0xe0 [ 191.115119][ T7414] ___sys_sendmsg+0x1c7/0x360 [ 191.119856][ T7414] ? __sys_sendmsg+0x2b0/0x2b0 [ 191.124718][ T7414] __se_sys_sendmsg+0x1d0/0x2c0 [ 191.129624][ T7414] ? __x64_sys_sendmsg+0x80/0x80 [ 191.134623][ T7414] ? lockdep_hardirqs_on+0x98/0x150 [ 191.139888][ T7414] do_syscall_64+0x55/0xb0 [ 191.144358][ T7414] ? clear_bhb_loop+0x40/0x90 [ 191.149073][ T7414] ? clear_bhb_loop+0x40/0x90 [ 191.153797][ T7414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.159743][ T7414] RIP: 0033:0x7fb40059ce59 [ 191.164209][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.183874][ T7414] RSP: 002b:00007fb401407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.192341][ T7414] RAX: ffffffffffffffda RBX: 00007fb400816090 RCX: 00007fb40059ce59 [ 191.200359][ T7414] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000008 [ 191.208374][ T7414] RBP: 00007fb401407090 R08: 0000000000000000 R09: 0000000000000000 [ 191.216400][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.224426][ T7414] R13: 00007fb400816128 R14: 00007fb400816090 R15: 00007ffcc8465598 [ 191.232466][ T7414] [ 191.309717][ T7418] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.534'. [ 191.597532][ T7428] netlink: 'syz.0.535': attribute type 153 has an invalid length. [ 191.606898][ T7428] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.535'. [ 192.008576][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.535'. [ 192.285762][ T7438] netlink: 'syz.1.538': attribute type 39 has an invalid length. [ 192.889288][ T7440] FAULT_INJECTION: forcing a failure. [ 192.889288][ T7440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.904002][ T7440] CPU: 0 PID: 7440 Comm: syz.3.539 Not tainted syzkaller #0 [ 192.911362][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.921511][ T7440] Call Trace: [ 192.924838][ T7440] [ 192.927817][ T7440] dump_stack_lvl+0x18c/0x250 [ 192.932559][ T7440] ? show_regs_print_info+0x20/0x20 [ 192.937823][ T7440] ? load_image+0x420/0x420 [ 192.942387][ T7440] ? __might_fault+0xaa/0x120 [ 192.947129][ T7440] ? __lock_acquire+0x7d80/0x7d80 [ 192.952210][ T7440] should_fail_ex+0x394/0x4c0 [ 192.956959][ T7440] _copy_from_iter+0x1cd/0x1290 [ 192.961867][ T7440] ? rep_movs_alternative+0x4a/0x90 [ 192.967124][ T7440] ? copyout_mc+0x70/0x70 [ 192.971513][ T7440] ? copyout_mc+0x70/0x70 [ 192.975902][ T7440] ? __virt_addr_valid+0x10c/0x380 [ 192.981074][ T7440] ? page_copy_sane+0x16a/0x270 [ 192.985987][ T7440] copy_page_from_iter+0x7b/0x100 [ 192.991071][ T7440] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 192.996946][ T7440] unix_stream_sendmsg+0x562/0xbf0 [ 193.002129][ T7440] ? unix_show_fdinfo+0x280/0x280 [ 193.007225][ T7440] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 193.013702][ T7440] ? aa_sock_msg_perm+0x94/0x150 [ 193.018720][ T7440] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.024066][ T7440] ? security_socket_sendmsg+0x80/0xa0 [ 193.029579][ T7440] ? unix_show_fdinfo+0x280/0x280 [ 193.034666][ T7440] ____sys_sendmsg+0x61b/0x980 [ 193.039492][ T7440] ? __asan_memset+0x22/0x40 [ 193.044145][ T7440] ? __sys_sendmsg_sock+0x30/0x30 [ 193.049222][ T7440] ? __import_iovec+0x5f2/0x850 [ 193.054133][ T7440] ? import_iovec+0x73/0xa0 [ 193.058687][ T7440] ___sys_sendmsg+0x2a6/0x360 [ 193.063455][ T7440] ? get_pid_task+0x20/0x1e0 [ 193.068105][ T7440] ? __sys_sendmsg+0x2b0/0x2b0 [ 193.072956][ T7440] ? __lock_acquire+0x7d80/0x7d80 [ 193.078095][ T7440] __se_sys_sendmsg+0x1d0/0x2c0 [ 193.083004][ T7440] ? __x64_sys_sendmsg+0x80/0x80 [ 193.088019][ T7440] ? lockdep_hardirqs_on+0x98/0x150 [ 193.093295][ T7440] do_syscall_64+0x55/0xb0 [ 193.097773][ T7440] ? clear_bhb_loop+0x40/0x90 [ 193.102507][ T7440] ? clear_bhb_loop+0x40/0x90 [ 193.107236][ T7440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.113197][ T7440] RIP: 0033:0x7fb40059ce59 [ 193.117666][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.137425][ T7440] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.145898][ T7440] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 193.153925][ T7440] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 193.161986][ T7440] RBP: 00007fb401428090 R08: 0000000000000000 R09: 0000000000000000 [ 193.170010][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.178034][ T7440] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 193.186078][ T7440] [ 193.472995][ T7438] hsr_slave_1 (unregistering): left promiscuous mode [ 193.529055][ T7443] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 193.671784][ T7443] team0: Device vxcan1 is of different type [ 193.757349][ T7446] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.542'. [ 193.893252][ T7450] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.545'. [ 193.933446][ T7450] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 193.981725][ T7450] CPU: 1 PID: 7450 Comm: syz.1.545 Not tainted syzkaller #0 [ 193.989130][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.999249][ T7450] Call Trace: [ 194.002592][ T7450] [ 194.005582][ T7450] dump_stack_lvl+0x18c/0x250 [ 194.010349][ T7450] ? show_regs_print_info+0x20/0x20 [ 194.015627][ T7450] ? load_image+0x420/0x420 [ 194.020229][ T7450] sysfs_warn_dup+0x8e/0xa0 [ 194.024888][ T7450] sysfs_do_create_link_sd+0xc0/0x110 [ 194.030328][ T7450] device_add_class_symlinks+0x1cf/0x240 [ 194.036043][ T7450] device_add+0x4f9/0xc40 [ 194.040463][ T7450] wiphy_register+0x1d99/0x2ac0 [ 194.045402][ T7450] ? cfg80211_event_work+0x40/0x40 [ 194.050581][ T7450] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.056808][ T7450] ? ieee80211_register_hw+0x2c13/0x3b30 [ 194.062516][ T7450] ieee80211_register_hw+0x2dd8/0x3b30 [ 194.068070][ T7450] ? ieee80211_register_hw+0xfc1/0x3b30 [ 194.073700][ T7450] ? ieee80211_tasklet_handler+0x20/0x20 [ 194.079401][ T7450] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 194.085368][ T7450] ? __debug_object_init+0xec/0x450 [ 194.090624][ T7450] ? __asan_memset+0x22/0x40 [ 194.095298][ T7450] ? __hrtimer_init+0x189/0x270 [ 194.100202][ T7450] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 194.105998][ T7450] ? mac80211_hwsim_free+0x220/0x220 [ 194.111323][ T7450] ? rcu_is_watching+0x15/0xb0 [ 194.116144][ T7450] ? kstrndup+0xbd/0x140 [ 194.120449][ T7450] hwsim_new_radio_nl+0xdad/0x1a70 [ 194.125610][ T7450] ? mark_lock+0x94/0x320 [ 194.129982][ T7450] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 194.136012][ T7450] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 194.142386][ T7450] ? lockdep_hardirqs_on+0x98/0x150 [ 194.147639][ T7450] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.153853][ T7450] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 194.160241][ T7450] genl_family_rcv_msg_doit+0x21a/0x310 [ 194.165835][ T7450] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 194.171771][ T7450] ? bpf_lsm_capable+0x9/0x10 [ 194.176487][ T7450] ? security_capable+0x89/0xb0 [ 194.181387][ T7450] genl_rcv_msg+0x611/0x7a0 [ 194.185936][ T7450] ? genl_bind+0x360/0x360 [ 194.190388][ T7450] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 194.196767][ T7450] ? lockdep_hardirqs_on+0x98/0x150 [ 194.202013][ T7450] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 194.208218][ T7450] netlink_rcv_skb+0x235/0x4c0 [ 194.213016][ T7450] ? genl_bind+0x360/0x360 [ 194.217471][ T7450] ? netlink_ack+0x1160/0x1160 [ 194.222309][ T7450] ? __lock_acquire+0x7d80/0x7d80 [ 194.227395][ T7450] ? down_read+0x1ac/0x2e0 [ 194.231863][ T7450] genl_rcv+0x28/0x40 [ 194.235898][ T7450] netlink_unicast+0x7b1/0x930 [ 194.240713][ T7450] netlink_sendmsg+0x8d0/0xbf0 [ 194.245509][ T7450] ? lockdep_hardirqs_on+0x98/0x150 [ 194.250778][ T7450] ? netlink_getsockopt+0x590/0x590 [ 194.256020][ T7450] ? aa_sock_msg_perm+0x94/0x150 [ 194.261005][ T7450] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 194.266330][ T7450] ? security_socket_sendmsg+0x80/0xa0 [ 194.271818][ T7450] ? netlink_getsockopt+0x590/0x590 [ 194.277057][ T7450] ____sys_sendmsg+0x61b/0x980 [ 194.281868][ T7450] ? __asan_memset+0x22/0x40 [ 194.286519][ T7450] ? __sys_sendmsg_sock+0x30/0x30 [ 194.291593][ T7450] ? __import_iovec+0x5f2/0x850 [ 194.296486][ T7450] ? import_iovec+0x73/0xa0 [ 194.301039][ T7450] ___sys_sendmsg+0x2a6/0x360 [ 194.305761][ T7450] ? __sys_sendmsg+0x2b0/0x2b0 [ 194.310604][ T7450] __se_sys_sendmsg+0x1d0/0x2c0 [ 194.315490][ T7450] ? __x64_sys_sendmsg+0x80/0x80 [ 194.320482][ T7450] ? lockdep_hardirqs_on+0x98/0x150 [ 194.325732][ T7450] do_syscall_64+0x55/0xb0 [ 194.330188][ T7450] ? clear_bhb_loop+0x40/0x90 [ 194.334892][ T7450] ? clear_bhb_loop+0x40/0x90 [ 194.339606][ T7450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.345540][ T7450] RIP: 0033:0x7f296319ce59 [ 194.349986][ T7450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.369625][ T7450] RSP: 002b:00007f2964060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.378071][ T7450] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319ce59 [ 194.386081][ T7450] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 194.394083][ T7450] RBP: 00007f2963232e6f R08: 0000000000000000 R09: 0000000000000000 [ 194.402086][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.410087][ T7450] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007fff07c60f68 [ 194.418106][ T7450] [ 194.453425][ T7455] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.558256][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.574075][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.820362][ T7463] netlink: 'syz.3.548': attribute type 39 has an invalid length. [ 195.502280][ T7463] veth0_macvtap: left promiscuous mode [ 197.084928][ T4265] wlan1: Trigger new scan to find an IBSS to join [ 197.108276][ T7479] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.554'. [ 197.124646][ T7481] netlink: 'syz.2.554': attribute type 10 has an invalid length. [ 197.169112][ T7481] team0: Device wg1 is of different type [ 197.475814][ T7484] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.555'. [ 197.502236][ T7484] tap0: tun_chr_ioctl cmd 1074025675 [ 197.517273][ T7484] tap0: persist enabled [ 197.527645][ T7488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.557'. [ 197.582143][ T7488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.689800][ T7484] tap0: tun_chr_ioctl cmd 21731 [ 197.725009][ T7486] tap0: tun_chr_ioctl cmd 1074025675 [ 197.730451][ T7486] tap0: persist enabled [ 198.545691][ T7502] veth0_vlan: entered allmulticast mode [ 199.253812][ T7526] netlink: 128 bytes leftover after parsing attributes in process `syz.0.572'. [ 199.312977][ T7526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.754725][ T7548] netlink: 'syz.0.580': attribute type 3 has an invalid length. [ 200.762720][ T7548] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.580'. [ 201.079225][ T7560] FAULT_INJECTION: forcing a failure. [ 201.079225][ T7560] name failslab, interval 1, probability 0, space 0, times 0 [ 201.101510][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 201.118086][ T7560] CPU: 0 PID: 7560 Comm: syz.2.585 Not tainted syzkaller #0 [ 201.125460][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.135568][ T7560] Call Trace: [ 201.138893][ T7560] [ 201.141864][ T7560] dump_stack_lvl+0x18c/0x250 [ 201.146599][ T7560] ? sctp_sendmsg+0x1519/0x27b0 [ 201.147783][ T7557] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.583'. [ 201.151532][ T7560] ? ___sys_sendmsg+0x2a6/0x360 [ 201.151593][ T7560] ? show_regs_print_info+0x20/0x20 [ 201.151625][ T7560] ? load_image+0x420/0x420 [ 201.175532][ T7560] should_fail_ex+0x394/0x4c0 [ 201.180287][ T7560] should_failslab+0x9/0x20 [ 201.184856][ T7560] slab_pre_alloc_hook+0x59/0x300 [ 201.189945][ T7560] ? sctp_add_bind_addr+0x8c/0x360 [ 201.195121][ T7560] __kmem_cache_alloc_node+0x53/0x250 [ 201.200567][ T7560] ? sctp_add_bind_addr+0x8c/0x360 [ 201.205743][ T7560] kmalloc_trace+0x2a/0xe0 [ 201.210230][ T7560] sctp_add_bind_addr+0x8c/0x360 [ 201.215241][ T7560] sctp_copy_local_addr_list+0x31b/0x4e0 [ 201.220940][ T7560] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 201.226723][ T7560] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 201.232854][ T7560] ? sctp_v4_is_any+0x35/0x60 [ 201.237592][ T7560] ? sctp_copy_one_addr+0x8c/0x350 [ 201.242768][ T7560] sctp_bind_addr_copy+0xb3/0x3c0 [ 201.247857][ T7560] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 201.254258][ T7560] sctp_connect_new_asoc+0x2f9/0x6a0 [ 201.259615][ T7560] ? __sctp_connect+0xd80/0xd80 [ 201.264531][ T7560] ? __local_bh_enable_ip+0x13a/0x1c0 [ 201.269972][ T7560] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 201.275577][ T7560] ? security_sctp_bind_connect+0x89/0xb0 [ 201.281362][ T7560] sctp_sendmsg+0x1519/0x27b0 [ 201.286111][ T7560] ? sctp_getsockopt+0xb60/0xb60 [ 201.291109][ T7560] ? aa_sk_perm+0x83c/0x970 [ 201.295688][ T7560] ? aa_af_perm+0x330/0x330 [ 201.300239][ T7560] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 201.306722][ T7560] ? sock_rps_record_flow+0x19/0x3f0 [ 201.312097][ T7560] ? inet_sendmsg+0xce/0x2a0 [ 201.316781][ T7560] ? inet_send_prepare+0x250/0x250 [ 201.321955][ T7560] ____sys_sendmsg+0x61b/0x980 [ 201.326791][ T7560] ? __asan_memset+0x22/0x40 [ 201.331447][ T7560] ? __sys_sendmsg_sock+0x30/0x30 [ 201.336542][ T7560] ? __import_iovec+0x5f2/0x850 [ 201.341462][ T7560] ? import_iovec+0x73/0xa0 [ 201.346022][ T7560] ___sys_sendmsg+0x2a6/0x360 [ 201.350756][ T7560] ? get_pid_task+0x20/0x1e0 [ 201.355418][ T7560] ? __sys_sendmsg+0x2b0/0x2b0 [ 201.360266][ T7560] ? __lock_acquire+0x7d80/0x7d80 [ 201.365381][ T7560] __se_sys_sendmsg+0x1d0/0x2c0 [ 201.370303][ T7560] ? __x64_sys_sendmsg+0x80/0x80 [ 201.375322][ T7560] ? lockdep_hardirqs_on+0x98/0x150 [ 201.380619][ T7560] do_syscall_64+0x55/0xb0 [ 201.385098][ T7560] ? clear_bhb_loop+0x40/0x90 [ 201.389829][ T7560] ? clear_bhb_loop+0x40/0x90 [ 201.394574][ T7560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.400572][ T7560] RIP: 0033:0x7fb92139ce59 [ 201.405040][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.424683][ T7560] RSP: 002b:00007fb91f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.424714][ T7560] RAX: ffffffffffffffda RBX: 00007fb921615fa0 RCX: 00007fb92139ce59 [ 201.424736][ T7560] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 201.424750][ T7560] RBP: 00007fb91f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 201.424764][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.424778][ T7560] R13: 00007fb921616038 R14: 00007fb921615fa0 R15: 00007ffc5babdfa8 [ 201.424814][ T7560] [ 201.491081][ T7557] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 201.499734][ T7557] CPU: 1 PID: 7557 Comm: syz.3.583 Not tainted syzkaller #0 [ 201.507100][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 201.517225][ T7557] Call Trace: [ 201.520575][ T7557] [ 201.523556][ T7557] dump_stack_lvl+0x18c/0x250 [ 201.528304][ T7557] ? show_regs_print_info+0x20/0x20 [ 201.533560][ T7557] ? load_image+0x420/0x420 [ 201.538131][ T7557] sysfs_warn_dup+0x8e/0xa0 [ 201.542705][ T7557] sysfs_do_create_link_sd+0xc0/0x110 [ 201.548138][ T7557] device_add_class_symlinks+0x1cf/0x240 [ 201.553837][ T7557] device_add+0x4f9/0xc40 [ 201.558237][ T7557] wiphy_register+0x1d99/0x2ac0 [ 201.563181][ T7557] ? cfg80211_event_work+0x40/0x40 [ 201.568364][ T7557] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.574624][ T7557] ieee80211_register_hw+0x2dd8/0x3b30 [ 201.580169][ T7557] ? ieee80211_register_hw+0xfc1/0x3b30 [ 201.585795][ T7557] ? ieee80211_tasklet_handler+0x20/0x20 [ 201.591490][ T7557] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 201.597478][ T7557] ? __debug_object_init+0xec/0x450 [ 201.602733][ T7557] ? __asan_memset+0x22/0x40 [ 201.607369][ T7557] ? __hrtimer_init+0x189/0x270 [ 201.612282][ T7557] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 201.618074][ T7557] ? mac80211_hwsim_free+0x220/0x220 [ 201.623395][ T7557] ? rcu_is_watching+0x15/0xb0 [ 201.628223][ T7557] ? kstrndup+0xbd/0x140 [ 201.632518][ T7557] hwsim_new_radio_nl+0xdad/0x1a70 [ 201.637672][ T7557] ? __nla_validate+0x50/0x50 [ 201.642402][ T7557] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 201.648764][ T7557] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 201.655043][ T7557] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 201.661326][ T7557] ? perf_trace_kmalloc+0x40/0x140 [ 201.666483][ T7557] ? __nla_parse+0x40/0x50 [ 201.670929][ T7557] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 201.677296][ T7557] genl_family_rcv_msg_doit+0x21a/0x310 [ 201.682914][ T7557] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 201.688843][ T7557] ? lockdep_hardirqs_on+0x98/0x150 [ 201.694097][ T7557] ? bpf_lsm_capable+0x9/0x10 [ 201.698810][ T7557] ? security_capable+0x89/0xb0 [ 201.703709][ T7557] genl_rcv_msg+0x611/0x7a0 [ 201.708254][ T7557] ? genl_bind+0x360/0x360 [ 201.712733][ T7557] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 201.719123][ T7557] netlink_rcv_skb+0x235/0x4c0 [ 201.723934][ T7557] ? genl_bind+0x360/0x360 [ 201.728388][ T7557] ? netlink_ack+0x1160/0x1160 [ 201.733217][ T7557] ? __lock_acquire+0x7d80/0x7d80 [ 201.738281][ T7557] ? down_read+0x1ac/0x2e0 [ 201.742732][ T7557] genl_rcv+0x28/0x40 [ 201.746752][ T7557] netlink_unicast+0x7b1/0x930 [ 201.751556][ T7557] netlink_sendmsg+0x8d0/0xbf0 [ 201.756368][ T7557] ? netlink_getsockopt+0x590/0x590 [ 201.761604][ T7557] ? aa_sock_msg_perm+0x94/0x150 [ 201.766576][ T7557] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 201.771896][ T7557] ? security_socket_sendmsg+0x80/0xa0 [ 201.777396][ T7557] ? netlink_getsockopt+0x590/0x590 [ 201.782625][ T7557] ____sys_sendmsg+0x61b/0x980 [ 201.787418][ T7557] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.793614][ T7557] ? __asan_memset+0x22/0x40 [ 201.798251][ T7557] ? __sys_sendmsg_sock+0x30/0x30 [ 201.803313][ T7557] ? __import_iovec+0x5f2/0x850 [ 201.808205][ T7557] ? import_iovec+0x73/0xa0 [ 201.812746][ T7557] ___sys_sendmsg+0x2a6/0x360 [ 201.817496][ T7557] ? __sys_sendmsg+0x2b0/0x2b0 [ 201.822315][ T7557] ? __lock_acquire+0x7d80/0x7d80 [ 201.827399][ T7557] __se_sys_sendmsg+0x1d0/0x2c0 [ 201.832287][ T7557] ? __x64_sys_sendmsg+0x80/0x80 [ 201.837270][ T7557] ? lockdep_hardirqs_on+0x98/0x150 [ 201.842510][ T7557] do_syscall_64+0x55/0xb0 [ 201.846954][ T7557] ? clear_bhb_loop+0x40/0x90 [ 201.851661][ T7557] ? clear_bhb_loop+0x40/0x90 [ 201.856376][ T7557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.862304][ T7557] RIP: 0033:0x7fb40059ce59 [ 201.866749][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.886384][ T7557] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.894828][ T7557] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 201.902835][ T7557] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 201.910837][ T7557] RBP: 00007fb400632e6f R08: 0000000000000000 R09: 0000000000000000 [ 201.918836][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.926842][ T7557] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 201.934873][ T7557] [ 202.087005][ T7568] netlink: 'syz.2.587': attribute type 39 has an invalid length. [ 202.518531][ T7575] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 202.538621][ T7582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.590'. [ 202.981057][ T7586] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.139832][ T7596] netlink: 'syz.0.596': attribute type 39 has an invalid length. [ 203.321716][ T7593] netlink: 'syz.0.596': attribute type 39 has an invalid length. [ 203.599185][ T7607] netlink: 'syz.0.600': attribute type 39 has an invalid length. [ 204.220248][ T7622] netlink: 'syz.1.605': attribute type 10 has an invalid length. [ 204.281104][ T7622] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 204.295854][ T7622] team0: Port device wlan1 added [ 204.949367][ T7639] netlink: 'syz.2.611': attribute type 21 has an invalid length. [ 205.012849][ T7639] netlink: 'syz.2.611': attribute type 4 has an invalid length. [ 205.053468][ T7639] netlink: 156 bytes leftover after parsing attributes in process `syz.2.611'. [ 205.110797][ T7649] netlink: 'syz.1.616': attribute type 3 has an invalid length. [ 205.119485][ T7649] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.616'. [ 205.266162][ T7653] netlink: 76 bytes leftover after parsing attributes in process `syz.1.618'. [ 205.317819][ T7653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.618'. [ 205.353261][ T7653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.361780][ T7653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.385166][ T7653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.396082][ T7653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.466168][ T7653] batman_adv: batadv0: Interface deactivated: vlan1 [ 205.502693][ T7653] batman_adv: batadv0: Removing interface: vlan1 [ 206.158408][ T7659] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 206.178648][ T7659] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 206.208536][ T7659] team0: Port device wlan1 added [ 206.603803][ T7653] syz.1.618 (7653) used greatest stack depth: 19208 bytes left [ 206.788141][ T7663] netlink: 'syz.0.621': attribute type 2 has an invalid length. [ 206.825039][ T7663] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.621'. [ 206.847902][ T7636] Bluetooth: hci2: command 0x0406 tx timeout [ 206.848066][ T7636] Bluetooth: hci0: command 0x0406 tx timeout [ 206.848597][ T7636] Bluetooth: hci1: command 0x0406 tx timeout [ 206.848673][ T7636] Bluetooth: hci3: command 0x0406 tx timeout [ 207.399054][ T7678] FAULT_INJECTION: forcing a failure. [ 207.399054][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.418936][ T7678] CPU: 0 PID: 7678 Comm: syz.3.629 Not tainted syzkaller #0 [ 207.426303][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.436407][ T7678] Call Trace: [ 207.439728][ T7678] [ 207.442700][ T7678] dump_stack_lvl+0x18c/0x250 [ 207.447441][ T7678] ? show_regs_print_info+0x20/0x20 [ 207.452702][ T7678] ? load_image+0x420/0x420 [ 207.457257][ T7678] ? __might_fault+0xaa/0x120 [ 207.461982][ T7678] ? __lock_acquire+0x7d80/0x7d80 [ 207.467063][ T7678] should_fail_ex+0x394/0x4c0 [ 207.471807][ T7678] _copy_from_iter+0x1cd/0x1290 [ 207.476722][ T7678] ? rcu_is_watching+0x15/0xb0 [ 207.481546][ T7678] ? copyout_mc+0x70/0x70 [ 207.485935][ T7678] ? __virt_addr_valid+0x10c/0x380 [ 207.491099][ T7678] ? __virt_addr_valid+0x10c/0x380 [ 207.496271][ T7678] ? __virt_addr_valid+0x10c/0x380 [ 207.501444][ T7678] ? __check_object_size+0x4fc/0xa40 [ 207.506784][ T7678] netlink_sendmsg+0x76b/0xbf0 [ 207.511629][ T7678] ? netlink_getsockopt+0x590/0x590 [ 207.516885][ T7678] ? aa_sock_msg_perm+0x94/0x150 [ 207.521882][ T7678] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.527245][ T7678] ? security_socket_sendmsg+0x80/0xa0 [ 207.532769][ T7678] ? netlink_getsockopt+0x590/0x590 [ 207.538027][ T7678] ____sys_sendmsg+0x61b/0x980 [ 207.542858][ T7678] ? __asan_memset+0x22/0x40 [ 207.547510][ T7678] ? __sys_sendmsg_sock+0x30/0x30 [ 207.552593][ T7678] ? __import_iovec+0x5f2/0x850 [ 207.557529][ T7678] ? import_iovec+0x73/0xa0 [ 207.562098][ T7678] ___sys_sendmsg+0x2a6/0x360 [ 207.566842][ T7678] ? get_pid_task+0x20/0x1e0 [ 207.571519][ T7678] ? __sys_sendmsg+0x2b0/0x2b0 [ 207.576383][ T7678] ? __lock_acquire+0x7d80/0x7d80 [ 207.581510][ T7678] __se_sys_sendmsg+0x1d0/0x2c0 [ 207.586434][ T7678] ? __x64_sys_sendmsg+0x80/0x80 [ 207.591451][ T7678] ? lockdep_hardirqs_on+0x98/0x150 [ 207.596714][ T7678] do_syscall_64+0x55/0xb0 [ 207.601194][ T7678] ? clear_bhb_loop+0x40/0x90 [ 207.605920][ T7678] ? clear_bhb_loop+0x40/0x90 [ 207.610645][ T7678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.616597][ T7678] RIP: 0033:0x7fb40059ce59 [ 207.621071][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.640733][ T7678] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.649214][ T7678] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 207.657233][ T7678] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 207.665255][ T7678] RBP: 00007fb401428090 R08: 0000000000000000 R09: 0000000000000000 [ 207.673286][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.681306][ T7678] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 207.689352][ T7678] [ 207.764905][ T7676] netlink: 14 bytes leftover after parsing attributes in process `syz.0.627'. [ 208.135199][ T11] wlan1: Trigger new scan to find an IBSS to join [ 208.417390][ T7689] netlink: 'syz.2.631': attribute type 10 has an invalid length. [ 208.822689][ T7689] team0: Port device wlan1 added [ 209.121354][ T7701] gretap0: refused to change device tx_queue_len [ 209.700380][ T7704] netlink: 'syz.3.635': attribute type 2 has an invalid length. [ 209.785119][ T7704] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.635'. [ 210.301990][ T7715] FAULT_INJECTION: forcing a failure. [ 210.301990][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.334204][ T7715] CPU: 1 PID: 7715 Comm: syz.1.640 Not tainted syzkaller #0 [ 210.341625][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.351769][ T7715] Call Trace: [ 210.355129][ T7715] [ 210.358152][ T7715] dump_stack_lvl+0x18c/0x250 [ 210.362936][ T7715] ? show_regs_print_info+0x20/0x20 [ 210.368236][ T7715] ? load_image+0x420/0x420 [ 210.372844][ T7715] ? __might_fault+0xaa/0x120 [ 210.377616][ T7715] ? __lock_acquire+0x7d80/0x7d80 [ 210.382731][ T7715] ? __virt_addr_valid+0x10c/0x380 [ 210.387944][ T7715] should_fail_ex+0x394/0x4c0 [ 210.392747][ T7715] _copy_from_user+0x2f/0xe0 [ 210.397427][ T7715] generic_map_update_batch+0x53e/0x800 [ 210.403106][ T7715] ? rcu_read_unlock+0xa0/0xa0 [ 210.407993][ T7715] ? __fdget+0x180/0x210 [ 210.412333][ T7715] ? rcu_read_unlock+0xa0/0xa0 [ 210.417193][ T7715] bpf_map_do_batch+0x3f2/0x600 [ 210.422157][ T7715] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 210.427727][ T7715] __sys_bpf+0x381/0x890 [ 210.432071][ T7715] ? bpf_link_show_fdinfo+0x390/0x390 [ 210.437574][ T7715] ? lock_chain_count+0x20/0x20 [ 210.442522][ T7715] __x64_sys_bpf+0x7c/0x90 [ 210.447000][ T7715] do_syscall_64+0x55/0xb0 [ 210.451464][ T7715] ? clear_bhb_loop+0x40/0x90 [ 210.456193][ T7715] ? clear_bhb_loop+0x40/0x90 [ 210.460930][ T7715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.466908][ T7715] RIP: 0033:0x7f296319ce59 [ 210.471388][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.491042][ T7715] RSP: 002b:00007f296403f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.499517][ T7715] RAX: ffffffffffffffda RBX: 00007f2963416090 RCX: 00007f296319ce59 [ 210.507536][ T7715] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 210.515557][ T7715] RBP: 00007f296403f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.524358][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.532382][ T7715] R13: 00007f2963416128 R14: 00007f2963416090 R15: 00007fff07c60f68 [ 210.540449][ T7715] [ 210.690074][ T7717] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 211.699480][ T7743] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 211.718972][ T7743] netlink: 176 bytes leftover after parsing attributes in process `syz.3.651'. [ 212.083700][ T7748] netlink: 'syz.1.650': attribute type 2 has an invalid length. [ 212.124669][ T7748] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.650'. [ 212.891805][ T7770] netlink: 'syz.1.657': attribute type 4 has an invalid length. [ 212.901027][ T7770] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.657'. [ 212.930148][ T7771] FAULT_INJECTION: forcing a failure. [ 212.930148][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 212.946294][ T7771] CPU: 1 PID: 7771 Comm: syz.3.659 Not tainted syzkaller #0 [ 212.955273][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.965785][ T7771] Call Trace: [ 212.969132][ T7771] [ 212.972132][ T7771] dump_stack_lvl+0x18c/0x250 [ 212.976894][ T7771] ? sctp_sendmsg+0x1519/0x27b0 [ 212.981831][ T7771] ? ___sys_sendmsg+0x2a6/0x360 [ 212.986767][ T7771] ? show_regs_print_info+0x20/0x20 [ 212.992055][ T7771] ? load_image+0x420/0x420 [ 212.996661][ T7771] should_fail_ex+0x394/0x4c0 [ 213.001437][ T7771] should_failslab+0x9/0x20 [ 213.006022][ T7771] slab_pre_alloc_hook+0x59/0x300 [ 213.011130][ T7771] ? sctp_add_bind_addr+0x8c/0x360 [ 213.016318][ T7771] __kmem_cache_alloc_node+0x53/0x250 [ 213.021778][ T7771] ? sctp_add_bind_addr+0x8c/0x360 [ 213.026978][ T7771] kmalloc_trace+0x2a/0xe0 [ 213.031480][ T7771] sctp_add_bind_addr+0x8c/0x360 [ 213.036507][ T7771] sctp_copy_local_addr_list+0x31b/0x4e0 [ 213.042224][ T7771] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 213.048019][ T7771] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 213.054165][ T7771] ? sctp_v6_is_any+0x64/0x70 [ 213.058908][ T7771] ? sctp_copy_one_addr+0x8c/0x350 [ 213.064100][ T7771] sctp_bind_addr_copy+0xb3/0x3c0 [ 213.069207][ T7771] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 213.075621][ T7771] sctp_connect_new_asoc+0x2f9/0x6a0 [ 213.080995][ T7771] ? __sctp_connect+0xd80/0xd80 [ 213.085915][ T7771] ? __local_bh_enable_ip+0x13a/0x1c0 [ 213.091355][ T7771] ? _local_bh_enable+0xa0/0xa0 [ 213.096269][ T7771] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 213.102167][ T7771] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 213.108061][ T7771] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 213.113682][ T7771] ? security_sctp_bind_connect+0x89/0xb0 [ 213.119486][ T7771] sctp_sendmsg+0x1519/0x27b0 [ 213.124285][ T7771] ? sctp_getsockopt+0xb60/0xb60 [ 213.129308][ T7771] ? aa_sk_perm+0x83c/0x970 [ 213.133908][ T7771] ? aa_af_perm+0x330/0x330 [ 213.138488][ T7771] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 213.144979][ T7771] ? sock_rps_record_flow+0x19/0x3f0 [ 213.150358][ T7771] ? inet_sendmsg+0x7e/0x2a0 [ 213.155037][ T7771] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 213.160396][ T7771] ? inet_send_prepare+0x250/0x250 [ 213.165589][ T7771] ____sys_sendmsg+0x61b/0x980 [ 213.170452][ T7771] ? __sys_sendmsg_sock+0x30/0x30 [ 213.175548][ T7771] ? __import_iovec+0x5f2/0x850 [ 213.180488][ T7771] ? import_iovec+0x73/0xa0 [ 213.185075][ T7771] ___sys_sendmsg+0x2a6/0x360 [ 213.189849][ T7771] ? __sys_sendmsg+0x2b0/0x2b0 [ 213.194742][ T7771] ? __lock_acquire+0x7d80/0x7d80 [ 213.199908][ T7771] __se_sys_sendmsg+0x1d0/0x2c0 [ 213.204840][ T7771] ? __x64_sys_sendmsg+0x80/0x80 [ 213.209898][ T7771] ? lockdep_hardirqs_on+0x98/0x150 [ 213.215181][ T7771] do_syscall_64+0x55/0xb0 [ 213.219673][ T7771] ? clear_bhb_loop+0x40/0x90 [ 213.224416][ T7771] ? clear_bhb_loop+0x40/0x90 [ 213.229172][ T7771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.235154][ T7771] RIP: 0033:0x7fb40059ce59 [ 213.239645][ T7771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.259348][ T7771] RSP: 002b:00007fb401407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.267848][ T7771] RAX: ffffffffffffffda RBX: 00007fb400816090 RCX: 00007fb40059ce59 [ 213.275894][ T7771] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 213.283972][ T7771] RBP: 00007fb401407090 R08: 0000000000000000 R09: 0000000000000000 [ 213.292017][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.300066][ T7771] R13: 00007fb400816128 R14: 00007fb400816090 R15: 00007ffcc8465598 [ 213.308145][ T7771] [ 213.318643][ T1099] wlan1: Trigger new scan to find an IBSS to join [ 213.997864][ T7783] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 214.007510][ T7783] netlink: 176 bytes leftover after parsing attributes in process `syz.2.664'. [ 214.033027][ T7785] netlink: 76 bytes leftover after parsing attributes in process `syz.3.665'. [ 214.111676][ T7785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.665'. [ 214.221236][ T7785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.254802][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.272759][ T7785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.287415][ T1123] wlan1: Creating new IBSS network, BSSID 06:16:7b:0e:e6:81 [ 214.307675][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.472989][ T7792] FAULT_INJECTION: forcing a failure. [ 214.472989][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 214.486192][ T7792] CPU: 1 PID: 7792 Comm: syz.0.667 Not tainted syzkaller #0 [ 214.493549][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.503661][ T7792] Call Trace: [ 214.506992][ T7792] [ 214.509971][ T7792] dump_stack_lvl+0x18c/0x250 [ 214.514717][ T7792] ? show_regs_print_info+0x20/0x20 [ 214.519975][ T7792] ? load_image+0x420/0x420 [ 214.524532][ T7792] ? __might_sleep+0xe0/0xe0 [ 214.529178][ T7792] ? __lock_acquire+0x7d80/0x7d80 [ 214.534258][ T7792] should_fail_ex+0x394/0x4c0 [ 214.539001][ T7792] should_failslab+0x9/0x20 [ 214.543560][ T7792] slab_pre_alloc_hook+0x59/0x300 [ 214.548650][ T7792] ? call_usermodehelper_setup+0x8e/0x260 [ 214.554433][ T7792] __kmem_cache_alloc_node+0x53/0x250 [ 214.559874][ T7792] ? call_usermodehelper_setup+0x8e/0x260 [ 214.565647][ T7792] kmalloc_trace+0x2a/0xe0 [ 214.570133][ T7792] call_usermodehelper_setup+0x8e/0x260 [ 214.575735][ T7792] ? __request_module+0x600/0x600 [ 214.580821][ T7792] __request_module+0x3bb/0x600 [ 214.585736][ T7792] ? module_enforce_rwx_sections+0x150/0x150 [ 214.591777][ T7792] ? module_enforce_rwx_sections+0x150/0x150 [ 214.597820][ T7792] ? apparmor_capable+0x137/0x1a0 [ 214.602908][ T7792] ? dev_load+0x21/0x1f0 [ 214.607212][ T7792] dev_ioctl+0x79f/0x1140 [ 214.611612][ T7792] sock_do_ioctl+0x239/0x310 [ 214.616273][ T7792] ? sock_show_fdinfo+0xb0/0xb0 [ 214.621203][ T7792] sock_ioctl+0x5be/0x7e0 [ 214.625594][ T7792] ? sock_poll+0x3e0/0x3e0 [ 214.630083][ T7792] ? bpf_lsm_file_ioctl+0x9/0x10 [ 214.635070][ T7792] ? security_file_ioctl+0x80/0xa0 [ 214.640234][ T7792] ? sock_poll+0x3e0/0x3e0 [ 214.644716][ T7792] __se_sys_ioctl+0xfd/0x170 [ 214.649365][ T7792] do_syscall_64+0x55/0xb0 [ 214.653833][ T7792] ? clear_bhb_loop+0x40/0x90 [ 214.658554][ T7792] ? clear_bhb_loop+0x40/0x90 [ 214.663277][ T7792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.669232][ T7792] RIP: 0033:0x7f2abc59ce59 [ 214.673702][ T7792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.693373][ T7792] RSP: 002b:00007f2abd54a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.701849][ T7792] RAX: ffffffffffffffda RBX: 00007f2abc815fa0 RCX: 00007f2abc59ce59 [ 214.709876][ T7792] RDX: 0000200000000040 RSI: 00000000000089b0 RDI: 0000000000000003 [ 214.717899][ T7792] RBP: 00007f2abd54a090 R08: 0000000000000000 R09: 0000000000000000 [ 214.725922][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.733948][ T7792] R13: 00007f2abc816038 R14: 00007f2abc815fa0 R15: 00007ffccbd0ecc8 [ 214.741994][ T7792] [ 215.016278][ T7799] netlink: 128 bytes leftover after parsing attributes in process `syz.0.670'. [ 215.064415][ T7799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.861254][ T7806] netlink: 'syz.3.673': attribute type 2 has an invalid length. [ 215.870011][ T7806] netlink: 'syz.3.673': attribute type 8 has an invalid length. [ 215.883635][ T7806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.673'. [ 215.899225][ T7807] netlink: 'syz.3.673': attribute type 2 has an invalid length. [ 215.912752][ T7807] netlink: 'syz.3.673': attribute type 8 has an invalid length. [ 215.925759][ T7807] netlink: 132 bytes leftover after parsing attributes in process `syz.3.673'. [ 216.048015][ T7814] netlink: 128 bytes leftover after parsing attributes in process `syz.0.683'. [ 216.067861][ T7814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.976965][ T7826] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.679'. [ 216.994036][ T7829] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 217.002748][ T7829] netlink: 176 bytes leftover after parsing attributes in process `syz.1.678'. [ 217.201925][ T7834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.618475][ T7844] FAULT_INJECTION: forcing a failure. [ 217.618475][ T7844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.670306][ T7844] CPU: 0 PID: 7844 Comm: syz.3.685 Not tainted syzkaller #0 [ 217.677694][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.688077][ T7844] Call Trace: [ 217.691409][ T7844] [ 217.694396][ T7844] dump_stack_lvl+0x18c/0x250 [ 217.699137][ T7844] ? show_regs_print_info+0x20/0x20 [ 217.704395][ T7844] ? load_image+0x420/0x420 [ 217.708961][ T7844] ? __might_fault+0xaa/0x120 [ 217.713748][ T7844] ? __lock_acquire+0x7d80/0x7d80 [ 217.718832][ T7844] ? ip6gre_tunnel_locate+0xdd/0x5d0 [ 217.724170][ T7844] should_fail_ex+0x394/0x4c0 [ 217.728923][ T7844] _copy_to_user+0x2f/0xa0 [ 217.733556][ T7844] ip6gre_tunnel_siocdevprivate+0x298/0x740 [ 217.739504][ T7844] ? ip6gre_tunnel_init+0x150/0x150 [ 217.744750][ T7844] ? __mutex_lock+0x30d/0xc80 [ 217.749467][ T7844] ? dev_ioctl+0x83c/0x1140 [ 217.754033][ T7844] ? dev_ifsioc+0x957/0xc40 [ 217.758579][ T7844] dev_ioctl+0x84c/0x1140 [ 217.762946][ T7844] sock_ioctl+0x74c/0x7e0 [ 217.767327][ T7844] ? sock_poll+0x3e0/0x3e0 [ 217.771793][ T7844] ? bpf_lsm_file_ioctl+0x9/0x10 [ 217.776768][ T7844] ? security_file_ioctl+0x80/0xa0 [ 217.781907][ T7844] ? sock_poll+0x3e0/0x3e0 [ 217.786362][ T7844] __se_sys_ioctl+0xfd/0x170 [ 217.790999][ T7844] do_syscall_64+0x55/0xb0 [ 217.795449][ T7844] ? clear_bhb_loop+0x40/0x90 [ 217.800149][ T7844] ? clear_bhb_loop+0x40/0x90 [ 217.804857][ T7844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.810811][ T7844] RIP: 0033:0x7fb40059ce59 [ 217.815279][ T7844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.834936][ T7844] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.843397][ T7844] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 217.851403][ T7844] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 217.859413][ T7844] RBP: 00007fb401428090 R08: 0000000000000000 R09: 0000000000000000 [ 217.867413][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.875420][ T7844] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 217.883438][ T7844] [ 217.946074][ T5783] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 218.772048][ T7879] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 218.797823][ T7879] __nla_validate_parse: 1 callbacks suppressed [ 218.797840][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.699'. [ 218.822475][ T7879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.848357][ T7877] netlink: 76 bytes leftover after parsing attributes in process `syz.1.698'. [ 218.873749][ T7882] netlink: 128 bytes leftover after parsing attributes in process `syz.2.700'. [ 218.897165][ T7882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.914971][ T7877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.698'. [ 219.364151][ T7884] netlink: 128 bytes leftover after parsing attributes in process `syz.0.701'. [ 219.477148][ T7884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.651624][ T7894] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 219.660270][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.704'. [ 219.672391][ T7894] team0: entered promiscuous mode [ 219.679116][ T7894] team_slave_0: entered promiscuous mode [ 219.685576][ T7894] team_slave_1: entered promiscuous mode [ 219.691612][ T7894] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 219.704307][ T7894] team0: entered allmulticast mode [ 219.712579][ T7894] team_slave_0: entered allmulticast mode [ 219.718952][ T7894] team_slave_1: entered allmulticast mode [ 219.726472][ T7894] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 219.739659][ T7894] bridge0: port 3(team0) entered blocking state [ 219.749839][ T7894] bridge0: port 3(team0) entered disabled state [ 219.760665][ T7894] bridge0: port 3(team0) entered blocking state [ 219.767451][ T7894] bridge0: port 3(team0) entered forwarding state [ 219.776834][ T7893] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 219.835309][ T7893] bridge0: port 3(team0) entered disabled state [ 219.873010][ T7893] team0: left allmulticast mode [ 219.881207][ T7893] team_slave_0: left allmulticast mode [ 219.888355][ T7893] team_slave_1: left allmulticast mode [ 219.895794][ T7893] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 219.902758][ T7893] team0: left promiscuous mode [ 219.908228][ T7893] team_slave_0: left promiscuous mode [ 219.914453][ T7893] team_slave_1: left promiscuous mode [ 219.920107][ T7893] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 219.927597][ T7893] bridge0: port 3(team0) entered disabled state [ 219.939399][ T7893] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.949260][ T7893] bond0: (slave team0): Enslaving as an active interface with an up link [ 220.438077][ T7908] netlink: 'syz.3.706': attribute type 28 has an invalid length. [ 220.453527][ T7908] netlink: 'syz.3.706': attribute type 29 has an invalid length. [ 220.465324][ T7908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.706'. [ 220.847531][ T7905] netlink: 'syz.2.708': attribute type 10 has an invalid length. [ 220.895958][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.911568][ T7905] bridge_slave_1: left allmulticast mode [ 220.919087][ T7905] bridge_slave_1: left promiscuous mode [ 220.928905][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.956094][ T7905] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 221.134112][ T7920] netlink: 'syz.1.713': attribute type 11 has an invalid length. [ 221.397961][ T7928] netlink: 128 bytes leftover after parsing attributes in process `syz.0.716'. [ 221.418502][ T7928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.473030][ T7945] netlink: 'syz.2.721': attribute type 39 has an invalid length. [ 223.306533][ T7975] TCP: TCP_TX_DELAY enabled [ 223.493668][ T7972] netlink: 'syz.0.729': attribute type 29 has an invalid length. [ 223.527090][ T7972] netlink: 'syz.0.729': attribute type 29 has an invalid length. [ 223.557262][ T7979] netlink: 'syz.0.729': attribute type 29 has an invalid length. [ 225.710823][ T7994] validate_nla: 2 callbacks suppressed [ 225.710860][ T7994] netlink: 'syz.0.736': attribute type 28 has an invalid length. [ 225.736907][ T7994] netlink: 'syz.0.736': attribute type 29 has an invalid length. [ 225.758400][ T7994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.736'. [ 227.211618][ T8029] netlink: 'syz.3.751': attribute type 3 has an invalid length. [ 227.274700][ T8029] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.751'. [ 227.468558][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 227.478098][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 227.495396][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.3.753'. [ 228.681995][ T8054] FAULT_INJECTION: forcing a failure. [ 228.681995][ T8054] name failslab, interval 1, probability 0, space 0, times 0 [ 228.707061][ T8054] CPU: 0 PID: 8054 Comm: syz.1.762 Not tainted syzkaller #0 [ 228.714438][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.724542][ T8054] Call Trace: [ 228.727867][ T8054] [ 228.730844][ T8054] dump_stack_lvl+0x18c/0x250 [ 228.735592][ T8054] ? show_regs_print_info+0x20/0x20 [ 228.740842][ T8054] ? load_image+0x420/0x420 [ 228.745399][ T8054] ? __might_sleep+0xe0/0xe0 [ 228.750043][ T8054] ? __lock_acquire+0x7d80/0x7d80 [ 228.755131][ T8054] should_fail_ex+0x394/0x4c0 [ 228.759871][ T8054] should_failslab+0x9/0x20 [ 228.764442][ T8054] slab_pre_alloc_hook+0x59/0x300 [ 228.769534][ T8054] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 228.775307][ T8054] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 228.781086][ T8054] __kmem_cache_alloc_node+0x53/0x250 [ 228.786524][ T8054] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 228.792295][ T8054] __kmalloc+0xa7/0x240 [ 228.796512][ T8054] tomoyo_realpath_from_path+0xe6/0x5c0 [ 228.802119][ T8054] ? tomoyo_domain+0xd6/0x120 [ 228.806861][ T8054] tomoyo_path_number_perm+0x248/0x5e0 [ 228.812364][ T8054] ? tomoyo_path_number_perm+0x217/0x5e0 [ 228.818027][ T8054] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 228.823516][ T8054] ? ksys_write+0x1d2/0x260 [ 228.828080][ T8054] ? __fget_files+0x28/0x460 [ 228.832715][ T8054] security_file_ioctl+0x70/0xa0 [ 228.837687][ T8054] __se_sys_ioctl+0x48/0x170 [ 228.842316][ T8054] do_syscall_64+0x55/0xb0 [ 228.846765][ T8054] ? clear_bhb_loop+0x40/0x90 [ 228.851471][ T8054] ? clear_bhb_loop+0x40/0x90 [ 228.856203][ T8054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.862138][ T8054] RIP: 0033:0x7f296319ce59 [ 228.866582][ T8054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.886217][ T8054] RSP: 002b:00007f2964060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.894661][ T8054] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319ce59 [ 228.902659][ T8054] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 228.910659][ T8054] RBP: 00007f2964060090 R08: 0000000000000000 R09: 0000000000000000 [ 228.918654][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.926655][ T8054] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007fff07c60f68 [ 228.934671][ T8054] [ 228.962674][ T8058] netlink: 'syz.2.763': attribute type 10 has an invalid length. [ 228.997062][ T8054] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.320465][ T8075] netlink: 'syz.0.766': attribute type 3 has an invalid length. [ 229.330279][ T8075] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.766'. [ 229.439945][ T8077] netlink: 128 bytes leftover after parsing attributes in process `syz.1.767'. [ 229.457464][ T8077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.756990][ T8085] netlink: 'syz.2.770': attribute type 28 has an invalid length. [ 229.785293][ T8085] netlink: 'syz.2.770': attribute type 29 has an invalid length. [ 229.793134][ T8085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.770'. [ 230.472916][ T8090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.498789][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.772'. [ 230.610700][ T8092] bridge_slave_1: left allmulticast mode [ 230.617694][ T8092] bridge_slave_1: left promiscuous mode [ 230.628135][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.647616][ T8092] bridge_slave_0: left allmulticast mode [ 230.656664][ T8092] bridge_slave_0: left promiscuous mode [ 230.662948][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.813636][ T8095] netlink: 'syz.3.774': attribute type 28 has an invalid length. [ 231.635017][ T8112] netlink: 128 bytes leftover after parsing attributes in process `syz.1.779'. [ 231.675916][ T8112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.038540][ T8121] netlink: 128 bytes leftover after parsing attributes in process `syz.3.781'. [ 232.068175][ T8121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.928128][ T8130] FAULT_INJECTION: forcing a failure. [ 232.928128][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.950040][ T8130] CPU: 0 PID: 8130 Comm: syz.1.785 Not tainted syzkaller #0 [ 232.957429][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.967538][ T8130] Call Trace: [ 232.970865][ T8130] [ 232.973838][ T8130] dump_stack_lvl+0x18c/0x250 [ 232.978573][ T8130] ? show_regs_print_info+0x20/0x20 [ 232.983832][ T8130] ? load_image+0x420/0x420 [ 232.988389][ T8130] ? __might_fault+0xaa/0x120 [ 232.993120][ T8130] ? __lock_acquire+0x7d80/0x7d80 [ 232.998207][ T8130] should_fail_ex+0x394/0x4c0 [ 233.002950][ T8130] _copy_from_user+0x2f/0xe0 [ 233.007604][ T8130] ___sys_sendmsg+0x1c7/0x360 [ 233.012342][ T8130] ? __sys_sendmsg+0x2b0/0x2b0 [ 233.017211][ T8130] __se_sys_sendmsg+0x1d0/0x2c0 [ 233.022116][ T8130] ? __x64_sys_sendmsg+0x80/0x80 [ 233.027127][ T8130] ? syscall_enter_from_user_mode+0x2e/0x80 [ 233.033080][ T8130] do_syscall_64+0x55/0xb0 [ 233.037540][ T8130] ? clear_bhb_loop+0x40/0x90 [ 233.042259][ T8130] ? clear_bhb_loop+0x40/0x90 [ 233.046987][ T8130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.052946][ T8130] RIP: 0033:0x7f296319ce59 [ 233.057421][ T8130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.077111][ T8130] RSP: 002b:00007f2964060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.085591][ T8130] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319ce59 [ 233.093616][ T8130] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 233.101642][ T8130] RBP: 00007f2964060090 R08: 0000000000000000 R09: 0000000000000000 [ 233.109670][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.117694][ T8130] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007fff07c60f68 [ 233.125730][ T8130] [ 233.695174][ T8146] netlink: 10 bytes leftover after parsing attributes in process `syz.1.791'. [ 233.875696][ T8156] netlink: 128 bytes leftover after parsing attributes in process `syz.0.794'. [ 233.924634][ T8156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.985543][ T8158] netlink: 128 bytes leftover after parsing attributes in process `syz.1.795'. [ 234.017144][ T8158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.225486][ T8165] netlink: 763 bytes leftover after parsing attributes in process `syz.3.797'. [ 236.105625][ T8207] netlink: 128 bytes leftover after parsing attributes in process `syz.2.812'. [ 236.252607][ T8207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.492508][ T8226] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 237.514262][ T8226] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.820'. [ 237.589485][ T8226] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 238.541041][ T8226] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 239.075865][ T8229] sit0: entered allmulticast mode [ 239.085441][ T49] wlan1: Trigger new scan to find an IBSS to join [ 239.104276][ T8234] sit0: entered promiscuous mode [ 239.901168][ T8244] netlink: 128 bytes leftover after parsing attributes in process `syz.3.826'. [ 240.014908][ T8244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.120572][ T11] wlan1: Trigger new scan to find an IBSS to join [ 243.156435][ T8272] netlink: 'syz.3.832': attribute type 46 has an invalid length. [ 243.174530][ T8272] netlink: 55 bytes leftover after parsing attributes in process `syz.3.832'. [ 243.971951][ T8280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.837'. [ 243.994472][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.061565][ T8289] FAULT_INJECTION: forcing a failure. [ 245.061565][ T8289] name failslab, interval 1, probability 0, space 0, times 0 [ 245.099263][ T8289] CPU: 0 PID: 8289 Comm: syz.0.840 Not tainted syzkaller #0 [ 245.106764][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.116875][ T8289] Call Trace: [ 245.120199][ T8289] [ 245.123169][ T8289] dump_stack_lvl+0x18c/0x250 [ 245.127914][ T8289] ? show_regs_print_info+0x20/0x20 [ 245.133169][ T8289] ? load_image+0x420/0x420 [ 245.137729][ T8289] ? __lock_acquire+0x7d80/0x7d80 [ 245.142812][ T8289] ? verify_lock_unused+0x140/0x140 [ 245.148070][ T8289] should_fail_ex+0x394/0x4c0 [ 245.152837][ T8289] should_failslab+0x9/0x20 [ 245.157401][ T8289] slab_pre_alloc_hook+0x59/0x300 [ 245.162489][ T8289] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 245.168088][ T8289] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 245.173710][ T8289] __kmem_cache_alloc_node+0x53/0x250 [ 245.179152][ T8289] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 245.184845][ T8289] __kmalloc+0xa7/0x240 [ 245.189055][ T8289] bpf_prog_test_run_skb+0x242/0x18f0 [ 245.194488][ T8289] ? __fget_files+0x28/0x460 [ 245.199139][ T8289] ? __fget_files+0x3fc/0x460 [ 245.203878][ T8289] ? cpu_online+0x60/0x60 [ 245.208250][ T8289] bpf_prog_test_run+0x31f/0x390 [ 245.213216][ T8289] __sys_bpf+0x49d/0x890 [ 245.217493][ T8289] ? bpf_link_show_fdinfo+0x390/0x390 [ 245.222899][ T8289] ? lock_chain_count+0x20/0x20 [ 245.227799][ T8289] __x64_sys_bpf+0x7c/0x90 [ 245.232254][ T8289] do_syscall_64+0x55/0xb0 [ 245.236705][ T8289] ? clear_bhb_loop+0x40/0x90 [ 245.241417][ T8289] ? clear_bhb_loop+0x40/0x90 [ 245.246127][ T8289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.252059][ T8289] RIP: 0033:0x7f2abc59ce59 [ 245.256501][ T8289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.276133][ T8289] RSP: 002b:00007f2abd54a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.284599][ T8289] RAX: ffffffffffffffda RBX: 00007f2abc815fa0 RCX: 00007f2abc59ce59 [ 245.292597][ T8289] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 245.300601][ T8289] RBP: 00007f2abd54a090 R08: 0000000000000000 R09: 0000000000000000 [ 245.308598][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.317109][ T8289] R13: 00007f2abc816038 R14: 00007f2abc815fa0 R15: 00007ffccbd0ecc8 [ 245.325123][ T8289] [ 245.385701][ T8293] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 245.502893][ T8298] FAULT_INJECTION: forcing a failure. [ 245.502893][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 245.538389][ T8298] CPU: 0 PID: 8298 Comm: syz.3.845 Not tainted syzkaller #0 [ 245.545811][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.555913][ T8298] Call Trace: [ 245.559236][ T8298] [ 245.562212][ T8298] dump_stack_lvl+0x18c/0x250 [ 245.566948][ T8298] ? show_regs_print_info+0x20/0x20 [ 245.572197][ T8298] ? load_image+0x420/0x420 [ 245.576751][ T8298] ? __might_sleep+0xe0/0xe0 [ 245.581388][ T8298] ? __lock_acquire+0x7d80/0x7d80 [ 245.586469][ T8298] should_fail_ex+0x394/0x4c0 [ 245.591211][ T8298] should_failslab+0x9/0x20 [ 245.595775][ T8298] slab_pre_alloc_hook+0x59/0x300 [ 245.600849][ T8298] ? __lock_acquire+0x7d80/0x7d80 [ 245.605922][ T8298] kmem_cache_alloc_node+0x5e/0x310 [ 245.611179][ T8298] ? __alloc_skb+0x103/0x2c0 [ 245.615828][ T8298] __alloc_skb+0x103/0x2c0 [ 245.620306][ T8298] netlink_sendmsg+0x66a/0xbf0 [ 245.625130][ T8298] ? netlink_getsockopt+0x590/0x590 [ 245.630388][ T8298] ? aa_sock_msg_perm+0x94/0x150 [ 245.635384][ T8298] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 245.640723][ T8298] ? security_socket_sendmsg+0x80/0xa0 [ 245.646229][ T8298] ? netlink_getsockopt+0x590/0x590 [ 245.651469][ T8298] ____sys_sendmsg+0x61b/0x980 [ 245.656273][ T8298] ? __asan_memset+0x22/0x40 [ 245.660902][ T8298] ? __sys_sendmsg_sock+0x30/0x30 [ 245.665956][ T8298] ? __import_iovec+0x5f2/0x850 [ 245.670841][ T8298] ? import_iovec+0x73/0xa0 [ 245.675375][ T8298] ___sys_sendmsg+0x2a6/0x360 [ 245.680084][ T8298] ? __sys_sendmsg+0x2b0/0x2b0 [ 245.684911][ T8298] __se_sys_sendmsg+0x1d0/0x2c0 [ 245.689791][ T8298] ? __x64_sys_sendmsg+0x80/0x80 [ 245.694771][ T8298] ? syscall_enter_from_user_mode+0x2e/0x80 [ 245.700698][ T8298] do_syscall_64+0x55/0xb0 [ 245.705144][ T8298] ? clear_bhb_loop+0x40/0x90 [ 245.709847][ T8298] ? clear_bhb_loop+0x40/0x90 [ 245.714552][ T8298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.720519][ T8298] RIP: 0033:0x7fb40059ce59 [ 245.724960][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.744608][ T8298] RSP: 002b:00007fb401428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.753059][ T8298] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 245.761061][ T8298] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 245.769063][ T8298] RBP: 00007fb401428090 R08: 0000000000000000 R09: 0000000000000000 [ 245.777059][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.785054][ T8298] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffcc8465598 [ 245.793068][ T8298] [ 245.820429][ T8300] netlink: 'syz.2.846': attribute type 11 has an invalid length. [ 245.828498][ T8300] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.846'. [ 246.125017][ T49] wlan1: Trigger new scan to find an IBSS to join [ 246.188283][ T8300] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 246.198089][ T8300] CPU: 1 PID: 8300 Comm: syz.2.846 Not tainted syzkaller #0 [ 246.205456][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.215571][ T8300] Call Trace: [ 246.218894][ T8300] [ 246.221867][ T8300] dump_stack_lvl+0x18c/0x250 [ 246.226607][ T8300] ? show_regs_print_info+0x20/0x20 [ 246.231869][ T8300] ? load_image+0x420/0x420 [ 246.236441][ T8300] sysfs_warn_dup+0x8e/0xa0 [ 246.241008][ T8300] sysfs_do_create_link_sd+0xc0/0x110 [ 246.246447][ T8300] device_add_class_symlinks+0x1cf/0x240 [ 246.252156][ T8300] device_add+0x4f9/0xc40 [ 246.256567][ T8300] wiphy_register+0x1d99/0x2ac0 [ 246.261491][ T8300] ? cfg80211_event_work+0x40/0x40 [ 246.266624][ T8300] ? minstrel_ht_alloc+0x88a/0x990 [ 246.271763][ T8300] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 246.277865][ T8300] ieee80211_register_hw+0x2dd8/0x3b30 [ 246.283354][ T8300] ? ieee80211_register_hw+0xfc1/0x3b30 [ 246.288930][ T8300] ? ieee80211_tasklet_handler+0x20/0x20 [ 246.294574][ T8300] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 246.300491][ T8300] ? __debug_object_init+0xec/0x450 [ 246.305727][ T8300] ? __asan_memset+0x22/0x40 [ 246.310382][ T8300] ? __hrtimer_init+0x189/0x270 [ 246.315292][ T8300] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 246.321096][ T8300] ? mac80211_hwsim_free+0x220/0x220 [ 246.326446][ T8300] ? rcu_is_watching+0x15/0xb0 [ 246.331232][ T8300] ? kstrndup+0xbd/0x140 [ 246.335571][ T8300] hwsim_new_radio_nl+0xdad/0x1a70 [ 246.340722][ T8300] ? __nla_validate+0x50/0x50 [ 246.345431][ T8300] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 246.351788][ T8300] ? __nla_parse+0x40/0x50 [ 246.356248][ T8300] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 246.362665][ T8300] genl_family_rcv_msg_doit+0x21a/0x310 [ 246.368286][ T8300] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 246.374260][ T8300] ? bpf_lsm_capable+0x9/0x10 [ 246.379004][ T8300] ? security_capable+0x89/0xb0 [ 246.383934][ T8300] genl_rcv_msg+0x611/0x7a0 [ 246.388508][ T8300] ? genl_bind+0x360/0x360 [ 246.392979][ T8300] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 246.399368][ T8300] ? ref_tracker_free+0x686/0x830 [ 246.404474][ T8300] ? __kasan_kmalloc_large+0x8b/0xa0 [ 246.409831][ T8300] netlink_rcv_skb+0x235/0x4c0 [ 246.414659][ T8300] ? genl_bind+0x360/0x360 [ 246.419130][ T8300] ? netlink_ack+0x1160/0x1160 [ 246.423976][ T8300] ? __lock_acquire+0x7d80/0x7d80 [ 246.429071][ T8300] ? down_read+0x1ac/0x2e0 [ 246.433550][ T8300] genl_rcv+0x28/0x40 [ 246.437592][ T8300] netlink_unicast+0x7b1/0x930 [ 246.442408][ T8300] netlink_sendmsg+0x8d0/0xbf0 [ 246.447197][ T8300] ? netlink_getsockopt+0x590/0x590 [ 246.452413][ T8300] ? aa_sock_msg_perm+0x94/0x150 [ 246.457385][ T8300] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 246.462718][ T8300] ? security_socket_sendmsg+0x80/0xa0 [ 246.468220][ T8300] ? netlink_getsockopt+0x590/0x590 [ 246.473462][ T8300] ____sys_sendmsg+0x61b/0x980 [ 246.478273][ T8300] ? __asan_memset+0x22/0x40 [ 246.482880][ T8300] ? __sys_sendmsg_sock+0x30/0x30 [ 246.487918][ T8300] ? __import_iovec+0x5f2/0x850 [ 246.492787][ T8300] ? import_iovec+0x73/0xa0 [ 246.497303][ T8300] ___sys_sendmsg+0x2a6/0x360 [ 246.502001][ T8300] ? __sys_sendmsg+0x2b0/0x2b0 [ 246.506822][ T8300] __se_sys_sendmsg+0x1d0/0x2c0 [ 246.511694][ T8300] ? perf_trace_preemptirq_template+0x269/0x330 [ 246.517982][ T8300] ? __x64_sys_sendmsg+0x80/0x80 [ 246.522945][ T8300] ? lockdep_hardirqs_on+0x98/0x150 [ 246.528167][ T8300] do_syscall_64+0x55/0xb0 [ 246.532595][ T8300] ? clear_bhb_loop+0x40/0x90 [ 246.537277][ T8300] ? clear_bhb_loop+0x40/0x90 [ 246.541977][ T8300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.547991][ T8300] RIP: 0033:0x7fb92139ce59 [ 246.552442][ T8300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.572072][ T8300] RSP: 002b:00007fb91f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.580588][ T8300] RAX: ffffffffffffffda RBX: 00007fb921615fa0 RCX: 00007fb92139ce59 [ 246.588589][ T8300] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 246.596577][ T8300] RBP: 00007fb921432e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.604576][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.612580][ T8300] R13: 00007fb921616038 R14: 00007fb921615fa0 R15: 00007ffc5babdfa8 [ 246.620579][ T8300] [ 246.630771][ T2960] wlan1: Creating new IBSS network, BSSID 42:38:9d:40:c6:9a [ 246.834133][ T8311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.851'. [ 246.886106][ T8311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.982276][ T5810] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 248.223461][ T8344] netlink: 128 bytes leftover after parsing attributes in process `syz.1.864'. [ 248.258988][ T8344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.322547][ T8348] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 248.344336][ T8348] syzkaller1: linktype set to 773 [ 248.473722][ T8353] netlink: 'syz.2.866': attribute type 39 has an invalid length. [ 248.543605][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.028731][ T8348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.866'. [ 249.214728][ T8354] C: renamed from team_slave_0 (while UP) [ 249.283062][ T8354] netlink: 'syz.0.867': attribute type 3 has an invalid length. [ 249.312183][ T8354] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 249.333687][ T8354] netlink: 116 bytes leftover after parsing attributes in process `syz.0.867'. [ 249.820504][ T5783] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 250.201345][ T8386] netlink: 128 bytes leftover after parsing attributes in process `syz.0.878'. [ 250.249101][ T8388] FAULT_INJECTION: forcing a failure. [ 250.249101][ T8388] name failslab, interval 1, probability 0, space 0, times 0 [ 250.263699][ T8388] CPU: 0 PID: 8388 Comm: syz.2.879 Not tainted syzkaller #0 [ 250.271061][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.281191][ T8388] Call Trace: [ 250.284527][ T8388] [ 250.287535][ T8388] dump_stack_lvl+0x18c/0x250 [ 250.292273][ T8388] ? sctp_sendmsg+0x1519/0x27b0 [ 250.297182][ T8388] ? ___sys_sendmsg+0x2a6/0x360 [ 250.302102][ T8388] ? show_regs_print_info+0x20/0x20 [ 250.307365][ T8388] ? load_image+0x420/0x420 [ 250.310785][ T8386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.311918][ T8388] should_fail_ex+0x394/0x4c0 [ 250.331769][ T8388] should_failslab+0x9/0x20 [ 250.336332][ T8388] slab_pre_alloc_hook+0x59/0x300 [ 250.341423][ T8388] ? sctp_add_bind_addr+0x8c/0x360 [ 250.346592][ T8388] __kmem_cache_alloc_node+0x53/0x250 [ 250.352036][ T8388] ? sctp_add_bind_addr+0x8c/0x360 [ 250.357218][ T8388] kmalloc_trace+0x2a/0xe0 [ 250.361699][ T8388] sctp_add_bind_addr+0x8c/0x360 [ 250.366709][ T8388] sctp_copy_local_addr_list+0x31b/0x4e0 [ 250.372407][ T8388] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 250.378186][ T8388] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 250.384323][ T8388] ? sctp_v4_is_any+0x35/0x60 [ 250.389064][ T8388] ? sctp_copy_one_addr+0x8c/0x350 [ 250.394244][ T8388] sctp_bind_addr_copy+0xb3/0x3c0 [ 250.399326][ T8388] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 250.405717][ T8388] sctp_connect_new_asoc+0x2f9/0x6a0 [ 250.411239][ T8388] ? __sctp_connect+0xd80/0xd80 [ 250.416145][ T8388] ? __local_bh_enable_ip+0x13a/0x1c0 [ 250.421583][ T8388] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 250.427188][ T8388] ? security_sctp_bind_connect+0x89/0xb0 [ 250.432982][ T8388] sctp_sendmsg+0x1519/0x27b0 [ 250.437740][ T8388] ? sctp_getsockopt+0xb60/0xb60 [ 250.442742][ T8388] ? aa_sk_perm+0x83c/0x970 [ 250.447311][ T8388] ? aa_af_perm+0x330/0x330 [ 250.451861][ T8388] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 250.458335][ T8388] ? sock_rps_record_flow+0x19/0x3f0 [ 250.463685][ T8388] ? inet_sendmsg+0xce/0x2a0 [ 250.468334][ T8388] ? inet_send_prepare+0x250/0x250 [ 250.473509][ T8388] ____sys_sendmsg+0x61b/0x980 [ 250.478341][ T8388] ? __asan_memset+0x22/0x40 [ 250.482987][ T8388] ? __sys_sendmsg_sock+0x30/0x30 [ 250.488077][ T8388] ? __import_iovec+0x5f2/0x850 [ 250.492997][ T8388] ? import_iovec+0x73/0xa0 [ 250.497587][ T8388] ___sys_sendmsg+0x2a6/0x360 [ 250.502329][ T8388] ? __sys_sendmsg+0x2b0/0x2b0 [ 250.507182][ T8388] ? __lock_acquire+0x7d80/0x7d80 [ 250.512299][ T8388] __se_sys_sendmsg+0x1d0/0x2c0 [ 250.517208][ T8388] ? __x64_sys_sendmsg+0x80/0x80 [ 250.522224][ T8388] ? lockdep_hardirqs_on+0x98/0x150 [ 250.527496][ T8388] do_syscall_64+0x55/0xb0 [ 250.531967][ T8388] ? clear_bhb_loop+0x40/0x90 [ 250.536696][ T8388] ? clear_bhb_loop+0x40/0x90 [ 250.541427][ T8388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.547380][ T8388] RIP: 0033:0x7fb92139ce59 [ 250.551843][ T8388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.571505][ T8388] RSP: 002b:00007fb91f5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.580332][ T8388] RAX: ffffffffffffffda RBX: 00007fb921615fa0 RCX: 00007fb92139ce59 [ 250.588350][ T8388] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 250.596373][ T8388] RBP: 00007fb91f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.604435][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.612468][ T8388] R13: 00007fb921616038 R14: 00007fb921615fa0 R15: 00007ffc5babdfa8 [ 250.620519][ T8388] [ 250.734402][ T8396] delete_channel: no stack [ 251.164690][ T8394] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.880'. [ 251.373651][ T8405] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.885'. [ 251.385652][ T8405] netlink: 21056 bytes leftover after parsing attributes in process `syz.2.885'. [ 251.538614][ T8410] netlink: 'syz.0.886': attribute type 39 has an invalid length. [ 251.949510][ T8420] sit0: entered allmulticast mode [ 252.105793][ T8420] sit0: entered promiscuous mode [ 252.231600][ T8427] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.891'. [ 252.266972][ T8426] FAULT_INJECTION: forcing a failure. [ 252.266972][ T8426] name failslab, interval 1, probability 0, space 0, times 0 [ 252.299902][ T8426] CPU: 0 PID: 8426 Comm: syz.0.892 Not tainted syzkaller #0 [ 252.307284][ T8426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.317395][ T8426] Call Trace: [ 252.320722][ T8426] [ 252.323695][ T8426] dump_stack_lvl+0x18c/0x250 [ 252.328478][ T8426] ? show_regs_print_info+0x20/0x20 [ 252.333745][ T8426] ? load_image+0x420/0x420 [ 252.338335][ T8426] ? __might_sleep+0xe0/0xe0 [ 252.342980][ T8426] ? __lock_acquire+0x7d80/0x7d80 [ 252.348068][ T8426] should_fail_ex+0x394/0x4c0 [ 252.352817][ T8426] should_failslab+0x9/0x20 [ 252.357381][ T8426] slab_pre_alloc_hook+0x59/0x300 [ 252.362473][ T8426] ? _local_bh_enable+0xa0/0xa0 [ 252.367377][ T8426] ? tcx_link_attach+0x444/0x960 [ 252.372367][ T8426] __kmem_cache_alloc_node+0x53/0x250 [ 252.377813][ T8426] ? tcx_link_attach+0x444/0x960 [ 252.382816][ T8426] kmalloc_trace+0x2a/0xe0 [ 252.387283][ T8426] tcx_link_attach+0x444/0x960 [ 252.392106][ T8426] ? tcx_prog_query+0x140/0x140 [ 252.397016][ T8426] ? __fget_files+0x3fc/0x460 [ 252.401774][ T8426] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 252.408335][ T8426] link_create+0x390/0x720 [ 252.412818][ T8426] __sys_bpf+0x4d7/0x890 [ 252.417114][ T8426] ? bpf_link_show_fdinfo+0x390/0x390 [ 252.422551][ T8426] ? lock_chain_count+0x20/0x20 [ 252.427463][ T8426] __x64_sys_bpf+0x7c/0x90 [ 252.431955][ T8426] do_syscall_64+0x55/0xb0 [ 252.436429][ T8426] ? clear_bhb_loop+0x40/0x90 [ 252.441148][ T8426] ? clear_bhb_loop+0x40/0x90 [ 252.445872][ T8426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.451824][ T8426] RIP: 0033:0x7f2abc59ce59 [ 252.456290][ T8426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.475949][ T8426] RSP: 002b:00007f2abd54a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.484420][ T8426] RAX: ffffffffffffffda RBX: 00007f2abc815fa0 RCX: 00007f2abc59ce59 [ 252.492467][ T8426] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 000000000000001c [ 252.500501][ T8426] RBP: 00007f2abd54a090 R08: 0000000000000000 R09: 0000000000000000 [ 252.508527][ T8426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.516556][ T8426] R13: 00007f2abc816038 R14: 00007f2abc815fa0 R15: 00007ffccbd0ecc8 [ 252.524608][ T8426] [ 252.562945][ T8433] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.894'. [ 252.584864][ T8435] netlink: 128 bytes leftover after parsing attributes in process `syz.2.895'. [ 252.624412][ T8435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.504292][ T8441] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.897'. [ 253.515561][ T8441] bridge_slave_1: default FDB implementation only supports local addresses [ 253.561043][ T8442] netlink: 'syz.0.896': attribute type 10 has an invalid length. [ 253.669127][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.713633][ T8442] bridge_slave_1: left allmulticast mode [ 253.731863][ T8442] bridge_slave_1: left promiscuous mode [ 253.739817][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.814591][ T8442] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 254.821768][ T8470] netlink: 128 bytes leftover after parsing attributes in process `syz.1.907'. [ 254.854402][ T8470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.037942][ T8479] : renamed from bond_slave_0 [ 255.270458][ T8485] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.918'. [ 255.694960][ T8485] netlink: 21056 bytes leftover after parsing attributes in process `syz.0.918'. [ 255.714045][ T8485] tipc: Started in network mode [ 255.729370][ T8485] tipc: Node identity 1a, cluster identity 4711 [ 255.754163][ T8485] tipc: Node number set to 26 [ 255.959116][ T8490] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 256.005342][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.011770][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.624954][ T8510] netlink: 128 bytes leftover after parsing attributes in process `syz.2.922'. [ 257.379735][ T8510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.175206][ T8521] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.925'. [ 258.194977][ T8521] netlink: 21056 bytes leftover after parsing attributes in process `syz.1.925'. [ 258.224361][ T8521] tipc: Started in network mode [ 258.232446][ T8521] tipc: Node identity 1a, cluster identity 4711 [ 258.255472][ T8521] tipc: Node number set to 26 [ 273.057595][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.069030][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.077716][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.090505][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.100835][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.110680][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.665374][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.676509][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.688826][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.699179][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.708749][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.717197][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.737720][ T5086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.747162][ T5086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.765775][ T5086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.778565][ T5086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.787590][ T5086] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.797384][ T5086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.166778][ T5783] Bluetooth: hci4: command tx timeout [ 275.326022][ T5086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.337405][ T5086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.345655][ T5086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.360475][ T5086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.369492][ T5086] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.377636][ T5086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.804182][ T5783] Bluetooth: hci5: command tx timeout [ 276.844097][ T5086] Bluetooth: hci6: command tx timeout [ 277.244174][ T5086] Bluetooth: hci4: command tx timeout [ 277.404065][ T5086] Bluetooth: hci7: command tx timeout [ 277.884060][ T5086] Bluetooth: hci5: command tx timeout [ 278.924046][ T5086] Bluetooth: hci6: command tx timeout [ 279.326060][ T5086] Bluetooth: hci4: command tx timeout [ 279.483993][ T5086] Bluetooth: hci7: command tx timeout [ 279.964445][ T5086] Bluetooth: hci5: command tx timeout [ 281.004373][ T5086] Bluetooth: hci6: command tx timeout [ 281.406900][ T5086] Bluetooth: hci4: command tx timeout [ 281.564193][ T5086] Bluetooth: hci7: command tx timeout [ 282.045015][ T5783] Bluetooth: hci5: command tx timeout [ 283.084132][ T5783] Bluetooth: hci6: command tx timeout [ 283.644006][ T5783] Bluetooth: hci7: command tx timeout [ 292.924255][ T27] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 334.835422][ T5086] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 334.853635][ T5086] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 334.862418][ T5086] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 334.873633][ T5086] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 334.884697][ T5086] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 334.892351][ T5086] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 335.023686][ T5086] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 335.033254][ T5086] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 335.043023][ T5086] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 335.052123][ T5086] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 335.061721][ T5086] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 335.084939][ T5086] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 335.581377][ T5783] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 335.592662][ T5783] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 335.601647][ T5783] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 335.613957][ T5783] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 335.622152][ T5783] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 335.631983][ T5783] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 336.210046][ T5783] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 336.222136][ T5783] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 336.236055][ T5783] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 336.245254][ T5783] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 336.253414][ T5783] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 336.261705][ T5783] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 337.004057][ T5783] Bluetooth: hci8: command tx timeout [ 337.164065][ T5783] Bluetooth: hci9: command tx timeout [ 337.724060][ T5783] Bluetooth: hci10: command tx timeout [ 338.284127][ T5783] Bluetooth: hci11: command tx timeout [ 339.084125][ T5783] Bluetooth: hci8: command tx timeout [ 339.244051][ T5783] Bluetooth: hci9: command tx timeout [ 339.803978][ T5783] Bluetooth: hci10: command tx timeout [ 340.363979][ T5783] Bluetooth: hci11: command tx timeout [ 341.163947][ T5783] Bluetooth: hci8: command tx timeout [ 341.323960][ T5783] Bluetooth: hci9: command tx timeout [ 341.883963][ T5783] Bluetooth: hci10: command tx timeout [ 342.443967][ T5783] Bluetooth: hci11: command tx timeout [ 343.243995][ T5783] Bluetooth: hci8: command tx timeout [ 343.404073][ T5783] Bluetooth: hci9: command tx timeout [ 343.963952][ T5783] Bluetooth: hci10: command tx timeout [ 344.523974][ T5783] Bluetooth: hci11: command tx timeout [ 361.843839][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 361.850602][ C0] rcu: 0-....: (8594 ticks this GP) idle=9634/1/0x4000000000000000 softirq=24564/24566 fqs=5204 [ 361.862042][ C0] rcu: hardirqs softirqs csw/system [ 361.868473][ C0] rcu: number: 1368170 3 0 [ 361.875065][ C0] rcu: cputime: 16771 35718 69 ==> 52500(ms) [ 361.882938][ C0] rcu: (t=10501 jiffies g=27929 q=1865 ncpus=2) [ 361.889333][ C0] CPU: 0 PID: 8512 Comm: syz.0.923 Not tainted syzkaller #0 [ 361.896750][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.906849][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 361.912312][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 361.932017][ C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000206 [ 361.938191][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 9e629e8756f26f00 [ 361.946228][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1c7be0 [ 361.954229][ C0] RBP: ffffc900000074f0 R08: dffffc0000000000 R09: 1ffffffff22378a0 [ 361.962230][ C0] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: 1ffff92000000e88 [ 361.970228][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 361.978260][ C0] FS: 00007f2abd54a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 361.987238][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.993862][ C0] CR2: 0000000000000000 CR3: 000000007829d000 CR4: 00000000003506f0 [ 362.001874][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 362.009873][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 362.017868][ C0] Call Trace: [ 362.021281][ C0] [ 362.024191][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.030635][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.036825][ C0] ? read_lock_is_recursive+0x20/0x20 [ 362.042235][ C0] ? unwind_next_frame+0x23f/0x2990 [ 362.047491][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.053598][ C0] is_bpf_text_address+0x47/0x2a0 [ 362.058672][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 362.063931][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 362.069165][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.075266][ C0] kernel_text_address+0xa0/0xd0 [ 362.080269][ C0] __kernel_text_address+0xd/0x30 [ 362.085328][ C0] unwind_get_return_address+0x5d/0xc0 [ 362.090815][ C0] ? stack_trace_save+0x100/0x100 [ 362.095900][ C0] arch_stack_walk+0x11d/0x190 [ 362.100703][ C0] stack_trace_save+0xaa/0x100 [ 362.105498][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 362.110674][ C0] __kfence_alloc+0x2d7/0x3d0 [ 362.115457][ C0] ? __run_timers+0x570/0x810 [ 362.120173][ C0] ? handle_softirqs+0x27d/0x820 [ 362.125146][ C0] ? kfence_guarded_free+0x4b0/0x4b0 [ 362.130460][ C0] ? generic_exec_single+0x477/0x4e0 [ 362.135806][ C0] ? __kfence_alloc+0x2d7/0x3d0 [ 362.140690][ C0] ? kmem_cache_alloc_node+0x299/0x310 [ 362.146206][ C0] ? __alloc_skb+0x103/0x2c0 [ 362.150944][ C0] ? aoecmd_cfg+0x2c5/0xa50 [ 362.155507][ C0] ? call_timer_fn+0x189/0x540 [ 362.160306][ C0] ? __run_timers+0x570/0x810 [ 362.165013][ C0] ? run_timer_softirq+0x67/0xf0 [ 362.169983][ C0] ? handle_softirqs+0x27d/0x820 [ 362.174949][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 362.179749][ C0] ? irq_exit_rcu+0x9/0x20 [ 362.184195][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 362.190100][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.196299][ C0] ? generic_exec_single+0x477/0x4e0 [ 362.201613][ C0] ? smp_call_function_single+0x36d/0x5a0 [ 362.207387][ C0] ? perf_install_in_context+0x5bb/0x920 [ 362.213159][ C0] ? __se_sys_perf_event_open+0x1841/0x1c60 [ 362.219095][ C0] ? do_syscall_64+0x55/0xb0 [ 362.223719][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.229884][ C0] ? should_failslab+0x9/0x20 [ 362.234654][ C0] ? kmem_cache_alloc_node+0x1d7/0x310 [ 362.240188][ C0] ? kmalloc_reserve+0x95/0x240 [ 362.245082][ C0] kmem_cache_alloc_node+0x299/0x310 [ 362.250406][ C0] ? __alloc_skb+0x103/0x2c0 [ 362.255033][ C0] __alloc_skb+0x103/0x2c0 [ 362.259486][ C0] aoecmd_cfg+0x2c5/0xa50 [ 362.263893][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 362.268443][ C0] ? ktcomplete+0x2a0/0x2a0 [ 362.272994][ C0] call_timer_fn+0x189/0x540 [ 362.277632][ C0] ? skbfree+0x340/0x340 [ 362.281909][ C0] ? call_timer_fn+0xd2/0x540 [ 362.286611][ C0] ? __run_timers+0x810/0x810 [ 362.291335][ C0] ? skbfree+0x340/0x340 [ 362.295614][ C0] __run_timers+0x570/0x810 [ 362.300165][ C0] ? detach_timer+0x2b0/0x2b0 [ 362.304872][ C0] ? lock_chain_count+0x20/0x20 [ 362.309754][ C0] run_timer_softirq+0x67/0xf0 [ 362.314546][ C0] handle_softirqs+0x27d/0x820 [ 362.319351][ C0] ? read_tsc+0x9/0x20 [ 362.323446][ C0] ? ktime_get+0x24b/0x280 [ 362.327915][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 362.332712][ C0] ? do_softirq+0x1a0/0x1a0 [ 362.337281][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 362.342543][ C0] __irq_exit_rcu+0xd3/0x190 [ 362.347182][ C0] ? irq_exit_rcu+0x20/0x20 [ 362.351722][ C0] irq_exit_rcu+0x9/0x20 [ 362.355988][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 362.361657][ C0] [ 362.364617][ C0] [ 362.367686][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.373711][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 362.380072][ C0] Code: 75 11 e8 2c 00 0b 00 48 85 db 75 16 e8 22 00 0b 00 eb 15 e8 1b 00 0b 00 e8 06 f3 07 09 48 85 db 74 ea e8 0c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 362.399714][ C0] RSP: 0018:ffffc90017e2fa00 EFLAGS: 00000246 [ 362.405821][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88805bfc3c00 [ 362.413827][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.421852][ C0] RBP: ffffc90017e2fad0 R08: ffffffff911bc5ff R09: 1ffffffff22378bf [ 362.429894][ C0] R10: dffffc0000000000 R11: fffffbfff22378c0 R12: 1ffff92002fc5f44 [ 362.437901][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92002fc5f65 [ 362.445950][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 362.451198][ C0] ? event_function+0x300/0x300 [ 362.456113][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 362.461887][ C0] smp_call_function_single+0x36d/0x5a0 [ 362.467491][ C0] ? event_function+0x300/0x300 [ 362.472374][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 362.478571][ C0] ? event_function+0x300/0x300 [ 362.483458][ C0] perf_install_in_context+0x5bb/0x920 [ 362.488957][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 362.494968][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 362.500212][ C0] ? anon_inode_getfile+0xc8/0x1a0 [ 362.505389][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 362.510624][ C0] ? perf_event__header_size+0x165/0x220 [ 362.516293][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 362.522052][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 362.527727][ C0] ? lock_chain_count+0x20/0x20 [ 362.532604][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 362.538619][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 362.543861][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 362.549538][ C0] do_syscall_64+0x55/0xb0 [ 362.553987][ C0] ? clear_bhb_loop+0x40/0x90 [ 362.558688][ C0] ? clear_bhb_loop+0x40/0x90 [ 362.563392][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.569313][ C0] RIP: 0033:0x7f2abc59ce59 [ 362.573753][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.593392][ C0] RSP: 002b:00007f2abd54a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 362.601839][ C0] RAX: ffffffffffffffda RBX: 00007f2abc815fa0 RCX: 00007f2abc59ce59 [ 362.610025][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 362.618028][ C0] RBP: 00007f2abc632e6f R08: 0000000000000002 R09: 0000000000000000 [ 362.626031][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 362.634298][ C0] R13: 00007f2abc816038 R14: 00007f2abc815fa0 R15: 00007ffccbd0ecc8 [ 362.642310][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)