last executing test programs: 7.648689471s ago: executing program 3 (id=2874): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 7.532192084s ago: executing program 3 (id=2877): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000000)=@raw=[@map_idx, @generic={0x0, 0x0, 0x0, 0x0, 0x9}, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0xffffffffffffffff}], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r9) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.422222607s ago: executing program 1 (id=2879): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 2) 6.883865041s ago: executing program 1 (id=2881): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) close(0x3) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x17653, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x400000000000000, 0x6, 0x7, 0x0, 0x101, 0xa6f, 0x0, 0xffffffff, 0x0, 0x7fffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x117}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 6.500402341s ago: executing program 2 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000020) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c89ffdb5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) recvmsg(r4, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000085109200000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000380)="2c3b9614695cc28f45f228e086ddd0f00004d249b5cb7af1e2ca7b31da7e027d4d83220c77f28a897bfeda18c89728dba26dc8ef82ed", 0x0, 0xd594, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$kcm(0x2, 0x3, 0x106) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r7, &(0x7f00000007c0)="e79c22", &(0x7f00000009c0)=""/215}, 0x20) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000000)="fbd2b9ed29d8974a6ce7f7c0c56aed681686762a1b0c26a85f0891", 0x1b}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e", 0x15}], 0x2}, 0x0) 5.821511849s ago: executing program 4 (id=2884): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000080) recvmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x40012103) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000042) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='&-(\x00') (fail_nth: 3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)=@generic={&(0x7f00000004c0)='./file0\x00', r4}, 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000940)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) 5.804626099s ago: executing program 3 (id=2885): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0300"/20, @ANYRES64=r1], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1e0cec0ae2213db61ccdb196b7523065612a6ecdb", 0x38}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b", 0x68}], 0x2, 0x0, 0x0, 0x400c800}, 0x4004000) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x9b47, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x7}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x104439, 0xc8, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0xffffffff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0xc5c2) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9041c140800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x0) 5.688274002s ago: executing program 2 (id=2886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8949, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfff}, 0x94) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfffffe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x1, 0x6, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xa888, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x0) 5.591558135s ago: executing program 4 (id=2887): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 5.480627338s ago: executing program 4 (id=2888): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x1590f}, 0x2920, 0x6, 0x6, 0x8, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e14060400c300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.39500567s ago: executing program 2 (id=2889): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x40) 3.900557458s ago: executing program 3 (id=2890): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800400000a053db3caf905323010000000000000000000018110000151024dc9af300908fe450c607df0bd8fe7d9a1981317f55c90bd6c20bcc0d6f902658a5425fea42db0fd9de7c61bc07826b7f5e33677d35f7db74ddc8cd14f4a27213bd442913315e466251815e8a4d940def73ef5fcb6c1167d0affa372690e4d14d3b31481791f38b76fdc6cb470a0db81c5f7bf5b11d94bf9acce91cb13dd3a36b1874572121fb260ce49472f59a3f4feb972891880c72d766390c00394e11963db2", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000085000000a00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='blkio.bfq.time\x00', 0x0, 0x0) (async) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x4, 0x6, 0x7fff, 0x12000, 0xffffffffffffffff, 0x1, '\x00', r2, r3, 0x4, 0x0, 0x3, 0x9, @void, @value, @value=r4}, 0x50) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000030000a4dc819790b816d4a6de1f1c945b0001000000fd624825cb310751a9c96ac34369707757330952f8f51bd7d671d97f802e6a04a82605732d601e930885ae", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0100000004000000020000000a00"/28], 0x50) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xe2004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="05"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_int(r13, &(0x7f0000000900)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) write$cgroup_subtree(r14, &(0x7f0000000280)=ANY=[], 0x31) 3.900099838s ago: executing program 1 (id=2891): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.795595541s ago: executing program 4 (id=2893): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x86ddffff}, 0x48) 3.795393792s ago: executing program 2 (id=2894): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000004000000000007110a8000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46ea3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.740918333s ago: executing program 3 (id=2895): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000000)=@raw=[@map_idx, @generic={0x0, 0x0, 0x0, 0x0, 0x9}, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0xffffffffffffffff}], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r9) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.311056014s ago: executing program 1 (id=2897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0xfffffffc}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000002b80), &(0x7f0000002bc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002c40), &(0x7f0000002c80)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e00)={0x6, 0x1d, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_fd={0x18, 0xa}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002b00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000002b40)={0x1, 0x2, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000002d00)=[r3, r4], &(0x7f0000002d40)=[{0x4, 0x1, 0xb, 0x4}, {0x1, 0x2, 0xd, 0x2}, {0x0, 0x4, 0xf, 0x8}, {0x0, 0x4, 0xc, 0x3}, {0x4, 0x5, 0xc, 0x4}, {0x4, 0x3, 0x7, 0x7}, {0x3, 0x5, 0x4}, {0x4, 0x4, 0xb, 0xb}, {0x4, 0x3, 0xa, 0x8}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x7, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2bf, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000070000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r7, 0x0, 0x0}, 0x10) r8 = socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r8, 0x88, 0xa, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x1e, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@alu={0x4, 0x0, 0x9, 0x9, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x98}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @ringbuf_query, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xffff4700, 0x6, 0xcc1, 0x281, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, 0x0, &(0x7f0000000140)}, 0x20) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xd, &(0x7f0000000240)=ANY=[@ANYRES16=r10, @ANYRES64=r1, @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(r0) 3.030214981s ago: executing program 4 (id=2898): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 2.955516634s ago: executing program 2 (id=2900): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x100, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x5, 0x0, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xff, 0x8004ff00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7000000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x47, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x957, 0xa}, 0xdfb0, 0x400000c8, 0x6, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x1a) close(r8) recvmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[], 0x2d) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10) r11 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0xc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000540)='(pu&00\t)|') r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.930447804s ago: executing program 1 (id=2901): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xb, 0x0, 0x0, 0x0, 0x0, 0x801ac, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x6}, 0x1000, 0x14, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.760659619s ago: executing program 1 (id=2902): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) close(0x3) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x17653, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x400000000000000, 0x6, 0x7, 0x0, 0x101, 0xa6f, 0x0, 0xffffffff, 0x0, 0x7fffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x117}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 2.71903225s ago: executing program 0 (id=2903): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 2.70054346s ago: executing program 4 (id=2904): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) (fail_nth: 37) 2.174274514s ago: executing program 0 (id=2906): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x430702, 0x0) syz_clone(0x33e9ca56f18eb4c6, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x12040) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r1, 0x0, 0x40) write$cgroup_subtree(r2, 0x0, 0xfe33) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x3000, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.005613628s ago: executing program 0 (id=2907): syz_clone(0xe59c3700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x22, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r6 = getpid() r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) openat$cgroup_procs(r5, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x24000090) write$cgroup_pid(r5, &(0x7f00000000c0)=r6, 0x12) mkdirat$cgroup(r5, &(0x7f0000000680)='syz0\x00', 0x1ff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x38, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8f}, @call={0x85, 0x0, 0x0, 0x62}, @generic={0x8, 0x0, 0x5, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x1, 0xc, 0x6, 0x3, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0x0, 0x7, 0x2, 0x8, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xe, &(0x7f0000000380)=""/14, 0x41100, 0x2b, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x0, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[r5, r9, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x1, 0x6, 0xfd363b3c9ab2ceca}, {0x1, 0x2, 0xc, 0x5}, {0x5, 0x1, 0xb, 0x8}, {0x0, 0x1, 0xf, 0xa}, {0x4, 0x4, 0x3, 0x9}, {0x3, 0x1, 0x10, 0x5}, {0x0, 0x1, 0xc, 0x8}], 0x10, 0x8000}, 0x94) 1.887038271s ago: executing program 0 (id=2908): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)="3e8bbcee0da45d7ed1572ed4e0220406f87b0024292bc6317c6dfe38358847e22efad78944d1bc5cc5d340c8f4156cbaa91845aa78f654ca47efbfdd569b0ce9b642fb44f832c0f80c9cda639db97065d537f2d6a8e996375498bdb199410300000000000000de41b1f74db52f6836b6765ebb7fab2e6f22d27ad6340ffbcd71b70ef5683dfeb022614681c9e3762a3ad5f84751ca94e35039796705cadae08ee170149049bca1061336755d0e4ab0454262699a2e46cd90a2374f0e7201efe43a4d614461f3e8412ab89f8f0c494952d407", 0xd2}], 0x1}, 0x547052430a225ce3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000001c0), 0x4) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1}, 0x1) close(0x3) 1.719370156s ago: executing program 0 (id=2909): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/50, 0x32}, {&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f00000007c0)=""/112, 0x70}], 0x6}, 0x12000) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000ffff000000000000", @ANYRES32, @ANYBLOB="bf030000000562c71e302136dba1fe21259890d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000007000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000037000000bf0000000000b7020000020000008500000084000000b70000000000000095000000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3ef, 0xe5, &(0x7f0000000500)=""/229, 0x40f00, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680), &(0x7f0000000700)=[{0x1, 0x3, 0x9, 0x1}, {0x0, 0x1, 0x2, 0xb}, {0x5, 0x4, 0x1}, {0x1, 0x2, 0xd, 0x9}, {0x2, 0x4, 0x6, 0x9}, {0x5, 0x2, 0x9, 0xc}, {0x0, 0x4, 0xf, 0x8}], 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) recvmsg$kcm(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="c000000000000000070100000000000017eaa63fed7d6e77aa52409afb7ad2a71014b570c9f4775c0108cb65c89a242f13d5e45349ba22b13f3082b7186adb4fb1bf3510edc0cca8f2817ec05943c436af1feae717fea42bfbbe96da816b1415119d0c27114fcd8b47898a97486b77bdcbab0236fdffb95c4dfd4aec1d3009fab922f0166f840d93a0b83f73159a84192a5a51790a66ad6807535f47f3d5822f1feff6885ceee39fc60151d5c4e146574e3fd9b5ee6b27ecccda000000000038000000000000000a010000070000003439efc583b29979199dabc671ee13e4d755c9d92c26ba846dc33ff741630077bc218024f2b3000000"], 0xf8}, 0x2000001) socket$kcm(0x2b, 0x1, 0x0) 380.401321ms ago: executing program 2 (id=2910): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100544, 0x0, 0x0, 0x9, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61006100"], 0x0, 0x58}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a92fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1, 0x0, 0xc00}, 0x80) r3 = socket$kcm(0x1e, 0x4, 0x0) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x104000, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x30008045) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3af8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000004, 0x80218, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2005, 0x0, 0x51, 0x1, 0xa1a, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 297.177903ms ago: executing program 3 (id=2911): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a800160020fe01401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92", 0xcb}, {&(0x7f0000000000)="c354431ee0093f9f0b6d267585", 0xd}], 0x2}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xfeffffff}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2912): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xeffff012}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): 630.054263][T12290] ? bpf_lsm_capable+0x5/0x10 [ 630.058942][T12290] ? security_capable+0x85/0xb0 [ 630.063803][T12290] genl_rcv_msg+0x601/0x790 [ 630.068311][T12290] ? genl_bind+0x360/0x360 [ 630.072720][T12290] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 630.079075][T12290] netlink_rcv_skb+0x1ef/0x440 [ 630.083842][T12290] ? genl_bind+0x360/0x360 [ 630.088257][T12290] ? netlink_ack+0x1160/0x1160 [ 630.093031][T12290] ? down_read+0x1a8/0x2d0 [ 630.097443][T12290] genl_rcv+0x24/0x40 [ 630.101420][T12290] netlink_unicast+0x7ad/0x920 [ 630.106202][T12290] netlink_sendmsg+0x8ad/0xbd0 [ 630.110980][T12290] ? __sanitizer_cov_trace_const_cmp4+0x7e/0x80 [ 630.117256][T12290] ? netlink_getsockopt+0x550/0x550 [ 630.122458][T12290] ? apparmor_socket_sendmsg+0x8a/0x330 [ 630.128019][T12290] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 630.133301][T12290] ? security_socket_sendmsg+0x7c/0xa0 [ 630.138759][T12290] ? netlink_getsockopt+0x550/0x550 [ 630.143968][T12290] ____sys_sendmsg+0x5ed/0x9a0 [ 630.148746][T12290] ? __sys_sendmsg_sock+0x30/0x30 [ 630.153771][T12290] ? __import_iovec+0x306/0x510 [ 630.158627][T12290] ? import_iovec+0x6f/0xa0 [ 630.163146][T12290] ___sys_sendmsg+0x2a2/0x360 [ 630.167849][T12290] ? __sys_sendmsg+0x2a0/0x2a0 [ 630.172659][T12290] __se_sys_sendmsg+0x1c3/0x2b0 [ 630.177509][T12290] ? ct_nmi_exit+0x145/0x1c0 [ 630.182105][T12290] ? __x64_sys_sendmsg+0x80/0x80 [ 630.187054][T12290] ? lockdep_hardirqs_on+0x94/0x140 [ 630.192259][T12290] do_syscall_64+0x4c/0xa0 [ 630.196672][T12290] ? clear_bhb_loop+0x60/0xb0 [ 630.201348][T12290] ? clear_bhb_loop+0x60/0xb0 [ 630.206042][T12290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.211934][T12290] RIP: 0033:0x7f7c6999e0d9 [ 630.216348][T12290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.235954][T12290] RSP: 002b:00007f7c6a912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.244368][T12290] RAX: ffffffffffffffda RBX: 00007f7c69c25fa0 RCX: 00007f7c6999e0d9 [ 630.252427][T12290] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 630.260396][T12290] RBP: 00007f7c69a35024 R08: 0000000000000000 R09: 0000000000000000 [ 630.268360][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.276324][T12290] R13: 00007f7c69c26038 R14: 00007f7c69c25fa0 R15: 00007ffc724cf1b8 [ 630.284309][T12290] [ 630.435716][T12299] netlink: 'syz.0.2514': attribute type 2 has an invalid length. [ 630.449490][T12299] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 630.457416][T12299] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2514'. [ 630.473403][T12294] syzkaller0: mtu greater than device maximum [ 631.339323][T12321] device syzkaller0 entered promiscuous mode [ 633.955451][T12333] netlink: 'syz.4.2524': attribute type 19 has an invalid length. [ 633.965216][T12333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2524'. [ 634.229496][T12344] netlink: 'syz.1.2528': attribute type 2 has an invalid length. [ 634.274879][T12344] netlink: 'syz.1.2528': attribute type 1 has an invalid length. [ 634.283691][T12344] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2528'. [ 634.393572][T12347] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2529'. [ 635.646220][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2529'. [ 635.659865][T12351] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2530'. [ 635.707849][T12347] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 635.728475][T12347] CPU: 0 PID: 12347 Comm: syz.0.2529 Not tainted syzkaller #0 [ 635.735994][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.746075][T12347] Call Trace: [ 635.749378][T12347] [ 635.752322][T12347] dump_stack_lvl+0x188/0x24e [ 635.757133][T12347] ? show_regs_print_info+0x12/0x12 [ 635.762381][T12347] ? load_image+0x410/0x410 [ 635.766939][T12347] sysfs_warn_dup+0x8a/0xa0 [ 635.771443][T12347] sysfs_do_create_link_sd+0xc0/0x110 [ 635.776823][T12347] device_add+0x83b/0x1050 [ 635.781281][T12347] wiphy_register+0x1d8b/0x2aa0 [ 635.786180][T12347] ? cfg80211_event_work+0x40/0x40 [ 635.791318][T12347] ? minstrel_ht_alloc+0x894/0xa20 [ 635.796468][T12347] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 635.802739][T12347] ieee80211_register_hw+0x2d48/0x39f0 [ 635.808240][T12347] ? ieee80211_register_hw+0xee1/0x39f0 [ 635.813824][T12347] ? ieee80211_register_hw+0xee1/0x39f0 [ 635.819411][T12347] ? ieee80211_tasklet_handler+0x20/0x20 [ 635.825077][T12347] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 635.830998][T12347] ? __debug_object_init+0xed/0x440 [ 635.836227][T12347] ? memset+0x1e/0x40 [ 635.840229][T12347] ? __hrtimer_init+0x189/0x270 [ 635.845116][T12347] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 635.850878][T12347] ? memcpy+0x3c/0x60 [ 635.854886][T12347] hwsim_new_radio_nl+0xab7/0xc90 [ 635.859950][T12347] genl_family_rcv_msg_doit+0x22f/0x350 [ 635.865515][T12347] ? end_current_label_crit_section+0x170/0x170 [ 635.871785][T12347] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 635.877711][T12347] ? bpf_lsm_capable+0x5/0x10 [ 635.882408][T12347] ? security_capable+0x85/0xb0 [ 635.887294][T12347] genl_rcv_msg+0x601/0x790 [ 635.891824][T12347] ? genl_bind+0x360/0x360 [ 635.896254][T12347] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 635.902640][T12347] netlink_rcv_skb+0x1ef/0x440 [ 635.907446][T12347] ? genl_bind+0x360/0x360 [ 635.911889][T12347] ? netlink_ack+0x1160/0x1160 [ 635.916691][T12347] ? down_read+0x1a8/0x2d0 [ 635.921124][T12347] genl_rcv+0x24/0x40 [ 635.925122][T12347] netlink_unicast+0x7ad/0x920 [ 635.929920][T12347] netlink_sendmsg+0x8ad/0xbd0 [ 635.934717][T12347] ? netlink_getsockopt+0x550/0x550 [ 635.939940][T12347] ? apparmor_socket_sendmsg+0x8a/0x330 [ 635.945508][T12347] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 635.950896][T12347] ? security_socket_sendmsg+0x7c/0xa0 [ 635.956375][T12347] ? netlink_getsockopt+0x550/0x550 [ 635.961603][T12347] ____sys_sendmsg+0x5ed/0x9a0 [ 635.966402][T12347] ? __sys_sendmsg_sock+0x30/0x30 [ 635.971451][T12347] ? __import_iovec+0x306/0x510 [ 635.976335][T12347] ? import_iovec+0x6f/0xa0 [ 635.980885][T12347] ___sys_sendmsg+0x2a2/0x360 [ 635.985596][T12347] ? __sys_sendmsg+0x2a0/0x2a0 [ 635.990434][T12347] __se_sys_sendmsg+0x1c3/0x2b0 [ 635.995309][T12347] ? ct_nmi_exit+0x145/0x1c0 [ 635.999925][T12347] ? __x64_sys_sendmsg+0x80/0x80 [ 636.004898][T12347] ? lockdep_hardirqs_on+0x94/0x140 [ 636.010135][T12347] do_syscall_64+0x4c/0xa0 [ 636.014572][T12347] ? clear_bhb_loop+0x60/0xb0 [ 636.019276][T12347] ? clear_bhb_loop+0x60/0xb0 [ 636.023977][T12347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.029894][T12347] RIP: 0033:0x7f600e59e0d9 [ 636.034326][T12347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.053954][T12347] RSP: 002b:00007f600c7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.062393][T12347] RAX: ffffffffffffffda RBX: 00007f600e826090 RCX: 00007f600e59e0d9 [ 636.070412][T12347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 636.078411][T12347] RBP: 00007f600e635024 R08: 0000000000000000 R09: 0000000000000000 [ 636.086405][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.094404][T12347] R13: 00007f600e826128 R14: 00007f600e826090 R15: 00007ffd696d6738 [ 636.102419][T12347] [ 636.265349][T12362] device syzkaller0 entered promiscuous mode [ 636.287970][T12360] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2533'. [ 636.524886][T12375] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2535'. [ 636.932679][T12385] netlink: 'syz.3.2541': attribute type 2 has an invalid length. [ 636.941222][T12385] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 636.949188][T12385] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2541'. [ 637.493197][T12400] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2545'. [ 638.687619][T12395] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2543'. [ 639.138635][T12401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2545'. [ 639.195374][T12408] netlink: 'syz.2.2548': attribute type 25 has an invalid length. [ 639.204054][T12408] netlink: 'syz.2.2548': attribute type 28 has an invalid length. [ 639.213049][T12400] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 639.221577][T12400] CPU: 1 PID: 12400 Comm: syz.3.2545 Not tainted syzkaller #0 [ 639.229260][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.239343][T12400] Call Trace: [ 639.242651][T12400] [ 639.245599][T12400] dump_stack_lvl+0x188/0x24e [ 639.250310][T12400] ? show_regs_print_info+0x12/0x12 [ 639.255534][T12400] ? load_image+0x410/0x410 [ 639.260054][T12400] sysfs_warn_dup+0x8a/0xa0 [ 639.264590][T12400] sysfs_do_create_link_sd+0xc0/0x110 [ 639.270025][T12400] device_add+0x83b/0x1050 [ 639.274467][T12400] wiphy_register+0x1d8b/0x2aa0 [ 639.279495][T12400] ? cfg80211_event_work+0x40/0x40 [ 639.284622][T12400] ? minstrel_ht_alloc+0x894/0xa20 [ 639.289748][T12400] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 639.295816][T12400] ieee80211_register_hw+0x2d48/0x39f0 [ 639.301290][T12400] ? ieee80211_register_hw+0xee1/0x39f0 [ 639.306839][T12400] ? ieee80211_register_hw+0xee1/0x39f0 [ 639.312483][T12400] ? ieee80211_tasklet_handler+0x20/0x20 [ 639.318113][T12400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 639.324020][T12400] ? __debug_object_init+0xed/0x440 [ 639.329225][T12400] ? memset+0x1e/0x40 [ 639.333204][T12400] ? __hrtimer_init+0x189/0x270 [ 639.338062][T12400] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 639.343796][T12400] ? memcpy+0x3c/0x60 [ 639.347819][T12400] hwsim_new_radio_nl+0xab7/0xc90 [ 639.352888][T12400] genl_family_rcv_msg_doit+0x22f/0x350 [ 639.358456][T12400] ? end_current_label_crit_section+0x170/0x170 [ 639.364713][T12400] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 639.370643][T12400] ? bpf_lsm_capable+0x5/0x10 [ 639.375377][T12400] ? security_capable+0x85/0xb0 [ 639.380247][T12400] genl_rcv_msg+0x601/0x790 [ 639.384761][T12400] ? genl_bind+0x360/0x360 [ 639.389173][T12400] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 639.395518][T12400] netlink_rcv_skb+0x1ef/0x440 [ 639.400284][T12400] ? genl_bind+0x360/0x360 [ 639.404698][T12400] ? netlink_ack+0x1160/0x1160 [ 639.409480][T12400] ? down_read+0x1a8/0x2d0 [ 639.413918][T12400] genl_rcv+0x24/0x40 [ 639.417924][T12400] netlink_unicast+0x7ad/0x920 [ 639.422718][T12400] netlink_sendmsg+0x8ad/0xbd0 [ 639.427500][T12400] ? netlink_getsockopt+0x550/0x550 [ 639.432706][T12400] ? apparmor_socket_sendmsg+0x8a/0x330 [ 639.438258][T12400] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 639.443541][T12400] ? security_socket_sendmsg+0x7c/0xa0 [ 639.448997][T12400] ? netlink_getsockopt+0x550/0x550 [ 639.454209][T12400] ____sys_sendmsg+0x5ed/0x9a0 [ 639.458989][T12400] ? __sys_sendmsg_sock+0x30/0x30 [ 639.464034][T12400] ? __import_iovec+0x306/0x510 [ 639.468917][T12400] ? import_iovec+0x6f/0xa0 [ 639.473436][T12400] ___sys_sendmsg+0x2a2/0x360 [ 639.478131][T12400] ? __sys_sendmsg+0x2a0/0x2a0 [ 639.482946][T12400] __se_sys_sendmsg+0x1c3/0x2b0 [ 639.487916][T12400] ? ct_nmi_exit+0x145/0x1c0 [ 639.492510][T12400] ? __x64_sys_sendmsg+0x80/0x80 [ 639.497461][T12400] ? lockdep_hardirqs_on+0x94/0x140 [ 639.502665][T12400] do_syscall_64+0x4c/0xa0 [ 639.507082][T12400] ? clear_bhb_loop+0x60/0xb0 [ 639.511755][T12400] ? clear_bhb_loop+0x60/0xb0 [ 639.516460][T12400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.522358][T12400] RIP: 0033:0x7f7c6999e0d9 [ 639.526770][T12400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.546402][T12400] RSP: 002b:00007f7c6a912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.554819][T12400] RAX: ffffffffffffffda RBX: 00007f7c69c25fa0 RCX: 00007f7c6999e0d9 [ 639.562790][T12400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 639.570760][T12400] RBP: 00007f7c69a35024 R08: 0000000000000000 R09: 0000000000000000 [ 639.578744][T12400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.586726][T12400] R13: 00007f7c69c26038 R14: 00007f7c69c25fa0 R15: 00007ffc724cf1b8 [ 639.594718][T12400] [ 639.899306][T12415] device syzkaller0 entered promiscuous mode [ 639.932653][T12419] netlink: 'syz.2.2552': attribute type 2 has an invalid length. [ 639.976119][T12419] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 639.996798][T12419] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2552'. [ 640.921033][T12453] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2563'. [ 642.285863][T12441] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2558'. [ 642.305736][T12461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2563'. [ 642.333852][T12453] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 642.366410][T12453] CPU: 0 PID: 12453 Comm: syz.4.2563 Not tainted syzkaller #0 [ 642.373946][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.384032][T12453] Call Trace: [ 642.387332][T12453] [ 642.390375][T12453] dump_stack_lvl+0x188/0x24e [ 642.395094][T12453] ? show_regs_print_info+0x12/0x12 [ 642.400318][T12453] ? load_image+0x410/0x410 [ 642.404832][T12453] sysfs_warn_dup+0x8a/0xa0 [ 642.409337][T12453] sysfs_do_create_link_sd+0xc0/0x110 [ 642.414718][T12453] device_add+0x83b/0x1050 [ 642.419148][T12453] wiphy_register+0x1d8b/0x2aa0 [ 642.424038][T12453] ? cfg80211_event_work+0x40/0x40 [ 642.429189][T12453] ? minstrel_ht_alloc+0x894/0xa20 [ 642.434318][T12453] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 642.440389][T12453] ieee80211_register_hw+0x2d48/0x39f0 [ 642.445861][T12453] ? ieee80211_register_hw+0xee1/0x39f0 [ 642.451408][T12453] ? ieee80211_register_hw+0xee1/0x39f0 [ 642.456962][T12453] ? ieee80211_tasklet_handler+0x20/0x20 [ 642.462609][T12453] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 642.468501][T12453] ? __debug_object_init+0xed/0x440 [ 642.473973][T12453] ? memset+0x1e/0x40 [ 642.477953][T12453] ? __hrtimer_init+0x189/0x270 [ 642.482819][T12453] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 642.488553][T12453] hwsim_new_radio_nl+0xab7/0xc90 [ 642.493584][T12453] genl_family_rcv_msg_doit+0x22f/0x350 [ 642.499122][T12453] ? end_current_label_crit_section+0x170/0x170 [ 642.505365][T12453] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 642.511263][T12453] ? bpf_lsm_capable+0x5/0x10 [ 642.515936][T12453] ? security_capable+0x85/0xb0 [ 642.520812][T12453] genl_rcv_msg+0x601/0x790 [ 642.525320][T12453] ? genl_bind+0x360/0x360 [ 642.529731][T12453] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 642.536152][T12453] netlink_rcv_skb+0x1ef/0x440 [ 642.540948][T12453] ? genl_bind+0x360/0x360 [ 642.545366][T12453] ? netlink_ack+0x1160/0x1160 [ 642.550139][T12453] ? down_read+0x1a8/0x2d0 [ 642.554550][T12453] genl_rcv+0x24/0x40 [ 642.558524][T12453] netlink_unicast+0x7ad/0x920 [ 642.563291][T12453] netlink_sendmsg+0x8ad/0xbd0 [ 642.568065][T12453] ? netlink_getsockopt+0x550/0x550 [ 642.573266][T12453] ? apparmor_socket_sendmsg+0x8a/0x330 [ 642.578818][T12453] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 642.584097][T12453] ? security_socket_sendmsg+0x7c/0xa0 [ 642.589549][T12453] ? netlink_getsockopt+0x550/0x550 [ 642.594751][T12453] ____sys_sendmsg+0x5ed/0x9a0 [ 642.599522][T12453] ? __sys_sendmsg_sock+0x30/0x30 [ 642.604543][T12453] ? __import_iovec+0x306/0x510 [ 642.609400][T12453] ? import_iovec+0x6f/0xa0 [ 642.613910][T12453] ___sys_sendmsg+0x2a2/0x360 [ 642.618593][T12453] ? __sys_sendmsg+0x2a0/0x2a0 [ 642.623391][T12453] __se_sys_sendmsg+0x1c3/0x2b0 [ 642.628250][T12453] ? __x64_sys_sendmsg+0x80/0x80 [ 642.633198][T12453] ? syscall_enter_from_user_mode+0x2a/0x80 [ 642.639092][T12453] do_syscall_64+0x4c/0xa0 [ 642.643505][T12453] ? clear_bhb_loop+0x60/0xb0 [ 642.648180][T12453] ? clear_bhb_loop+0x60/0xb0 [ 642.652855][T12453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.658740][T12453] RIP: 0033:0x7f728ed9e0d9 [ 642.663150][T12453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.682750][T12453] RSP: 002b:00007f728fb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.691162][T12453] RAX: ffffffffffffffda RBX: 00007f728f025fa0 RCX: 00007f728ed9e0d9 [ 642.699134][T12453] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 642.707113][T12453] RBP: 00007f728ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 642.715078][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.723039][T12453] R13: 00007f728f026038 R14: 00007f728f025fa0 R15: 00007ffd591960c8 [ 642.731018][T12453] [ 642.859364][T12471] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2565'. [ 642.870255][T12472] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2564'. [ 642.900666][T12473] netlink: 'syz.2.2566': attribute type 2 has an invalid length. [ 642.942101][T12473] netlink: 'syz.2.2566': attribute type 1 has an invalid length. [ 642.968849][T12473] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2566'. [ 643.576417][T12492] netlink: 'syz.2.2571': attribute type 10 has an invalid length. [ 646.569769][T12514] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2578'. [ 646.889160][T12519] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2578'. [ 646.968846][T12514] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 646.989726][T12514] CPU: 1 PID: 12514 Comm: syz.4.2578 Not tainted syzkaller #0 [ 646.997281][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.007383][T12514] Call Trace: [ 647.010723][T12514] [ 647.013687][T12514] dump_stack_lvl+0x188/0x24e [ 647.018486][T12514] ? show_regs_print_info+0x12/0x12 [ 647.023741][T12514] ? load_image+0x410/0x410 [ 647.028336][T12514] sysfs_warn_dup+0x8a/0xa0 [ 647.032891][T12514] sysfs_do_create_link_sd+0xc0/0x110 [ 647.038323][T12514] device_add+0x83b/0x1050 [ 647.042816][T12514] wiphy_register+0x1d8b/0x2aa0 [ 647.047781][T12514] ? cfg80211_event_work+0x40/0x40 [ 647.052949][T12514] ? minstrel_ht_alloc+0x894/0xa20 [ 647.058136][T12514] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 647.064268][T12514] ieee80211_register_hw+0x2d48/0x39f0 [ 647.069784][T12514] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 647.076016][T12514] ? ieee80211_register_hw+0xee1/0x39f0 [ 647.081604][T12514] ? ieee80211_register_hw+0xee1/0x39f0 [ 647.087229][T12514] ? ieee80211_tasklet_handler+0x20/0x20 [ 647.092905][T12514] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 647.098830][T12514] ? __debug_object_init+0xed/0x440 [ 647.104071][T12514] ? memset+0x1e/0x40 [ 647.108072][T12514] ? __hrtimer_init+0x189/0x270 [ 647.112954][T12514] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 647.118727][T12514] ? memcpy+0x3c/0x60 [ 647.122735][T12514] hwsim_new_radio_nl+0xab7/0xc90 [ 647.127814][T12514] genl_family_rcv_msg_doit+0x22f/0x350 [ 647.133374][T12514] ? end_current_label_crit_section+0x170/0x170 [ 647.139655][T12514] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 647.145639][T12514] ? bpf_lsm_capable+0x5/0x10 [ 647.150336][T12514] ? security_capable+0x85/0xb0 [ 647.155223][T12514] genl_rcv_msg+0x601/0x790 [ 647.159768][T12514] ? genl_bind+0x360/0x360 [ 647.164192][T12514] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 647.170578][T12514] netlink_rcv_skb+0x1ef/0x440 [ 647.175361][T12514] ? genl_bind+0x360/0x360 [ 647.179808][T12514] ? netlink_ack+0x1160/0x1160 [ 647.184616][T12514] ? down_read+0x1a8/0x2d0 [ 647.189055][T12514] genl_rcv+0x24/0x40 [ 647.193047][T12514] netlink_unicast+0x7ad/0x920 [ 647.197854][T12514] netlink_sendmsg+0x8ad/0xbd0 [ 647.202659][T12514] ? netlink_getsockopt+0x550/0x550 [ 647.207887][T12514] ? apparmor_socket_sendmsg+0x8a/0x330 [ 647.213458][T12514] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 647.218753][T12514] ? security_socket_sendmsg+0x7c/0xa0 [ 647.224314][T12514] ? netlink_getsockopt+0x550/0x550 [ 647.229626][T12514] ____sys_sendmsg+0x5ed/0x9a0 [ 647.234440][T12514] ? __sys_sendmsg_sock+0x30/0x30 [ 647.239477][T12514] ? __import_iovec+0x306/0x510 [ 647.244459][T12514] ? import_iovec+0x6f/0xa0 [ 647.248987][T12514] ___sys_sendmsg+0x2a2/0x360 [ 647.253696][T12514] ? __sys_sendmsg+0x2a0/0x2a0 [ 647.258598][T12514] __se_sys_sendmsg+0x1c3/0x2b0 [ 647.263461][T12514] ? ct_nmi_exit+0x145/0x1c0 [ 647.268079][T12514] ? __x64_sys_sendmsg+0x80/0x80 [ 647.273077][T12514] ? lockdep_hardirqs_on+0x94/0x140 [ 647.278295][T12514] do_syscall_64+0x4c/0xa0 [ 647.282730][T12514] ? clear_bhb_loop+0x60/0xb0 [ 647.287446][T12514] ? clear_bhb_loop+0x60/0xb0 [ 647.292163][T12514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.298081][T12514] RIP: 0033:0x7f728ed9e0d9 [ 647.302519][T12514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.322190][T12514] RSP: 002b:00007f728fb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.330656][T12514] RAX: ffffffffffffffda RBX: 00007f728f025fa0 RCX: 00007f728ed9e0d9 [ 647.338661][T12514] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 647.346658][T12514] RBP: 00007f728ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 647.354640][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.362621][T12514] R13: 00007f728f026038 R14: 00007f728f025fa0 R15: 00007ffd591960c8 [ 647.370647][T12514] [ 647.474576][T12518] netlink: 'syz.3.2579': attribute type 2 has an invalid length. [ 647.492949][T12518] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 647.508001][T12518] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2579'. [ 648.163185][T12555] netlink: 'syz.4.2591': attribute type 21 has an invalid length. [ 648.172167][T12555] netlink: 'syz.4.2591': attribute type 7 has an invalid length. [ 649.109567][T12561] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2593'. [ 649.287948][T12562] device syzkaller0 entered promiscuous mode [ 649.310123][T12569] netlink: 'syz.0.2594': attribute type 10 has an invalid length. [ 649.322227][T12558] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2592'. [ 649.416371][T12571] netlink: 'syz.4.2596': attribute type 2 has an invalid length. [ 649.432660][T12571] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 649.452557][T12571] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2596'. [ 649.914186][T12586] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2601'. [ 651.722532][T12586] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 651.731079][T12586] CPU: 1 PID: 12586 Comm: syz.0.2601 Not tainted syzkaller #0 [ 651.738603][T12586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.748808][T12586] Call Trace: [ 651.752104][T12586] [ 651.755055][T12586] dump_stack_lvl+0x188/0x24e [ 651.759773][T12586] ? show_regs_print_info+0x12/0x12 [ 651.765002][T12586] ? load_image+0x410/0x410 [ 651.769540][T12586] sysfs_warn_dup+0x8a/0xa0 [ 651.774081][T12586] sysfs_do_create_link_sd+0xc0/0x110 [ 651.779577][T12586] device_add+0x83b/0x1050 [ 651.784000][T12586] wiphy_register+0x1d8b/0x2aa0 [ 651.788887][T12586] ? cfg80211_event_work+0x40/0x40 [ 651.794054][T12586] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 651.800246][T12586] ieee80211_register_hw+0x2d48/0x39f0 [ 651.805927][T12586] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 651.812095][T12586] ? ieee80211_register_hw+0xee1/0x39f0 [ 651.817643][T12586] ? ieee80211_register_hw+0xee1/0x39f0 [ 651.823209][T12586] ? ieee80211_tasklet_handler+0x20/0x20 [ 651.828964][T12586] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 651.835582][T12586] ? __debug_object_init+0xed/0x440 [ 651.841007][T12586] ? memset+0x1e/0x40 [ 651.845012][T12586] ? __hrtimer_init+0x189/0x270 [ 651.849866][T12586] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 651.855720][T12586] ? memcpy+0x3c/0x60 [ 651.859711][T12586] hwsim_new_radio_nl+0xab7/0xc90 [ 651.864768][T12586] genl_family_rcv_msg_doit+0x22f/0x350 [ 651.870323][T12586] ? end_current_label_crit_section+0x170/0x170 [ 651.876597][T12586] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 651.882522][T12586] ? bpf_lsm_capable+0x5/0x10 [ 651.887207][T12586] ? security_capable+0x85/0xb0 [ 651.892101][T12586] genl_rcv_msg+0x601/0x790 [ 651.896612][T12586] ? genl_bind+0x360/0x360 [ 651.901025][T12586] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 651.907399][T12586] netlink_rcv_skb+0x1ef/0x440 [ 651.912172][T12586] ? genl_bind+0x360/0x360 [ 651.916652][T12586] ? netlink_ack+0x1160/0x1160 [ 651.921478][T12586] ? down_read+0x1a8/0x2d0 [ 651.926011][T12586] genl_rcv+0x24/0x40 [ 651.930037][T12586] netlink_unicast+0x7ad/0x920 [ 651.935004][T12586] netlink_sendmsg+0x8ad/0xbd0 [ 651.939837][T12586] ? netlink_getsockopt+0x550/0x550 [ 651.945168][T12586] ? apparmor_socket_sendmsg+0x8a/0x330 [ 651.950761][T12586] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 651.956055][T12586] ? security_socket_sendmsg+0x7c/0xa0 [ 651.961572][T12586] ? netlink_getsockopt+0x550/0x550 [ 651.967323][T12586] ____sys_sendmsg+0x5ed/0x9a0 [ 651.972115][T12586] ? __sys_sendmsg_sock+0x30/0x30 [ 651.977146][T12586] ? __import_iovec+0x306/0x510 [ 651.982045][T12586] ? import_iovec+0x6f/0xa0 [ 651.986559][T12586] ___sys_sendmsg+0x2a2/0x360 [ 651.991251][T12586] ? __sys_sendmsg+0x2a0/0x2a0 [ 651.996036][T12586] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 652.001781][T12586] __se_sys_sendmsg+0x1c3/0x2b0 [ 652.006640][T12586] ? __x64_sys_sendmsg+0x80/0x80 [ 652.011573][T12586] ? lockdep_hardirqs_on+0x94/0x140 [ 652.016778][T12586] ? __x64_sys_sendmsg+0x34/0x80 [ 652.021725][T12586] do_syscall_64+0x4c/0xa0 [ 652.026145][T12586] ? clear_bhb_loop+0x60/0xb0 [ 652.030851][T12586] ? clear_bhb_loop+0x60/0xb0 [ 652.035531][T12586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 652.041439][T12586] RIP: 0033:0x7f600e59e0d9 [ 652.045858][T12586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.065465][T12586] RSP: 002b:00007f600c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.073883][T12586] RAX: ffffffffffffffda RBX: 00007f600e825fa0 RCX: 00007f600e59e0d9 [ 652.082032][T12586] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 652.090001][T12586] RBP: 00007f600e635024 R08: 0000000000000000 R09: 0000000000000000 [ 652.098079][T12586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.106158][T12586] R13: 00007f600e826038 R14: 00007f600e825fa0 R15: 00007ffd696d6738 [ 652.114177][T12586] [ 652.132663][T12591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2601'. [ 652.142449][T12593] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2602'. [ 652.472843][T12608] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2607'. [ 652.526649][T12610] netlink: 'syz.2.2608': attribute type 10 has an invalid length. [ 652.674294][T12617] netlink: 'syz.2.2610': attribute type 2 has an invalid length. [ 652.697169][T12617] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 652.720987][T12617] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2610'. [ 653.083571][T12623] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2613'. [ 653.089283][T12630] netlink: 'syz.2.2625': attribute type 2 has an invalid length. [ 653.104104][T12630] netlink: 'syz.2.2625': attribute type 1 has an invalid length. [ 653.112905][T12630] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2625'. [ 653.148157][T12629] device syzkaller0 entered promiscuous mode [ 653.161904][T12628] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2615'. [ 653.308656][T12633] device syzkaller0 entered promiscuous mode [ 653.402486][T12635] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2616'. [ 653.781474][T12637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2616'. [ 655.465726][T12643] netlink: 'syz.3.2618': attribute type 13 has an invalid length. [ 655.474545][T12643] netlink: 'syz.3.2618': attribute type 58 has an invalid length. [ 655.482447][T12643] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2618'. [ 655.585819][T12649] bond0: (slave geneve0): Error: Slave device does not support XDP [ 655.600241][T12652] device sit0 left promiscuous mode [ 655.669445][T12650] netlink: 'syz.0.2620': attribute type 10 has an invalid length. [ 655.688029][T12635] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 655.703080][T12635] CPU: 1 PID: 12635 Comm: syz.2.2616 Not tainted syzkaller #0 [ 655.710650][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.720727][T12635] Call Trace: [ 655.724030][T12635] [ 655.726974][T12635] dump_stack_lvl+0x188/0x24e [ 655.731855][T12635] ? show_regs_print_info+0x12/0x12 [ 655.737093][T12635] ? load_image+0x410/0x410 [ 655.741639][T12635] sysfs_warn_dup+0x8a/0xa0 [ 655.746177][T12635] sysfs_do_create_link_sd+0xc0/0x110 [ 655.751582][T12635] device_add+0x83b/0x1050 [ 655.756041][T12635] wiphy_register+0x1d8b/0x2aa0 [ 655.760941][T12635] ? cfg80211_event_work+0x40/0x40 [ 655.766064][T12635] ? minstrel_ht_alloc+0x894/0xa20 [ 655.771184][T12635] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 655.777252][T12635] ieee80211_register_hw+0x2d48/0x39f0 [ 655.782732][T12635] ? ieee80211_register_hw+0xee1/0x39f0 [ 655.788277][T12635] ? ieee80211_register_hw+0xee1/0x39f0 [ 655.793832][T12635] ? ieee80211_tasklet_handler+0x20/0x20 [ 655.799465][T12635] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 655.805359][T12635] ? __debug_object_init+0xed/0x440 [ 655.811011][T12635] ? memset+0x1e/0x40 [ 655.814990][T12635] ? __hrtimer_init+0x189/0x270 [ 655.819843][T12635] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 655.825577][T12635] ? memcpy+0x3c/0x60 [ 655.829561][T12635] hwsim_new_radio_nl+0xab7/0xc90 [ 655.834600][T12635] genl_family_rcv_msg_doit+0x22f/0x350 [ 655.840142][T12635] ? end_current_label_crit_section+0x170/0x170 [ 655.846396][T12635] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 655.852290][T12635] ? bpf_lsm_capable+0x5/0x10 [ 655.856988][T12635] ? security_capable+0x85/0xb0 [ 655.861847][T12635] genl_rcv_msg+0x601/0x790 [ 655.866617][T12635] ? genl_bind+0x360/0x360 [ 655.871032][T12635] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 655.877380][T12635] netlink_rcv_skb+0x1ef/0x440 [ 655.882152][T12635] ? genl_bind+0x360/0x360 [ 655.886570][T12635] ? netlink_ack+0x1160/0x1160 [ 655.891344][T12635] ? down_read+0x1a8/0x2d0 [ 655.895873][T12635] genl_rcv+0x24/0x40 [ 655.899853][T12635] netlink_unicast+0x7ad/0x920 [ 655.904648][T12635] netlink_sendmsg+0x8ad/0xbd0 [ 655.909451][T12635] ? netlink_getsockopt+0x550/0x550 [ 655.914654][T12635] ? apparmor_socket_sendmsg+0x8a/0x330 [ 655.920207][T12635] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 655.925488][T12635] ? security_socket_sendmsg+0x7c/0xa0 [ 655.930946][T12635] ? netlink_getsockopt+0x550/0x550 [ 655.936150][T12635] ____sys_sendmsg+0x5ed/0x9a0 [ 655.940927][T12635] ? __sys_sendmsg_sock+0x30/0x30 [ 655.946162][T12635] ? __import_iovec+0x306/0x510 [ 655.951027][T12635] ? import_iovec+0x6f/0xa0 [ 655.955794][T12635] ___sys_sendmsg+0x2a2/0x360 [ 655.960478][T12635] ? __sys_sendmsg+0x2a0/0x2a0 [ 655.965251][T12635] ? ct_nmi_exit+0x145/0x1c0 [ 655.969838][T12635] ? ct_irq_exit_irqson+0x113/0x170 [ 655.975143][T12635] __se_sys_sendmsg+0x1c3/0x2b0 [ 655.979994][T12635] ? ct_nmi_exit+0x145/0x1c0 [ 655.984581][T12635] ? __x64_sys_sendmsg+0x80/0x80 [ 655.989539][T12635] ? lockdep_hardirqs_on+0x94/0x140 [ 655.994735][T12635] do_syscall_64+0x4c/0xa0 [ 655.999146][T12635] ? clear_bhb_loop+0x60/0xb0 [ 656.003851][T12635] ? clear_bhb_loop+0x60/0xb0 [ 656.008551][T12635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.014458][T12635] RIP: 0033:0x7ff4eab9e0d9 [ 656.018875][T12635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.038487][T12635] RSP: 002b:00007ff4eba8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.046903][T12635] RAX: ffffffffffffffda RBX: 00007ff4eae25fa0 RCX: 00007ff4eab9e0d9 [ 656.054869][T12635] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 656.062931][T12635] RBP: 00007ff4eac35024 R08: 0000000000000000 R09: 0000000000000000 [ 656.070905][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.078883][T12635] R13: 00007ff4eae26038 R14: 00007ff4eae25fa0 R15: 00007ffd30fd9258 [ 656.087053][T12635] [ 656.259198][T12662] openvswitch: netlink: Flow actions attr not present in new flow. [ 656.306091][T12664] netlink: 'syz.1.2627': attribute type 2 has an invalid length. [ 656.331692][T12664] netlink: 'syz.1.2627': attribute type 1 has an invalid length. [ 656.655264][T12671] FAULT_INJECTION: forcing a failure. [ 656.655264][T12671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 656.669210][T12671] CPU: 0 PID: 12671 Comm: syz.2.2630 Not tainted syzkaller #0 [ 656.676715][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.686785][T12671] Call Trace: [ 656.690069][T12671] [ 656.692988][T12671] dump_stack_lvl+0x188/0x24e [ 656.697664][T12671] ? show_regs_print_info+0x12/0x12 [ 656.702855][T12671] ? load_image+0x410/0x410 [ 656.707348][T12671] ? __lock_acquire+0x7c40/0x7c40 [ 656.712495][T12671] should_fail_ex+0x390/0x4c0 [ 656.717187][T12671] prepare_alloc_pages+0x1e1/0x5b0 [ 656.722313][T12671] __alloc_pages+0x130/0x4f0 [ 656.726899][T12671] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 656.732619][T12671] ? zone_statistics+0x170/0x170 [ 656.737560][T12671] ? __rwlock_init+0x140/0x140 [ 656.742324][T12671] ? do_raw_spin_unlock+0x11d/0x230 [ 656.747537][T12671] __get_free_pages+0x8/0x30 [ 656.752145][T12671] kasan_populate_vmalloc_pte+0x31/0xf0 [ 656.757692][T12671] ? __apply_to_page_range+0x97b/0xd10 [ 656.763162][T12671] __apply_to_page_range+0x98d/0xd10 [ 656.768451][T12671] ? kasan_populate_vmalloc+0x70/0x70 [ 656.773830][T12671] alloc_vmap_area+0x179f/0x18d0 [ 656.778802][T12671] ? vm_map_ram+0xab0/0xab0 [ 656.783320][T12671] ? rcu_is_watching+0x11/0xa0 [ 656.788087][T12671] __get_vm_area_node+0x158/0x330 [ 656.793126][T12671] __vmalloc_node_range+0x357/0x1380 [ 656.798429][T12671] ? sock_map_alloc+0x1ce/0x2e0 [ 656.803305][T12671] ? memset+0x1e/0x40 [ 656.807295][T12671] ? free_vm_area+0x50/0x50 [ 656.811805][T12671] ? __kmem_cache_alloc_node+0x19d/0x270 [ 656.817438][T12671] ? rcu_is_watching+0x11/0xa0 [ 656.822202][T12671] bpf_map_area_alloc+0xd4/0xe0 [ 656.827085][T12671] ? sock_map_alloc+0x1ce/0x2e0 [ 656.831936][T12671] sock_map_alloc+0x1ce/0x2e0 [ 656.836699][T12671] map_create+0x524/0xff0 [ 656.841031][T12671] ? security_bpf+0x7a/0xa0 [ 656.845540][T12671] __sys_bpf+0x38b/0x780 [ 656.849786][T12671] ? bpf_link_show_fdinfo+0x380/0x380 [ 656.855252][T12671] ? lock_chain_count+0x20/0x20 [ 656.860125][T12671] __x64_sys_bpf+0x78/0x90 [ 656.864627][T12671] do_syscall_64+0x4c/0xa0 [ 656.869055][T12671] ? clear_bhb_loop+0x60/0xb0 [ 656.873749][T12671] ? clear_bhb_loop+0x60/0xb0 [ 656.878434][T12671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.884341][T12671] RIP: 0033:0x7ff4eab9e0d9 [ 656.888770][T12671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.908563][T12671] RSP: 002b:00007ff4eba8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.916977][T12671] RAX: ffffffffffffffda RBX: 00007ff4eae25fa0 RCX: 00007ff4eab9e0d9 [ 656.924950][T12671] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0600000000000000 [ 656.933005][T12671] RBP: 00007ff4eba8d090 R08: 0000000000000000 R09: 0000000000000000 [ 656.940970][T12671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 656.948941][T12671] R13: 00007ff4eae26038 R14: 00007ff4eae25fa0 R15: 00007ffd30fd9258 [ 656.957017][T12671] [ 659.012073][T12655] device sit0 entered promiscuous mode [ 659.040361][T12676] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 659.232614][T12689] __nla_validate_parse: 3 callbacks suppressed [ 659.232652][T12689] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2636'. [ 659.250661][T12686] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 659.300228][T12700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2636'. [ 659.360279][T12689] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 659.369112][T12689] CPU: 0 PID: 12689 Comm: syz.3.2636 Not tainted syzkaller #0 [ 659.376660][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.386744][T12689] Call Trace: [ 659.390042][T12689] [ 659.393072][T12689] dump_stack_lvl+0x188/0x24e [ 659.397777][T12689] ? show_regs_print_info+0x12/0x12 [ 659.403042][T12689] ? load_image+0x410/0x410 [ 659.407586][T12689] sysfs_warn_dup+0x8a/0xa0 [ 659.412114][T12689] sysfs_do_create_link_sd+0xc0/0x110 [ 659.417509][T12689] device_add+0x83b/0x1050 [ 659.421949][T12689] wiphy_register+0x1d8b/0x2aa0 [ 659.426833][T12689] ? cfg80211_event_work+0x40/0x40 [ 659.431984][T12689] ? minstrel_ht_alloc+0x894/0xa20 [ 659.437134][T12689] ? strcmp+0x50/0xb0 [ 659.441141][T12689] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 659.447240][T12689] ieee80211_register_hw+0x2d48/0x39f0 [ 659.452732][T12689] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 659.458920][T12689] ? ieee80211_register_hw+0xee1/0x39f0 [ 659.464492][T12689] ? ieee80211_register_hw+0xee1/0x39f0 [ 659.470081][T12689] ? ieee80211_tasklet_handler+0x20/0x20 [ 659.475845][T12689] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 659.481766][T12689] ? __debug_object_init+0xed/0x440 [ 659.486990][T12689] ? memset+0x1e/0x40 [ 659.490980][T12689] ? __hrtimer_init+0x189/0x270 [ 659.495845][T12689] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 659.501594][T12689] ? memcpy+0x3c/0x60 [ 659.505587][T12689] hwsim_new_radio_nl+0xab7/0xc90 [ 659.510655][T12689] genl_family_rcv_msg_doit+0x22f/0x350 [ 659.516209][T12689] ? end_current_label_crit_section+0x170/0x170 [ 659.522471][T12689] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 659.528382][T12689] ? bpf_lsm_capable+0x5/0x10 [ 659.533080][T12689] ? security_capable+0x85/0xb0 [ 659.537965][T12689] genl_rcv_msg+0x601/0x790 [ 659.542489][T12689] ? genl_bind+0x360/0x360 [ 659.546918][T12689] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 659.553284][T12689] netlink_rcv_skb+0x1ef/0x440 [ 659.558065][T12689] ? genl_bind+0x360/0x360 [ 659.562508][T12689] ? netlink_ack+0x1160/0x1160 [ 659.567399][T12689] ? down_read+0x1a8/0x2d0 [ 659.571837][T12689] genl_rcv+0x24/0x40 [ 659.575832][T12689] netlink_unicast+0x7ad/0x920 [ 659.580629][T12689] netlink_sendmsg+0x8ad/0xbd0 [ 659.585443][T12689] ? netlink_getsockopt+0x550/0x550 [ 659.590663][T12689] ? apparmor_socket_sendmsg+0x8a/0x330 [ 659.596230][T12689] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 659.601552][T12689] ? security_socket_sendmsg+0x7c/0xa0 [ 659.607112][T12689] ? netlink_getsockopt+0x550/0x550 [ 659.612331][T12689] ____sys_sendmsg+0x5ed/0x9a0 [ 659.617127][T12689] ? __sys_sendmsg_sock+0x30/0x30 [ 659.622193][T12689] ? __import_iovec+0x306/0x510 [ 659.627070][T12689] ? import_iovec+0x6f/0xa0 [ 659.631597][T12689] ___sys_sendmsg+0x2a2/0x360 [ 659.636299][T12689] ? __sys_sendmsg+0x2a0/0x2a0 [ 659.641634][T12689] __se_sys_sendmsg+0x1c3/0x2b0 [ 659.646520][T12689] ? ct_nmi_exit+0x145/0x1c0 [ 659.651131][T12689] ? __x64_sys_sendmsg+0x80/0x80 [ 659.656119][T12689] ? lockdep_hardirqs_on+0x94/0x140 [ 659.661327][T12689] do_syscall_64+0x4c/0xa0 [ 659.665754][T12689] ? clear_bhb_loop+0x60/0xb0 [ 659.670438][T12689] ? clear_bhb_loop+0x60/0xb0 [ 659.675137][T12689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.681043][T12689] RIP: 0033:0x7f7c6999e0d9 [ 659.685551][T12689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.705169][T12689] RSP: 002b:00007f7c6a912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.713593][T12689] RAX: ffffffffffffffda RBX: 00007f7c69c25fa0 RCX: 00007f7c6999e0d9 [ 659.721573][T12689] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 659.729551][T12689] RBP: 00007f7c69a35024 R08: 0000000000000000 R09: 0000000000000000 [ 659.737528][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.745505][T12689] R13: 00007f7c69c26038 R14: 00007f7c69c25fa0 R15: 00007ffc724cf1b8 [ 659.753500][T12689] [ 659.801066][T12702] netlink: 'syz.1.2639': attribute type 2 has an invalid length. [ 659.814477][T12702] netlink: 'syz.1.2639': attribute type 1 has an invalid length. [ 659.828793][T12702] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2639'. [ 659.981427][T12706] netlink: 'syz.4.2641': attribute type 10 has an invalid length. [ 660.165673][T12709] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2652'. [ 660.165743][T12712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2652'. [ 660.393813][T12709] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 660.415337][T12709] CPU: 1 PID: 12709 Comm: syz.1.2652 Not tainted syzkaller #0 [ 660.422858][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.432947][T12709] Call Trace: [ 660.436244][T12709] [ 660.439191][T12709] dump_stack_lvl+0x188/0x24e [ 660.443914][T12709] ? show_regs_print_info+0x12/0x12 [ 660.449151][T12709] ? load_image+0x410/0x410 [ 660.453703][T12709] sysfs_warn_dup+0x8a/0xa0 [ 660.458233][T12709] sysfs_do_create_link_sd+0xc0/0x110 [ 660.463638][T12709] device_add+0x83b/0x1050 [ 660.468098][T12709] wiphy_register+0x1d8b/0x2aa0 [ 660.472996][T12709] ? cfg80211_event_work+0x40/0x40 [ 660.478134][T12709] ? minstrel_ht_alloc+0x894/0xa20 [ 660.483279][T12709] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 660.489371][T12709] ieee80211_register_hw+0x2d48/0x39f0 [ 660.494865][T12709] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.501065][T12709] ? ieee80211_register_hw+0xee1/0x39f0 [ 660.506638][T12709] ? ieee80211_register_hw+0xee1/0x39f0 [ 660.512222][T12709] ? ieee80211_tasklet_handler+0x20/0x20 [ 660.517888][T12709] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 660.523824][T12709] ? __debug_object_init+0xed/0x440 [ 660.529071][T12709] ? memset+0x1e/0x40 [ 660.533119][T12709] ? __hrtimer_init+0x189/0x270 [ 660.538000][T12709] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 660.543757][T12709] ? memcpy+0x3c/0x60 [ 660.547779][T12709] hwsim_new_radio_nl+0xab7/0xc90 [ 660.552856][T12709] genl_family_rcv_msg_doit+0x22f/0x350 [ 660.558432][T12709] ? end_current_label_crit_section+0x170/0x170 [ 660.564719][T12709] ? trace_call_bpf+0xbf/0x6b0 [ 660.569517][T12709] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 660.575456][T12709] ? bpf_lsm_capable+0x5/0x10 [ 660.580258][T12709] ? security_capable+0x85/0xb0 [ 660.585148][T12709] genl_rcv_msg+0x601/0x790 [ 660.589685][T12709] ? genl_bind+0x360/0x360 [ 660.594168][T12709] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 660.600553][T12709] netlink_rcv_skb+0x1ef/0x440 [ 660.605393][T12709] ? genl_bind+0x360/0x360 [ 660.609969][T12709] ? netlink_ack+0x1160/0x1160 [ 660.614897][T12709] ? down_read+0x1a8/0x2d0 [ 660.619351][T12709] genl_rcv+0x24/0x40 [ 660.623365][T12709] netlink_unicast+0x7ad/0x920 [ 660.628177][T12709] netlink_sendmsg+0x8ad/0xbd0 [ 660.632983][T12709] ? netlink_getsockopt+0x550/0x550 [ 660.638224][T12709] ? apparmor_socket_sendmsg+0x8a/0x330 [ 660.643805][T12709] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 660.649119][T12709] ? security_socket_sendmsg+0x7c/0xa0 [ 660.654614][T12709] ? netlink_getsockopt+0x550/0x550 [ 660.659853][T12709] ____sys_sendmsg+0x5ed/0x9a0 [ 660.664678][T12709] ? __sys_sendmsg_sock+0x30/0x30 [ 660.669717][T12709] ? __import_iovec+0x306/0x510 [ 660.674582][T12709] ? import_iovec+0x6f/0xa0 [ 660.679092][T12709] ___sys_sendmsg+0x2a2/0x360 [ 660.683776][T12709] ? __sys_sendmsg+0x2a0/0x2a0 [ 660.688578][T12709] __se_sys_sendmsg+0x1c3/0x2b0 [ 660.693553][T12709] ? __x64_sys_sendmsg+0x80/0x80 [ 660.698514][T12709] do_syscall_64+0x4c/0xa0 [ 660.702931][T12709] ? clear_bhb_loop+0x60/0xb0 [ 660.707622][T12709] ? clear_bhb_loop+0x60/0xb0 [ 660.712314][T12709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.718293][T12709] RIP: 0033:0x7f875b59e0d9 [ 660.722702][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.742323][T12709] RSP: 002b:00007f875c3f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.750740][T12709] RAX: ffffffffffffffda RBX: 00007f875b825fa0 RCX: 00007f875b59e0d9 [ 660.758727][T12709] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 660.766727][T12709] RBP: 00007f875b635024 R08: 0000000000000000 R09: 0000000000000000 [ 660.774720][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.782689][T12709] R13: 00007f875b826038 R14: 00007f875b825fa0 R15: 00007ffeb48a56b8 [ 660.790762][T12709] [ 660.872912][T12716] netlink: 'syz.4.2644': attribute type 10 has an invalid length. [ 661.072248][T12722] device syzkaller0 entered promiscuous mode [ 661.615931][T12742] netlink: 'syz.3.2653': attribute type 2 has an invalid length. [ 661.632983][T12742] netlink: 'syz.3.2653': attribute type 1 has an invalid length. [ 661.644517][T12742] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2653'. [ 663.429245][T12737] device sit0 entered promiscuous mode [ 663.550463][T12769] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2658'. [ 663.578478][T12772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2658'. [ 663.657604][T12769] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 663.674383][T12769] CPU: 0 PID: 12769 Comm: syz.4.2658 Not tainted syzkaller #0 [ 663.681929][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.692035][T12769] Call Trace: [ 663.695347][T12769] [ 663.698334][T12769] dump_stack_lvl+0x188/0x24e [ 663.703082][T12769] ? show_regs_print_info+0x12/0x12 [ 663.708356][T12769] ? load_image+0x410/0x410 [ 663.712949][T12769] sysfs_warn_dup+0x8a/0xa0 [ 663.717511][T12769] sysfs_do_create_link_sd+0xc0/0x110 [ 663.722950][T12769] device_add+0x83b/0x1050 [ 663.727445][T12769] wiphy_register+0x1d8b/0x2aa0 [ 663.732492][T12769] ? cfg80211_event_work+0x40/0x40 [ 663.737662][T12769] ? minstrel_ht_alloc+0x894/0xa20 [ 663.742826][T12769] ? strcmp+0x15/0xb0 [ 663.746849][T12769] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 663.752961][T12769] ieee80211_register_hw+0x2d48/0x39f0 [ 663.758613][T12769] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 663.764921][T12769] ? ieee80211_register_hw+0xee1/0x39f0 [ 663.770774][T12769] ? ieee80211_register_hw+0xee1/0x39f0 [ 663.776579][T12769] ? ieee80211_tasklet_handler+0x20/0x20 [ 663.782280][T12769] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 663.788245][T12769] ? __debug_object_init+0xed/0x440 [ 663.793520][T12769] ? memset+0x1e/0x40 [ 663.797558][T12769] ? __hrtimer_init+0x189/0x270 [ 663.802661][T12769] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 663.808466][T12769] ? memcpy+0x3c/0x60 [ 663.812519][T12769] hwsim_new_radio_nl+0xab7/0xc90 [ 663.817718][T12769] genl_family_rcv_msg_doit+0x22f/0x350 [ 663.823320][T12769] ? end_current_label_crit_section+0x170/0x170 [ 663.829636][T12769] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 663.835633][T12769] ? bpf_lsm_capable+0x5/0x10 [ 663.840357][T12769] ? security_capable+0x85/0xb0 [ 663.845392][T12769] genl_rcv_msg+0x601/0x790 [ 663.850008][T12769] ? genl_bind+0x360/0x360 [ 663.854555][T12769] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 663.860994][T12769] netlink_rcv_skb+0x1ef/0x440 [ 663.865823][T12769] ? genl_bind+0x360/0x360 [ 663.870302][T12769] ? netlink_ack+0x1160/0x1160 [ 663.875223][T12769] ? down_read+0x1a8/0x2d0 [ 663.879716][T12769] genl_rcv+0x24/0x40 [ 663.883802][T12769] netlink_unicast+0x7ad/0x920 [ 663.888597][T12769] netlink_sendmsg+0x8ad/0xbd0 [ 663.893396][T12769] ? netlink_getsockopt+0x550/0x550 [ 663.898644][T12769] ? apparmor_socket_sendmsg+0x8a/0x330 [ 663.904278][T12769] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 663.909593][T12769] ? security_socket_sendmsg+0x7c/0xa0 [ 663.915181][T12769] ? netlink_getsockopt+0x550/0x550 [ 663.920436][T12769] ____sys_sendmsg+0x5ed/0x9a0 [ 663.925358][T12769] ? __sys_sendmsg_sock+0x30/0x30 [ 663.930447][T12769] ? __import_iovec+0x306/0x510 [ 663.935377][T12769] ? import_iovec+0x6f/0xa0 [ 663.939977][T12769] ___sys_sendmsg+0x2a2/0x360 [ 663.944733][T12769] ? __sys_sendmsg+0x2a0/0x2a0 [ 663.949719][T12769] __se_sys_sendmsg+0x1c3/0x2b0 [ 663.954696][T12769] ? __x64_sys_sendmsg+0x80/0x80 [ 663.959744][T12769] ? syscall_enter_from_user_mode+0x2a/0x80 [ 663.965703][T12769] do_syscall_64+0x4c/0xa0 [ 663.970170][T12769] ? clear_bhb_loop+0x60/0xb0 [ 663.974984][T12769] ? clear_bhb_loop+0x60/0xb0 [ 663.979896][T12769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.985846][T12769] RIP: 0033:0x7f728ed9e0d9 [ 663.990310][T12769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.009969][T12769] RSP: 002b:00007f728fb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.018436][T12769] RAX: ffffffffffffffda RBX: 00007f728f025fa0 RCX: 00007f728ed9e0d9 [ 664.026448][T12769] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 664.034470][T12769] RBP: 00007f728ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 664.042482][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.050502][T12769] R13: 00007f728f026038 R14: 00007f728f025fa0 R15: 00007ffd591960c8 [ 664.058678][T12769] [ 664.721243][T12778] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2661'. [ 667.166281][T12794] netlink: 'syz.1.2665': attribute type 2 has an invalid length. [ 667.199874][T12794] netlink: 'syz.1.2665': attribute type 1 has an invalid length. [ 667.207728][T12794] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2665'. [ 667.695857][T12806] bond0: (slave dummy0): Error: Slave device does not support XDP [ 667.797827][T12816] FAULT_INJECTION: forcing a failure. [ 667.797827][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 667.811967][T12816] CPU: 1 PID: 12816 Comm: syz.4.2672 Not tainted syzkaller #0 [ 667.819483][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.829561][T12816] Call Trace: [ 667.832860][T12816] [ 667.835813][T12816] dump_stack_lvl+0x188/0x24e [ 667.840528][T12816] ? sctp_sendmsg+0x1686/0x2940 [ 667.845415][T12816] ? ___sys_sendmsg+0x2a2/0x360 [ 667.850306][T12816] ? show_regs_print_info+0x12/0x12 [ 667.855558][T12816] ? load_image+0x410/0x410 [ 667.860115][T12816] should_fail_ex+0x390/0x4c0 [ 667.864832][T12816] should_failslab+0x5/0x20 [ 667.869363][T12816] slab_pre_alloc_hook+0x59/0x300 [ 667.874428][T12816] ? sctp_add_bind_addr+0x89/0x350 [ 667.879581][T12816] __kmem_cache_alloc_node+0x4f/0x270 [ 667.884985][T12816] ? sctp_add_bind_addr+0x89/0x350 [ 667.890155][T12816] kmalloc_trace+0x26/0xe0 [ 667.894621][T12816] sctp_add_bind_addr+0x89/0x350 [ 667.899603][T12816] sctp_copy_local_addr_list+0x317/0x4d0 [ 667.905364][T12816] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 667.911125][T12816] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 667.917242][T12816] ? sctp_v4_is_any+0x31/0x50 [ 667.921997][T12816] ? sctp_copy_one_addr+0x93/0x660 [ 667.927152][T12816] sctp_bind_addr_copy+0xaf/0x3c0 [ 667.932187][T12816] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 667.938528][T12816] sctp_connect_new_asoc+0x2f5/0x6a0 [ 667.943821][T12816] ? __sctp_connect+0xd80/0xd80 [ 667.948672][T12816] ? __local_bh_enable_ip+0x136/0x1c0 [ 667.954050][T12816] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 667.959606][T12816] ? security_sctp_bind_connect+0x85/0xb0 [ 667.965356][T12816] sctp_sendmsg+0x1686/0x2940 [ 667.970264][T12816] ? sctp_getsockopt+0x8a0/0x8a0 [ 667.975264][T12816] ? __might_fault+0xa6/0x120 [ 667.979948][T12816] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 667.986363][T12816] ? aa_sock_msg_perm+0x94/0x150 [ 667.991305][T12816] ? inet_sendmsg+0xca/0x2a0 [ 667.995986][T12816] ? inet_send_prepare+0x250/0x250 [ 668.001094][T12816] ____sys_sendmsg+0x5ed/0x9a0 [ 668.005875][T12816] ? __sys_sendmsg_sock+0x30/0x30 [ 668.010981][T12816] ? __import_iovec+0x306/0x510 [ 668.015834][T12816] ? import_iovec+0x6f/0xa0 [ 668.020340][T12816] ___sys_sendmsg+0x2a2/0x360 [ 668.025118][T12816] ? __sys_sendmsg+0x2a0/0x2a0 [ 668.029902][T12816] ? __lock_acquire+0x7c40/0x7c40 [ 668.034941][T12816] __se_sys_sendmsg+0x1c3/0x2b0 [ 668.039825][T12816] ? ct_nmi_exit+0x145/0x1c0 [ 668.044418][T12816] ? __x64_sys_sendmsg+0x80/0x80 [ 668.049370][T12816] ? lockdep_hardirqs_on+0x94/0x140 [ 668.054565][T12816] do_syscall_64+0x4c/0xa0 [ 668.058983][T12816] ? clear_bhb_loop+0x60/0xb0 [ 668.063672][T12816] ? clear_bhb_loop+0x60/0xb0 [ 668.068349][T12816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.074240][T12816] RIP: 0033:0x7f728ed9e0d9 [ 668.078655][T12816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.098270][T12816] RSP: 002b:00007f728fb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.106685][T12816] RAX: ffffffffffffffda RBX: 00007f728f025fa0 RCX: 00007f728ed9e0d9 [ 668.114653][T12816] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 668.122622][T12816] RBP: 00007f728fb97090 R08: 0000000000000000 R09: 0000000000000000 [ 668.130589][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.138556][T12816] R13: 00007f728f026038 R14: 00007f728f025fa0 R15: 00007ffd591960c8 [ 668.146539][T12816] [ 668.406775][T12823] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2674'. [ 669.056383][T12833] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2677'. [ 670.931133][T12830] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2677'. [ 670.987395][T12833] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 671.020095][T12833] CPU: 1 PID: 12833 Comm: syz.1.2677 Not tainted syzkaller #0 [ 671.027629][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.037718][T12833] Call Trace: [ 671.041020][T12833] [ 671.043972][T12833] dump_stack_lvl+0x188/0x24e [ 671.048689][T12833] ? show_regs_print_info+0x12/0x12 [ 671.053926][T12833] ? load_image+0x410/0x410 [ 671.058473][T12833] sysfs_warn_dup+0x8a/0xa0 [ 671.063017][T12833] sysfs_do_create_link_sd+0xc0/0x110 [ 671.068422][T12833] device_add+0x83b/0x1050 [ 671.072855][T12833] wiphy_register+0x1d8b/0x2aa0 [ 671.077714][T12833] ? cfg80211_event_work+0x40/0x40 [ 671.082854][T12833] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 671.088953][T12833] ieee80211_register_hw+0x2d48/0x39f0 [ 671.094429][T12833] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 671.100614][T12833] ? ieee80211_register_hw+0xee1/0x39f0 [ 671.106195][T12833] ? ieee80211_register_hw+0xee1/0x39f0 [ 671.111781][T12833] ? ieee80211_tasklet_handler+0x20/0x20 [ 671.117440][T12833] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 671.123374][T12833] ? __debug_object_init+0xed/0x440 [ 671.128608][T12833] ? memset+0x1e/0x40 [ 671.132613][T12833] ? __hrtimer_init+0x189/0x270 [ 671.137481][T12833] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 671.143217][T12833] ? memcpy+0x3c/0x60 [ 671.147202][T12833] hwsim_new_radio_nl+0xab7/0xc90 [ 671.152277][T12833] genl_family_rcv_msg_doit+0x22f/0x350 [ 671.157884][T12833] ? end_current_label_crit_section+0x170/0x170 [ 671.164131][T12833] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 671.170037][T12833] ? bpf_lsm_capable+0x5/0x10 [ 671.174715][T12833] ? security_capable+0x85/0xb0 [ 671.179574][T12833] genl_rcv_msg+0x601/0x790 [ 671.184087][T12833] ? genl_bind+0x360/0x360 [ 671.188500][T12833] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 671.194836][T12833] ? netlink_rcv_skb+0x1ce/0x440 [ 671.199778][T12833] netlink_rcv_skb+0x1ef/0x440 [ 671.204553][T12833] ? genl_bind+0x360/0x360 [ 671.208971][T12833] ? netlink_ack+0x1160/0x1160 [ 671.213747][T12833] ? down_read+0x1a8/0x2d0 [ 671.218171][T12833] genl_rcv+0x24/0x40 [ 671.222152][T12833] netlink_unicast+0x7ad/0x920 [ 671.226997][T12833] netlink_sendmsg+0x8ad/0xbd0 [ 671.231773][T12833] ? netlink_getsockopt+0x550/0x550 [ 671.236978][T12833] ? apparmor_socket_sendmsg+0x8a/0x330 [ 671.242528][T12833] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 671.247811][T12833] ? security_socket_sendmsg+0x7c/0xa0 [ 671.253270][T12833] ? netlink_getsockopt+0x550/0x550 [ 671.258492][T12833] ____sys_sendmsg+0x5ed/0x9a0 [ 671.263266][T12833] ? __import_iovec+0x2d5/0x510 [ 671.268117][T12833] ? __sys_sendmsg_sock+0x30/0x30 [ 671.273146][T12833] ? __import_iovec+0x306/0x510 [ 671.278009][T12833] ? import_iovec+0x6f/0xa0 [ 671.282521][T12833] ___sys_sendmsg+0x2a2/0x360 [ 671.287222][T12833] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 671.293058][T12833] ? __sys_sendmsg+0x2a0/0x2a0 [ 671.297855][T12833] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 671.303859][T12833] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 671.310036][T12833] ? lockdep_hardirqs_on+0x94/0x140 [ 671.315254][T12833] ? __se_sys_sendmsg+0xee/0x2b0 [ 671.320204][T12833] ? kasan_check_range+0x1b0/0x290 [ 671.325331][T12833] __se_sys_sendmsg+0x1c3/0x2b0 [ 671.330188][T12833] ? __x64_sys_sendmsg+0x80/0x80 [ 671.335130][T12833] ? lockdep_hardirqs_on+0x94/0x140 [ 671.340438][T12833] ? __x64_sys_sendmsg+0x19/0x80 [ 671.345878][T12833] ? __sanitizer_cov_trace_pc+0x50/0x60 [ 671.351563][T12833] do_syscall_64+0x4c/0xa0 [ 671.356004][T12833] ? clear_bhb_loop+0x60/0xb0 [ 671.360686][T12833] ? clear_bhb_loop+0x60/0xb0 [ 671.365376][T12833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.371292][T12833] RIP: 0033:0x7f875b59e0d9 [ 671.375710][T12833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.395319][T12833] RSP: 002b:00007f875c3d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.403768][T12833] RAX: ffffffffffffffda RBX: 00007f875b826090 RCX: 00007f875b59e0d9 [ 671.412015][T12833] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 671.419985][T12833] RBP: 00007f875b635024 R08: 0000000000000000 R09: 0000000000000000 [ 671.427966][T12833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.435935][T12833] R13: 00007f875b826128 R14: 00007f875b826090 R15: 00007ffeb48a56b8 [ 671.443922][T12833] [ 671.518864][T12841] netlink: 'syz.4.2678': attribute type 2 has an invalid length. [ 671.538285][T12837] netlink: 'syz.3.2679': attribute type 21 has an invalid length. [ 671.538288][T12841] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 671.538307][T12841] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2678'. [ 671.563896][T12837] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2679'. [ 671.613282][T12844] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2681'. [ 671.626802][T12844] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 672.694777][T12867] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2690'. [ 674.069987][T12878] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2693'. [ 674.120687][T12882] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2693'. [ 674.158011][T12878] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 674.197124][T12878] CPU: 0 PID: 12878 Comm: syz.1.2693 Not tainted syzkaller #0 [ 674.204648][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.214734][T12878] Call Trace: [ 674.218039][T12878] [ 674.220985][T12878] dump_stack_lvl+0x188/0x24e [ 674.225708][T12878] ? show_regs_print_info+0x12/0x12 [ 674.230942][T12878] ? load_image+0x410/0x410 [ 674.235488][T12878] sysfs_warn_dup+0x8a/0xa0 [ 674.240018][T12878] sysfs_do_create_link_sd+0xc0/0x110 [ 674.245597][T12878] device_add+0x83b/0x1050 [ 674.250053][T12878] wiphy_register+0x1d8b/0x2aa0 [ 674.254942][T12878] ? cfg80211_event_work+0x40/0x40 [ 674.260075][T12878] ? minstrel_ht_alloc+0x894/0xa20 [ 674.265211][T12878] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 674.271290][T12878] ieee80211_register_hw+0x2d48/0x39f0 [ 674.276752][T12878] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 674.282912][T12878] ? ieee80211_register_hw+0xee1/0x39f0 [ 674.288457][T12878] ? ieee80211_register_hw+0xee1/0x39f0 [ 674.294458][T12878] ? ieee80211_tasklet_handler+0x20/0x20 [ 674.300089][T12878] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 674.305984][T12878] ? __debug_object_init+0xed/0x440 [ 674.311189][T12878] ? memset+0x1e/0x40 [ 674.315167][T12878] ? __hrtimer_init+0x189/0x270 [ 674.320029][T12878] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 674.325761][T12878] ? memcpy+0x3c/0x60 [ 674.329740][T12878] hwsim_new_radio_nl+0xab7/0xc90 [ 674.334773][T12878] genl_family_rcv_msg_doit+0x22f/0x350 [ 674.340314][T12878] ? end_current_label_crit_section+0x170/0x170 [ 674.346570][T12878] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 674.352465][T12878] ? bpf_lsm_capable+0x5/0x10 [ 674.357142][T12878] ? security_capable+0x85/0xb0 [ 674.361996][T12878] genl_rcv_msg+0x601/0x790 [ 674.366501][T12878] ? genl_bind+0x360/0x360 [ 674.370915][T12878] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 674.377250][T12878] ? netlink_rcv_skb+0x1ce/0x440 [ 674.382191][T12878] netlink_rcv_skb+0x1ef/0x440 [ 674.386960][T12878] ? genl_bind+0x360/0x360 [ 674.391460][T12878] ? netlink_ack+0x1160/0x1160 [ 674.396233][T12878] ? down_read+0x1a8/0x2d0 [ 674.400648][T12878] genl_rcv+0x24/0x40 [ 674.404707][T12878] netlink_unicast+0x7ad/0x920 [ 674.409486][T12878] netlink_sendmsg+0x8ad/0xbd0 [ 674.414258][T12878] ? netlink_getsockopt+0x550/0x550 [ 674.419478][T12878] ? apparmor_socket_sendmsg+0x8a/0x330 [ 674.425051][T12878] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 674.430342][T12878] ? security_socket_sendmsg+0x7c/0xa0 [ 674.435804][T12878] ? netlink_getsockopt+0x550/0x550 [ 674.441010][T12878] ____sys_sendmsg+0x5ed/0x9a0 [ 674.445792][T12878] ? __sys_sendmsg_sock+0x30/0x30 [ 674.450816][T12878] ? __import_iovec+0x306/0x510 [ 674.455678][T12878] ? import_iovec+0x6f/0xa0 [ 674.460191][T12878] ___sys_sendmsg+0x2a2/0x360 [ 674.464875][T12878] ? __sys_sendmsg+0x2a0/0x2a0 [ 674.469673][T12878] __se_sys_sendmsg+0x1c3/0x2b0 [ 674.474524][T12878] ? __x64_sys_sendmsg+0x80/0x80 [ 674.479476][T12878] ? syscall_enter_from_user_mode+0x2a/0x80 [ 674.485389][T12878] do_syscall_64+0x4c/0xa0 [ 674.489819][T12878] ? clear_bhb_loop+0x60/0xb0 [ 674.494508][T12878] ? clear_bhb_loop+0x60/0xb0 [ 674.499189][T12878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.505118][T12878] RIP: 0033:0x7f875b59e0d9 [ 674.509526][T12878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.529128][T12878] RSP: 002b:00007f875c3f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.537547][T12878] RAX: ffffffffffffffda RBX: 00007f875b825fa0 RCX: 00007f875b59e0d9 [ 674.545529][T12878] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 674.553521][T12878] RBP: 00007f875b635024 R08: 0000000000000000 R09: 0000000000000000 [ 674.561492][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.569458][T12878] R13: 00007f875b826038 R14: 00007f875b825fa0 R15: 00007ffeb48a56b8 [ 674.577448][T12878] [ 674.726146][T12893] netlink: 'syz.3.2697': attribute type 10 has an invalid length. [ 675.349457][T12913] FAULT_INJECTION: forcing a failure. [ 675.349457][T12913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.392254][T12913] CPU: 1 PID: 12913 Comm: syz.0.2706 Not tainted syzkaller #0 [ 675.399774][T12913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.409852][T12913] Call Trace: [ 675.413159][T12913] [ 675.416110][T12913] dump_stack_lvl+0x188/0x24e [ 675.420822][T12913] ? show_regs_print_info+0x12/0x12 [ 675.426154][T12913] ? load_image+0x410/0x410 [ 675.430684][T12913] ? __lock_acquire+0x7c40/0x7c40 [ 675.435741][T12913] ? migrate_enable+0x148/0x220 [ 675.440730][T12913] should_fail_ex+0x390/0x4c0 [ 675.445442][T12913] _copy_to_user+0x2c/0x130 [ 675.449975][T12913] bpf_test_finish+0x266/0x600 [ 675.454786][T12913] ? convert_skb_to___skb+0x420/0x420 [ 675.460193][T12913] ? __build_skb+0x24b/0x3b0 [ 675.464817][T12913] bpf_prog_test_run_skb+0x1129/0x18e0 [ 675.470324][T12913] ? cpu_online+0xa0/0xa0 [ 675.474666][T12913] bpf_prog_test_run+0x31c/0x390 [ 675.479623][T12913] __sys_bpf+0x62b/0x780 [ 675.483887][T12913] ? bpf_link_show_fdinfo+0x380/0x380 [ 675.489277][T12913] ? lock_chain_count+0x20/0x20 [ 675.494136][T12913] __x64_sys_bpf+0x78/0x90 [ 675.498640][T12913] do_syscall_64+0x4c/0xa0 [ 675.503067][T12913] ? clear_bhb_loop+0x60/0xb0 [ 675.507753][T12913] ? clear_bhb_loop+0x60/0xb0 [ 675.512435][T12913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.518326][T12913] RIP: 0033:0x7f600e59e0d9 [ 675.522738][T12913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.542353][T12913] RSP: 002b:00007f600c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 675.550765][T12913] RAX: ffffffffffffffda RBX: 00007f600e825fa0 RCX: 00007f600e59e0d9 [ 675.558731][T12913] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 675.566701][T12913] RBP: 00007f600c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 675.574665][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.582627][T12913] R13: 00007f600e826038 R14: 00007f600e825fa0 R15: 00007ffd696d6738 [ 675.590618][T12913] [ 678.655228][T12941] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2713'. [ 678.715209][T12948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2713'. [ 678.795910][T12941] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 678.829812][T12941] CPU: 0 PID: 12941 Comm: syz.3.2713 Not tainted syzkaller #0 [ 678.837338][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.847419][T12941] Call Trace: [ 678.850721][T12941] [ 678.853663][T12941] dump_stack_lvl+0x188/0x24e [ 678.858385][T12941] ? show_regs_print_info+0x12/0x12 [ 678.863622][T12941] ? load_image+0x410/0x410 [ 678.868158][T12941] sysfs_warn_dup+0x8a/0xa0 [ 678.872666][T12941] sysfs_do_create_link_sd+0xc0/0x110 [ 678.878067][T12941] device_add+0x83b/0x1050 [ 678.882507][T12941] wiphy_register+0x1d8b/0x2aa0 [ 678.887403][T12941] ? cfg80211_event_work+0x40/0x40 [ 678.892556][T12941] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 678.898702][T12941] ieee80211_register_hw+0x2d48/0x39f0 [ 678.904230][T12941] ? ieee80211_register_hw+0xee1/0x39f0 [ 678.909805][T12941] ? ieee80211_register_hw+0xee1/0x39f0 [ 678.915391][T12941] ? ieee80211_tasklet_handler+0x20/0x20 [ 678.921044][T12941] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 678.926969][T12941] ? __debug_object_init+0xed/0x440 [ 678.932207][T12941] ? memset+0x1e/0x40 [ 678.936217][T12941] ? __hrtimer_init+0x189/0x270 [ 678.941095][T12941] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 678.946873][T12941] ? memcpy+0x3c/0x60 [ 678.950881][T12941] hwsim_new_radio_nl+0xab7/0xc90 [ 678.955951][T12941] genl_family_rcv_msg_doit+0x22f/0x350 [ 678.961531][T12941] ? end_current_label_crit_section+0x170/0x170 [ 678.967813][T12941] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 678.973748][T12941] ? bpf_lsm_capable+0x5/0x10 [ 678.978528][T12941] ? security_capable+0x85/0xb0 [ 678.983425][T12941] genl_rcv_msg+0x601/0x790 [ 678.987959][T12941] ? genl_bind+0x360/0x360 [ 678.992399][T12941] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 678.998780][T12941] netlink_rcv_skb+0x1ef/0x440 [ 679.003578][T12941] ? genl_bind+0x360/0x360 [ 679.008023][T12941] ? netlink_ack+0x1160/0x1160 [ 679.012827][T12941] ? down_read+0x1a8/0x2d0 [ 679.017274][T12941] genl_rcv+0x24/0x40 [ 679.021283][T12941] netlink_unicast+0x7ad/0x920 [ 679.021882][T12959] netlink: 'syz.2.2719': attribute type 29 has an invalid length. [ 679.026069][T12941] netlink_sendmsg+0x8ad/0xbd0 [ 679.026114][T12941] ? netlink_getsockopt+0x550/0x550 [ 679.043901][T12941] ? apparmor_socket_sendmsg+0x8a/0x330 [ 679.049491][T12941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 679.054809][T12941] ? security_socket_sendmsg+0x7c/0xa0 [ 679.060302][T12941] ? netlink_getsockopt+0x550/0x550 [ 679.065547][T12941] ____sys_sendmsg+0x5ed/0x9a0 [ 679.070399][T12941] ? __sys_sendmsg_sock+0x30/0x30 [ 679.075460][T12941] ? __import_iovec+0x306/0x510 [ 679.080351][T12941] ? import_iovec+0x6f/0xa0 [ 679.084887][T12941] ___sys_sendmsg+0x2a2/0x360 [ 679.089599][T12941] ? __sys_sendmsg+0x2a0/0x2a0 [ 679.094438][T12941] __se_sys_sendmsg+0x1c3/0x2b0 [ 679.099326][T12941] ? __x64_sys_sendmsg+0x80/0x80 [ 679.104310][T12941] ? syscall_enter_from_user_mode+0x2a/0x80 [ 679.110241][T12941] do_syscall_64+0x4c/0xa0 [ 679.114689][T12941] ? clear_bhb_loop+0x60/0xb0 [ 679.119395][T12941] ? clear_bhb_loop+0x60/0xb0 [ 679.124110][T12941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.130061][T12941] RIP: 0033:0x7f7c6999e0d9 [ 679.134494][T12941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.154213][T12941] RSP: 002b:00007f7c6a912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.162664][T12941] RAX: ffffffffffffffda RBX: 00007f7c69c25fa0 RCX: 00007f7c6999e0d9 [ 679.170662][T12941] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 679.178659][T12941] RBP: 00007f7c69a35024 R08: 0000000000000000 R09: 0000000000000000 [ 679.186656][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.194657][T12941] R13: 00007f7c69c26038 R14: 00007f7c69c25fa0 R15: 00007ffc724cf1b8 [ 679.202673][T12941] [ 679.267253][T12959] netlink: 'syz.2.2719': attribute type 29 has an invalid length. [ 679.332842][T12962] netlink: 'syz.2.2719': attribute type 29 has an invalid length. [ 679.363684][T12963] netlink: 'syz.2.2719': attribute type 29 has an invalid length. [ 681.637364][T12972] FAULT_INJECTION: forcing a failure. [ 681.637364][T12972] name failslab, interval 1, probability 0, space 0, times 0 [ 681.669075][T12972] CPU: 0 PID: 12972 Comm: syz.4.2722 Not tainted syzkaller #0 [ 681.676600][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.686678][T12972] Call Trace: [ 681.690095][T12972] [ 681.693037][T12972] dump_stack_lvl+0x188/0x24e [ 681.697719][T12972] ? show_regs_print_info+0x12/0x12 [ 681.702941][T12972] ? load_image+0x410/0x410 [ 681.707464][T12972] ? __might_sleep+0xd0/0xd0 [ 681.712073][T12972] ? __lock_acquire+0x7c40/0x7c40 [ 681.717123][T12972] should_fail_ex+0x390/0x4c0 [ 681.721829][T12972] should_failslab+0x5/0x20 [ 681.726354][T12972] slab_pre_alloc_hook+0x59/0x300 [ 681.731403][T12972] ? __lock_acquire+0x7c40/0x7c40 [ 681.736456][T12972] kmem_cache_alloc_lru+0x49/0x2e0 [ 681.741582][T12972] ? __d_alloc+0x2e/0x6e0 [ 681.745919][T12972] __d_alloc+0x2e/0x6e0 [ 681.750077][T12972] ? d_alloc_pseudo+0xe/0x70 [ 681.754663][T12972] d_alloc_pseudo+0x19/0x70 [ 681.759168][T12972] alloc_file_pseudo+0xe0/0x200 [ 681.764015][T12972] ? alloc_empty_file_noaccount+0x80/0x80 [ 681.769767][T12972] ? alloc_perf_context+0x230/0x2d0 [ 681.774971][T12972] anon_inode_getfile+0xc1/0x1a0 [ 681.779930][T12972] __se_sys_perf_event_open+0xc2a/0x1ec0 [ 681.785563][T12972] ? __fget_files+0x3fc/0x460 [ 681.790249][T12972] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 681.795922][T12972] ? lockdep_hardirqs_on+0x94/0x140 [ 681.801373][T12972] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 681.807006][T12972] do_syscall_64+0x4c/0xa0 [ 681.811423][T12972] ? clear_bhb_loop+0x60/0xb0 [ 681.816094][T12972] ? clear_bhb_loop+0x60/0xb0 [ 681.820769][T12972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.826657][T12972] RIP: 0033:0x7f728ed9e0d9 [ 681.831067][T12972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.850668][T12972] RSP: 002b:00007f728cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 681.859081][T12972] RAX: ffffffffffffffda RBX: 00007f728f026090 RCX: 00007f728ed9e0d9 [ 681.867056][T12972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 681.875042][T12972] RBP: 00007f728cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 681.883012][T12972] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 681.890977][T12972] R13: 00007f728f026128 R14: 00007f728f026090 R15: 00007ffd591960c8 [ 681.898956][T12972] [ 682.126226][T12978] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 682.148450][T12978] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2723'. [ 682.576686][T12997] FAULT_INJECTION: forcing a failure. [ 682.576686][T12997] name failslab, interval 1, probability 0, space 0, times 0 [ 682.619442][T12997] CPU: 0 PID: 12997 Comm: syz.3.2731 Not tainted syzkaller #0 [ 682.626959][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.637037][T12997] Call Trace: [ 682.640337][T12997] [ 682.643280][T12997] dump_stack_lvl+0x188/0x24e [ 682.647988][T12997] ? show_regs_print_info+0x12/0x12 [ 682.653223][T12997] ? load_image+0x410/0x410 [ 682.657754][T12997] ? __might_sleep+0xd0/0xd0 [ 682.662370][T12997] ? __lock_acquire+0x7c40/0x7c40 [ 682.667427][T12997] ? trace_contention_end+0x5f/0x170 [ 682.672749][T12997] should_fail_ex+0x390/0x4c0 [ 682.677551][T12997] should_failslab+0x5/0x20 [ 682.682081][T12997] slab_pre_alloc_hook+0x59/0x300 [ 682.687142][T12997] kmem_cache_alloc_node+0x5a/0x310 [ 682.692370][T12997] ? __alloc_skb+0xf9/0x7d0 [ 682.696907][T12997] __alloc_skb+0xf9/0x7d0 [ 682.701268][T12997] netlink_dump+0x1e1/0xcd0 [ 682.705807][T12997] ? kasan_quarantine_put+0xd4/0x210 [ 682.711133][T12997] ? lockdep_hardirqs_on+0x94/0x140 [ 682.716359][T12997] ? netlink_lookup+0x200/0x200 [ 682.721250][T12997] ? netlink_recvmsg+0x5e3/0xe00 [ 682.726226][T12997] ? kmem_cache_free+0xf7/0x2a0 [ 682.731099][T12997] netlink_recvmsg+0x68f/0xe00 [ 682.735889][T12997] ? netlink_sendmsg+0xbd0/0xbd0 [ 682.740857][T12997] ? aa_af_perm+0x340/0x340 [ 682.745371][T12997] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 682.750651][T12997] ? security_socket_recvmsg+0x85/0xb0 [ 682.756112][T12997] ? netlink_sendmsg+0xbd0/0xbd0 [ 682.761047][T12997] ____sys_recvmsg+0x2c8/0x5b0 [ 682.765822][T12997] ? __sys_recvmsg_sock+0x40/0x40 [ 682.770858][T12997] ? import_iovec+0x6f/0xa0 [ 682.775453][T12997] ___sys_recvmsg+0x210/0x590 [ 682.780134][T12997] ? __sys_recvmsg+0x2a0/0x2a0 [ 682.784900][T12997] ? common_file_perm+0x171/0x1c0 [ 682.789937][T12997] ? __fget_files+0x3fc/0x460 [ 682.794623][T12997] __x64_sys_recvmsg+0x20d/0x2e0 [ 682.799558][T12997] ? perf_trace_preemptirq_template+0x268/0x320 [ 682.805800][T12997] ? ___sys_recvmsg+0x590/0x590 [ 682.810660][T12997] ? lockdep_hardirqs_on+0x94/0x140 [ 682.815942][T12997] do_syscall_64+0x4c/0xa0 [ 682.820364][T12997] ? clear_bhb_loop+0x60/0xb0 [ 682.825047][T12997] ? clear_bhb_loop+0x60/0xb0 [ 682.829722][T12997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.835696][T12997] RIP: 0033:0x7f7c6999e0d9 [ 682.840106][T12997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.859708][T12997] RSP: 002b:00007f7c6a912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 682.868124][T12997] RAX: ffffffffffffffda RBX: 00007f7c69c25fa0 RCX: 00007f7c6999e0d9 [ 682.876128][T12997] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 682.884099][T12997] RBP: 00007f7c6a912090 R08: 0000000000000000 R09: 0000000000000000 [ 682.892076][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.900041][T12997] R13: 00007f7c69c26038 R14: 00007f7c69c25fa0 R15: 00007ffc724cf1b8 [ 682.908022][T12997] [ 682.948196][T13007] __sock_release: fasync list not empty! [ 684.396370][T13060] bond0: (slave dummy0): Error: Slave device does not support XDP [ 684.455417][T13059] syzkaller0: mtu greater than device maximum [ 684.461746][T13064] __sock_release: fasync list not empty! [ 685.581640][T13079] netlink: 'syz.1.2760': attribute type 10 has an invalid length. [ 685.717997][T13083] netlink: 'syz.2.2762': attribute type 13 has an invalid length. [ 685.731005][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.731093][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.008486][T13091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2763'. [ 686.076280][T13095] netlink: 'syz.1.2764': attribute type 29 has an invalid length. [ 686.259613][T13095] netlink: 'syz.1.2764': attribute type 29 has an invalid length. [ 686.310257][T13096] netlink: 'syz.1.2764': attribute type 29 has an invalid length. [ 686.361778][T13081] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2761'. [ 686.435214][T13096] netlink: 'syz.1.2764': attribute type 29 has an invalid length. [ 686.556075][T13093] netlink: 'syz.1.2764': attribute type 29 has an invalid length. [ 686.587926][T13106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.653366][T13111] netlink: 'syz.1.2770': attribute type 19 has an invalid length. [ 686.676282][T13111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2770'. [ 686.796811][T13114] __sock_release: fasync list not empty! [ 687.066874][T13122] netlink: 'syz.2.2775': attribute type 2 has an invalid length. [ 687.088997][T13122] netlink: 193088 bytes leftover after parsing attributes in process `syz.2.2775'. [ 687.475225][T13135] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2778'. [ 687.652908][T13137] netlink: 'syz.2.2779': attribute type 22 has an invalid length. [ 687.684167][T13137] netlink: 14526 bytes leftover after parsing attributes in process `syz.2.2779'. [ 688.204053][T13147] device syzkaller0 entered promiscuous mode [ 688.242871][T13143] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2781'. [ 688.536601][T13171] netlink: 'syz.0.2789': attribute type 3 has an invalid length. [ 688.549028][T13171] netlink: 'syz.0.2789': attribute type 8 has an invalid length. [ 688.589914][T13171] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2789'. [ 689.678279][T13198] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2800'. [ 692.684817][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2800'. [ 692.709097][T13217] netlink: 'syz.3.2806': attribute type 21 has an invalid length. [ 692.731617][T13198] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 692.753676][T13198] CPU: 1 PID: 13198 Comm: syz.4.2800 Not tainted syzkaller #0 [ 692.761199][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 692.771286][T13198] Call Trace: [ 692.774584][T13198] [ 692.777537][T13198] dump_stack_lvl+0x188/0x24e [ 692.782254][T13198] ? show_regs_print_info+0x12/0x12 [ 692.787511][T13198] ? load_image+0x410/0x410 [ 692.792060][T13198] sysfs_warn_dup+0x8a/0xa0 [ 692.796592][T13198] sysfs_do_create_link_sd+0xc0/0x110 [ 692.801997][T13198] device_add+0x83b/0x1050 [ 692.806456][T13198] wiphy_register+0x1d8b/0x2aa0 [ 692.811373][T13198] ? cfg80211_event_work+0x40/0x40 [ 692.817922][T13198] ? minstrel_ht_alloc+0x894/0xa20 [ 692.823086][T13198] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 692.829180][T13198] ieee80211_register_hw+0x2d48/0x39f0 [ 692.834675][T13198] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 692.840860][T13198] ? ieee80211_register_hw+0xee1/0x39f0 [ 692.846425][T13198] ? ieee80211_register_hw+0xee1/0x39f0 [ 692.852020][T13198] ? ieee80211_tasklet_handler+0x20/0x20 [ 692.857691][T13198] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 692.863590][T13198] ? __debug_object_init+0xed/0x440 [ 692.868798][T13198] ? memset+0x1e/0x40 [ 692.872781][T13198] ? __hrtimer_init+0x189/0x270 [ 692.877639][T13198] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 692.883384][T13198] hwsim_new_radio_nl+0xab7/0xc90 [ 692.888437][T13198] genl_family_rcv_msg_doit+0x22f/0x350 [ 692.893983][T13198] ? end_current_label_crit_section+0x170/0x170 [ 692.900234][T13198] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 692.906135][T13198] ? bpf_lsm_capable+0x5/0x10 [ 692.910814][T13198] ? security_capable+0x85/0xb0 [ 692.915677][T13198] genl_rcv_msg+0x601/0x790 [ 692.920190][T13198] ? genl_bind+0x360/0x360 [ 692.924639][T13198] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 692.931085][T13198] netlink_rcv_skb+0x1ef/0x440 [ 692.935890][T13198] ? genl_bind+0x360/0x360 [ 692.940325][T13198] ? netlink_ack+0x1160/0x1160 [ 692.945106][T13198] ? down_read+0x1a8/0x2d0 [ 692.949524][T13198] genl_rcv+0x24/0x40 [ 692.953598][T13198] netlink_unicast+0x7ad/0x920 [ 692.958380][T13198] netlink_sendmsg+0x8ad/0xbd0 [ 692.963355][T13198] ? netlink_getsockopt+0x550/0x550 [ 692.968622][T13198] ? apparmor_socket_sendmsg+0x8a/0x330 [ 692.974188][T13198] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 692.979476][T13198] ? security_socket_sendmsg+0x7c/0xa0 [ 692.984942][T13198] ? netlink_getsockopt+0x550/0x550 [ 692.990151][T13198] ____sys_sendmsg+0x5ed/0x9a0 [ 692.994931][T13198] ? __sys_sendmsg_sock+0x30/0x30 [ 692.999963][T13198] ? __import_iovec+0x306/0x510 [ 693.004828][T13198] ? import_iovec+0x6f/0xa0 [ 693.009340][T13198] ___sys_sendmsg+0x2a2/0x360 [ 693.014022][T13198] ? __sys_sendmsg+0x2a0/0x2a0 [ 693.018832][T13198] __se_sys_sendmsg+0x1c3/0x2b0 [ 693.023690][T13198] ? __x64_sys_sendmsg+0x80/0x80 [ 693.028656][T13198] do_syscall_64+0x4c/0xa0 [ 693.033080][T13198] ? clear_bhb_loop+0x60/0xb0 [ 693.037754][T13198] ? clear_bhb_loop+0x60/0xb0 [ 693.042432][T13198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.048326][T13198] RIP: 0033:0x7f728ed9e0d9 [ 693.052740][T13198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.072350][T13198] RSP: 002b:00007f728fb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.080765][T13198] RAX: ffffffffffffffda RBX: 00007f728f025fa0 RCX: 00007f728ed9e0d9 [ 693.088740][T13198] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 693.096709][T13198] RBP: 00007f728ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 693.104676][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.112648][T13198] R13: 00007f728f026038 R14: 00007f728f025fa0 R15: 00007ffd591960c8 [ 693.120661][T13198] [ 693.267526][T13222] FAULT_INJECTION: forcing a failure. [ 693.267526][T13222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.350422][T13222] CPU: 0 PID: 13222 Comm: syz.1.2807 Not tainted syzkaller #0 [ 693.357958][T13222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 693.368025][T13222] Call Trace: [ 693.371378][T13222] [ 693.374331][T13222] dump_stack_lvl+0x188/0x24e [ 693.379020][T13222] ? show_regs_print_info+0x12/0x12 [ 693.384246][T13222] ? load_image+0x410/0x410 [ 693.388747][T13222] ? __might_fault+0xa6/0x120 [ 693.393427][T13222] should_fail_ex+0x390/0x4c0 [ 693.398100][T13222] copyin+0x1b/0x120 [ 693.401995][T13222] _copy_from_iter+0x447/0x1130 [ 693.406848][T13222] ? copyout_mc+0x110/0x110 [ 693.411349][T13222] ? copyout_mc+0x110/0x110 [ 693.415850][T13222] ? __virt_addr_valid+0x188/0x540 [ 693.421050][T13222] ? page_copy_sane+0x194/0x390 [ 693.425901][T13222] copy_page_from_iter+0x77/0x100 [ 693.430922][T13222] skb_copy_datagram_from_iter+0x2c5/0x6b0 [ 693.436732][T13222] unix_stream_sendmsg+0x4d5/0xa70 [ 693.441851][T13222] ? unix_show_fdinfo+0x2c0/0x2c0 [ 693.446870][T13222] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 693.453282][T13222] ? apparmor_socket_sendmsg+0x8a/0x330 [ 693.458827][T13222] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 693.464104][T13222] ? security_socket_sendmsg+0x7c/0xa0 [ 693.469557][T13222] ? unix_show_fdinfo+0x2c0/0x2c0 [ 693.474583][T13222] ____sys_sendmsg+0x5ed/0x9a0 [ 693.479352][T13222] ? __sys_sendmsg_sock+0x30/0x30 [ 693.484370][T13222] ? __import_iovec+0x306/0x510 [ 693.489225][T13222] ? import_iovec+0x6f/0xa0 [ 693.493724][T13222] ___sys_sendmsg+0x2a2/0x360 [ 693.498402][T13222] ? __sys_sendmsg+0x2a0/0x2a0 [ 693.503175][T13222] ? ktime_get+0x7b/0x270 [ 693.507520][T13222] __se_sys_sendmsg+0x1c3/0x2b0 [ 693.512370][T13222] ? ct_nmi_exit+0x145/0x1c0 [ 693.516955][T13222] ? __x64_sys_sendmsg+0x80/0x80 [ 693.521904][T13222] ? lockdep_hardirqs_on+0x94/0x140 [ 693.527095][T13222] do_syscall_64+0x4c/0xa0 [ 693.531507][T13222] ? clear_bhb_loop+0x60/0xb0 [ 693.536182][T13222] ? clear_bhb_loop+0x60/0xb0 [ 693.540857][T13222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.546749][T13222] RIP: 0033:0x7f875b59e0d9 [ 693.551159][T13222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.571026][T13222] RSP: 002b:00007f875c3f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.579444][T13222] RAX: ffffffffffffffda RBX: 00007f875b825fa0 RCX: 00007f875b59e0d9 [ 693.587416][T13222] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 000000000000000a [ 693.595386][T13222] RBP: 00007f875c3f5090 R08: 0000000000000000 R09: 0000000000000000 [ 693.603357][T13222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 693.611333][T13222] R13: 00007f875b826038 R14: 00007f875b825fa0 R15: 00007ffeb48a56b8 [ 693.619314][T13222] [ 693.815822][T13232] device syzkaller0 entered promiscuous mode [ 693.936170][T13240] netlink: 'syz.1.2814': attribute type 3 has an invalid length. [ 693.990394][T13240] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2814'. [ 695.840879][T13256] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2818'. [ 695.926965][T13261] FAULT_INJECTION: forcing a failure. [ 695.926965][T13261] name failslab, interval 1, probability 0, space 0, times 0 [ 695.992523][T13261] CPU: 1 PID: 13261 Comm: syz.1.2819 Not tainted syzkaller #0 [ 696.000030][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 696.010100][T13261] Call Trace: [ 696.013376][T13261] [ 696.016321][T13261] dump_stack_lvl+0x188/0x24e [ 696.021015][T13261] ? sctp_sendmsg+0x1686/0x2940 [ 696.025873][T13261] ? ___sys_sendmsg+0x2a2/0x360 [ 696.030747][T13261] ? show_regs_print_info+0x12/0x12 [ 696.035973][T13261] ? load_image+0x410/0x410 [ 696.040499][T13261] should_fail_ex+0x390/0x4c0 [ 696.045175][T13261] should_failslab+0x5/0x20 [ 696.049677][T13261] slab_pre_alloc_hook+0x59/0x300 [ 696.054718][T13261] ? sctp_add_bind_addr+0x89/0x350 [ 696.059837][T13261] __kmem_cache_alloc_node+0x4f/0x270 [ 696.065220][T13261] ? sctp_add_bind_addr+0x89/0x350 [ 696.070354][T13261] kmalloc_trace+0x26/0xe0 [ 696.074791][T13261] sctp_add_bind_addr+0x89/0x350 [ 696.079750][T13261] sctp_copy_local_addr_list+0x317/0x4d0 [ 696.085384][T13261] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 696.091209][T13261] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 696.097281][T13261] ? sctp_v4_is_any+0x31/0x50 [ 696.101965][T13261] ? sctp_copy_one_addr+0x93/0x660 [ 696.107095][T13261] sctp_bind_addr_copy+0xaf/0x3c0 [ 696.112125][T13261] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 696.118459][T13261] sctp_connect_new_asoc+0x2f5/0x6a0 [ 696.123749][T13261] ? __sctp_connect+0xd80/0xd80 [ 696.128594][T13261] ? __local_bh_enable_ip+0x136/0x1c0 [ 696.133968][T13261] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 696.139512][T13261] ? security_sctp_bind_connect+0x85/0xb0 [ 696.145234][T13261] sctp_sendmsg+0x1686/0x2940 [ 696.149925][T13261] ? sctp_getsockopt+0x8a0/0x8a0 [ 696.154868][T13261] ? __might_fault+0xa6/0x120 [ 696.159541][T13261] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 696.165955][T13261] ? aa_sock_msg_perm+0x94/0x150 [ 696.170903][T13261] ? inet_sendmsg+0xca/0x2a0 [ 696.175486][T13261] ? inet_send_prepare+0x250/0x250 [ 696.180589][T13261] ____sys_sendmsg+0x5ed/0x9a0 [ 696.185368][T13261] ? __sys_sendmsg_sock+0x30/0x30 [ 696.190479][T13261] ? __import_iovec+0x306/0x510 [ 696.195421][T13261] ? import_iovec+0x6f/0xa0 [ 696.199924][T13261] ___sys_sendmsg+0x2a2/0x360 [ 696.204607][T13261] ? __sys_sendmsg+0x2a0/0x2a0 [ 696.209389][T13261] ? __lock_acquire+0x7c40/0x7c40 [ 696.214429][T13261] __se_sys_sendmsg+0x1c3/0x2b0 [ 696.219284][T13261] ? __x64_sys_sendmsg+0x80/0x80 [ 696.224236][T13261] ? lockdep_hardirqs_on+0x94/0x140 [ 696.229432][T13261] do_syscall_64+0x4c/0xa0 [ 696.233885][T13261] ? clear_bhb_loop+0x60/0xb0 [ 696.238655][T13261] ? clear_bhb_loop+0x60/0xb0 [ 696.243339][T13261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.249232][T13261] RIP: 0033:0x7f875b59e0d9 [ 696.253736][T13261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.273340][T13261] RSP: 002b:00007f875c3f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.281773][T13261] RAX: ffffffffffffffda RBX: 00007f875b825fa0 RCX: 00007f875b59e0d9 [ 696.289741][T13261] RDX: 0000000000000080 RSI: 0000200000000500 RDI: 0000000000000003 [ 696.297708][T13261] RBP: 00007f875c3f5090 R08: 0000000000000000 R09: 0000000000000000 [ 696.305687][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.313674][T13261] R13: 00007f875b826038 R14: 00007f875b825fa0 R15: 00007ffeb48a56b8 [ 696.321664][T13261] [ 696.332515][T13266] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2820'. [ 696.380562][T13266] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 696.414632][T13266] CPU: 0 PID: 13266 Comm: syz.2.2820 Not tainted syzkaller #0 [ 696.422173][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 696.432262][T13266] Call Trace: [ 696.435569][T13266] [ 696.438522][T13266] dump_stack_lvl+0x188/0x24e [ 696.443244][T13266] ? show_regs_print_info+0x12/0x12 [ 696.448482][T13266] ? load_image+0x410/0x410 [ 696.453014][T13266] sysfs_warn_dup+0x8a/0xa0 [ 696.457539][T13266] sysfs_do_create_link_sd+0xc0/0x110 [ 696.462925][T13266] device_add+0x83b/0x1050 [ 696.467354][T13266] wiphy_register+0x1d8b/0x2aa0 [ 696.472222][T13266] ? cfg80211_event_work+0x40/0x40 [ 696.477339][T13266] ? minstrel_ht_alloc+0x894/0xa20 [ 696.482463][T13266] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 696.488530][T13266] ieee80211_register_hw+0x2d48/0x39f0 [ 696.494005][T13266] ? ieee80211_register_hw+0xee1/0x39f0 [ 696.499580][T13266] ? ieee80211_register_hw+0xee1/0x39f0 [ 696.505135][T13266] ? ieee80211_tasklet_handler+0x20/0x20 [ 696.510772][T13266] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 696.516679][T13266] ? __debug_object_init+0xed/0x440 [ 696.521891][T13266] ? memset+0x1e/0x40 [ 696.525873][T13266] ? __hrtimer_init+0x189/0x270 [ 696.530722][T13266] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 696.536452][T13266] ? memcpy+0x3c/0x60 [ 696.540448][T13266] hwsim_new_radio_nl+0xab7/0xc90 [ 696.545490][T13266] genl_family_rcv_msg_doit+0x22f/0x350 [ 696.551034][T13266] ? end_current_label_crit_section+0x170/0x170 [ 696.557280][T13266] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 696.563178][T13266] ? bpf_lsm_capable+0x5/0x10 [ 696.567853][T13266] ? security_capable+0x85/0xb0 [ 696.572885][T13266] genl_rcv_msg+0x601/0x790 [ 696.577391][T13266] ? genl_bind+0x360/0x360 [ 696.581805][T13266] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 696.588153][T13266] netlink_rcv_skb+0x1ef/0x440 [ 696.592924][T13266] ? genl_bind+0x360/0x360 [ 696.597370][T13266] ? netlink_ack+0x1160/0x1160 [ 696.602145][T13266] ? down_read+0x1a8/0x2d0 [ 696.606561][T13266] genl_rcv+0x24/0x40 [ 696.610549][T13266] netlink_unicast+0x7ad/0x920 [ 696.615327][T13266] netlink_sendmsg+0x8ad/0xbd0 [ 696.620109][T13266] ? netlink_getsockopt+0x550/0x550 [ 696.625313][T13266] ? apparmor_socket_sendmsg+0x8a/0x330 [ 696.630873][T13266] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 696.636159][T13266] ? security_socket_sendmsg+0x7c/0xa0 [ 696.641616][T13266] ? netlink_getsockopt+0x550/0x550 [ 696.646843][T13266] ____sys_sendmsg+0x5ed/0x9a0 [ 696.651623][T13266] ? __sys_sendmsg_sock+0x30/0x30 [ 696.656651][T13266] ? __import_iovec+0x306/0x510 [ 696.661510][T13266] ? import_iovec+0x6f/0xa0 [ 696.666016][T13266] ___sys_sendmsg+0x2a2/0x360 [ 696.670702][T13266] ? __sys_sendmsg+0x2a0/0x2a0 [ 696.675506][T13266] __se_sys_sendmsg+0x1c3/0x2b0 [ 696.680385][T13266] ? ct_nmi_exit+0x145/0x1c0 [ 696.685066][T13266] ? __x64_sys_sendmsg+0x80/0x80 [ 696.690018][T13266] ? lockdep_hardirqs_on+0x94/0x140 [ 696.695212][T13266] do_syscall_64+0x4c/0xa0 [ 696.699629][T13266] ? clear_bhb_loop+0x60/0xb0 [ 696.704305][T13266] ? clear_bhb_loop+0x60/0xb0 [ 696.708988][T13266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.714885][T13266] RIP: 0033:0x7ff4eab9e0d9 [ 696.719300][T13266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.739003][T13266] RSP: 002b:00007ff4eba6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.747526][T13266] RAX: ffffffffffffffda RBX: 00007ff4eae26090 RCX: 00007ff4eab9e0d9 [ 696.755501][T13266] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 696.763559][T13266] RBP: 00007ff4eac35024 R08: 0000000000000000 R09: 0000000000000000 [ 696.771529][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.779497][T13266] R13: 00007ff4eae26128 R14: 00007ff4eae26090 R15: 00007ffd30fd9258 [ 696.787481][T13266] [ 697.173864][T13265] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2820'. [ 698.100510][T13303] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2834'. [ 698.355195][T13303] device syzkaller0 entered promiscuous mode [ 700.518282][T13307] netlink: 'syz.0.2835': attribute type 3 has an invalid length. [ 700.559019][T13307] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2835'. [ 700.807870][T13320] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2839'. [ 703.273629][T13315] netlink: 'syz.0.2835': attribute type 21 has an invalid length. [ 703.282033][T13323] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2839'. [ 703.311325][T13333] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2843'. [ 703.396926][T13337] device syzkaller0 entered promiscuous mode [ 703.548914][T13343] IPv6: Can't replace route, no match found [ 705.103057][T13320] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 705.112943][T13320] CPU: 0 PID: 13320 Comm: syz.2.2839 Not tainted syzkaller #0 [ 705.120416][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.130562][T13320] Call Trace: [ 705.133835][T13320] [ 705.136766][T13320] dump_stack_lvl+0x188/0x24e [ 705.141443][T13320] ? show_regs_print_info+0x12/0x12 [ 705.146641][T13320] ? load_image+0x410/0x410 [ 705.151152][T13320] sysfs_warn_dup+0x8a/0xa0 [ 705.155665][T13320] sysfs_do_create_link_sd+0xc0/0x110 [ 705.161048][T13320] device_add+0x83b/0x1050 [ 705.165521][T13320] wiphy_register+0x1d8b/0x2aa0 [ 705.170403][T13320] ? cfg80211_event_work+0x40/0x40 [ 705.175510][T13320] ? minstrel_ht_alloc+0x894/0xa20 [ 705.180619][T13320] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 705.186755][T13320] ieee80211_register_hw+0x2d48/0x39f0 [ 705.192233][T13320] ? ieee80211_register_hw+0xee1/0x39f0 [ 705.197774][T13320] ? ieee80211_register_hw+0xee1/0x39f0 [ 705.203444][T13320] ? ieee80211_tasklet_handler+0x20/0x20 [ 705.209083][T13320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 705.214972][T13320] ? __debug_object_init+0xed/0x440 [ 705.220175][T13320] ? memset+0x1e/0x40 [ 705.224148][T13320] ? __hrtimer_init+0x189/0x270 [ 705.228993][T13320] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 705.234719][T13320] ? memcpy+0x3c/0x60 [ 705.238703][T13320] hwsim_new_radio_nl+0xab7/0xc90 [ 705.243741][T13320] genl_family_rcv_msg_doit+0x22f/0x350 [ 705.249276][T13320] ? end_current_label_crit_section+0x170/0x170 [ 705.255511][T13320] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 705.261394][T13320] ? bpf_lsm_capable+0x5/0x10 [ 705.266083][T13320] ? security_capable+0x85/0xb0 [ 705.270957][T13320] genl_rcv_msg+0x601/0x790 [ 705.275454][T13320] ? genl_bind+0x360/0x360 [ 705.279858][T13320] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 705.286205][T13320] netlink_rcv_skb+0x1ef/0x440 [ 705.290986][T13320] ? genl_bind+0x360/0x360 [ 705.295393][T13320] ? netlink_ack+0x1160/0x1160 [ 705.300177][T13320] ? down_read+0x1a8/0x2d0 [ 705.304601][T13320] genl_rcv+0x24/0x40 [ 705.308597][T13320] netlink_unicast+0x7ad/0x920 [ 705.313359][T13320] netlink_sendmsg+0x8ad/0xbd0 [ 705.318121][T13320] ? netlink_getsockopt+0x550/0x550 [ 705.323318][T13320] ? netlink_getsockopt+0x550/0x550 [ 705.328511][T13320] ____sys_sendmsg+0x5ed/0x9a0 [ 705.333272][T13320] ? __sys_sendmsg_sock+0x30/0x30 [ 705.338296][T13320] ? __import_iovec+0x306/0x510 [ 705.343162][T13320] ? import_iovec+0x6f/0xa0 [ 705.347686][T13320] ___sys_sendmsg+0x2a2/0x360 [ 705.352379][T13320] ? __sys_sendmsg+0x2a0/0x2a0 [ 705.357181][T13320] __se_sys_sendmsg+0x1c3/0x2b0 [ 705.362057][T13320] ? __x64_sys_sendmsg+0x80/0x80 [ 705.367129][T13320] ? syscall_enter_from_user_mode+0x2a/0x80 [ 705.373064][T13320] do_syscall_64+0x4c/0xa0 [ 705.377477][T13320] ? clear_bhb_loop+0x60/0xb0 [ 705.382158][T13320] ? clear_bhb_loop+0x60/0xb0 [ 705.386830][T13320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.392810][T13320] RIP: 0033:0x7ff4eab9e0d9 [ 705.397222][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.416933][T13320] RSP: 002b:00007ff4eba8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.425532][T13320] RAX: ffffffffffffffda RBX: 00007ff4eae25fa0 RCX: 00007ff4eab9e0d9 [ 705.433498][T13320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 705.441460][T13320] RBP: 00007ff4eac35024 R08: 0000000000000000 R09: 0000000000000000 [ 705.449440][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.457437][T13320] R13: 00007ff4eae26038 R14: 00007ff4eae25fa0 R15: 00007ffd30fd9258 [ 705.465424][T13320] [ 705.748121][T13369] device syzkaller0 entered promiscuous mode [ 706.384120][T13402] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2860'. [ 707.951189][T13379] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2857'. [ 707.972439][T13413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2865'. [ 707.989134][T13402] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 707.996878][T13402] CPU: 1 PID: 13402 Comm: syz.4.2860 Not tainted syzkaller #0 [ 708.004339][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.014396][T13402] Call Trace: [ 708.017675][T13402] [ 708.020606][T13402] dump_stack_lvl+0x188/0x24e [ 708.025293][T13402] ? show_regs_print_info+0x12/0x12 [ 708.030492][T13402] ? load_image+0x410/0x410 [ 708.035000][T13402] sysfs_warn_dup+0x8a/0xa0 [ 708.039560][T13402] sysfs_do_create_link_sd+0xc0/0x110 [ 708.044935][T13402] device_add+0x83b/0x1050 [ 708.049363][T13402] wiphy_register+0x1d8b/0x2aa0 [ 708.054256][T13402] ? cfg80211_event_work+0x40/0x40 [ 708.059372][T13402] ? minstrel_ht_alloc+0x894/0xa20 [ 708.064497][T13402] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 708.070563][T13402] ieee80211_register_hw+0x2d48/0x39f0 [ 708.076032][T13402] ? ieee80211_register_hw+0xee1/0x39f0 [ 708.081576][T13402] ? ieee80211_register_hw+0xee1/0x39f0 [ 708.087131][T13402] ? ieee80211_tasklet_handler+0x20/0x20 [ 708.092761][T13402] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 708.098663][T13402] ? __debug_object_init+0xed/0x440 [ 708.103865][T13402] ? memset+0x1e/0x40 [ 708.107843][T13402] ? __hrtimer_init+0x189/0x270 [ 708.112690][T13402] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 708.118421][T13402] ? memcpy+0x3c/0x60 [ 708.122404][T13402] hwsim_new_radio_nl+0xab7/0xc90 [ 708.127441][T13402] genl_family_rcv_msg_doit+0x22f/0x350 [ 708.132985][T13402] ? end_current_label_crit_section+0x170/0x170 [ 708.139233][T13402] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 708.145130][T13402] ? bpf_lsm_capable+0x5/0x10 [ 708.149820][T13402] ? security_capable+0x85/0xb0 [ 708.154681][T13402] genl_rcv_msg+0x601/0x790 [ 708.159190][T13402] ? genl_bind+0x360/0x360 [ 708.163611][T13402] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 708.169953][T13402] netlink_rcv_skb+0x1ef/0x440 [ 708.174719][T13402] ? genl_bind+0x360/0x360 [ 708.179132][T13402] ? netlink_ack+0x1160/0x1160 [ 708.183909][T13402] ? down_read+0x1a8/0x2d0 [ 708.188324][T13402] genl_rcv+0x24/0x40 [ 708.192303][T13402] netlink_unicast+0x7ad/0x920 [ 708.197167][T13402] netlink_sendmsg+0x8ad/0xbd0 [ 708.201948][T13402] ? netlink_getsockopt+0x550/0x550 [ 708.207235][T13402] ? apparmor_socket_sendmsg+0x8a/0x330 [ 708.212788][T13402] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 708.218073][T13402] ? security_socket_sendmsg+0x7c/0xa0 [ 708.223526][T13402] ? netlink_getsockopt+0x550/0x550 [ 708.228724][T13402] ____sys_sendmsg+0x5ed/0x9a0 [ 708.233499][T13402] ? __sys_sendmsg_sock+0x30/0x30 [ 708.238526][T13402] ? __import_iovec+0x306/0x510 [ 708.243395][T13402] ? import_iovec+0x6f/0xa0 [ 708.247899][T13402] ___sys_sendmsg+0x2a2/0x360 [ 708.252580][T13402] ? __sys_sendmsg+0x2a0/0x2a0 [ 708.257379][T13402] __se_sys_sendmsg+0x1c3/0x2b0 [ 708.262232][T13402] ? ct_nmi_exit+0x145/0x1c0 [ 708.266820][T13402] ? __x64_sys_sendmsg+0x80/0x80 [ 708.271776][T13402] ? lockdep_hardirqs_on+0x94/0x140 [ 708.276977][T13402] do_syscall_64+0x4c/0xa0 [ 708.281392][T13402] ? clear_bhb_loop+0x60/0xb0 [ 708.286068][T13402] ? clear_bhb_loop+0x60/0xb0 [ 708.290743][T13402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.296652][T13402] RIP: 0033:0x7f728ed9e0d9 [ 708.301080][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.320693][T13402] RSP: 002b:00007f728cbb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.329107][T13402] RAX: ffffffffffffffda RBX: 00007f728f026270 RCX: 00007f728ed9e0d9 [ 708.337115][T13402] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000012 [ 708.345086][T13402] RBP: 00007f728ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 708.353051][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.361016][T13402] R13: 00007f728f026308 R14: 00007f728f026270 R15: 00007ffd591960c8 [ 708.368995][T13402] [ 708.399325][T13412] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2865'. [ 708.421531][T13412] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 708.430170][T13412] CPU: 0 PID: 13412 Comm: syz.2.2865 Not tainted syzkaller #0 [ 708.437669][T13412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.447749][T13412] Call Trace: [ 708.451045][T13412] [ 708.453999][T13412] dump_stack_lvl+0x188/0x24e [ 708.458797][T13412] ? show_regs_print_info+0x12/0x12 [ 708.464108][T13412] ? load_image+0x410/0x410 [ 708.468642][T13412] sysfs_warn_dup+0x8a/0xa0 [ 708.473169][T13412] sysfs_do_create_link_sd+0xc0/0x110 [ 708.478571][T13412] device_add+0x83b/0x1050 [ 708.483056][T13412] wiphy_register+0x1d8b/0x2aa0 [ 708.487938][T13412] ? cfg80211_event_work+0x40/0x40 [ 708.493055][T13412] ? minstrel_ht_alloc+0x894/0xa20 [ 708.498177][T13412] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 708.504249][T13412] ieee80211_register_hw+0x2d48/0x39f0 [ 708.509748][T13412] ? ieee80211_register_hw+0xee1/0x39f0 [ 708.515297][T13412] ? ieee80211_register_hw+0xee1/0x39f0 [ 708.520849][T13412] ? ieee80211_tasklet_handler+0x20/0x20 [ 708.526487][T13412] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 708.532383][T13412] ? __debug_object_init+0xed/0x440 [ 708.537594][T13412] ? memset+0x1e/0x40 [ 708.541613][T13412] ? __hrtimer_init+0x189/0x270 [ 708.546468][T13412] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 708.552200][T13412] ? memcpy+0x3c/0x60 [ 708.556186][T13412] hwsim_new_radio_nl+0xab7/0xc90 [ 708.561219][T13412] genl_family_rcv_msg_doit+0x22f/0x350 [ 708.566765][T13412] ? end_current_label_crit_section+0x170/0x170 [ 708.573101][T13412] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 708.578999][T13412] ? bpf_lsm_capable+0x5/0x10 [ 708.583673][T13412] ? security_capable+0x85/0xb0 [ 708.588533][T13412] genl_rcv_msg+0x601/0x790 [ 708.593037][T13412] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 708.598765][T13412] ? genl_bind+0x360/0x360 [ 708.603174][T13412] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 708.609514][T13412] netlink_rcv_skb+0x1ef/0x440 [ 708.614282][T13412] ? genl_bind+0x360/0x360 [ 708.618704][T13412] ? netlink_ack+0x1160/0x1160 [ 708.623484][T13412] ? down_read+0x1a8/0x2d0 [ 708.627895][T13412] genl_rcv+0x24/0x40 [ 708.631868][T13412] netlink_unicast+0x7ad/0x920 [ 708.636643][T13412] netlink_sendmsg+0x8ad/0xbd0 [ 708.641422][T13412] ? netlink_getsockopt+0x550/0x550 [ 708.646645][T13412] ? apparmor_socket_sendmsg+0x8a/0x330 [ 708.652192][T13412] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 708.657473][T13412] ? security_socket_sendmsg+0x7c/0xa0 [ 708.662935][T13412] ? netlink_getsockopt+0x550/0x550 [ 708.668142][T13412] ____sys_sendmsg+0x5ed/0x9a0 [ 708.672917][T13412] ? __sys_sendmsg_sock+0x30/0x30 [ 708.677949][T13412] ? __import_iovec+0x306/0x510 [ 708.682815][T13412] ? import_iovec+0x6f/0xa0 [ 708.687321][T13412] ___sys_sendmsg+0x2a2/0x360 [ 708.692026][T13412] ? __sys_sendmsg+0x2a0/0x2a0 [ 708.696834][T13412] __se_sys_sendmsg+0x1c3/0x2b0 [ 708.701778][T13412] ? __x64_sys_sendmsg+0x80/0x80 [ 708.706737][T13412] do_syscall_64+0x4c/0xa0 [ 708.711153][T13412] ? clear_bhb_loop+0x60/0xb0 [ 708.715833][T13412] ? clear_bhb_loop+0x60/0xb0 [ 708.720510][T13412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.726400][T13412] RIP: 0033:0x7ff4eab9e0d9 [ 708.730817][T13412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.750424][T13412] RSP: 002b:00007ff4eba8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.758834][T13412] RAX: ffffffffffffffda RBX: 00007ff4eae25fa0 RCX: 00007ff4eab9e0d9 [ 708.766799][T13412] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 708.774764][T13412] RBP: 00007ff4eac35024 R08: 0000000000000000 R09: 0000000000000000 [ 708.782741][T13412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.790805][T13412] R13: 00007ff4eae26038 R14: 00007ff4eae25fa0 R15: 00007ffd30fd9258 [ 708.798787][T13412] [ 709.272203][T13427] device syzkaller0 entered promiscuous mode [ 709.282579][T13422] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2867'. [ 709.509615][T13446] FAULT_INJECTION: forcing a failure. [ 709.509615][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 709.580347][T13446] CPU: 1 PID: 13446 Comm: syz.1.2879 Not tainted syzkaller #0 [ 709.587877][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.598049][T13446] Call Trace: [ 709.601347][T13446] [ 709.604307][T13446] dump_stack_lvl+0x188/0x24e [ 709.609018][T13446] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 709.615201][T13446] ? show_regs_print_info+0x12/0x12 [ 709.620476][T13446] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 709.626657][T13446] should_fail_ex+0x390/0x4c0 [ 709.631350][T13446] should_failslab+0x5/0x20 [ 709.635863][T13446] slab_pre_alloc_hook+0x59/0x300 [ 709.640896][T13446] ? verify_lock_unused+0x140/0x140 [ 709.646108][T13446] ? bpf_test_init+0x9f/0x140 [ 709.650802][T13446] __kmem_cache_alloc_node+0x4f/0x270 [ 709.656191][T13446] ? bpf_test_init+0x9f/0x140 [ 709.660876][T13446] __kmalloc+0xa3/0x240 [ 709.665052][T13446] bpf_test_init+0x9f/0x140 [ 709.669571][T13446] bpf_prog_test_run_xdp+0x488/0xf80 [ 709.674878][T13446] ? __lock_acquire+0x7c40/0x7c40 [ 709.679924][T13446] ? dev_put+0x80/0x80 [ 709.684013][T13446] ? dev_put+0x80/0x80 [ 709.688095][T13446] bpf_prog_test_run+0x31c/0x390 [ 709.693051][T13446] __sys_bpf+0x62b/0x780 [ 709.697311][T13446] ? bpf_link_show_fdinfo+0x380/0x380 [ 709.702707][T13446] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 709.708878][T13446] ? lock_chain_count+0x20/0x20 [ 709.713747][T13446] __x64_sys_bpf+0x78/0x90 [ 709.718180][T13446] do_syscall_64+0x4c/0xa0 [ 709.722611][T13446] ? clear_bhb_loop+0x60/0xb0 [ 709.727298][T13446] ? clear_bhb_loop+0x60/0xb0 [ 709.731989][T13446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.737894][T13446] RIP: 0033:0x7f875b59e0d9 [ 709.742318][T13446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.761939][T13446] RSP: 002b:00007f875c3f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.770457][T13446] RAX: ffffffffffffffda RBX: 00007f875b825fa0 RCX: 00007f875b59e0d9 [ 709.778437][T13446] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 709.786420][T13446] RBP: 00007f875c3f5090 R08: 0000000000000000 R09: 0000000000000000 [ 709.794396][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.802372][T13446] R13: 00007f875b826038 R14: 00007f875b825fa0 R15: 00007ffeb48a56b8 [ 709.810369][T13446] [ 709.987272][T13448] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2877'. [ 710.136162][T13460] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2881'. [ 710.557711][T13460] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 710.568443][T13460] CPU: 1 PID: 13460 Comm: syz.1.2881 Not tainted syzkaller #0 [ 710.575924][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.586006][T13460] Call Trace: [ 710.589286][T13460] [ 710.592214][T13460] dump_stack_lvl+0x188/0x24e [ 710.596894][T13460] ? show_regs_print_info+0x12/0x12 [ 710.602089][T13460] ? load_image+0x410/0x410 [ 710.606603][T13460] sysfs_warn_dup+0x8a/0xa0 [ 710.611104][T13460] sysfs_do_create_link_sd+0xc0/0x110 [ 710.616484][T13460] device_add+0x83b/0x1050 [ 710.620933][T13460] wiphy_register+0x1d8b/0x2aa0 [ 710.625818][T13460] ? cfg80211_event_work+0x40/0x40 [ 710.630926][T13460] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 710.637095][T13460] ? rtnl_unlock+0x5/0x10 [ 710.641433][T13460] ieee80211_register_hw+0x2d48/0x39f0 [ 710.646922][T13460] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 710.653078][T13460] ? ieee80211_register_hw+0xee1/0x39f0 [ 710.658700][T13460] ? ieee80211_register_hw+0xee1/0x39f0 [ 710.664251][T13460] ? ieee80211_tasklet_handler+0x20/0x20 [ 710.669890][T13460] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 710.675792][T13460] ? __debug_object_init+0xed/0x440 [ 710.680998][T13460] ? memset+0x1e/0x40 [ 710.684973][T13460] ? __hrtimer_init+0x189/0x270 [ 710.689916][T13460] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 710.695645][T13460] ? memcpy+0x3c/0x60 [ 710.699626][T13460] hwsim_new_radio_nl+0xab7/0xc90 [ 710.704665][T13460] genl_family_rcv_msg_doit+0x22f/0x350 [ 710.710217][T13460] ? end_current_label_crit_section+0x170/0x170 [ 710.716464][T13460] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 710.722358][T13460] ? bpf_lsm_capable+0x5/0x10 [ 710.727029][T13460] ? security_capable+0x85/0xb0 [ 710.731918][T13460] genl_rcv_msg+0x601/0x790 [ 710.736433][T13460] ? genl_bind+0x360/0x360 [ 710.740843][T13460] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 710.747194][T13460] netlink_rcv_skb+0x1ef/0x440 [ 710.751970][T13460] ? genl_bind+0x360/0x360 [ 710.756383][T13460] ? netlink_ack+0x1160/0x1160 [ 710.761156][T13460] ? down_read+0x1a8/0x2d0 [ 710.765572][T13460] genl_rcv+0x24/0x40 [ 710.769551][T13460] netlink_unicast+0x7ad/0x920 [ 710.774324][T13460] netlink_sendmsg+0x8ad/0xbd0 [ 710.779126][T13460] ? netlink_getsockopt+0x550/0x550 [ 710.784351][T13460] ? apparmor_socket_sendmsg+0x8a/0x330 [ 710.789901][T13460] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 710.795190][T13460] ? security_socket_sendmsg+0x7c/0xa0 [ 710.800648][T13460] ? netlink_getsockopt+0x550/0x550 [ 710.805852][T13460] ____sys_sendmsg+0x5ed/0x9a0 [ 710.810623][T13460] ? __sys_sendmsg_sock+0x30/0x30 [ 710.815643][T13460] ? __import_iovec+0x306/0x510 [ 710.820502][T13460] ? import_iovec+0x6f/0xa0 [ 710.825007][T13460] ___sys_sendmsg+0x2a2/0x360 [ 710.829690][T13460] ? __sys_sendmsg+0x2a0/0x2a0 [ 710.834488][T13460] __se_sys_sendmsg+0x1c3/0x2b0 [ 710.839369][T13460] ? __x64_sys_sendmsg+0x80/0x80 [ 710.844349][T13460] ? syscall_enter_from_user_mode+0x2a/0x80 [ 710.850248][T13460] do_syscall_64+0x4c/0xa0 [ 710.854699][T13460] ? clear_bhb_loop+0x60/0xb0 [ 710.859376][T13460] ? clear_bhb_loop+0x60/0xb0 [ 710.864054][T13460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.869944][T13460] RIP: 0033:0x7f875b59e0d9 [ 710.874352][T13460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.893962][T13460] RSP: 002b:00007f875c3f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.902387][T13460] RAX: ffffffffffffffda RBX: 00007f875b825fa0 RCX: 00007f875b59e0d9 [ 710.910355][T13460] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 710.918603][T13460] RBP: 00007f875b635024 R08: 0000000000000000 R09: 0000000000000000 [ 710.926584][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.934560][T13460] R13: 00007f875b826038 R14: 00007f875b825fa0 R15: 00007ffeb48a56b8 [ 710.942545][T13460] [ 710.957584][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2881'. [ 712.883914][T13487] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 712.910204][T13490] netlink: 'syz.4.2888': attribute type 10 has an invalid length. [ 712.918913][T13491] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 713.021534][T13498] netlink: 'syz.1.2891': attribute type 11 has an invalid length. [ 713.081719][T13501] netlink: 'syz.0.2892': attribute type 10 has an invalid length. [ 713.084012][T13498] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2891'. [ 713.391102][T13495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.878456][T13511] device syzkaller0 entered promiscuous mode [ 713.962042][T13524] netlink: 'syz.2.2900': attribute type 16 has an invalid length. [ 713.987050][T13524] netlink: 'syz.2.2900': attribute type 3 has an invalid length. [ 714.003870][T13524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2900'. [ 714.111203][T13529] netlink: 'syz.2.2900': attribute type 29 has an invalid length. [ 714.187733][T13531] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2902'. [ 714.232498][T13536] FAULT_INJECTION: forcing a failure. [ 714.232498][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 714.245869][T13536] CPU: 1 PID: 13536 Comm: syz.4.2904 Not tainted syzkaller #0 [ 714.253392][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.263449][T13536] Call Trace: [ 714.266729][T13536] [ 714.269653][T13536] dump_stack_lvl+0x188/0x24e [ 714.274330][T13536] ? sctp_sendmsg+0x1686/0x2940 [ 714.279179][T13536] ? ___sys_sendmsg+0x2a2/0x360 [ 714.284038][T13536] ? show_regs_print_info+0x12/0x12 [ 714.289453][T13536] ? load_image+0x410/0x410 [ 714.293991][T13536] should_fail_ex+0x390/0x4c0 [ 714.298698][T13536] should_failslab+0x5/0x20 [ 714.303214][T13536] slab_pre_alloc_hook+0x59/0x300 [ 714.308240][T13536] ? sctp_add_bind_addr+0x89/0x350 [ 714.313355][T13536] __kmem_cache_alloc_node+0x4f/0x270 [ 714.318731][T13536] ? sctp_add_bind_addr+0x89/0x350 [ 714.323854][T13536] kmalloc_trace+0x26/0xe0 [ 714.328293][T13536] sctp_add_bind_addr+0x89/0x350 [ 714.333242][T13536] sctp_copy_local_addr_list+0x317/0x4d0 [ 714.338895][T13536] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 714.344650][T13536] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 714.350876][T13536] ? sctp_v4_is_any+0x31/0x50 [ 714.355689][T13536] ? sctp_copy_one_addr+0x93/0x660 [ 714.360859][T13536] sctp_bind_addr_copy+0xaf/0x3c0 [ 714.365895][T13536] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 714.372243][T13536] sctp_connect_new_asoc+0x2f5/0x6a0 [ 714.377536][T13536] ? __sctp_connect+0xd80/0xd80 [ 714.382383][T13536] ? __local_bh_enable_ip+0x136/0x1c0 [ 714.387752][T13536] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 714.393295][T13536] ? security_sctp_bind_connect+0x85/0xb0 [ 714.399018][T13536] sctp_sendmsg+0x1686/0x2940 [ 714.403722][T13536] ? sctp_getsockopt+0x8a0/0x8a0 [ 714.408658][T13536] ? __might_fault+0xa6/0x120 [ 714.413334][T13536] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 714.419744][T13536] ? aa_sock_msg_perm+0x94/0x150 [ 714.424684][T13536] ? inet_sendmsg+0xca/0x2a0 [ 714.429270][T13536] ? inet_send_prepare+0x250/0x250 [ 714.434387][T13536] ____sys_sendmsg+0x5ed/0x9a0 [ 714.439198][T13536] ? __sys_sendmsg_sock+0x30/0x30 [ 714.444244][T13536] ? __import_iovec+0x306/0x510 [ 714.449117][T13536] ? import_iovec+0x6f/0xa0 [ 714.453618][T13536] ___sys_sendmsg+0x2a2/0x360 [ 714.458297][T13536] ? __sys_sendmsg+0x2a0/0x2a0 [ 714.463094][T13536] ? __lock_acquire+0x7c40/0x7c40 [ 714.468134][T13536] __se_sys_sendmsg+0x1c3/0x2b0 [ 714.473008][T13536] ? ct_nmi_exit+0x145/0x1c0 [ 714.477596][T13536] ? __x64_sys_sendmsg+0x80/0x80 [ 714.482552][T13536] ? lockdep_hardirqs_on+0x94/0x140 [ 714.487742][T13536] do_syscall_64+0x4c/0xa0 [ 714.492153][T13536] ? clear_bhb_loop+0x60/0xb0 [ 714.496857][T13536] ? clear_bhb_loop+0x60/0xb0 [ 714.501545][T13536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.507435][T13536] RIP: 0033:0x7f728ed9e0d9 [ 714.511869][T13536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.531559][T13536] RSP: 002b:00007f728fb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.539975][T13536] RAX: ffffffffffffffda RBX: 00007f728f025fa0 RCX: 00007f728ed9e0d9 [ 714.547940][T13536] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 714.555905][T13536] RBP: 00007f728fb97090 R08: 0000000000000000 R09: 0000000000000000 [ 714.563869][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 714.571835][T13536] R13: 00007f728f026038 R14: 00007f728f025fa0 R15: 00007ffd591960c8 [ 714.579824][T13536] [ 715.254905][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 715.266482][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 715.278154][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 715.299497][T13551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 715.308605][T13551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 715.316169][T13551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 715.317780][T13552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2909'. [ 716.435666][T13529] netlink: 'syz.2.2900': attribute type 29 has an invalid length. [ 716.453065][T13535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2902'. [ 716.526402][T13552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2909'. [ 716.537338][T13531] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 716.559340][T13531] CPU: 0 PID: 13531 Comm: syz.1.2902 Not tainted syzkaller #0 [ 716.566858][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.576942][T13531] Call Trace: [ 716.580238][T13531] [ 716.583164][T13531] dump_stack_lvl+0x188/0x24e [ 716.587863][T13531] ? show_regs_print_info+0x12/0x12 [ 716.593172][T13531] ? load_image+0x410/0x410 [ 716.597727][T13531] sysfs_warn_dup+0x8a/0xa0 [ 716.602257][T13531] sysfs_do_create_link_sd+0xc0/0x110 [ 716.607669][T13531] device_add+0x83b/0x1050 [ 716.612111][T13531] wiphy_register+0x1d8b/0x2aa0 [ 716.617000][T13531] ? cfg80211_event_work+0x40/0x40 [ 716.622137][T13531] ? minstrel_ht_alloc+0x894/0xa20 [ 716.627289][T13531] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 716.633383][T13531] ieee80211_register_hw+0x2d48/0x39f0 [ 716.638875][T13531] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 716.645116][T13531] ? ieee80211_register_hw+0xee1/0x39f0 [ 716.650694][T13531] ? ieee80211_register_hw+0xee1/0x39f0 [ 716.656288][T13531] ? ieee80211_tasklet_handler+0x20/0x20 [ 716.661953][T13531] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 716.667879][T13531] ? __debug_object_init+0xed/0x440 [ 716.673118][T13531] ? memset+0x1e/0x40 [ 716.677126][T13531] ? __hrtimer_init+0x189/0x270 [ 716.682046][T13531] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 716.687810][T13531] ? memcpy+0x3c/0x60 [ 716.691817][T13531] hwsim_new_radio_nl+0xab7/0xc90 [ 716.696887][T13531] genl_family_rcv_msg_doit+0x22f/0x350 [ 716.702462][T13531] ? end_current_label_crit_section+0x170/0x170 [ 716.708736][T13531] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 716.714653][T13531] ? bpf_lsm_capable+0x5/0x10 [ 716.719368][T13531] ? security_capable+0x85/0xb0 [ 716.724235][T13531] genl_rcv_msg+0x601/0x790 [ 716.728743][T13531] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 716.734469][T13531] ? genl_bind+0x360/0x360 [ 716.738878][T13531] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 716.745218][T13531] netlink_rcv_skb+0x1ef/0x440 [ 716.749991][T13531] ? genl_bind+0x360/0x360 [ 716.754411][T13531] ? netlink_ack+0x1160/0x1160 [ 716.759184][T13531] ? down_read+0x1a8/0x2d0 [ 716.763601][T13531] genl_rcv+0x24/0x40 [ 716.767574][T13531] netlink_unicast+0x7ad/0x920 [ 716.772346][T13531] netlink_sendmsg+0x8ad/0xbd0 [ 716.777118][T13531] ? netlink_getsockopt+0x550/0x550 [ 716.782318][T13531] ? apparmor_socket_sendmsg+0x8a/0x330 [ 716.787880][T13531] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 716.793161][T13531] ? security_socket_sendmsg+0x7c/0xa0 [ 716.798619][T13531] ? netlink_getsockopt+0x550/0x550 [ 716.803828][T13531] ____sys_sendmsg+0x5ed/0x9a0 [ 716.808604][T13531] ? __sys_sendmsg_sock+0x30/0x30 [ 716.813625][T13531] ? __import_iovec+0x306/0x510 [ 716.818480][T13531] ? import_iovec+0x6f/0xa0 [ 716.822986][T13531] ___sys_sendmsg+0x2a2/0x360 [ 716.827673][T13531] ? __sys_sendmsg+0x2a0/0x2a0 [ 716.832474][T13531] __se_sys_sendmsg+0x1c3/0x2b0 [ 716.837326][T13531] ? __x64_sys_sendmsg+0x80/0x80 [ 716.842284][T13531] ? syscall_enter_from_user_mode+0x2a/0x80 [ 716.848375][T13531] do_syscall_64+0x4c/0xa0 [ 716.852811][T13531] ? clear_bhb_loop+0x60/0xb0 [ 716.857495][T13531] ? clear_bhb_loop+0x60/0xb0 [ 716.863803][T13531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.869742][T13531] RIP: 0033:0x7f875b59e0d9 [ 716.874172][T13531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.893783][T13531] RSP: 002b:00007f875c3f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.902205][T13531] RAX: ffffffffffffffda RBX: 00007f875b825fa0 RCX: 00007f875b59e0d9 [ 716.910229][T13531] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 716.918198][T13531] RBP: 00007f875b635024 R08: 0000000000000000 R09: 0000000000000000 [ 716.926169][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.934150][T13531] R13: 00007f875b826038 R14: 00007f875b825fa0 R15: 00007ffeb48a56b8 [ 716.942135][T13531] [ 717.009322][T13566] netlink: 'syz.3.2911': attribute type 21 has an invalid length. [ 717.017597][T13566] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2911'. [ 717.049568][T13565] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 717.057435][T13565] #PF: supervisor instruction fetch in kernel mode [ 717.063949][T13565] #PF: error_code(0x0010) - not-present page [ 717.069955][T13565] PGD 7eac6067 P4D 7eac6067 PUD 0 [ 717.075095][T13565] Oops: 0010 [#1] PREEMPT SMP KASAN [ 717.080478][T13565] CPU: 1 PID: 13565 Comm: syz.0.2912 Not tainted syzkaller #0 [ 717.087951][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.098016][T13565] RIP: 0010:0x0 [ 717.101494][T13565] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 717.108946][T13565] RSP: 0018:ffffc9000362f498 EFLAGS: 00010246 [ 717.115027][T13565] RAX: 1ffffffff162dcc3 RBX: 1ffff920006c5ea4 RCX: 0000000000000001 [ 717.123015][T13565] RDX: ffffc9000362f540 RSI: 0000000000000001 RDI: ffff88802728c000 [ 717.131001][T13565] RBP: ffffc9000362f5b0 R08: ffff88802728c03f R09: 1ffff11004e51807 [ 717.138990][T13565] R10: dffffc0000000000 R11: ffffed1004e51808 R12: ffffe8ffffd47e00 [ 717.146979][T13565] R13: ffffffff8b16e618 R14: 0000000000000000 R15: ffff88802728c000 [ 717.154961][T13565] FS: 00007f600c7f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 717.163906][T13565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.170509][T13565] CR2: ffffffffffffffd6 CR3: 00000000575b0000 CR4: 00000000003506e0 [ 717.178499][T13565] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 717.186485][T13565] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 717.194567][T13565] Call Trace: [ 717.197858][T13565] [ 717.200809][T13565] bond_xdp_xmit+0x31e/0x550 [ 717.205421][T13565] ? bond_xdp_xmit+0x94/0x550 [ 717.210130][T13565] ? bond_xdp+0x8c0/0x8c0 [ 717.214479][T13565] ? __schedule+0x1087/0x4030 [ 717.219176][T13565] ? page_pool_put_defragged_page+0x426/0x680 [ 717.225270][T13565] bq_xmit_all+0xca9/0x1120 [ 717.229917][T13565] ? __dev_flush+0x1b0/0x1b0 [ 717.234532][T13565] ? preempt_schedule+0xbc/0xd0 [ 717.239400][T13565] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 717.244959][T13565] ? preempt_schedule_common+0xa5/0xd0 [ 717.250440][T13565] ? schedule_preempt_disabled+0x20/0x20 [ 717.256086][T13565] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 717.262095][T13565] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 717.267399][T13565] ? bq_enqueue+0x2ef/0x3d0 [ 717.271921][T13565] ? rcu_is_watching+0x11/0xa0 [ 717.276699][T13565] ? trace_xdp_redirect+0xb3/0x2b0 [ 717.281826][T13565] __dev_flush+0xbf/0x1b0 [ 717.286432][T13565] xdp_do_flush+0xa/0x20 [ 717.290692][T13565] bpf_test_run_xdp_live+0x1549/0x1a90 [ 717.296178][T13565] ? 0xffffffffa0004440 [ 717.300442][T13565] ? text_poke_copy+0x7b/0x90 [ 717.305300][T13565] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 717.310869][T13565] ? xdp_convert_md_to_buff+0x330/0x330 [ 717.316485][T13565] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 717.322747][T13565] ? bpf_test_init+0x119/0x140 [ 717.327523][T13565] ? xdp_convert_md_to_buff+0x5b/0x330 [ 717.333000][T13565] bpf_prog_test_run_xdp+0x757/0xf80 [ 717.338401][T13565] ? __lock_acquire+0x7c40/0x7c40 [ 717.343466][T13565] ? dev_put+0x80/0x80 [ 717.347575][T13565] ? dev_put+0x80/0x80 [ 717.351658][T13565] bpf_prog_test_run+0x31c/0x390 [ 717.356628][T13565] __sys_bpf+0x62b/0x780 [ 717.360895][T13565] ? bpf_link_show_fdinfo+0x380/0x380 [ 717.366305][T13565] ? lock_chain_count+0x20/0x20 [ 717.371194][T13565] __x64_sys_bpf+0x78/0x90 [ 717.375680][T13565] do_syscall_64+0x4c/0xa0 [ 717.380119][T13565] ? clear_bhb_loop+0x60/0xb0 [ 717.384817][T13565] ? clear_bhb_loop+0x60/0xb0 [ 717.389607][T13565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.395526][T13565] RIP: 0033:0x7f600e59e0d9 [ 717.399951][T13565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.419578][T13565] RSP: 002b:00007f600c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 717.428014][T13565] RAX: ffffffffffffffda RBX: 00007f600e825fa0 RCX: 00007f600e59e0d9 [ 717.435992][T13565] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 717.443986][T13565] RBP: 00007f600e635024 R08: 0000000000000000 R09: 0000000000000000 [ 717.451977][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.453376][T13559] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2910'. [ 717.459958][T13565] R13: 00007f600e826038 R14: 00007f600e825fa0 R15: 00007ffd696d6738 [ 717.459987][T13565] [ 717.460003][T13565] Modules linked in: [ 717.460024][T13565] CR2: 0000000000000000 [ 717.460039][T13565] ---[ end trace 0000000000000000 ]--- [ 717.460047][T13565] RIP: 0010:0x0 [ 717.460068][T13565] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 717.460076][T13565] RSP: 0018:ffffc9000362f498 EFLAGS: 00010246 [ 717.460090][T13565] RAX: 1ffffffff162dcc3 RBX: 1ffff920006c5ea4 RCX: 0000000000000001 [ 717.460102][T13565] RDX: ffffc9000362f540 RSI: 0000000000000001 RDI: ffff88802728c000 [ 717.460114][T13565] RBP: ffffc9000362f5b0 R08: ffff88802728c03f R09: 1ffff11004e51807 [ 717.460127][T13565] R10: dffffc0000000000 R11: ffffed1004e51808 R12: ffffe8ffffd47e00 [ 717.460140][T13565] R13: ffffffff8b16e618 R14: 0000000000000000 R15: ffff88802728c000 [ 717.460151][T13565] FS: 00007f600c7f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 717.460166][T13565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.460178][T13565] CR2: ffffffffffffffd6 CR3: 00000000575b0000 CR4: 00000000003506e0 [ 717.489111][T13559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.493908][T13565] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 717.597746][T13565] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 717.605713][T13565] Kernel panic - not syncing: Fatal exception in interrupt [ 717.613233][T13565] Kernel Offset: disabled [ 717.617560][T13565] Rebooting in 86400 seconds..