last executing test programs: 5.106914162s ago: executing program 0 (id=3704): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="0000000000000000008000", @ANYBLOB="a9b55bb1eb214351123f785310c312e96703bb695a35cd5c3a8f58253dd8f37d3479f1551fcc9d7bd909624fd3c1aee64afc1b45f976c3724efaf34ff67712042003b2d9d0f71da60d71e7c1d888fb4757ed2ad319694aa5c1b111c539fa4d1eac92208faa80f91c838f89c343e9412b67a069d54d89342a825fefa1b1e13d9e231ab2"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x10, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="9500000000000000184b0000faffffff0000000000000008060000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100"], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0x7e, &(0x7f0000001100)=""/126, 0x41000, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0xb, 0x0, 0x957}, 0x10, 0xffffffffffffffff, r5, 0x5, 0x0, &(0x7f0000001500)=[{0x2, 0x1, 0xc, 0x4}, {0x3, 0x2, 0x8, 0x4}, {0x0, 0x5, 0x9, 0x4}, {0x5, 0x3, 0xf, 0x5}, {0x2, 0x81, 0x8}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="7f0000000000000000000000000000000000000004c75f483fc2e6e5c0ea5904892dabbb5359e229f51491167afc0102e6050f1a660e5d303e87778403996109d81c268df88b35a217365e8d75675ca8418a6465746579f462d7e8ad367159d5a7265eb8b12994ea330990c2b10824e8d3ec4057769cee9cad4f897505000000000000a9dc6016d876452ae3394742f2ff127e589bd9c6a8d1898f163feba9c0e569e30d47da38e9f40d2d8d5ffc85086cacbcc8eee7ce9be611ab523ae6ea350485cf0688f151f9cf8b73a8a13ccf9f3a19f1568784d6f504f96f536ce0eeeefcd30442", @ANYBLOB="007d51b314620b2095c892e262ecda494b9093014463ed7729e326f7374d0d", @ANYRES64, @ANYBLOB], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x8, &(0x7f0000000000)=r10, 0x4) 5.105277012s ago: executing program 2 (id=3714): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021dd4000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008884) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x1a, 0x2, 0x4, 0x0, 0x0, 0x0, 0x50470, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext, 0x1141, 0x8, 0x2, 0x7, 0x0, 0x7fff, 0x4, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730110f4ffffffff9400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r6, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0xb8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) syz_clone(0x12184c00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="16950fb2ba6ed416cb882e7f2abfe8c44302037ad0867137cf686e902730de78c91de69e7ba0fc193b4ab8b32640f79289faeeaff65c06ff14c82c846c4bd5d604a953b677863b4a811f8529ef9356793f325bdb0334719185152b63f6a654b906860631efe1b2f79bab11a4f4dfed4241dd97c388528885816606c44729ed27998b36fda534ef687fbfbc5d03c653f83fba666983681d") 4.619471283s ago: executing program 4 (id=3706): socket$kcm(0x11, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={&(0x7f0000000840)="cd57f1829465e7f89a8b2790b5ecb8004d4731a6fa1185090161a73d5e9e5babc7fe0aa17c43b6842fe0241099a7af7d3dc0d1374491809a249208edb8e6059fa1607281a3942a50b21c8bf206f6c95e428206639cd4014be2d0ff9fea05eb8588cf4fa348fa00721e19b807f023ec700b54ef9ed049491d74768883056a74e72d4c150144701143c8e69aabb3f285956083213b1b4474f8b923a92d1de8746f86b92adaf0f541e10ee4b912c16161cd6fb64f5b02b4d2ba838c2601f9239666f9", 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743c, 0xf0ff1f00000000) 3.943594687s ago: executing program 0 (id=3708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.81345207s ago: executing program 1 (id=3709): socket$kcm(0x11, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={&(0x7f0000000840)="cd57f1829465e7f89a8b2790b5ecb8004d4731a6fa1185090161a73d5e9e5babc7fe0aa17c43b6842fe0241099a7af7d3dc0d1374491809a249208edb8e6059fa1607281a3942a50b21c8bf206f6c95e428206639cd4014be2d0ff9fea05eb8588cf4fa348fa00721e19b807f023ec700b54ef9ed049491d74768883056a74e72d4c150144701143c8e69aabb3f285956083213b1b4474f8b923a92d1de8746f86b92adaf0f541e10ee4b912c16161cd6fb64f5b02b4d2ba838c2601f9239666f9", 0x0, 0x0, 0x0, 0x5, r0}, 0x38) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743c, 0xf0ff1f00000000) 3.787265931s ago: executing program 3 (id=3710): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="1b00000000010000d1fc2ad132ee16d77a4800"/33, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB="00000000000000000000000000000000bc9d962150c6e9ab8b625db087a7bd974b9b8734c2c4a3361d5ec1a90c23b36bd86a1b2ee2ded76ef2cbdb59a06d0ef294908b8e8aa3bdf37ced02940232c5e6a179184511d825778e4de51bab1ca0addd0696164ca1500c5d00180c451fc4fb0307c8bc7a7221becf4ef8588c0a0cb77e0b32ed4fd392572762d189243e58"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000010000485884eb9ae1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x4, 0x8, 0xfc, 0x0, 0x9, 0x80880, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x9}, 0x1000, 0x3, 0x14, 0x9, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xff7ffffffffffff7}, r2, 0x5, 0xffffffffffffffff, 0x9) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="2f8696db21a9227f779647bc91b1eb3b245287aac3b6e5bd27dc3ef36ae4ac5389e97f8b00293c28f349fde74f3d6f999f1d4bd0297cc025192153ea66b1d4e282474e5ec1b6d5a16b6b76cf9c2a54ec74f45f09a450f83fcda2531853ad79023aed36d2ed1efaaaff69c0bb907046fe2bbab20bd7b704c8856a512c06091aafc145417ab3ada37bdc2d9fed5f4b9a388bd1dc94ffac72eceb2e3245e3b363bffedcee39da27b4b66b9154837dd46002a9c62d8530c41b1dd2a101b45e3c13", 0xbf}], 0x1, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20}, 0x24000804) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x3, 0xffffffff, 0x9, 0xdd, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef) 3.255481152s ago: executing program 3 (id=3711): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021dd4000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008884) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x1a, 0x2, 0x4, 0x0, 0x0, 0x0, 0x50470, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext, 0x1141, 0x8, 0x2, 0x7, 0x0, 0x7fff, 0x4, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xd, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x460, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730110f4ffffffff9400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r6, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0xb8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) syz_clone(0x12184c00, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="16950fb2ba6ed416cb882e7f2abfe8c44302037ad0867137cf686e902730de78c91de69e7ba0fc193b4ab8b32640f79289faeeaff65c06ff14c82c846c4bd5d604a953b677863b4a811f8529ef9356793f325bdb0334719185152b63f6a654b906860631efe1b2f79bab11a4f4dfed4241dd97c388528885816606c44729ed27998b36fda534ef687fbfbc5d03c653f83fba666983681d") 3.255117312s ago: executing program 4 (id=3712): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r0}, 0x38) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f", 0xc}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x7fff, r4}, 0x38) 3.222328272s ago: executing program 2 (id=3713): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x22, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}], 0x20, 0x10}, 0x10044001) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000440)={'netpci0', 0x32, 0x33}, 0xa) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x3, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) close(r3) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="747620917786f44e4919b641aaf02fbea22f36f3694b2aef141691d375ec1bb10ce6df910fedba195b5b530eb2cf1b7d8ad0e7319a2e7954d8dcee4608af0d6dbb344c183490cc4f15045b6f70f7e24e6a809f01e3e96d9549ad5149a5a5040fbb15ee009c31d345c0942dcddfaf9e101fb97842661d5e05e1e8678b1e", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000100), &(0x7f00000001c0)=r8}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 3.109180825s ago: executing program 1 (id=3715): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x22, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}], 0x20, 0x10}, 0x10044001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000440)={'netpci0', 0x32, 0x33}, 0xa) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x3, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) close(r3) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="747620917786f44e4919b641aaf02fbea22f36f3694b2aef141691d375ec1bb10ce6df910fedba195b5b530eb2cf1b7d8ad0e7319a2e7954d8dcee4608af0d6dbb344c183490cc4f15045b6f70f7e24e6a809f01e3e96d9549ad5149a5a5040fbb15ee009c31d345c0942dcddfaf9e101fb97842661d5e05e1e8678b1e", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 3.077880366s ago: executing program 0 (id=3716): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440802, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004461bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09451c268811000096859fc57a0000000000e07f938a06b19c00000025", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2404c084) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000940)=""/4085, 0xff5}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000500)=""/214, 0xd6}], 0x4}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002a80)={r6, 0x0, 0x38, 0x0, &(0x7f0000000440)="c88e76a0379e0311b468eae8d12d96561947ad760c010dfa4070f18f9979525b26faaf7308de3e24cebf3f580b3b5248bd76478cd1953a9d", 0x0, 0x3, 0x0, 0xf2, 0x0, &(0x7f0000002980)="b43fb102b22a7a0bad1d48238dde7a40ffa4ae4a23be3ea2258f3c9b653e471fcac174bccdfad6daa345df77d8df39336edfc8ce0c7e5aec8d5e9e1082c516f0403cbac6c95baa7a1293dde0e38e3388e678185cb08fa762190484d054ccbcfbe408c89a294425151504c57c81544d135822dad1a68febf6ff72afb2abb75f8907561d71777a03ee439f844433e422f7a9f3590180ca14612b27c22c197d76e6fc9656b5ce0696c5820c8d02ac865b855493f0f7e4cad9f62a05572e1c524d32565eaa77e9adebd69cda0adaae73dae727fe76e36962c44903417c980c33ffc593f789ed131de60e3d443b3adab060ad86b2", 0x0, 0x2, 0x0, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r9, 0x2f, 0x0, 0xffffff81, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbc, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0600004021000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r12, @ANYRES64=r11], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002b00)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB='/\x00'/12, @ANYRES32=r1, @ANYBLOB="45f9d6e20b24a2e70009000527cb089415005eb5c802a54d6e91f8c093302f8032ffee0543b8ac4d67a391919039ffd95d82d06b093c114f9713d199188d054d7eb3e68391eb417b157b88c5ee488a9f76ebfde304ea4abb407069ae8dc1f7935a97451fd2f68acf1509b0675a7f4ecbe8b2cfb3716e3c72c2f696472d8a28ae78bbcbb1ac82885b37ee3d9416da40b5c2b4e7789b555af9dc40e5fecb9a", @ANYRES64=r11], 0x20) sendmsg$inet(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000480)='wlan1\x00') sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10022, 0xac5d, 0x0, 0x5, 0x0, 0x67b2, 0x0, 0x0, 0x7c6e1f2f, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'caif0\x00', 0x600}) 2.513489498s ago: executing program 2 (id=3717): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="0000000000000000008000", @ANYBLOB="a9b55bb1eb214351123f785310c312e96703bb695a35cd5c3a8f58253dd8f37d3479f1551fcc9d7bd909624fd3c1aee64afc1b45f976c3724efaf34ff67712042003b2d9d0f71da60d71e7c1d888fb4757ed2ad319694aa5c1b111c539fa4d1eac92208faa80f91c838f89c343e9412b67a069d54d89342a825fefa1b1e13d9e231ab2"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x10, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="9500000000000000184b0000faffffff0000000000000008060000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100"], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0x7e, &(0x7f0000001100)=""/126, 0x41000, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0xb, 0x0, 0x957}, 0x10, 0xffffffffffffffff, r5, 0x5, 0x0, &(0x7f0000001500)=[{0x2, 0x1, 0xc, 0x4}, {0x3, 0x2, 0x8, 0x4}, {0x0, 0x5, 0x9, 0x4}, {0x5, 0x3, 0xf, 0x5}, {0x2, 0x81, 0x8}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="7f0000000000000000000000000000000000000004c75f483fc2e6e5c0ea5904892dabbb5359e229f51491167afc0102e6050f1a660e5d303e87778403996109d81c268df88b35a217365e8d75675ca8418a6465746579f462d7e8ad367159d5a7265eb8b12994ea330990c2b10824e8d3ec4057769cee9cad4f897505000000000000a9dc6016d876452ae3394742f2ff127e589bd9c6a8d1898f163feba9c0e569e30d47da38e9f40d2d8d5ffc85086cacbcc8eee7ce9be611ab523ae6ea350485cf0688f151f9cf8b73a8a13ccf9f3a19f1568784d6f504f96f536ce0eeeefcd30442", @ANYBLOB="007d51b314620b2095c892e262ecda494b9093014463ed7729e326f7374d0d", @ANYRES64, @ANYBLOB="040000000100000007000400000000000000000000d4e9eab648c191b0dcd904755d8ae0c347ddb6db7454dcfcc40e9bb315753d4f9d5b2202e843310cd32214245f3e2acaaaaae57a41"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x8, &(0x7f0000000000)=r10, 0x4) 2.128307935s ago: executing program 0 (id=3718): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x22, 0x0, &(0x7f00000000c0)="878b0d151f8218e3c73697e40800480209004000000000000000ed47b735ce689cbd", 0x0, 0x7ab8e724, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.995124878s ago: executing program 1 (id=3719): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040), 0x4) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c30, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x2005, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100), 0x120) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r5, 0x29, 0x39, &(0x7f0000000100)=r6, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) 1.706002625s ago: executing program 3 (id=3720): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0xe0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) 1.464475069s ago: executing program 3 (id=3721): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000140), 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000300e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socket$kcm(0x29, 0x6, 0x0) 1.398421771s ago: executing program 1 (id=3722): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="1b00000000010000d1fc2ad132ee16d77a4800"/33, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB="00000000000000000000000000000000bc9d962150c6e9ab8b625db087a7bd974b9b8734c2c4a3361d5ec1a90c23b36bd86a1b2ee2ded76ef2cbdb59a06d0ef294908b8e8aa3bdf37ced02940232c5e6a179184511d825778e4de51bab1ca0addd0696164ca1500c5d00180c451fc4fb0307c8bc7a7221becf4ef8588c0a0cb77e0b32ed4fd392572762d189243e58"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000010000485884eb9ae1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x4, 0x8, 0xfc, 0x0, 0x9, 0x80880, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x9}, 0x1000, 0x3, 0x14, 0x9, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xff7ffffffffffff7}, r2, 0x5, 0xffffffffffffffff, 0x9) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="2f8696db21a9227f779647bc91b1eb3b245287aac3b6e5bd27dc3ef36ae4ac5389e97f8b00293c28f349fde74f3d6f999f1d4bd0297cc025192153ea66b1d4e282474e5ec1b6d5a16b6b76cf9c2a54ec74f45f09a450f83fcda2531853ad79023aed36d2ed1efaaaff69c0bb907046fe2bbab20bd7b704c8856a512c06091aafc145417ab3ada37bdc2d9fed5f4b9a388bd1dc94ffac72eceb2e3245e3b363bffedcee39da27b4b66b9154837dd46002a9c62d8530c41b1dd2a101b45e3c13", 0xbf}], 0x1, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20}, 0x24000804) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x3, 0xffffffff, 0x9, 0xdd, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd"], 0xfdef) 1.397690871s ago: executing program 2 (id=3723): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00001100db5b686158bbcfe8875a060300001123fec0"], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0xe, &(0x7f0000000c40)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x70, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5f76}, 0x10, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008000000003d7d328fd0e85ab100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000010000000000000100010018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b509020020000000dbaaf0ff410000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000001b7050000080000004608f0ff76000000bf9800000000000036080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9b, 0xd4, 0x0, 0x0, 0x3110e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={&(0x7f00000001c0), 0x9}, 0x806, 0x2000000c8, 0x0, 0x7, 0x400, 0xffff, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000000, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) close(r6) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0140002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) r9 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) r11 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.00310741s ago: executing program 0 (id=3724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000d0000000000ff0f0000000000001800f2ffffff18120000", @ANYRES32, @ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x9, 0xc, &(0x7f0000000380)=""/12, 0x41000, 0x4, '\x00', 0x0, @fallback=0xf, r0, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x6, 0xfffff801, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x0, 0x2, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x9}, {0x3, 0x1, 0x5, 0x1}, {0x1, 0x4, 0x9, 0x1}, {0x3, 0x2, 0x4, 0x8}], 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x86) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10003) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) socket$kcm(0xa, 0x5, 0x0) r7 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x20, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x41, 0x8, 0x0, 0x10000000, 0xfffe}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, 0x0, 0xfffffff1) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 940.204781ms ago: executing program 3 (id=3725): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcbf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 881.543742ms ago: executing program 1 (id=3726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 709.881246ms ago: executing program 2 (id=3727): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x22, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}], 0x20, 0x10}, 0x10044001) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000440)={'netpci0', 0x32, 0x33}, 0xa) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x3, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) close(r3) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="747620917786f44e4919b641aaf02fbea22f36f3694b2aef141691d375ec1bb10ce6df910fedba195b5b530eb2cf1b7d8ad0e7319a2e7954d8dcee4608af0d6dbb344c183490cc4f15045b6f70f7e24e6a809f01e3e96d9549ad5149a5a5040fbb15ee009c31d345c0942dcddfaf9e101fb97842661d5e05e1e8678b1e", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000100), &(0x7f00000001c0)=r8}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 566.750268ms ago: executing program 4 (id=3728): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3fc}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x60}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 340.518714ms ago: executing program 4 (id=3729): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000080), 0x4) 257.840695ms ago: executing program 4 (id=3730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x54d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 241.094996ms ago: executing program 3 (id=3731): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 204.396697ms ago: executing program 2 (id=3732): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a800000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 169.319207ms ago: executing program 0 (id=3733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 107.960209ms ago: executing program 1 (id=3734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x84000}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 0s ago: executing program 4 (id=3735): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twm'], 0xa) kernel console output (not intermixed with test programs): : attribute type 10 has an invalid length. [ 803.508572][T15689] team0: Device hsr_slave_0 failed to register rx_handler [ 804.432993][T15711] netlink: 'syz.1.3392': attribute type 3 has an invalid length. [ 804.459865][T15711] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3392'. [ 805.114061][T15720] netlink: 'syz.2.3394': attribute type 10 has an invalid length. [ 805.225228][T15728] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3396'. [ 806.008309][T15720] device geneve0 entered promiscuous mode [ 806.041894][T15720] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 806.081673][T15728] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 806.101183][T15738] netlink: 'syz.1.3399': attribute type 10 has an invalid length. [ 806.127869][T15738] team0: Port device hsr_slave_0 added [ 806.144685][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 806.445258][T15743] netlink: 'syz.2.3401': attribute type 10 has an invalid length. [ 806.480252][T15743] team0: Port device hsr_slave_0 added [ 806.535129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 806.905453][T15760] device syzkaller0 entered promiscuous mode [ 806.932165][T15764] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3404'. [ 808.497331][T15807] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3412'. [ 808.733923][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.740359][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.074597][T15778] FAULT_INJECTION: forcing a failure. [ 811.074597][T15778] name failslab, interval 1, probability 0, space 0, times 0 [ 811.088611][T15778] CPU: 0 PID: 15778 Comm: syz.4.3406 Not tainted syzkaller #0 [ 811.096127][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.106226][T15778] Call Trace: [ 811.109545][T15778] [ 811.112511][T15778] dump_stack_lvl+0x188/0x24e [ 811.117243][T15778] ? show_regs_print_info+0x12/0x12 [ 811.122478][T15778] ? load_image+0x410/0x410 [ 811.127010][T15778] ? __might_sleep+0xd0/0xd0 [ 811.131641][T15778] ? __lock_acquire+0x7c40/0x7c40 [ 811.136757][T15778] should_fail_ex+0x390/0x4c0 [ 811.141492][T15778] should_failslab+0x5/0x20 [ 811.146040][T15778] slab_pre_alloc_hook+0x59/0x300 [ 811.151110][T15778] ? cfg80211_sinfo_alloc_tid_stats+0x70/0xf0 [ 811.157221][T15778] __kmem_cache_alloc_node+0x4f/0x270 [ 811.162633][T15778] ? cfg80211_sinfo_alloc_tid_stats+0x70/0xf0 [ 811.168788][T15778] kmalloc_trace+0x26/0xe0 [ 811.173280][T15778] cfg80211_sinfo_alloc_tid_stats+0x70/0xf0 [ 811.179229][T15778] sta_set_sinfo+0x1df9/0x4530 [ 811.184046][T15778] __sta_info_destroy_part2+0x262/0x3f0 [ 811.189736][T15778] __sta_info_flush+0x3ab/0x450 [ 811.194669][T15778] ? sta_info_stop+0x40/0x40 [ 811.199300][T15778] ? do_raw_spin_unlock+0x11d/0x230 [ 811.204560][T15778] ieee80211_ibss_disconnect+0x25a/0x700 [ 811.210253][T15778] ieee80211_ibss_leave+0x21/0x130 [ 811.215410][T15778] __cfg80211_leave_ibss+0x1da/0x450 [ 811.220738][T15778] cfg80211_leave_ibss+0x5a/0x70 [ 811.225714][T15778] cfg80211_change_iface+0x48e/0xf10 [ 811.231067][T15778] __cfg80211_wext_siwmode+0x1c2/0x290 [ 811.236570][T15778] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 811.242248][T15778] ? full_name_hash+0x8e/0xe0 [ 811.246986][T15778] ioctl_standard_call+0xc6/0x250 [ 811.252040][T15778] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 811.257701][T15778] ? __cfg80211_wext_giwfreq+0x8b0/0x8b0 [ 811.263360][T15778] wext_ioctl_dispatch+0x3da/0x470 [ 811.268586][T15778] ? wext_ioctl_dispatch+0x470/0x470 [ 811.273902][T15778] ? iw_handler_get_private+0x1e0/0x1e0 [ 811.279480][T15778] wext_handle_ioctl+0x114/0x1d0 [ 811.284453][T15778] ? call_commit_handler+0xf0/0xf0 [ 811.289611][T15778] sock_ioctl+0x143/0x700 [ 811.294004][T15778] ? sock_poll+0x420/0x420 [ 811.298463][T15778] ? bpf_lsm_file_ioctl+0x5/0x10 [ 811.303433][T15778] ? security_file_ioctl+0x7c/0xa0 [ 811.308575][T15778] ? sock_poll+0x420/0x420 [ 811.313033][T15778] __se_sys_ioctl+0xfa/0x170 [ 811.317667][T15778] do_syscall_64+0x4c/0xa0 [ 811.322114][T15778] ? clear_bhb_loop+0x60/0xb0 [ 811.326818][T15778] ? clear_bhb_loop+0x60/0xb0 [ 811.331528][T15778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.337455][T15778] RIP: 0033:0x7fe37559de59 [ 811.341898][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.361555][T15778] RSP: 002b:00007fe37652b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.369999][T15778] RAX: ffffffffffffffda RBX: 00007fe375826090 RCX: 00007fe37559de59 [ 811.377992][T15778] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000007 [ 811.385990][T15778] RBP: 00007fe37652b090 R08: 0000000000000000 R09: 0000000000000000 [ 811.393985][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.401983][T15778] R13: 00007fe375826128 R14: 00007fe375826090 R15: 00007ffd289dcd08 [ 811.409996][T15778] [ 811.459662][T15792] bond0: (slave geneve0): Error: Slave device does not support XDP [ 811.494206][T15807] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 811.567297][T15832] FAULT_INJECTION: forcing a failure. [ 811.567297][T15832] name failslab, interval 1, probability 0, space 0, times 0 [ 811.642574][T15832] CPU: 0 PID: 15832 Comm: syz.0.3413 Not tainted syzkaller #0 [ 811.650126][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.660266][T15832] Call Trace: [ 811.663585][T15832] [ 811.666554][T15832] dump_stack_lvl+0x188/0x24e [ 811.671288][T15832] ? show_regs_print_info+0x12/0x12 [ 811.676541][T15832] ? load_image+0x410/0x410 [ 811.681103][T15832] ? __might_sleep+0xd0/0xd0 [ 811.685746][T15832] ? __lock_acquire+0x7c40/0x7c40 [ 811.690841][T15832] should_fail_ex+0x390/0x4c0 [ 811.695581][T15832] should_failslab+0x5/0x20 [ 811.700127][T15832] slab_pre_alloc_hook+0x59/0x300 [ 811.705205][T15832] ? __get_vm_area_node+0x122/0x330 [ 811.710454][T15832] __kmem_cache_alloc_node+0x4f/0x270 [ 811.715883][T15832] ? __get_vm_area_node+0x122/0x330 [ 811.721130][T15832] kmalloc_node_trace+0x22/0xe0 [ 811.726052][T15832] __get_vm_area_node+0x122/0x330 [ 811.731135][T15832] __vmalloc_node_range+0x357/0x1380 [ 811.736478][T15832] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 811.742107][T15832] ? aa_get_newest_label+0xf9/0x5b0 [ 811.747391][T15832] ? free_vm_area+0x50/0x50 [ 811.751948][T15832] ? end_current_label_crit_section+0x170/0x170 [ 811.758248][T15832] ? __lock_acquire+0x7c40/0x7c40 [ 811.763331][T15832] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 811.768942][T15832] __vmalloc+0x76/0x80 [ 811.773067][T15832] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 811.778677][T15832] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 811.784104][T15832] ? bpf_prog_alloc+0x13/0x1b0 [ 811.788924][T15832] bpf_prog_alloc+0x1c/0x1b0 [ 811.793573][T15832] bpf_prog_load+0x7d4/0x1530 [ 811.798314][T15832] ? map_freeze+0x390/0x390 [ 811.802907][T15832] ? __might_fault+0xa6/0x120 [ 811.807646][T15832] ? __might_fault+0xa6/0x120 [ 811.812366][T15832] ? __might_fault+0xc2/0x120 [ 811.817092][T15832] ? __might_fault+0xa6/0x120 [ 811.821819][T15832] ? bpf_lsm_bpf+0x5/0x10 [ 811.826196][T15832] ? security_bpf+0x7a/0xa0 [ 811.830758][T15832] __sys_bpf+0x5b8/0x780 [ 811.835066][T15832] ? bpf_link_show_fdinfo+0x380/0x380 [ 811.840502][T15832] ? lock_chain_count+0x20/0x20 [ 811.845416][T15832] __x64_sys_bpf+0x78/0x90 [ 811.849884][T15832] do_syscall_64+0x4c/0xa0 [ 811.854351][T15832] ? clear_bhb_loop+0x60/0xb0 [ 811.859083][T15832] ? clear_bhb_loop+0x60/0xb0 [ 811.863817][T15832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.869765][T15832] RIP: 0033:0x7f425e59de59 [ 811.874230][T15832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.893890][T15832] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.902360][T15832] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 811.910391][T15832] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000005 [ 811.918415][T15832] RBP: 00007f425f459090 R08: 0000000000000000 R09: 0000000000000000 [ 811.926438][T15832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.934457][T15832] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 811.942503][T15832] [ 811.999063][T15838] netlink: 'syz.4.3414': attribute type 29 has an invalid length. [ 812.014224][T15838] netlink: 'syz.4.3414': attribute type 29 has an invalid length. [ 812.027691][T15832] syz.0.3413: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 812.052554][T15834] netlink: 'syz.1.3415': attribute type 10 has an invalid length. [ 812.064584][T15832] CPU: 0 PID: 15832 Comm: syz.0.3413 Not tainted syzkaller #0 [ 812.072113][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.082216][T15832] Call Trace: [ 812.085538][T15832] [ 812.088509][T15832] dump_stack_lvl+0x188/0x24e [ 812.093247][T15832] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 812.099715][T15832] ? show_regs_print_info+0x12/0x12 [ 812.104976][T15832] ? load_image+0x410/0x410 [ 812.109549][T15832] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 812.116017][T15832] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 812.122570][T15832] warn_alloc+0x242/0x330 [ 812.126961][T15832] ? __get_vm_area_node+0x122/0x330 [ 812.132233][T15832] ? zone_watermark_ok_safe+0x270/0x270 [ 812.137839][T15832] ? rcu_is_watching+0x11/0xa0 [ 812.142671][T15832] ? __get_vm_area_node+0x318/0x330 [ 812.147934][T15832] __vmalloc_node_range+0x37c/0x1380 [ 812.153304][T15832] ? aa_get_newest_label+0xf9/0x5b0 [ 812.158556][T15832] ? free_vm_area+0x50/0x50 [ 812.163106][T15832] ? end_current_label_crit_section+0x170/0x170 [ 812.169399][T15832] ? __lock_acquire+0x7c40/0x7c40 [ 812.174460][T15832] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 812.180082][T15832] __vmalloc+0x76/0x80 [ 812.184183][T15832] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 812.189765][T15832] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 812.195198][T15832] ? bpf_prog_alloc+0x13/0x1b0 [ 812.200011][T15832] bpf_prog_alloc+0x1c/0x1b0 [ 812.204637][T15832] bpf_prog_load+0x7d4/0x1530 [ 812.209356][T15832] ? map_freeze+0x390/0x390 [ 812.213888][T15832] ? __might_fault+0xa6/0x120 [ 812.218608][T15832] ? __might_fault+0xa6/0x120 [ 812.223314][T15832] ? __might_fault+0xc2/0x120 [ 812.228025][T15832] ? __might_fault+0xa6/0x120 [ 812.232734][T15832] ? bpf_lsm_bpf+0x5/0x10 [ 812.237096][T15832] ? security_bpf+0x7a/0xa0 [ 812.241637][T15832] __sys_bpf+0x5b8/0x780 [ 812.245919][T15832] ? bpf_link_show_fdinfo+0x380/0x380 [ 812.251342][T15832] ? lock_chain_count+0x20/0x20 [ 812.256240][T15832] __x64_sys_bpf+0x78/0x90 [ 812.260696][T15832] do_syscall_64+0x4c/0xa0 [ 812.265175][T15832] ? clear_bhb_loop+0x60/0xb0 [ 812.269974][T15832] ? clear_bhb_loop+0x60/0xb0 [ 812.274693][T15832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.280628][T15832] RIP: 0033:0x7f425e59de59 [ 812.285068][T15832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.304710][T15832] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.313155][T15832] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 812.321153][T15832] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000005 [ 812.329151][T15832] RBP: 00007f425f459090 R08: 0000000000000000 R09: 0000000000000000 [ 812.337147][T15832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.345139][T15832] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 812.353145][T15832] [ 812.358046][T15832] Mem-Info: [ 812.369753][T15834] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3415'. [ 812.386593][T15832] active_anon:8474 inactive_anon:0 isolated_anon:0 [ 812.386593][T15832] active_file:21600 inactive_file:40244 isolated_file:0 [ 812.386593][T15832] unevictable:768 dirty:242 writeback:0 [ 812.386593][T15832] slab_reclaimable:21254 slab_unreclaimable:96945 [ 812.386593][T15832] mapped:31338 shmem:1361 pagetables:656 [ 812.386593][T15832] sec_pagetables:0 bounce:0 [ 812.386593][T15832] kernel_misc_reclaimable:0 [ 812.386593][T15832] free:1311220 free_pcp:7342 free_cma:0 [ 812.538910][T15832] Node 0 active_anon:34196kB inactive_anon:0kB active_file:86400kB inactive_file:160776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125352kB dirty:968kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10548kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no [ 812.619500][T15832] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 812.660819][T15832] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.701321][T15832] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 812.713555][T15832] Node 0 DMA32 free:1334800kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:34196kB inactive_anon:0kB active_file:86400kB inactive_file:160776kB unevictable:1536kB writepending:968kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:10696kB local_pcp:936kB free_cma:0kB [ 812.752394][T15832] lowmem_reserve[]: 0 0 1 1 1 [ 812.757712][T15832] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 812.910247][T15832] lowmem_reserve[]: 0 0 0 0 0 [ 812.915290][T15832] Node 1 Normal free:3893984kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20228kB local_pcp:9764kB free_cma:0kB [ 812.945156][T15832] lowmem_reserve[]: 0 0 0 0 0 [ 812.985326][T15832] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 813.025724][T15832] Node 0 DMA32: 1428*4kB (UME) 1337*8kB (UME) 930*16kB (UME) 717*32kB (UME) 543*64kB (UME) 955*128kB (UM) 298*256kB (UME) 129*512kB (UME) 68*1024kB (UM) 25*2048kB (UME) 210*4096kB (UM) = 1334552kB [ 813.046566][T15832] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 813.102267][T15832] Node 1 Normal: 264*4kB (UME) 64*8kB (UME) 38*16kB (UME) 25*32kB (UME) 17*64kB (UE) 8*128kB (UME) 7*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3893984kB [ 813.148519][T15832] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.184596][T15832] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 813.214657][T15832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.233358][T15832] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 813.243204][T15832] 63207 total pagecache pages [ 813.248614][T15832] 0 pages in swap cache [ 813.252812][T15832] Free swap = 124996kB [ 813.257416][T15832] Total swap = 124996kB [ 813.261609][T15832] 2097051 pages RAM [ 813.265445][T15832] 0 pages HighMem/MovableOnly [ 813.271525][T15832] 415222 pages reserved [ 813.275727][T15832] 0 pages cma reserved [ 813.421356][T15848] netlink: 'syz.4.3414': attribute type 29 has an invalid length. [ 813.432313][T15847] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 814.771660][T15907] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3426'. [ 814.800249][T15907] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 815.919064][T15934] netlink: 'syz.0.3433': attribute type 10 has an invalid length. [ 815.956639][T15934] team0: Device hsr_slave_0 failed to register rx_handler [ 816.936419][T15949] bond0: (slave geneve0): Error: Slave device does not support XDP [ 817.171735][T15955] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3442'. [ 817.228798][T15956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3443'. [ 817.284010][T15955] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 817.308625][T15955] CPU: 1 PID: 15955 Comm: syz.0.3442 Not tainted syzkaller #0 [ 817.316190][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 817.326301][T15955] Call Trace: [ 817.329623][T15955] [ 817.332603][T15955] dump_stack_lvl+0x188/0x24e [ 817.337351][T15955] ? lockdep_hardirqs_on+0x94/0x140 [ 817.342693][T15955] ? show_regs_print_info+0x12/0x12 [ 817.347970][T15955] ? _printk+0x121/0x130 [ 817.352283][T15955] sysfs_warn_dup+0x8a/0xa0 [ 817.356884][T15955] sysfs_do_create_link_sd+0xc0/0x110 [ 817.362322][T15955] device_add+0x83b/0x1050 [ 817.366808][T15955] wiphy_register+0x1d8b/0x2aa0 [ 817.371733][T15955] ? cfg80211_event_work+0x40/0x40 [ 817.376901][T15955] ? minstrel_ht_alloc+0x894/0xa20 [ 817.382090][T15955] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 817.388219][T15955] ieee80211_register_hw+0x2d48/0x39f0 [ 817.393750][T15955] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 817.399983][T15955] ? ieee80211_register_hw+0xf61/0x39f0 [ 817.405604][T15955] ? ieee80211_register_hw+0xf61/0x39f0 [ 817.411225][T15955] ? ieee80211_tasklet_handler+0x20/0x20 [ 817.416928][T15955] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 817.422874][T15955] ? __debug_object_init+0xed/0x440 [ 817.428116][T15955] ? memset+0x1e/0x40 [ 817.432124][T15955] ? __hrtimer_init+0x189/0x270 [ 817.437005][T15955] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 817.442776][T15955] ? memcpy+0x3c/0x60 [ 817.446788][T15955] hwsim_new_radio_nl+0xab7/0xc90 [ 817.451865][T15955] genl_family_rcv_msg_doit+0x22f/0x350 [ 817.457452][T15955] ? end_current_label_crit_section+0x170/0x170 [ 817.463736][T15955] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 817.469682][T15955] ? bpf_lsm_capable+0x5/0x10 [ 817.474388][T15955] ? security_capable+0x85/0xb0 [ 817.479286][T15955] genl_rcv_msg+0x601/0x790 [ 817.483841][T15955] ? genl_bind+0x360/0x360 [ 817.488297][T15955] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 817.494665][T15955] ? lock_chain_count+0x20/0x20 [ 817.499567][T15955] netlink_rcv_skb+0x1ef/0x440 [ 817.504371][T15955] ? genl_bind+0x360/0x360 [ 817.508825][T15955] ? netlink_ack+0x1160/0x1160 [ 817.513632][T15955] ? down_read+0x1a8/0x2d0 [ 817.518083][T15955] genl_rcv+0x24/0x40 [ 817.522104][T15955] netlink_unicast+0x7ad/0x920 [ 817.526911][T15955] netlink_sendmsg+0x8ad/0xbd0 [ 817.531721][T15955] ? netlink_getsockopt+0x550/0x550 [ 817.536955][T15955] ? apparmor_socket_sendmsg+0x8a/0x330 [ 817.542536][T15955] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 817.547851][T15955] ? security_socket_sendmsg+0x7c/0xa0 [ 817.553340][T15955] ? netlink_getsockopt+0x550/0x550 [ 817.558576][T15955] ____sys_sendmsg+0x5ed/0x9a0 [ 817.563382][T15955] ? __sys_sendmsg_sock+0x30/0x30 [ 817.568446][T15955] ? __import_iovec+0x306/0x510 [ 817.573340][T15955] ? import_iovec+0x6f/0xa0 [ 817.577881][T15955] ___sys_sendmsg+0x2a2/0x360 [ 817.582598][T15955] ? __sys_sendmsg+0x2a0/0x2a0 [ 817.587438][T15955] __se_sys_sendmsg+0x1c3/0x2b0 [ 817.592327][T15955] ? __x64_sys_sendmsg+0x80/0x80 [ 817.597309][T15955] ? lockdep_hardirqs_on+0x94/0x140 [ 817.602543][T15955] do_syscall_64+0x4c/0xa0 [ 817.606993][T15955] ? clear_bhb_loop+0x60/0xb0 [ 817.611706][T15955] ? clear_bhb_loop+0x60/0xb0 [ 817.616425][T15955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.622360][T15955] RIP: 0033:0x7f425e59de59 [ 817.626808][T15955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.646452][T15955] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.654906][T15955] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 817.662905][T15955] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 817.670907][T15955] RBP: 00007f425e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 817.678912][T15955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.686909][T15955] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 817.694924][T15955] [ 818.109482][T15976] netlink: 'syz.0.3449': attribute type 10 has an invalid length. [ 818.145288][T15976] team0: Device hsr_slave_0 failed to register rx_handler [ 819.144588][T15991] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3455'. [ 819.200734][T15993] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.3456'. [ 819.242692][T15993] openvswitch: netlink: Key type 386 is out of range max 32 [ 819.388866][T15996] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3458'. [ 819.449404][T15996] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 819.469550][T15996] CPU: 0 PID: 15996 Comm: syz.2.3458 Not tainted syzkaller #0 [ 819.477108][T15996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.487224][T15996] Call Trace: [ 819.490551][T15996] [ 819.493535][T15996] dump_stack_lvl+0x188/0x24e [ 819.498294][T15996] ? show_regs_print_info+0x12/0x12 [ 819.503578][T15996] ? load_image+0x410/0x410 [ 819.508145][T15996] sysfs_warn_dup+0x8a/0xa0 [ 819.512690][T15996] sysfs_do_create_link_sd+0xc0/0x110 [ 819.518106][T15996] device_add+0x83b/0x1050 [ 819.522571][T15996] wiphy_register+0x1d8b/0x2aa0 [ 819.527484][T15996] ? cfg80211_event_work+0x40/0x40 [ 819.532645][T15996] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 819.538863][T15996] ieee80211_register_hw+0x2d48/0x39f0 [ 819.544383][T15996] ? ieee80211_register_hw+0xf61/0x39f0 [ 819.549968][T15996] ? ieee80211_register_hw+0xf61/0x39f0 [ 819.555569][T15996] ? ieee80211_tasklet_handler+0x20/0x20 [ 819.561358][T15996] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 819.567310][T15996] ? __debug_object_init+0xed/0x440 [ 819.572571][T15996] ? memset+0x1e/0x40 [ 819.576586][T15996] ? __hrtimer_init+0x189/0x270 [ 819.581469][T15996] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 819.587234][T15996] ? memcpy+0x3c/0x60 [ 819.591289][T15996] hwsim_new_radio_nl+0xab7/0xc90 [ 819.596370][T15996] genl_family_rcv_msg_doit+0x22f/0x350 [ 819.601959][T15996] ? end_current_label_crit_section+0x170/0x170 [ 819.608240][T15996] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 819.614181][T15996] ? bpf_lsm_capable+0x5/0x10 [ 819.618894][T15996] ? security_capable+0x85/0xb0 [ 819.623790][T15996] genl_rcv_msg+0x601/0x790 [ 819.628343][T15996] ? genl_bind+0x360/0x360 [ 819.632798][T15996] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 819.639215][T15996] netlink_rcv_skb+0x1ef/0x440 [ 819.644017][T15996] ? genl_bind+0x360/0x360 [ 819.648479][T15996] ? netlink_ack+0x1160/0x1160 [ 819.653291][T15996] ? down_read+0x1a8/0x2d0 [ 819.657739][T15996] genl_rcv+0x24/0x40 [ 819.661794][T15996] netlink_unicast+0x7ad/0x920 [ 819.666610][T15996] netlink_sendmsg+0x8ad/0xbd0 [ 819.671412][T15996] ? lockdep_hardirqs_on+0x94/0x140 [ 819.676642][T15996] ? netlink_getsockopt+0x550/0x550 [ 819.681876][T15996] ? netlink_getsockopt+0x550/0x550 [ 819.687114][T15996] ? netlink_getsockopt+0x550/0x550 [ 819.692347][T15996] ____sys_sendmsg+0x5ed/0x9a0 [ 819.697155][T15996] ? __sys_sendmsg_sock+0x30/0x30 [ 819.702217][T15996] ? __import_iovec+0x306/0x510 [ 819.707120][T15996] ? import_iovec+0x6f/0xa0 [ 819.711671][T15996] ___sys_sendmsg+0x2a2/0x360 [ 819.716391][T15996] ? __sys_sendmsg+0x2a0/0x2a0 [ 819.721235][T15996] __se_sys_sendmsg+0x1c3/0x2b0 [ 819.726126][T15996] ? __x64_sys_sendmsg+0x80/0x80 [ 819.731116][T15996] ? lockdep_hardirqs_on+0x94/0x140 [ 819.736345][T15996] do_syscall_64+0x4c/0xa0 [ 819.740796][T15996] ? clear_bhb_loop+0x60/0xb0 [ 819.745511][T15996] ? clear_bhb_loop+0x60/0xb0 [ 819.750237][T15996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.756171][T15996] RIP: 0033:0x7f2dbd39de59 [ 819.760615][T15996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.780265][T15996] RSP: 002b:00007f2dbe1a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.788721][T15996] RAX: ffffffffffffffda RBX: 00007f2dbd625fa0 RCX: 00007f2dbd39de59 [ 819.796733][T15996] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 819.804740][T15996] RBP: 00007f2dbd433e6f R08: 0000000000000000 R09: 0000000000000000 [ 819.812746][T15996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.820745][T15996] R13: 00007f2dbd626038 R14: 00007f2dbd625fa0 R15: 00007ffffa694de8 [ 819.828765][T15996] [ 820.438877][T16017] netlink: 'syz.2.3463': attribute type 10 has an invalid length. [ 822.276121][T16020] netlink: 'syz.4.3466': attribute type 10 has an invalid length. [ 822.300562][T16020] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3466'. [ 822.832139][T16036] netlink: 'syz.2.3470': attribute type 2 has an invalid length. [ 822.859258][T16036] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3470'. [ 822.910051][T16037] netlink: 'syz.0.3471': attribute type 10 has an invalid length. [ 822.958311][T16037] team0: Device hsr_slave_0 failed to register rx_handler [ 823.150479][T16044] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3473'. [ 823.172882][T16044] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 823.206752][T16044] CPU: 0 PID: 16044 Comm: syz.4.3473 Not tainted syzkaller #0 [ 823.214299][T16044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.224383][T16044] Call Trace: [ 823.227694][T16044] [ 823.230657][T16044] dump_stack_lvl+0x188/0x24e [ 823.235378][T16044] ? show_regs_print_info+0x12/0x12 [ 823.240618][T16044] ? load_image+0x410/0x410 [ 823.245166][T16044] sysfs_warn_dup+0x8a/0xa0 [ 823.249742][T16044] sysfs_do_create_link_sd+0xc0/0x110 [ 823.255152][T16044] device_add+0x83b/0x1050 [ 823.259637][T16044] wiphy_register+0x1d8b/0x2aa0 [ 823.264538][T16044] ? cfg80211_event_work+0x40/0x40 [ 823.269695][T16044] ? minstrel_ht_alloc+0x894/0xa20 [ 823.274842][T16044] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 823.281082][T16044] ieee80211_register_hw+0x2d48/0x39f0 [ 823.286585][T16044] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 823.292786][T16044] ? ieee80211_register_hw+0xf61/0x39f0 [ 823.298361][T16044] ? ieee80211_register_hw+0xf61/0x39f0 [ 823.303945][T16044] ? ieee80211_tasklet_handler+0x20/0x20 [ 823.309607][T16044] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 823.315532][T16044] ? __debug_object_init+0xed/0x440 [ 823.320773][T16044] ? memset+0x1e/0x40 [ 823.324787][T16044] ? __hrtimer_init+0x189/0x270 [ 823.329671][T16044] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 823.335433][T16044] ? memcpy+0x3c/0x60 [ 823.339446][T16044] hwsim_new_radio_nl+0xab7/0xc90 [ 823.344516][T16044] genl_family_rcv_msg_doit+0x22f/0x350 [ 823.350107][T16044] ? end_current_label_crit_section+0x170/0x170 [ 823.356383][T16044] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 823.362332][T16044] ? bpf_lsm_capable+0x5/0x10 [ 823.367040][T16044] ? security_capable+0x85/0xb0 [ 823.371938][T16044] genl_rcv_msg+0x601/0x790 [ 823.376483][T16044] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 823.382680][T16044] ? genl_bind+0x360/0x360 [ 823.387151][T16044] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 823.393525][T16044] ? lock_acquire+0x225/0x4a0 [ 823.398248][T16044] netlink_rcv_skb+0x1ef/0x440 [ 823.403050][T16044] ? genl_bind+0x360/0x360 [ 823.407508][T16044] ? netlink_ack+0x1160/0x1160 [ 823.412317][T16044] ? down_read+0x1a8/0x2d0 [ 823.416771][T16044] genl_rcv+0x24/0x40 [ 823.420791][T16044] netlink_unicast+0x7ad/0x920 [ 823.425601][T16044] netlink_sendmsg+0x8ad/0xbd0 [ 823.430413][T16044] ? netlink_getsockopt+0x550/0x550 [ 823.435646][T16044] ? apparmor_socket_sendmsg+0x8a/0x330 [ 823.441228][T16044] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 823.446548][T16044] ? security_socket_sendmsg+0x7c/0xa0 [ 823.452040][T16044] ? netlink_getsockopt+0x550/0x550 [ 823.457273][T16044] ____sys_sendmsg+0x5ed/0x9a0 [ 823.462080][T16044] ? __sys_sendmsg_sock+0x30/0x30 [ 823.467140][T16044] ? __import_iovec+0x306/0x510 [ 823.472037][T16044] ? import_iovec+0x6f/0xa0 [ 823.476575][T16044] ___sys_sendmsg+0x2a2/0x360 [ 823.481290][T16044] ? __sys_sendmsg+0x2a0/0x2a0 [ 823.486130][T16044] __se_sys_sendmsg+0x1c3/0x2b0 [ 823.491025][T16044] ? __x64_sys_sendmsg+0x80/0x80 [ 823.496014][T16044] ? lockdep_hardirqs_on+0x94/0x140 [ 823.501244][T16044] do_syscall_64+0x4c/0xa0 [ 823.505694][T16044] ? clear_bhb_loop+0x60/0xb0 [ 823.510407][T16044] ? clear_bhb_loop+0x60/0xb0 [ 823.515115][T16044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.521040][T16044] RIP: 0033:0x7fe37559de59 [ 823.525485][T16044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.545127][T16044] RSP: 002b:00007fe37654c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.553570][T16044] RAX: ffffffffffffffda RBX: 00007fe375825fa0 RCX: 00007fe37559de59 [ 823.561565][T16044] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 823.569596][T16044] RBP: 00007fe375633e6f R08: 0000000000000000 R09: 0000000000000000 [ 823.577604][T16044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.585611][T16044] R13: 00007fe375826038 R14: 00007fe375825fa0 R15: 00007ffd289dcd08 [ 823.593624][T16044] [ 823.748042][T16049] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3475'. [ 823.796588][T16049] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 823.804613][T16049] CPU: 0 PID: 16049 Comm: syz.1.3475 Not tainted syzkaller #0 [ 823.812139][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.822249][T16049] Call Trace: [ 823.825565][T16049] [ 823.828536][T16049] dump_stack_lvl+0x188/0x24e [ 823.833281][T16049] ? show_regs_print_info+0x12/0x12 [ 823.838541][T16049] ? load_image+0x410/0x410 [ 823.843113][T16049] sysfs_warn_dup+0x8a/0xa0 [ 823.847685][T16049] sysfs_do_create_link_sd+0xc0/0x110 [ 823.853127][T16049] device_add+0x83b/0x1050 [ 823.857609][T16049] wiphy_register+0x1d8b/0x2aa0 [ 823.862539][T16049] ? cfg80211_event_work+0x40/0x40 [ 823.867747][T16049] ? minstrel_ht_alloc+0x894/0xa20 [ 823.872932][T16049] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 823.879068][T16049] ieee80211_register_hw+0x2d48/0x39f0 [ 823.884613][T16049] ? ieee80211_register_hw+0xf61/0x39f0 [ 823.890222][T16049] ? ieee80211_register_hw+0xf61/0x39f0 [ 823.895844][T16049] ? ieee80211_tasklet_handler+0x20/0x20 [ 823.901539][T16049] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 823.907503][T16049] ? __debug_object_init+0xed/0x440 [ 823.912778][T16049] ? memset+0x1e/0x40 [ 823.916813][T16049] ? __hrtimer_init+0x189/0x270 [ 823.921732][T16049] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 823.927527][T16049] ? memcpy+0x3c/0x60 [ 823.931571][T16049] hwsim_new_radio_nl+0xab7/0xc90 [ 823.936672][T16049] genl_family_rcv_msg_doit+0x22f/0x350 [ 823.942289][T16049] ? end_current_label_crit_section+0x170/0x170 [ 823.948599][T16049] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 823.954573][T16049] ? bpf_lsm_capable+0x5/0x10 [ 823.959314][T16049] ? security_capable+0x85/0xb0 [ 823.964241][T16049] genl_rcv_msg+0x601/0x790 [ 823.968828][T16049] ? genl_bind+0x360/0x360 [ 823.973308][T16049] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 823.979716][T16049] netlink_rcv_skb+0x1ef/0x440 [ 823.984549][T16049] ? genl_bind+0x360/0x360 [ 823.989034][T16049] ? netlink_ack+0x1160/0x1160 [ 823.993885][T16049] ? down_read+0x1a8/0x2d0 [ 823.998357][T16049] genl_rcv+0x24/0x40 [ 824.002405][T16049] netlink_unicast+0x7ad/0x920 [ 824.007244][T16049] netlink_sendmsg+0x8ad/0xbd0 [ 824.012166][T16049] ? aa_sock_msg_perm+0x43/0x150 [ 824.017167][T16049] ? netlink_getsockopt+0x550/0x550 [ 824.022443][T16049] ? apparmor_socket_sendmsg+0x8a/0x330 [ 824.028056][T16049] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 824.033400][T16049] ? security_socket_sendmsg+0x7c/0xa0 [ 824.038925][T16049] ? netlink_getsockopt+0x550/0x550 [ 824.044195][T16049] ____sys_sendmsg+0x5ed/0x9a0 [ 824.049034][T16049] ? __sys_sendmsg_sock+0x30/0x30 [ 824.054118][T16049] ? __import_iovec+0x306/0x510 [ 824.059041][T16049] ? import_iovec+0x6f/0xa0 [ 824.063618][T16049] ___sys_sendmsg+0x2a2/0x360 [ 824.068408][T16049] ? __sys_sendmsg+0x2a0/0x2a0 [ 824.073305][T16049] __se_sys_sendmsg+0x1c3/0x2b0 [ 824.078227][T16049] ? __x64_sys_sendmsg+0x80/0x80 [ 824.083249][T16049] ? syscall_enter_from_user_mode+0x2a/0x80 [ 824.089211][T16049] do_syscall_64+0x4c/0xa0 [ 824.093698][T16049] ? clear_bhb_loop+0x60/0xb0 [ 824.098438][T16049] ? clear_bhb_loop+0x60/0xb0 [ 824.103185][T16049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.109146][T16049] RIP: 0033:0x7f106379de59 [ 824.113618][T16049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.133286][T16049] RSP: 002b:00007f10645fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.141767][T16049] RAX: ffffffffffffffda RBX: 00007f1063a25fa0 RCX: 00007f106379de59 [ 824.149807][T16049] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 824.157833][T16049] RBP: 00007f1063833e6f R08: 0000000000000000 R09: 0000000000000000 [ 824.165860][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.173882][T16049] R13: 00007f1063a26038 R14: 00007f1063a25fa0 R15: 00007ffda9fba388 [ 824.181931][T16049] [ 824.355083][T16054] netlink: 'syz.2.3477': attribute type 1 has an invalid length. [ 824.421193][T16054] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3477'. [ 825.922356][T16070] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 825.936975][T16074] netlink: 'syz.1.3482': attribute type 17 has an invalid length. [ 825.966171][T16074] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3482'. [ 825.986429][T16074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.247813][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 826.539292][T16083] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3487'. [ 826.678944][T16083] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 826.713683][T16083] CPU: 1 PID: 16083 Comm: syz.4.3487 Not tainted syzkaller #0 [ 826.721251][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.731360][T16083] Call Trace: [ 826.734692][T16083] [ 826.737675][T16083] dump_stack_lvl+0x188/0x24e [ 826.742448][T16083] ? show_regs_print_info+0x12/0x12 [ 826.747713][T16083] ? load_image+0x410/0x410 [ 826.752292][T16083] sysfs_warn_dup+0x8a/0xa0 [ 826.756875][T16083] sysfs_do_create_link_sd+0xc0/0x110 [ 826.762311][T16083] device_add+0x83b/0x1050 [ 826.766788][T16083] wiphy_register+0x1d8b/0x2aa0 [ 826.771722][T16083] ? cfg80211_event_work+0x40/0x40 [ 826.776890][T16083] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 826.783095][T16083] ? ieee80211_register_hw+0x2aac/0x39f0 [ 826.788790][T16083] ieee80211_register_hw+0x2d48/0x39f0 [ 826.794341][T16083] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 826.800555][T16083] ? ieee80211_register_hw+0xf61/0x39f0 [ 826.806577][T16083] ? ieee80211_register_hw+0xf61/0x39f0 [ 826.812167][T16083] ? ieee80211_tasklet_handler+0x20/0x20 [ 826.817842][T16083] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 826.823778][T16083] ? __debug_object_init+0xed/0x440 [ 826.829022][T16083] ? memset+0x1e/0x40 [ 826.833040][T16083] ? __hrtimer_init+0x189/0x270 [ 826.837940][T16083] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 826.843718][T16083] ? memcpy+0x3c/0x60 [ 826.847739][T16083] hwsim_new_radio_nl+0xab7/0xc90 [ 826.852818][T16083] genl_family_rcv_msg_doit+0x22f/0x350 [ 826.858404][T16083] ? rcu_is_watching+0x11/0xa0 [ 826.863217][T16083] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 826.869155][T16083] ? lockdep_hardirqs_on+0x94/0x140 [ 826.874416][T16083] ? genl_rcv_msg+0x5d9/0x790 [ 826.879134][T16083] genl_rcv_msg+0x601/0x790 [ 826.883693][T16083] ? genl_bind+0x360/0x360 [ 826.888147][T16083] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 826.894530][T16083] netlink_rcv_skb+0x1ef/0x440 [ 826.899334][T16083] ? genl_bind+0x360/0x360 [ 826.903796][T16083] ? netlink_ack+0x1160/0x1160 [ 826.908612][T16083] ? down_read+0x1a8/0x2d0 [ 826.913078][T16083] genl_rcv+0x24/0x40 [ 826.917104][T16083] netlink_unicast+0x7ad/0x920 [ 826.921925][T16083] netlink_sendmsg+0x8ad/0xbd0 [ 826.926734][T16083] ? netlink_getsockopt+0x550/0x550 [ 826.931978][T16083] ? apparmor_socket_sendmsg+0x8a/0x330 [ 826.937562][T16083] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 826.942873][T16083] ? security_socket_sendmsg+0x7c/0xa0 [ 826.948372][T16083] ? netlink_getsockopt+0x550/0x550 [ 826.953610][T16083] ____sys_sendmsg+0x5ed/0x9a0 [ 826.958419][T16083] ? rcu_is_watching+0x11/0xa0 [ 826.963226][T16083] ? lockdep_hardirqs_on+0x94/0x140 [ 826.968453][T16083] ? __sys_sendmsg_sock+0x30/0x30 [ 826.973525][T16083] ? ___sys_sendmsg+0x287/0x360 [ 826.978416][T16083] ___sys_sendmsg+0x2a2/0x360 [ 826.983139][T16083] ? __sys_sendmsg+0x2a0/0x2a0 [ 826.987993][T16083] ? ktime_get+0x7b/0x270 [ 826.992374][T16083] __se_sys_sendmsg+0x1c3/0x2b0 [ 826.997264][T16083] ? __x64_sys_sendmsg+0x80/0x80 [ 827.002249][T16083] ? lockdep_hardirqs_on+0x94/0x140 [ 827.007481][T16083] do_syscall_64+0x4c/0xa0 [ 827.011934][T16083] ? clear_bhb_loop+0x60/0xb0 [ 827.016655][T16083] ? clear_bhb_loop+0x60/0xb0 [ 827.021368][T16083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.027297][T16083] RIP: 0033:0x7fe37559de59 [ 827.031741][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.051400][T16083] RSP: 002b:00007fe37654c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.059855][T16083] RAX: ffffffffffffffda RBX: 00007fe375825fa0 RCX: 00007fe37559de59 [ 827.067866][T16083] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 827.075862][T16083] RBP: 00007fe375633e6f R08: 0000000000000000 R09: 0000000000000000 [ 827.083891][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.091890][T16083] R13: 00007fe375826038 R14: 00007fe375825fa0 R15: 00007ffd289dcd08 [ 827.099905][T16083] [ 829.833421][T16120] FAULT_INJECTION: forcing a failure. [ 829.833421][T16120] name failslab, interval 1, probability 0, space 0, times 0 [ 829.939662][T16120] CPU: 0 PID: 16120 Comm: syz.3.3496 Not tainted syzkaller #0 [ 829.947213][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 829.957318][T16120] Call Trace: [ 829.960635][T16120] [ 829.963612][T16120] dump_stack_lvl+0x188/0x24e [ 829.968354][T16120] ? show_regs_print_info+0x12/0x12 [ 829.973616][T16120] ? load_image+0x410/0x410 [ 829.978179][T16120] ? __might_sleep+0xd0/0xd0 [ 829.982828][T16120] ? __lock_acquire+0x7c40/0x7c40 [ 829.987901][T16120] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 829.993944][T16120] should_fail_ex+0x390/0x4c0 [ 829.998680][T16120] should_failslab+0x5/0x20 [ 830.003223][T16120] slab_pre_alloc_hook+0x59/0x300 [ 830.008292][T16120] ? lockdep_hardirqs_on+0x94/0x140 [ 830.013534][T16120] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 830.018961][T16120] __kmem_cache_alloc_node+0x4f/0x270 [ 830.024389][T16120] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 830.029815][T16120] kmalloc_trace+0x26/0xe0 [ 830.034293][T16120] tcp_sendmsg_fastopen+0x1d5/0x600 [ 830.039552][T16120] tcp_sendmsg_locked+0x356b/0x39e0 [ 830.044804][T16120] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 830.050591][T16120] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 830.056394][T16120] ? mark_lock+0x94/0x320 [ 830.060784][T16120] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 830.066818][T16120] ? lock_chain_count+0x20/0x20 [ 830.071738][T16120] ? tcp_set_state+0x520/0x520 [ 830.076610][T16120] tcp_sendmsg+0x2b/0x40 [ 830.080904][T16120] ? inet_send_prepare+0x250/0x250 [ 830.086114][T16120] ____sys_sendmsg+0x5ed/0x9a0 [ 830.090936][T16120] ? __lock_acquire+0x7c40/0x7c40 [ 830.096035][T16120] ? __sys_sendmsg_sock+0x30/0x30 [ 830.101111][T16120] ? __import_iovec+0x306/0x510 [ 830.106028][T16120] ? import_iovec+0x6f/0xa0 [ 830.110589][T16120] ___sys_sendmsg+0x2a2/0x360 [ 830.115326][T16120] ? __sys_sendmsg+0x2a0/0x2a0 [ 830.120179][T16120] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 830.125990][T16120] __se_sys_sendmsg+0x1c3/0x2b0 [ 830.130897][T16120] ? __x64_sys_sendmsg+0x80/0x80 [ 830.135914][T16120] ? syscall_enter_from_user_mode+0x2a/0x80 [ 830.141895][T16120] do_syscall_64+0x4c/0xa0 [ 830.146377][T16120] ? clear_bhb_loop+0x60/0xb0 [ 830.151143][T16120] ? clear_bhb_loop+0x60/0xb0 [ 830.155906][T16120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.161853][T16120] RIP: 0033:0x7feb0499de59 [ 830.166323][T16120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.186000][T16120] RSP: 002b:00007feb057e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.194468][T16120] RAX: ffffffffffffffda RBX: 00007feb04c25fa0 RCX: 00007feb0499de59 [ 830.202502][T16120] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000016 [ 830.210532][T16120] RBP: 00007feb057e3090 R08: 0000000000000000 R09: 0000000000000000 [ 830.218566][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.226598][T16120] R13: 00007feb04c26038 R14: 00007feb04c25fa0 R15: 00007ffd4709df58 [ 830.234642][T16120] [ 830.413298][T16132] netlink: 'syz.1.3497': attribute type 10 has an invalid length. [ 830.655586][T16137] netlink: 'syz.3.3502': attribute type 2 has an invalid length. [ 830.696223][T16137] netlink: 'syz.3.3502': attribute type 8 has an invalid length. [ 830.704212][T16137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3502'. [ 830.766683][T16141] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3503'. [ 830.825448][T16141] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 830.860978][T16141] CPU: 0 PID: 16141 Comm: syz.0.3503 Not tainted syzkaller #0 [ 830.868531][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.878630][T16141] Call Trace: [ 830.881952][T16141] [ 830.884929][T16141] dump_stack_lvl+0x188/0x24e [ 830.889676][T16141] ? show_regs_print_info+0x12/0x12 [ 830.894924][T16141] ? load_image+0x410/0x410 [ 830.899493][T16141] sysfs_warn_dup+0x8a/0xa0 [ 830.904055][T16141] sysfs_do_create_link_sd+0xc0/0x110 [ 830.909484][T16141] device_add+0x83b/0x1050 [ 830.913959][T16141] wiphy_register+0x1d8b/0x2aa0 [ 830.918886][T16141] ? cfg80211_event_work+0x40/0x40 [ 830.924054][T16141] ? minstrel_ht_alloc+0x894/0xa20 [ 830.929239][T16141] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 830.935367][T16141] ieee80211_register_hw+0x2d48/0x39f0 [ 830.940884][T16141] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 830.947108][T16141] ? ieee80211_register_hw+0xf61/0x39f0 [ 830.952714][T16141] ? ieee80211_register_hw+0xf61/0x39f0 [ 830.958337][T16141] ? ieee80211_tasklet_handler+0x20/0x20 [ 830.964025][T16141] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 830.969973][T16141] ? __debug_object_init+0xed/0x440 [ 830.975216][T16141] ? memset+0x1e/0x40 [ 830.979231][T16141] ? __hrtimer_init+0x189/0x270 [ 830.984117][T16141] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 830.989881][T16141] ? memcpy+0x3c/0x60 [ 830.993896][T16141] hwsim_new_radio_nl+0xab7/0xc90 [ 830.998966][T16141] genl_family_rcv_msg_doit+0x22f/0x350 [ 831.004554][T16141] ? end_current_label_crit_section+0x170/0x170 [ 831.010841][T16141] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 831.016786][T16141] ? bpf_lsm_capable+0x5/0x10 [ 831.021499][T16141] ? security_capable+0x85/0xb0 [ 831.026395][T16141] genl_rcv_msg+0x601/0x790 [ 831.030965][T16141] ? lockdep_hardirqs_on+0x94/0x140 [ 831.036199][T16141] ? genl_bind+0x360/0x360 [ 831.040652][T16141] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 831.047028][T16141] netlink_rcv_skb+0x1ef/0x440 [ 831.051829][T16141] ? genl_bind+0x360/0x360 [ 831.056283][T16141] ? netlink_ack+0x1160/0x1160 [ 831.061094][T16141] ? down_read+0x1a8/0x2d0 [ 831.065539][T16141] genl_rcv+0x24/0x40 [ 831.069552][T16141] netlink_unicast+0x7ad/0x920 [ 831.074360][T16141] netlink_sendmsg+0x8ad/0xbd0 [ 831.079168][T16141] ? netlink_getsockopt+0x550/0x550 [ 831.084406][T16141] ? apparmor_socket_sendmsg+0x8a/0x330 [ 831.089983][T16141] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 831.095300][T16141] ? security_socket_sendmsg+0x7c/0xa0 [ 831.100792][T16141] ? netlink_getsockopt+0x550/0x550 [ 831.106027][T16141] ____sys_sendmsg+0x5ed/0x9a0 [ 831.110832][T16141] ? __sys_sendmsg_sock+0x30/0x30 [ 831.115887][T16141] ? __import_iovec+0x306/0x510 [ 831.120781][T16141] ? import_iovec+0x6f/0xa0 [ 831.125320][T16141] ___sys_sendmsg+0x2a2/0x360 [ 831.130068][T16141] ? __sys_sendmsg+0x2a0/0x2a0 [ 831.134912][T16141] __se_sys_sendmsg+0x1c3/0x2b0 [ 831.139832][T16141] ? __x64_sys_sendmsg+0x80/0x80 [ 831.144823][T16141] ? syscall_enter_from_user_mode+0x2a/0x80 [ 831.150747][T16141] do_syscall_64+0x4c/0xa0 [ 831.155199][T16141] ? clear_bhb_loop+0x60/0xb0 [ 831.159906][T16141] ? clear_bhb_loop+0x60/0xb0 [ 831.164615][T16141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.170539][T16141] RIP: 0033:0x7f425e59de59 [ 831.174979][T16141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.194618][T16141] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.203062][T16141] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 831.211065][T16141] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 831.219062][T16141] RBP: 00007f425e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 831.227056][T16141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.235084][T16141] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 831.243122][T16141] [ 831.616714][T16154] netlink: 'syz.3.3506': attribute type 2 has an invalid length. [ 831.676969][T16154] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3506'. [ 831.823046][T16163] netlink: 'syz.0.3508': attribute type 10 has an invalid length. [ 831.841474][T16163] team0: Device hsr_slave_0 failed to register rx_handler [ 832.498291][T16178] netlink: 'syz.4.3512': attribute type 10 has an invalid length. [ 832.591077][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.601528][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.813949][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.822253][T16178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.833491][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.841550][T16178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.027610][T16178] team0: Port device bridge0 added [ 833.041389][T16184] netlink: 'syz.2.3514': attribute type 10 has an invalid length. [ 833.051639][T16189] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3512'. [ 833.075344][T16195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3517'. [ 833.325626][T16199] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3518'. [ 833.367327][T16199] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 833.375298][T16199] CPU: 1 PID: 16199 Comm: syz.2.3518 Not tainted syzkaller #0 [ 833.382981][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.393093][T16199] Call Trace: [ 833.396428][T16199] [ 833.399398][T16199] dump_stack_lvl+0x188/0x24e [ 833.404158][T16199] ? show_regs_print_info+0x12/0x12 [ 833.409400][T16199] ? load_image+0x410/0x410 [ 833.413946][T16199] sysfs_warn_dup+0x8a/0xa0 [ 833.418485][T16199] sysfs_do_create_link_sd+0xc0/0x110 [ 833.423896][T16199] device_add+0x83b/0x1050 [ 833.428356][T16199] wiphy_register+0x1d8b/0x2aa0 [ 833.433265][T16199] ? cfg80211_event_work+0x40/0x40 [ 833.438416][T16199] ? minstrel_ht_alloc+0x894/0xa20 [ 833.443568][T16199] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 833.449666][T16199] ieee80211_register_hw+0x2d48/0x39f0 [ 833.455162][T16199] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 833.461357][T16199] ? ieee80211_register_hw+0xf61/0x39f0 [ 833.466939][T16199] ? ieee80211_register_hw+0xf61/0x39f0 [ 833.472527][T16199] ? ieee80211_tasklet_handler+0x20/0x20 [ 833.478195][T16199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 833.484124][T16199] ? __debug_object_init+0xed/0x440 [ 833.489362][T16199] ? memset+0x1e/0x40 [ 833.493370][T16199] ? __hrtimer_init+0x189/0x270 [ 833.498254][T16199] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 833.504028][T16199] ? memcpy+0x3c/0x60 [ 833.508041][T16199] hwsim_new_radio_nl+0xab7/0xc90 [ 833.513118][T16199] genl_family_rcv_msg_doit+0x22f/0x350 [ 833.518704][T16199] ? end_current_label_crit_section+0x170/0x170 [ 833.524987][T16199] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 833.530922][T16199] ? bpf_lsm_capable+0x5/0x10 [ 833.535627][T16199] ? security_capable+0x85/0xb0 [ 833.540518][T16199] genl_rcv_msg+0x601/0x790 [ 833.545070][T16199] ? genl_bind+0x360/0x360 [ 833.549522][T16199] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 833.555908][T16199] netlink_rcv_skb+0x1ef/0x440 [ 833.560706][T16199] ? genl_bind+0x360/0x360 [ 833.565162][T16199] ? netlink_ack+0x1160/0x1160 [ 833.569999][T16199] ? down_read+0x1a8/0x2d0 [ 833.574468][T16199] genl_rcv+0x24/0x40 [ 833.578499][T16199] netlink_unicast+0x7ad/0x920 [ 833.583345][T16199] netlink_sendmsg+0x8ad/0xbd0 [ 833.588167][T16199] ? netlink_getsockopt+0x550/0x550 [ 833.593402][T16199] ? apparmor_socket_sendmsg+0x8a/0x330 [ 833.598987][T16199] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 833.604303][T16199] ? security_socket_sendmsg+0x7c/0xa0 [ 833.609798][T16199] ? netlink_getsockopt+0x550/0x550 [ 833.615036][T16199] ____sys_sendmsg+0x5ed/0x9a0 [ 833.619844][T16199] ? __sys_sendmsg_sock+0x30/0x30 [ 833.624897][T16199] ? __import_iovec+0x306/0x510 [ 833.629791][T16199] ? import_iovec+0x6f/0xa0 [ 833.634330][T16199] ___sys_sendmsg+0x2a2/0x360 [ 833.639076][T16199] ? __sys_sendmsg+0x2a0/0x2a0 [ 833.643899][T16199] ? ktime_get+0x7b/0x270 [ 833.648287][T16199] __se_sys_sendmsg+0x1c3/0x2b0 [ 833.653171][T16199] ? __x64_sys_sendmsg+0x80/0x80 [ 833.658160][T16199] ? lockdep_hardirqs_on+0x94/0x140 [ 833.663387][T16199] do_syscall_64+0x4c/0xa0 [ 833.667844][T16199] ? clear_bhb_loop+0x60/0xb0 [ 833.672556][T16199] ? clear_bhb_loop+0x60/0xb0 [ 833.677271][T16199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.683195][T16199] RIP: 0033:0x7f2dbd39de59 [ 833.687663][T16199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.707300][T16199] RSP: 002b:00007f2dbe1a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.715740][T16199] RAX: ffffffffffffffda RBX: 00007f2dbd625fa0 RCX: 00007f2dbd39de59 [ 833.723736][T16199] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 833.731739][T16199] RBP: 00007f2dbd433e6f R08: 0000000000000000 R09: 0000000000000000 [ 833.739740][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.747743][T16199] R13: 00007f2dbd626038 R14: 00007f2dbd625fa0 R15: 00007ffffa694de8 [ 833.755758][T16199] [ 834.116050][T16212] netlink: 'syz.0.3521': attribute type 2 has an invalid length. [ 834.144282][T16212] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3521'. [ 834.194942][T16204] netlink: 'syz.4.3520': attribute type 11 has an invalid length. [ 834.907514][T16226] netlink: 'syz.3.3528': attribute type 10 has an invalid length. [ 835.086804][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.120789][T16232] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.128285][T16232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.191522][T16232] team0: Port device bridge0 added [ 835.407904][T16242] FAULT_INJECTION: forcing a failure. [ 835.407904][T16242] name failslab, interval 1, probability 0, space 0, times 0 [ 835.440117][T16245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3532'. [ 835.450984][T16242] CPU: 1 PID: 16242 Comm: syz.4.3534 Not tainted syzkaller #0 [ 835.458520][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.468632][T16242] Call Trace: [ 835.471981][T16242] [ 835.474953][T16242] dump_stack_lvl+0x188/0x24e [ 835.479691][T16242] ? show_regs_print_info+0x12/0x12 [ 835.484944][T16242] ? load_image+0x410/0x410 [ 835.489516][T16242] ? __might_sleep+0xd0/0xd0 [ 835.494156][T16242] ? __lock_acquire+0x7c40/0x7c40 [ 835.499235][T16242] should_fail_ex+0x390/0x4c0 [ 835.503971][T16242] should_failslab+0x5/0x20 [ 835.508527][T16242] slab_pre_alloc_hook+0x59/0x300 [ 835.513602][T16242] ? __lock_acquire+0x7c40/0x7c40 [ 835.518679][T16242] ? kvmalloc_node+0x6c/0x180 [ 835.523418][T16242] __kmem_cache_alloc_node+0x4f/0x270 [ 835.528841][T16242] ? schedule_delayed_monitor_work+0x160/0x160 [ 835.535058][T16242] ? kvmalloc_node+0x6c/0x180 [ 835.539788][T16242] __kmalloc_node+0xa2/0x240 [ 835.544440][T16242] kvmalloc_node+0x6c/0x180 [ 835.549007][T16242] bpf_test_run_xdp_live+0x1da/0x1a90 [ 835.554444][T16242] ? 0xffffffffa0004440 [ 835.558648][T16242] ? text_poke_copy+0x7b/0x90 [ 835.563385][T16242] ? 0xffffffffa0004440 [ 835.567581][T16242] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 835.573540][T16242] ? xdp_convert_md_to_buff+0x330/0x330 [ 835.579164][T16242] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 835.585457][T16242] ? bpf_test_init+0x119/0x140 [ 835.590274][T16242] ? xdp_convert_md_to_buff+0x5b/0x330 [ 835.595786][T16242] bpf_prog_test_run_xdp+0x757/0xf80 [ 835.601128][T16242] ? __lock_acquire+0x7c40/0x7c40 [ 835.606221][T16242] ? dev_put+0x80/0x80 [ 835.610347][T16242] ? dev_put+0x80/0x80 [ 835.614467][T16242] bpf_prog_test_run+0x31c/0x390 [ 835.619479][T16242] __sys_bpf+0x62b/0x780 [ 835.623770][T16242] ? bpf_link_show_fdinfo+0x380/0x380 [ 835.629210][T16242] ? lock_chain_count+0x20/0x20 [ 835.634127][T16242] __x64_sys_bpf+0x78/0x90 [ 835.638592][T16242] do_syscall_64+0x4c/0xa0 [ 835.643063][T16242] ? clear_bhb_loop+0x60/0xb0 [ 835.647791][T16242] ? clear_bhb_loop+0x60/0xb0 [ 835.652526][T16242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.658505][T16242] RIP: 0033:0x7fe37559de59 [ 835.662964][T16242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.682611][T16242] RSP: 002b:00007fe37654c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 835.691112][T16242] RAX: ffffffffffffffda RBX: 00007fe375825fa0 RCX: 00007fe37559de59 [ 835.699133][T16242] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 835.707145][T16242] RBP: 00007fe37654c090 R08: 0000000000000000 R09: 0000000000000000 [ 835.715164][T16242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.723176][T16242] R13: 00007fe375826038 R14: 00007fe375825fa0 R15: 00007ffd289dcd08 [ 835.731212][T16242] [ 836.738146][T16260] validate_nla: 1 callbacks suppressed [ 836.738173][T16260] netlink: 'syz.2.3541': attribute type 11 has an invalid length. [ 836.881221][T16262] netlink: 'syz.3.3543': attribute type 10 has an invalid length. [ 837.590529][T16273] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3546'. [ 837.667976][T16273] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 837.727321][T16273] CPU: 0 PID: 16273 Comm: syz.4.3546 Not tainted syzkaller #0 [ 837.734878][T16273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.744987][T16273] Call Trace: [ 837.748315][T16273] [ 837.751287][T16273] dump_stack_lvl+0x188/0x24e [ 837.756020][T16273] ? show_regs_print_info+0x12/0x12 [ 837.761271][T16273] ? load_image+0x410/0x410 [ 837.765825][T16273] sysfs_warn_dup+0x8a/0xa0 [ 837.770396][T16273] sysfs_do_create_link_sd+0xc0/0x110 [ 837.775812][T16273] device_add+0x83b/0x1050 [ 837.780267][T16273] wiphy_register+0x1d8b/0x2aa0 [ 837.785189][T16273] ? cfg80211_event_work+0x40/0x40 [ 837.790339][T16273] ? minstrel_ht_alloc+0x894/0xa20 [ 837.795486][T16273] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 837.801582][T16273] ieee80211_register_hw+0x2d48/0x39f0 [ 837.807085][T16273] ? ieee80211_register_hw+0xf61/0x39f0 [ 837.812679][T16273] ? ieee80211_register_hw+0xf61/0x39f0 [ 837.818268][T16273] ? ieee80211_tasklet_handler+0x20/0x20 [ 837.823936][T16273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 837.829861][T16273] ? __debug_object_init+0xed/0x440 [ 837.835105][T16273] ? memset+0x1e/0x40 [ 837.839110][T16273] ? __hrtimer_init+0x189/0x270 [ 837.843999][T16273] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 837.849763][T16273] ? memcpy+0x3c/0x60 [ 837.853783][T16273] hwsim_new_radio_nl+0xab7/0xc90 [ 837.858880][T16273] genl_family_rcv_msg_doit+0x22f/0x350 [ 837.864462][T16273] ? end_current_label_crit_section+0x170/0x170 [ 837.870740][T16273] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 837.876760][T16273] ? bpf_lsm_capable+0x5/0x10 [ 837.881465][T16273] ? security_capable+0x85/0xb0 [ 837.886368][T16273] genl_rcv_msg+0x601/0x790 [ 837.890916][T16273] ? genl_bind+0x360/0x360 [ 837.895369][T16273] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 837.901751][T16273] netlink_rcv_skb+0x1ef/0x440 [ 837.906557][T16273] ? genl_bind+0x360/0x360 [ 837.911016][T16273] ? netlink_ack+0x1160/0x1160 [ 837.915825][T16273] ? down_read+0x1a8/0x2d0 [ 837.920271][T16273] genl_rcv+0x24/0x40 [ 837.924293][T16273] netlink_unicast+0x7ad/0x920 [ 837.929102][T16273] netlink_sendmsg+0x8ad/0xbd0 [ 837.933910][T16273] ? netlink_getsockopt+0x550/0x550 [ 837.939145][T16273] ? apparmor_socket_sendmsg+0x8a/0x330 [ 837.944728][T16273] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 837.950045][T16273] ? security_socket_sendmsg+0x7c/0xa0 [ 837.955535][T16273] ? netlink_getsockopt+0x550/0x550 [ 837.960771][T16273] ____sys_sendmsg+0x5ed/0x9a0 [ 837.965590][T16273] ? __sys_sendmsg_sock+0x30/0x30 [ 837.970650][T16273] ? __import_iovec+0x306/0x510 [ 837.975545][T16273] ? import_iovec+0x6f/0xa0 [ 837.980084][T16273] ___sys_sendmsg+0x2a2/0x360 [ 837.984799][T16273] ? __sys_sendmsg+0x2a0/0x2a0 [ 837.989642][T16273] __se_sys_sendmsg+0x1c3/0x2b0 [ 837.994529][T16273] ? __x64_sys_sendmsg+0x80/0x80 [ 837.999526][T16273] do_syscall_64+0x4c/0xa0 [ 838.003977][T16273] ? clear_bhb_loop+0x60/0xb0 [ 838.008691][T16273] ? clear_bhb_loop+0x60/0xb0 [ 838.013407][T16273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.019333][T16273] RIP: 0033:0x7fe37559de59 [ 838.023785][T16273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.043426][T16273] RSP: 002b:00007fe37654c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.051906][T16273] RAX: ffffffffffffffda RBX: 00007fe375825fa0 RCX: 00007fe37559de59 [ 838.059905][T16273] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 838.067905][T16273] RBP: 00007fe375633e6f R08: 0000000000000000 R09: 0000000000000000 [ 838.075908][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.083908][T16273] R13: 00007fe375826038 R14: 00007fe375825fa0 R15: 00007ffd289dcd08 [ 838.091925][T16273] [ 838.530115][T16287] netlink: 'syz.0.3550': attribute type 29 has an invalid length. [ 838.544719][T16287] netlink: 'syz.0.3550': attribute type 29 has an invalid length. [ 838.558808][T16287] netlink: 'syz.0.3550': attribute type 29 has an invalid length. [ 838.572063][T16287] netlink: 'syz.0.3550': attribute type 29 has an invalid length. [ 838.858186][T16297] netlink: 'syz.2.3554': attribute type 10 has an invalid length. [ 838.945065][T16297] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.955917][T16297] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.102124][T16297] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.110397][T16297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.120847][T16297] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.128934][T16297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.361307][T16297] team0: Port device bridge0 added [ 839.462447][T16304] netlink: 'syz.4.3555': attribute type 10 has an invalid length. [ 839.515534][T16314] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3554'. [ 839.571605][T16316] netlink: 'syz.0.3559': attribute type 11 has an invalid length. [ 841.754743][T16323] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3561'. [ 841.804351][T16323] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 841.841456][T16323] CPU: 1 PID: 16323 Comm: syz.3.3561 Not tainted syzkaller #0 [ 841.849034][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.859142][T16323] Call Trace: [ 841.862472][T16323] [ 841.865455][T16323] dump_stack_lvl+0x188/0x24e [ 841.870197][T16323] ? show_regs_print_info+0x12/0x12 [ 841.875461][T16323] ? load_image+0x410/0x410 [ 841.880051][T16323] sysfs_warn_dup+0x8a/0xa0 [ 841.884617][T16323] sysfs_do_create_link_sd+0xc0/0x110 [ 841.890084][T16323] device_add+0x83b/0x1050 [ 841.894577][T16323] wiphy_register+0x1d8b/0x2aa0 [ 841.899524][T16323] ? cfg80211_event_work+0x40/0x40 [ 841.904702][T16323] ? minstrel_ht_alloc+0x894/0xa20 [ 841.909892][T16323] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 841.916029][T16323] ieee80211_register_hw+0x2d48/0x39f0 [ 841.921576][T16323] ? ieee80211_register_hw+0xf61/0x39f0 [ 841.927183][T16323] ? ieee80211_register_hw+0xf61/0x39f0 [ 841.932802][T16323] ? ieee80211_tasklet_handler+0x20/0x20 [ 841.938478][T16323] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 841.944414][T16323] ? __debug_object_init+0xed/0x440 [ 841.949662][T16323] ? memset+0x1e/0x40 [ 841.953671][T16323] ? __hrtimer_init+0x189/0x270 [ 841.958556][T16323] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 841.964324][T16323] ? memcpy+0x3c/0x60 [ 841.968346][T16323] hwsim_new_radio_nl+0xab7/0xc90 [ 841.973416][T16323] genl_family_rcv_msg_doit+0x22f/0x350 [ 841.979004][T16323] ? end_current_label_crit_section+0x170/0x170 [ 841.985290][T16323] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 841.991229][T16323] ? bpf_lsm_capable+0x5/0x10 [ 841.995967][T16323] ? security_capable+0x85/0xb0 [ 842.000864][T16323] genl_rcv_msg+0x601/0x790 [ 842.005428][T16323] ? genl_bind+0x360/0x360 [ 842.009897][T16323] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 842.016278][T16323] netlink_rcv_skb+0x1ef/0x440 [ 842.021083][T16323] ? genl_bind+0x360/0x360 [ 842.025538][T16323] ? netlink_ack+0x1160/0x1160 [ 842.030343][T16323] ? down_read+0x1a8/0x2d0 [ 842.034787][T16323] genl_rcv+0x24/0x40 [ 842.038802][T16323] netlink_unicast+0x7ad/0x920 [ 842.043615][T16323] netlink_sendmsg+0x8ad/0xbd0 [ 842.048419][T16323] ? netlink_getsockopt+0x550/0x550 [ 842.053652][T16323] ? apparmor_socket_sendmsg+0x8a/0x330 [ 842.059235][T16323] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 842.064545][T16323] ? security_socket_sendmsg+0x7c/0xa0 [ 842.070032][T16323] ? netlink_getsockopt+0x550/0x550 [ 842.075268][T16323] ____sys_sendmsg+0x5ed/0x9a0 [ 842.080082][T16323] ? __sys_sendmsg_sock+0x30/0x30 [ 842.085140][T16323] ? __import_iovec+0x306/0x510 [ 842.090031][T16323] ? import_iovec+0x6f/0xa0 [ 842.094566][T16323] ___sys_sendmsg+0x2a2/0x360 [ 842.099284][T16323] ? __sys_sendmsg+0x2a0/0x2a0 [ 842.104125][T16323] __se_sys_sendmsg+0x1c3/0x2b0 [ 842.109014][T16323] ? __x64_sys_sendmsg+0x80/0x80 [ 842.113996][T16323] ? lockdep_hardirqs_on+0x94/0x140 [ 842.119221][T16323] do_syscall_64+0x4c/0xa0 [ 842.123668][T16323] ? clear_bhb_loop+0x60/0xb0 [ 842.128375][T16323] ? clear_bhb_loop+0x60/0xb0 [ 842.133098][T16323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.139029][T16323] RIP: 0033:0x7feb0499de59 [ 842.143480][T16323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.163120][T16323] RSP: 002b:00007feb057e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.171571][T16323] RAX: ffffffffffffffda RBX: 00007feb04c25fa0 RCX: 00007feb0499de59 [ 842.179574][T16323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 842.187600][T16323] RBP: 00007feb04a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 842.195599][T16323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.203596][T16323] R13: 00007feb04c26038 R14: 00007feb04c25fa0 R15: 00007ffd4709df58 [ 842.211606][T16323] [ 842.868240][T16347] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 842.892471][T16347] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3569'. [ 845.943160][T16362] netlink: 'syz.3.3573': attribute type 10 has an invalid length. [ 846.089998][T16365] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 846.301442][T16371] netlink: 'syz.3.3575': attribute type 11 has an invalid length. [ 846.324660][T16370] -1: renamed from syzkaller0 [ 846.978133][T16380] netlink: 'syz.0.3576': attribute type 10 has an invalid length. [ 848.844589][T16380] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.852937][T16380] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.931432][T16380] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.939626][T16380] bridge0: port 2(bridge_slave_1) entered listening state [ 848.950187][T16380] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.958134][T16380] bridge0: port 1(bridge_slave_0) entered listening state [ 849.050296][T16380] team0: Port device bridge0 added [ 849.066068][T16390] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3580'. [ 849.088178][T16398] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3583'. [ 849.093872][T16391] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3576'. [ 849.182724][T16398] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 849.195515][T16398] CPU: 0 PID: 16398 Comm: syz.3.3583 Not tainted syzkaller #0 [ 849.203060][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.213162][T16398] Call Trace: [ 849.216481][T16398] [ 849.219450][T16398] dump_stack_lvl+0x188/0x24e [ 849.224181][T16398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.230401][T16398] ? show_regs_print_info+0x12/0x12 [ 849.235669][T16398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.241891][T16398] ? dump_stack+0x5/0x12 [ 849.246194][T16398] sysfs_warn_dup+0x8a/0xa0 [ 849.250761][T16398] sysfs_do_create_link_sd+0xc0/0x110 [ 849.256198][T16398] device_add+0x83b/0x1050 [ 849.260688][T16398] wiphy_register+0x1d8b/0x2aa0 [ 849.265621][T16398] ? cfg80211_event_work+0x40/0x40 [ 849.270795][T16398] ? minstrel_ht_alloc+0x894/0xa20 [ 849.275969][T16398] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 849.282088][T16398] ieee80211_register_hw+0x2d48/0x39f0 [ 849.287626][T16398] ? ieee80211_register_hw+0xf61/0x39f0 [ 849.293237][T16398] ? ieee80211_register_hw+0xf61/0x39f0 [ 849.298864][T16398] ? ieee80211_tasklet_handler+0x20/0x20 [ 849.304553][T16398] ? lockdep_hardirqs_on+0x94/0x140 [ 849.309809][T16398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.316027][T16398] ? memset+0x1e/0x40 [ 849.320055][T16398] ? __hrtimer_init+0x189/0x270 [ 849.324957][T16398] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 849.330752][T16398] ? memcpy+0x3c/0x60 [ 849.334795][T16398] hwsim_new_radio_nl+0xab7/0xc90 [ 849.339900][T16398] genl_family_rcv_msg_doit+0x22f/0x350 [ 849.345507][T16398] ? end_current_label_crit_section+0x170/0x170 [ 849.351812][T16398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.358027][T16398] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 849.363999][T16398] ? bpf_lsm_capable+0x5/0x10 [ 849.368764][T16398] ? security_capable+0x85/0xb0 [ 849.373684][T16398] genl_rcv_msg+0x601/0x790 [ 849.378254][T16398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 849.384474][T16398] ? genl_bind+0x360/0x360 [ 849.388947][T16398] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 849.395346][T16398] netlink_rcv_skb+0x1ef/0x440 [ 849.400170][T16398] ? genl_bind+0x360/0x360 [ 849.404652][T16398] ? netlink_ack+0x1160/0x1160 [ 849.409512][T16398] ? down_read+0x1a8/0x2d0 [ 849.414004][T16398] genl_rcv+0x24/0x40 [ 849.418072][T16398] netlink_unicast+0x7ad/0x920 [ 849.422901][T16398] netlink_sendmsg+0x8ad/0xbd0 [ 849.427733][T16398] ? netlink_getsockopt+0x550/0x550 [ 849.432999][T16398] ? apparmor_socket_sendmsg+0x8a/0x330 [ 849.438615][T16398] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 849.443962][T16398] ? security_socket_sendmsg+0x7c/0xa0 [ 849.449495][T16398] ? netlink_getsockopt+0x550/0x550 [ 849.454757][T16398] ____sys_sendmsg+0x5ed/0x9a0 [ 849.459593][T16398] ? __sys_sendmsg_sock+0x30/0x30 [ 849.464671][T16398] ? __import_iovec+0x306/0x510 [ 849.469588][T16398] ? import_iovec+0x6f/0xa0 [ 849.474157][T16398] ___sys_sendmsg+0x2a2/0x360 [ 849.478903][T16398] ? __sys_sendmsg+0x2a0/0x2a0 [ 849.483780][T16398] __se_sys_sendmsg+0x1c3/0x2b0 [ 849.488687][T16398] ? __x64_sys_sendmsg+0x80/0x80 [ 849.493735][T16398] ? lockdep_hardirqs_on+0x94/0x140 [ 849.498992][T16398] do_syscall_64+0x4c/0xa0 [ 849.503460][T16398] ? clear_bhb_loop+0x60/0xb0 [ 849.508194][T16398] ? clear_bhb_loop+0x60/0xb0 [ 849.512938][T16398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 849.518894][T16398] RIP: 0033:0x7feb0499de59 [ 849.523361][T16398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.543020][T16398] RSP: 002b:00007feb057e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.551525][T16398] RAX: ffffffffffffffda RBX: 00007feb04c25fa0 RCX: 00007feb0499de59 [ 849.559554][T16398] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 849.567577][T16398] RBP: 00007feb04a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 849.575606][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.583628][T16398] R13: 00007feb04c26038 R14: 00007feb04c25fa0 R15: 00007ffd4709df58 [ 849.591669][T16398] [ 849.740115][T16401] netlink: 'syz.2.3584': attribute type 1 has an invalid length. [ 849.750424][T16401] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3584'. [ 849.776734][T16406] -1: renamed from syzkaller0 [ 850.228870][T16422] FAULT_INJECTION: forcing a failure. [ 850.228870][T16422] name failslab, interval 1, probability 0, space 0, times 0 [ 850.241837][T16422] CPU: 0 PID: 16422 Comm: syz.1.3594 Not tainted syzkaller #0 [ 850.249359][T16422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.259471][T16422] Call Trace: [ 850.262791][T16422] [ 850.265756][T16422] dump_stack_lvl+0x188/0x24e [ 850.270501][T16422] ? show_regs_print_info+0x12/0x12 [ 850.275758][T16422] ? load_image+0x410/0x410 [ 850.280350][T16422] ? verify_lock_unused+0x140/0x140 [ 850.285627][T16422] should_fail_ex+0x390/0x4c0 [ 850.290364][T16422] should_failslab+0x5/0x20 [ 850.294916][T16422] slab_pre_alloc_hook+0x59/0x300 [ 850.300001][T16422] kmem_cache_alloc+0x56/0x2f0 [ 850.304812][T16422] ? skb_clone+0x1e7/0x370 [ 850.309296][T16422] skb_clone+0x1e7/0x370 [ 850.313613][T16422] __netlink_deliver_tap+0x3e4/0x7e0 [ 850.318968][T16422] ? netlink_deliver_tap+0x2e/0x1b0 [ 850.324226][T16422] netlink_deliver_tap+0x19c/0x1b0 [ 850.329391][T16422] netlink_unicast+0x777/0x920 [ 850.334228][T16422] netlink_sendmsg+0x8ad/0xbd0 [ 850.339062][T16422] ? netlink_getsockopt+0x550/0x550 [ 850.344320][T16422] ? apparmor_socket_sendmsg+0x8a/0x330 [ 850.349903][T16422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 850.355232][T16422] ? security_socket_sendmsg+0x7c/0xa0 [ 850.360737][T16422] ? netlink_getsockopt+0x550/0x550 [ 850.365976][T16422] ____sys_sendmsg+0x5ed/0x9a0 [ 850.370777][T16422] ? __sys_sendmsg_sock+0x30/0x30 [ 850.375834][T16422] ? __import_iovec+0x306/0x510 [ 850.380728][T16422] ? import_iovec+0x6f/0xa0 [ 850.385268][T16422] ___sys_sendmsg+0x2a2/0x360 [ 850.389982][T16422] ? __sys_sendmsg+0x2a0/0x2a0 [ 850.394795][T16422] ? __lock_acquire+0x7c40/0x7c40 [ 850.399868][T16422] __se_sys_sendmsg+0x1c3/0x2b0 [ 850.404749][T16422] ? __x64_sys_sendmsg+0x80/0x80 [ 850.409730][T16422] ? lockdep_hardirqs_on+0x94/0x140 [ 850.414964][T16422] do_syscall_64+0x4c/0xa0 [ 850.419415][T16422] ? clear_bhb_loop+0x60/0xb0 [ 850.424133][T16422] ? clear_bhb_loop+0x60/0xb0 [ 850.428848][T16422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.434769][T16422] RIP: 0033:0x7f106379de59 [ 850.439212][T16422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.458846][T16422] RSP: 002b:00007f10645fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.467292][T16422] RAX: ffffffffffffffda RBX: 00007f1063a25fa0 RCX: 00007f106379de59 [ 850.475290][T16422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 850.483283][T16422] RBP: 00007f10645fe090 R08: 0000000000000000 R09: 0000000000000000 [ 850.491313][T16422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.499312][T16422] R13: 00007f1063a26038 R14: 00007f1063a25fa0 R15: 00007ffda9fba388 [ 850.507345][T16422] [ 851.766237][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 855.168043][T16453] FAULT_INJECTION: forcing a failure. [ 855.168043][T16453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.206097][T16453] CPU: 1 PID: 16453 Comm: syz.3.3604 Not tainted syzkaller #0 [ 855.213643][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.223734][T16453] Call Trace: [ 855.227038][T16453] [ 855.229999][T16453] dump_stack_lvl+0x188/0x24e [ 855.234715][T16453] ? show_regs_print_info+0x12/0x12 [ 855.239950][T16453] ? load_image+0x410/0x410 [ 855.244482][T16453] ? __might_fault+0xa6/0x120 [ 855.249195][T16453] should_fail_ex+0x390/0x4c0 [ 855.253907][T16453] copyin+0x1b/0x120 [ 855.257832][T16453] _copy_from_iter+0x447/0x1130 [ 855.262730][T16453] ? copyout_mc+0x110/0x110 [ 855.267264][T16453] ? __virt_addr_valid+0x188/0x540 [ 855.272409][T16453] ? __virt_addr_valid+0x188/0x540 [ 855.277554][T16453] ? __virt_addr_valid+0x467/0x540 [ 855.282699][T16453] ? __phys_addr_symbol+0x2b/0x70 [ 855.287760][T16453] ? __check_object_size+0x4f6/0xa70 [ 855.293073][T16453] netlink_sendmsg+0x755/0xbd0 [ 855.297878][T16453] ? netlink_getsockopt+0x550/0x550 [ 855.303112][T16453] ? apparmor_socket_sendmsg+0x8a/0x330 [ 855.308696][T16453] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 855.314007][T16453] ? security_socket_sendmsg+0x7c/0xa0 [ 855.319502][T16453] ? netlink_getsockopt+0x550/0x550 [ 855.324736][T16453] ____sys_sendmsg+0x5ed/0x9a0 [ 855.329540][T16453] ? __sys_sendmsg_sock+0x30/0x30 [ 855.334594][T16453] ? __import_iovec+0x306/0x510 [ 855.339489][T16453] ? import_iovec+0x6f/0xa0 [ 855.344031][T16453] ___sys_sendmsg+0x2a2/0x360 [ 855.348747][T16453] ? __sys_sendmsg+0x2a0/0x2a0 [ 855.353559][T16453] ? __lock_acquire+0x7c40/0x7c40 [ 855.358639][T16453] __se_sys_sendmsg+0x1c3/0x2b0 [ 855.363536][T16453] ? __x64_sys_sendmsg+0x80/0x80 [ 855.368517][T16453] ? lockdep_hardirqs_on+0x94/0x140 [ 855.373744][T16453] do_syscall_64+0x4c/0xa0 [ 855.378192][T16453] ? clear_bhb_loop+0x60/0xb0 [ 855.382906][T16453] ? clear_bhb_loop+0x60/0xb0 [ 855.387619][T16453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.393552][T16453] RIP: 0033:0x7feb0499de59 [ 855.398001][T16453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.417641][T16453] RSP: 002b:00007feb057e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.426092][T16453] RAX: ffffffffffffffda RBX: 00007feb04c25fa0 RCX: 00007feb0499de59 [ 855.434092][T16453] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 855.442093][T16453] RBP: 00007feb057e3090 R08: 0000000000000000 R09: 0000000000000000 [ 855.450091][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.458093][T16453] R13: 00007feb04c26038 R14: 00007feb04c25fa0 R15: 00007ffd4709df58 [ 855.466105][T16453] [ 857.166176][T16431] netlink: 'syz.1.3597': attribute type 2 has an invalid length. [ 857.173971][T16431] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3597'. [ 857.204977][T16459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3605'. [ 857.556760][T16468] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3609'. [ 857.578735][T16466] -1: renamed from syzkaller0 [ 857.688322][T16468] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 857.752099][T16468] CPU: 0 PID: 16468 Comm: syz.3.3609 Not tainted syzkaller #0 [ 857.759666][T16468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 857.769785][T16468] Call Trace: [ 857.773119][T16468] [ 857.776101][T16468] dump_stack_lvl+0x188/0x24e [ 857.780838][T16468] ? lockdep_hardirqs_on+0x94/0x140 [ 857.786182][T16468] ? show_regs_print_info+0x12/0x12 [ 857.791456][T16468] ? _printk+0x121/0x130 [ 857.795765][T16468] sysfs_warn_dup+0x8a/0xa0 [ 857.800332][T16468] sysfs_do_create_link_sd+0xc0/0x110 [ 857.805772][T16468] device_add+0x83b/0x1050 [ 857.810253][T16468] wiphy_register+0x1d8b/0x2aa0 [ 857.815191][T16468] ? cfg80211_event_work+0x40/0x40 [ 857.820459][T16468] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 857.826595][T16468] ieee80211_register_hw+0x2d48/0x39f0 [ 857.832139][T16468] ? ieee80211_register_hw+0xf61/0x39f0 [ 857.837745][T16468] ? ieee80211_register_hw+0xf61/0x39f0 [ 857.843360][T16468] ? ieee80211_tasklet_handler+0x20/0x20 [ 857.849048][T16468] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 857.855010][T16468] ? __debug_object_init+0xed/0x440 [ 857.860278][T16468] ? memset+0x1e/0x40 [ 857.864314][T16468] ? __hrtimer_init+0x189/0x270 [ 857.869232][T16468] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 857.875026][T16468] ? memcpy+0x3c/0x60 [ 857.879075][T16468] hwsim_new_radio_nl+0xab7/0xc90 [ 857.884183][T16468] genl_family_rcv_msg_doit+0x22f/0x350 [ 857.889807][T16468] ? end_current_label_crit_section+0x170/0x170 [ 857.896130][T16468] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 857.902116][T16468] ? bpf_lsm_capable+0x5/0x10 [ 857.906870][T16468] ? security_capable+0x85/0xb0 [ 857.911796][T16468] genl_rcv_msg+0x601/0x790 [ 857.916386][T16468] ? genl_bind+0x360/0x360 [ 857.920872][T16468] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 857.927294][T16468] netlink_rcv_skb+0x1ef/0x440 [ 857.932121][T16468] ? genl_bind+0x360/0x360 [ 857.936600][T16468] ? netlink_ack+0x1160/0x1160 [ 857.941438][T16468] ? down_read+0x1a8/0x2d0 [ 857.945905][T16468] genl_rcv+0x24/0x40 [ 857.949949][T16468] netlink_unicast+0x7ad/0x920 [ 857.954796][T16468] netlink_sendmsg+0x8ad/0xbd0 [ 857.959650][T16468] ? netlink_getsockopt+0x550/0x550 [ 857.964907][T16468] ? apparmor_socket_sendmsg+0x8a/0x330 [ 857.970608][T16468] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 857.975949][T16468] ? security_socket_sendmsg+0x7c/0xa0 [ 857.981467][T16468] ? netlink_getsockopt+0x550/0x550 [ 857.986735][T16468] ____sys_sendmsg+0x5ed/0x9a0 [ 857.991569][T16468] ? __sys_sendmsg_sock+0x30/0x30 [ 857.996657][T16468] ? __import_iovec+0x306/0x510 [ 858.001584][T16468] ? import_iovec+0x6f/0xa0 [ 858.006171][T16468] ___sys_sendmsg+0x2a2/0x360 [ 858.010909][T16468] ? __sys_sendmsg+0x2a0/0x2a0 [ 858.015943][T16468] __se_sys_sendmsg+0x1c3/0x2b0 [ 858.020891][T16468] ? __x64_sys_sendmsg+0x80/0x80 [ 858.025925][T16468] ? lockdep_hardirqs_on+0x94/0x140 [ 858.031192][T16468] do_syscall_64+0x4c/0xa0 [ 858.035710][T16468] ? clear_bhb_loop+0x60/0xb0 [ 858.040449][T16468] ? clear_bhb_loop+0x60/0xb0 [ 858.045306][T16468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.051265][T16468] RIP: 0033:0x7feb0499de59 [ 858.055731][T16468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.075403][T16468] RSP: 002b:00007feb057e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.083885][T16468] RAX: ffffffffffffffda RBX: 00007feb04c25fa0 RCX: 00007feb0499de59 [ 858.091923][T16468] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 858.099962][T16468] RBP: 00007feb04a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 858.107996][T16468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.116013][T16468] R13: 00007feb04c26038 R14: 00007feb04c25fa0 R15: 00007ffd4709df58 [ 858.124057][T16468] [ 858.338802][T16478] FAULT_INJECTION: forcing a failure. [ 858.338802][T16478] name failslab, interval 1, probability 0, space 0, times 0 [ 858.437113][T16478] CPU: 0 PID: 16478 Comm: syz.1.3613 Not tainted syzkaller #0 [ 858.444674][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 858.454777][T16478] Call Trace: [ 858.458086][T16478] [ 858.461054][T16478] dump_stack_lvl+0x188/0x24e [ 858.465769][T16478] ? show_regs_print_info+0x12/0x12 [ 858.471028][T16478] ? load_image+0x410/0x410 [ 858.475564][T16478] ? __lock_acquire+0x7c40/0x7c40 [ 858.480640][T16478] should_fail_ex+0x390/0x4c0 [ 858.485360][T16478] should_failslab+0x5/0x20 [ 858.489891][T16478] slab_pre_alloc_hook+0x59/0x300 [ 858.494963][T16478] ? bpf_test_init+0x9f/0x140 [ 858.499674][T16478] __kmem_cache_alloc_node+0x4f/0x270 [ 858.505083][T16478] ? bpf_test_init+0x9f/0x140 [ 858.509798][T16478] __kmalloc+0xa3/0x240 [ 858.513996][T16478] bpf_test_init+0x9f/0x140 [ 858.518529][T16478] bpf_prog_test_run_xdp+0x488/0xf80 [ 858.523848][T16478] ? __lock_acquire+0x7c40/0x7c40 [ 858.528925][T16478] ? dev_put+0x80/0x80 [ 858.533039][T16478] ? dev_put+0x80/0x80 [ 858.537138][T16478] bpf_prog_test_run+0x31c/0x390 [ 858.542124][T16478] __sys_bpf+0x62b/0x780 [ 858.546450][T16478] ? bpf_link_show_fdinfo+0x380/0x380 [ 858.551883][T16478] ? lock_chain_count+0x20/0x20 [ 858.556779][T16478] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 858.562798][T16478] __x64_sys_bpf+0x78/0x90 [ 858.567256][T16478] do_syscall_64+0x4c/0xa0 [ 858.571703][T16478] ? clear_bhb_loop+0x60/0xb0 [ 858.576426][T16478] ? clear_bhb_loop+0x60/0xb0 [ 858.581142][T16478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.587064][T16478] RIP: 0033:0x7f106379de59 [ 858.591502][T16478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.611137][T16478] RSP: 002b:00007f10645fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.619588][T16478] RAX: ffffffffffffffda RBX: 00007f1063a25fa0 RCX: 00007f106379de59 [ 858.627584][T16478] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 858.635583][T16478] RBP: 00007f10645fe090 R08: 0000000000000000 R09: 0000000000000000 [ 858.643593][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.651603][T16478] R13: 00007f1063a26038 R14: 00007f1063a25fa0 R15: 00007ffda9fba388 [ 858.659627][T16478] [ 858.924348][T16484] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3616'. [ 858.978940][T16490] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3627'. [ 859.035303][T16488] netlink: 'syz.0.3615': attribute type 2 has an invalid length. [ 859.055073][T16488] netlink: 'syz.0.3615': attribute type 8 has an invalid length. [ 859.074719][T16488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3615'. [ 859.099212][T16490] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 859.108712][T16490] CPU: 1 PID: 16490 Comm: syz.1.3627 Not tainted syzkaller #0 [ 859.116254][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 859.126373][T16490] Call Trace: [ 859.129696][T16490] [ 859.132675][T16490] dump_stack_lvl+0x188/0x24e [ 859.137429][T16490] ? show_regs_print_info+0x12/0x12 [ 859.142698][T16490] ? load_image+0x410/0x410 [ 859.147353][T16490] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.153488][T16490] ? __kasan_kmalloc+0x91/0xa0 [ 859.158320][T16490] sysfs_warn_dup+0x8a/0xa0 [ 859.162895][T16490] sysfs_do_create_link_sd+0xc0/0x110 [ 859.168334][T16490] device_add+0x83b/0x1050 [ 859.172831][T16490] wiphy_register+0x1d8b/0x2aa0 [ 859.177770][T16490] ? cfg80211_event_work+0x40/0x40 [ 859.182955][T16490] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 859.189082][T16490] ieee80211_register_hw+0x2d48/0x39f0 [ 859.194623][T16490] ? ieee80211_register_hw+0xf61/0x39f0 [ 859.200229][T16490] ? ieee80211_register_hw+0xf61/0x39f0 [ 859.205843][T16490] ? ieee80211_tasklet_handler+0x20/0x20 [ 859.211535][T16490] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 859.217485][T16490] ? __debug_object_init+0xed/0x440 [ 859.222752][T16490] ? memset+0x1e/0x40 [ 859.226832][T16490] ? __hrtimer_init+0x189/0x270 [ 859.231740][T16490] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 859.237541][T16490] hwsim_new_radio_nl+0xab7/0xc90 [ 859.242732][T16490] genl_family_rcv_msg_doit+0x22f/0x350 [ 859.248433][T16490] ? end_current_label_crit_section+0x170/0x170 [ 859.254761][T16490] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 859.260729][T16490] ? bpf_lsm_capable+0x5/0x10 [ 859.265465][T16490] ? security_capable+0x85/0xb0 [ 859.270389][T16490] genl_rcv_msg+0x601/0x790 [ 859.274965][T16490] ? genl_bind+0x360/0x360 [ 859.279445][T16490] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 859.285878][T16490] netlink_rcv_skb+0x1ef/0x440 [ 859.290695][T16490] ? genl_bind+0x360/0x360 [ 859.295147][T16490] ? netlink_ack+0x1160/0x1160 [ 859.299943][T16490] ? down_read+0x1a8/0x2d0 [ 859.304402][T16490] genl_rcv+0x24/0x40 [ 859.308451][T16490] netlink_unicast+0x7ad/0x920 [ 859.313281][T16490] netlink_sendmsg+0x8ad/0xbd0 [ 859.318142][T16490] ? netlink_getsockopt+0x550/0x550 [ 859.323502][T16490] ? apparmor_socket_sendmsg+0x8a/0x330 [ 859.329120][T16490] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 859.334463][T16490] ? security_socket_sendmsg+0x7c/0xa0 [ 859.339973][T16490] ? netlink_getsockopt+0x550/0x550 [ 859.345213][T16490] ____sys_sendmsg+0x5ed/0x9a0 [ 859.350031][T16490] ? __sys_sendmsg_sock+0x30/0x30 [ 859.355101][T16490] ? __import_iovec+0x306/0x510 [ 859.360004][T16490] ? import_iovec+0x6f/0xa0 [ 859.364548][T16490] ___sys_sendmsg+0x2a2/0x360 [ 859.369270][T16490] ? __sys_sendmsg+0x2a0/0x2a0 [ 859.374100][T16490] ? ktime_get+0x7b/0x270 [ 859.378485][T16490] __se_sys_sendmsg+0x1c3/0x2b0 [ 859.383375][T16490] ? __x64_sys_sendmsg+0x80/0x80 [ 859.388382][T16490] ? lockdep_hardirqs_on+0x94/0x140 [ 859.393617][T16490] do_syscall_64+0x4c/0xa0 [ 859.398068][T16490] ? clear_bhb_loop+0x60/0xb0 [ 859.402778][T16490] ? clear_bhb_loop+0x60/0xb0 [ 859.407495][T16490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.413421][T16490] RIP: 0033:0x7f106379de59 [ 859.417873][T16490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.437512][T16490] RSP: 002b:00007f10645fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.445965][T16490] RAX: ffffffffffffffda RBX: 00007f1063a25fa0 RCX: 00007f106379de59 [ 859.453976][T16490] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 859.461979][T16490] RBP: 00007f1063833e6f R08: 0000000000000000 R09: 0000000000000000 [ 859.469978][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.477978][T16490] R13: 00007f1063a26038 R14: 00007f1063a25fa0 R15: 00007ffda9fba388 [ 859.485998][T16490] [ 859.667654][T16493] netlink: 'syz.4.3617': attribute type 2 has an invalid length. [ 859.799472][T16493] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3617'. [ 863.783722][T16519] netlink: 'syz.3.3624': attribute type 10 has an invalid length. [ 863.800849][T16533] netlink: 'syz.1.3629': attribute type 10 has an invalid length. [ 864.084836][T16541] netlink: 'syz.1.3631': attribute type 21 has an invalid length. [ 864.127753][T16545] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3633'. [ 864.183628][T16539] netlink: 'syz.2.3632': attribute type 2 has an invalid length. [ 864.274815][T16539] netlink: 'syz.2.3632': attribute type 8 has an invalid length. [ 864.320464][T16539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3632'. [ 864.377116][T16545] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 864.409169][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 864.426016][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 864.489193][T16545] CPU: 1 PID: 16545 Comm: syz.0.3633 Not tainted syzkaller #0 [ 864.496759][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 864.506862][T16545] Call Trace: [ 864.510177][T16545] [ 864.513139][T16545] dump_stack_lvl+0x188/0x24e [ 864.517859][T16545] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 864.524050][T16545] ? show_regs_print_info+0x12/0x12 [ 864.529279][T16545] ? load_image+0x410/0x410 [ 864.533817][T16545] ? sysfs_warn_dup+0x61/0xa0 [ 864.538545][T16545] sysfs_warn_dup+0x8a/0xa0 [ 864.543087][T16545] sysfs_do_create_link_sd+0xc0/0x110 [ 864.548496][T16545] device_add+0x83b/0x1050 [ 864.552948][T16545] wiphy_register+0x1d8b/0x2aa0 [ 864.557869][T16545] ? __rtnl_unlock+0x14/0xe0 [ 864.562506][T16545] ? cfg80211_event_work+0x40/0x40 [ 864.567653][T16545] ? minstrel_ht_alloc+0x894/0xa20 [ 864.572808][T16545] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 864.578929][T16545] ieee80211_register_hw+0x2d48/0x39f0 [ 864.584468][T16545] ? ieee80211_register_hw+0xf61/0x39f0 [ 864.590050][T16545] ? ieee80211_register_hw+0xf61/0x39f0 [ 864.595635][T16545] ? ieee80211_tasklet_handler+0x20/0x20 [ 864.601301][T16545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 864.607233][T16545] ? __debug_object_init+0xed/0x440 [ 864.612475][T16545] ? memset+0x1e/0x40 [ 864.616489][T16545] ? __hrtimer_init+0x189/0x270 [ 864.621371][T16545] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 864.627138][T16545] ? memcpy+0x3c/0x60 [ 864.631150][T16545] hwsim_new_radio_nl+0xab7/0xc90 [ 864.636225][T16545] genl_family_rcv_msg_doit+0x22f/0x350 [ 864.641815][T16545] ? end_current_label_crit_section+0x170/0x170 [ 864.648101][T16545] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 864.654039][T16545] ? bpf_lsm_capable+0x5/0x10 [ 864.658748][T16545] ? security_capable+0x85/0xb0 [ 864.663676][T16545] genl_rcv_msg+0x601/0x790 [ 864.668228][T16545] ? genl_bind+0x360/0x360 [ 864.672680][T16545] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 864.679061][T16545] netlink_rcv_skb+0x1ef/0x440 [ 864.683868][T16545] ? genl_bind+0x360/0x360 [ 864.688332][T16545] ? netlink_ack+0x1160/0x1160 [ 864.693141][T16545] ? down_read+0x1a8/0x2d0 [ 864.697623][T16545] genl_rcv+0x24/0x40 [ 864.701640][T16545] netlink_unicast+0x7ad/0x920 [ 864.706450][T16545] netlink_sendmsg+0x8ad/0xbd0 [ 864.711265][T16545] ? netlink_getsockopt+0x550/0x550 [ 864.716511][T16545] ? netlink_getsockopt+0x550/0x550 [ 864.721752][T16545] ____sys_sendmsg+0x5ed/0x9a0 [ 864.726561][T16545] ? __sys_sendmsg_sock+0x30/0x30 [ 864.731620][T16545] ? __import_iovec+0x306/0x510 [ 864.736628][T16545] ? import_iovec+0x6f/0xa0 [ 864.741186][T16545] ___sys_sendmsg+0x2a2/0x360 [ 864.745915][T16545] ? __sys_sendmsg+0x2a0/0x2a0 [ 864.750746][T16545] ? lockdep_hardirqs_on+0x94/0x140 [ 864.756016][T16545] __se_sys_sendmsg+0x1c3/0x2b0 [ 864.760907][T16545] ? __x64_sys_sendmsg+0x80/0x80 [ 864.765910][T16545] ? lockdep_hardirqs_on+0x94/0x140 [ 864.771150][T16545] do_syscall_64+0x4c/0xa0 [ 864.775604][T16545] ? clear_bhb_loop+0x60/0xb0 [ 864.780312][T16545] ? clear_bhb_loop+0x60/0xb0 [ 864.785066][T16545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.790995][T16545] RIP: 0033:0x7f425e59de59 [ 864.795446][T16545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.815086][T16545] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.823549][T16545] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 864.831577][T16545] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 864.839607][T16545] RBP: 00007f425e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 864.847629][T16545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.855632][T16545] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 864.863653][T16545] [ 865.363264][T16552] netlink: 'syz.2.3637': attribute type 10 has an invalid length. [ 865.521898][T16552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.562073][T16552] team0: Port device batadv0 added [ 867.423642][T16570] netlink: 'syz.0.3641': attribute type 10 has an invalid length. [ 867.466794][T16570] team0: Device hsr_slave_0 failed to register rx_handler [ 867.582754][T16574] netlink: 'syz.2.3642': attribute type 10 has an invalid length. [ 867.861693][T16581] netlink: 'syz.3.3644': attribute type 1 has an invalid length. [ 867.968159][T16581] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3644'. [ 868.386971][T16593] netlink: 'syz.1.3648': attribute type 2 has an invalid length. [ 868.395240][T16593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3648'. [ 868.572869][T16602] FAULT_INJECTION: forcing a failure. [ 868.572869][T16602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.609843][T16602] CPU: 1 PID: 16602 Comm: syz.0.3653 Not tainted syzkaller #0 [ 868.617397][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.627498][T16602] Call Trace: [ 868.630869][T16602] [ 868.633841][T16602] dump_stack_lvl+0x188/0x24e [ 868.638581][T16602] ? show_regs_print_info+0x12/0x12 [ 868.643847][T16602] ? load_image+0x410/0x410 [ 868.648405][T16602] ? __lock_acquire+0x7c40/0x7c40 [ 868.653494][T16602] should_fail_ex+0x390/0x4c0 [ 868.658226][T16602] _copy_from_iter+0x1c0/0x1130 [ 868.663216][T16602] ? __lock_acquire+0x7c40/0x7c40 [ 868.668293][T16602] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 868.673715][T16602] ? copyout_mc+0x110/0x110 [ 868.678263][T16602] ? __virt_addr_valid+0x188/0x540 [ 868.683436][T16602] ? __virt_addr_valid+0x188/0x540 [ 868.688612][T16602] ? __virt_addr_valid+0x467/0x540 [ 868.693776][T16602] ? __check_object_size+0x4f6/0xa70 [ 868.699116][T16602] skb_copy_datagram_from_iter+0xee/0x6b0 [ 868.704916][T16602] ? skb_put+0x10e/0x200 [ 868.709213][T16602] tun_get_user+0xc41/0x3c20 [ 868.713872][T16602] ? rcu_read_unlock+0xa0/0xa0 [ 868.718731][T16602] ? tun_get+0x1c/0x2e0 [ 868.722941][T16602] ? __lock_acquire+0x7c40/0x7c40 [ 868.728027][T16602] ? tun_get+0x1c/0x2e0 [ 868.732239][T16602] tun_chr_write_iter+0x112/0x1f0 [ 868.737360][T16602] vfs_write+0x482/0x9a0 [ 868.741678][T16602] ? file_end_write+0x250/0x250 [ 868.746594][T16602] ? __fget_files+0x3fc/0x460 [ 868.751335][T16602] ? __fdget_pos+0x1d4/0x360 [ 868.755980][T16602] ? ksys_write+0x70/0x260 [ 868.760463][T16602] ksys_write+0x14d/0x260 [ 868.764857][T16602] ? __ia32_sys_read+0x80/0x80 [ 868.769689][T16602] ? lockdep_hardirqs_on+0x94/0x140 [ 868.774944][T16602] do_syscall_64+0x4c/0xa0 [ 868.779417][T16602] ? clear_bhb_loop+0x60/0xb0 [ 868.784131][T16602] ? clear_bhb_loop+0x60/0xb0 [ 868.788852][T16602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.794783][T16602] RIP: 0033:0x7f425e59de59 [ 868.799232][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.818871][T16602] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.827407][T16602] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 868.835427][T16602] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 868.843444][T16602] RBP: 00007f425f459090 R08: 0000000000000000 R09: 0000000000000000 [ 868.851447][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.859459][T16602] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 868.867490][T16602] [ 869.356686][T16617] validate_nla: 1 callbacks suppressed [ 869.356705][T16617] netlink: 'syz.3.3657': attribute type 1 has an invalid length. [ 869.388173][T16617] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3657'. [ 869.707958][T16622] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3659'. [ 869.743665][T16622] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 869.795691][T16622] CPU: 0 PID: 16622 Comm: syz.4.3659 Not tainted syzkaller #0 [ 869.803248][T16622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 869.813371][T16622] Call Trace: [ 869.816715][T16622] [ 869.819694][T16622] dump_stack_lvl+0x188/0x24e [ 869.824445][T16622] ? show_regs_print_info+0x12/0x12 [ 869.829713][T16622] ? load_image+0x410/0x410 [ 869.834291][T16622] sysfs_warn_dup+0x8a/0xa0 [ 869.838861][T16622] sysfs_do_create_link_sd+0xc0/0x110 [ 869.844302][T16622] device_add+0x83b/0x1050 [ 869.848793][T16622] wiphy_register+0x1d8b/0x2aa0 [ 869.853741][T16622] ? cfg80211_event_work+0x40/0x40 [ 869.858916][T16622] ? minstrel_ht_alloc+0x894/0xa20 [ 869.864086][T16622] ? strcmp+0x28/0xb0 [ 869.868130][T16622] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 869.874261][T16622] ieee80211_register_hw+0x2d48/0x39f0 [ 869.879795][T16622] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 869.886023][T16622] ? ieee80211_register_hw+0xf61/0x39f0 [ 869.891632][T16622] ? ieee80211_register_hw+0xf61/0x39f0 [ 869.897320][T16622] ? ieee80211_tasklet_handler+0x20/0x20 [ 869.903049][T16622] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 869.909014][T16622] ? __debug_object_init+0xed/0x440 [ 869.914294][T16622] ? memset+0x1e/0x40 [ 869.918365][T16622] ? __hrtimer_init+0x189/0x270 [ 869.923279][T16622] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 869.929105][T16622] ? memcpy+0x3c/0x60 [ 869.933159][T16622] hwsim_new_radio_nl+0xab7/0xc90 [ 869.938293][T16622] genl_family_rcv_msg_doit+0x22f/0x350 [ 869.943923][T16622] ? end_current_label_crit_section+0x170/0x170 [ 869.950240][T16622] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 869.956263][T16622] ? bpf_lsm_capable+0x5/0x10 [ 869.961009][T16622] ? security_capable+0x85/0xb0 [ 869.965936][T16622] genl_rcv_msg+0x601/0x790 [ 869.970521][T16622] ? genl_bind+0x360/0x360 [ 869.975011][T16622] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 869.981439][T16622] netlink_rcv_skb+0x1ef/0x440 [ 869.986267][T16622] ? genl_bind+0x360/0x360 [ 869.990760][T16622] ? netlink_ack+0x1160/0x1160 [ 869.995617][T16622] ? down_read+0x1a8/0x2d0 [ 870.000105][T16622] genl_rcv+0x24/0x40 [ 870.004155][T16622] netlink_unicast+0x7ad/0x920 [ 870.008997][T16622] netlink_sendmsg+0x8ad/0xbd0 [ 870.013829][T16622] ? __sanitizer_cov_trace_pc+0x53/0x60 [ 870.019562][T16622] ? netlink_getsockopt+0x550/0x550 [ 870.024875][T16622] ? apparmor_socket_sendmsg+0x8a/0x330 [ 870.030489][T16622] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 870.035843][T16622] ? security_socket_sendmsg+0x7c/0xa0 [ 870.041397][T16622] ? netlink_getsockopt+0x550/0x550 [ 870.046677][T16622] ____sys_sendmsg+0x5ed/0x9a0 [ 870.051521][T16622] ? __sys_sendmsg_sock+0x30/0x30 [ 870.056611][T16622] ? __import_iovec+0x306/0x510 [ 870.061540][T16622] ? import_iovec+0x6f/0xa0 [ 870.066110][T16622] ___sys_sendmsg+0x2a2/0x360 [ 870.070856][T16622] ? __sys_sendmsg+0x2a0/0x2a0 [ 870.075713][T16622] ? ktime_get+0x7b/0x270 [ 870.080131][T16622] __se_sys_sendmsg+0x1c3/0x2b0 [ 870.085052][T16622] ? __x64_sys_sendmsg+0x80/0x80 [ 870.090086][T16622] ? lockdep_hardirqs_on+0x94/0x140 [ 870.095342][T16622] do_syscall_64+0x4c/0xa0 [ 870.099815][T16622] ? clear_bhb_loop+0x60/0xb0 [ 870.104555][T16622] ? clear_bhb_loop+0x60/0xb0 [ 870.109292][T16622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.115247][T16622] RIP: 0033:0x7fe37559de59 [ 870.119715][T16622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.139386][T16622] RSP: 002b:00007fe37654c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.147864][T16622] RAX: ffffffffffffffda RBX: 00007fe375825fa0 RCX: 00007fe37559de59 [ 870.155891][T16622] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 870.163929][T16622] RBP: 00007fe375633e6f R08: 0000000000000000 R09: 0000000000000000 [ 870.171973][T16622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.178686][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.179973][T16622] R13: 00007fe375826038 R14: 00007fe375825fa0 R15: 00007ffd289dcd08 [ 870.186613][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.194275][T16622] [ 870.380895][T16624] netlink: 'syz.3.3660': attribute type 11 has an invalid length. [ 870.456586][T16624] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3660'. [ 870.467887][T16634] netlink: 'syz.1.3661': attribute type 10 has an invalid length. [ 870.516696][T16623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.691682][T16637] FAULT_INJECTION: forcing a failure. [ 870.691682][T16637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.741280][T16637] CPU: 1 PID: 16637 Comm: syz.2.3662 Not tainted syzkaller #0 [ 870.748841][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 870.758965][T16637] Call Trace: [ 870.762297][T16637] [ 870.765273][T16637] dump_stack_lvl+0x188/0x24e [ 870.770105][T16637] ? show_regs_print_info+0x12/0x12 [ 870.775361][T16637] ? load_image+0x410/0x410 [ 870.779922][T16637] ? __lock_acquire+0x7c40/0x7c40 [ 870.785014][T16637] ? snprintf+0xe5/0x140 [ 870.789313][T16637] should_fail_ex+0x390/0x4c0 [ 870.794060][T16637] _copy_to_user+0x2c/0x130 [ 870.798625][T16637] simple_read_from_buffer+0xe3/0x150 [ 870.804059][T16637] proc_fail_nth_read+0x1a6/0x220 [ 870.809152][T16637] ? proc_fault_inject_write+0x310/0x310 [ 870.814856][T16637] ? fsnotify_perm+0x248/0x550 [ 870.819698][T16637] ? proc_fault_inject_write+0x310/0x310 [ 870.825391][T16637] vfs_read+0x2db/0x960 [ 870.829621][T16637] ? kernel_read+0x1e0/0x1e0 [ 870.834276][T16637] ? __fget_files+0x28/0x460 [ 870.838927][T16637] ? __fget_files+0x3fc/0x460 [ 870.843675][T16637] ? __fdget_pos+0x2ae/0x360 [ 870.848330][T16637] ? ksys_read+0x70/0x260 [ 870.852733][T16637] ksys_read+0x14d/0x260 [ 870.857076][T16637] ? vfs_write+0x9a0/0x9a0 [ 870.861582][T16637] ? lockdep_hardirqs_on+0x94/0x140 [ 870.866844][T16637] do_syscall_64+0x4c/0xa0 [ 870.871316][T16637] ? clear_bhb_loop+0x60/0xb0 [ 870.876047][T16637] ? clear_bhb_loop+0x60/0xb0 [ 870.880789][T16637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.886760][T16637] RIP: 0033:0x7f2dbd35e68e [ 870.891234][T16637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 870.910877][T16637] RSP: 002b:00007f2dbe19ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 870.919324][T16637] RAX: ffffffffffffffda RBX: 00007f2dbe1a06c0 RCX: 00007f2dbd35e68e [ 870.927322][T16637] RDX: 000000000000000f RSI: 00007f2dbe1a00a0 RDI: 0000000000000006 [ 870.935321][T16637] RBP: 00007f2dbe1a0090 R08: 0000000000000000 R09: 0000000000000000 [ 870.943319][T16637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.951318][T16637] R13: 00007f2dbd626038 R14: 00007f2dbd625fa0 R15: 00007ffffa694de8 [ 870.959341][T16637] [ 871.473720][T16648] -1: renamed from syzkaller0 [ 872.391004][T16662] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 872.431450][T16662] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3671'. [ 872.663937][T16673] netlink: 'syz.3.3673': attribute type 2 has an invalid length. [ 872.675831][T16672] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3674'. [ 872.698746][T16673] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3673'. [ 872.791481][T16672] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 872.799905][T16672] CPU: 0 PID: 16672 Comm: syz.0.3674 Not tainted syzkaller #0 [ 872.807438][T16672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.817543][T16672] Call Trace: [ 872.820853][T16672] [ 872.823836][T16672] dump_stack_lvl+0x188/0x24e [ 872.828567][T16672] ? show_regs_print_info+0x12/0x12 [ 872.833809][T16672] ? load_image+0x410/0x410 [ 872.838359][T16672] sysfs_warn_dup+0x8a/0xa0 [ 872.842904][T16672] sysfs_do_create_link_sd+0xc0/0x110 [ 872.848340][T16672] device_add+0x83b/0x1050 [ 872.852801][T16672] wiphy_register+0x1d8b/0x2aa0 [ 872.857742][T16672] ? cfg80211_event_work+0x40/0x40 [ 872.862897][T16672] ? minstrel_ht_alloc+0x894/0xa20 [ 872.868061][T16672] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 872.874184][T16672] ieee80211_register_hw+0x2d48/0x39f0 [ 872.879718][T16672] ? ieee80211_register_hw+0xf61/0x39f0 [ 872.885317][T16672] ? ieee80211_register_hw+0xf61/0x39f0 [ 872.890919][T16672] ? ieee80211_tasklet_handler+0x20/0x20 [ 872.896636][T16672] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 872.902576][T16672] ? __debug_object_init+0xed/0x440 [ 872.907818][T16672] ? memset+0x1e/0x40 [ 872.911829][T16672] ? __hrtimer_init+0x189/0x270 [ 872.916721][T16672] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 872.922486][T16672] ? memcpy+0x3c/0x60 [ 872.926499][T16672] hwsim_new_radio_nl+0xab7/0xc90 [ 872.931579][T16672] genl_family_rcv_msg_doit+0x22f/0x350 [ 872.937167][T16672] ? end_current_label_crit_section+0x170/0x170 [ 872.943448][T16672] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 872.949384][T16672] ? bpf_lsm_capable+0x5/0x10 [ 872.954097][T16672] ? security_capable+0x85/0xb0 [ 872.958987][T16672] genl_rcv_msg+0x601/0x790 [ 872.963540][T16672] ? genl_bind+0x360/0x360 [ 872.967995][T16672] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 872.974374][T16672] netlink_rcv_skb+0x1ef/0x440 [ 872.979172][T16672] ? genl_bind+0x360/0x360 [ 872.983634][T16672] ? netlink_ack+0x1160/0x1160 [ 872.988444][T16672] ? down_read+0x1a8/0x2d0 [ 872.992889][T16672] genl_rcv+0x24/0x40 [ 872.996930][T16672] netlink_unicast+0x7ad/0x920 [ 873.001747][T16672] netlink_sendmsg+0x8ad/0xbd0 [ 873.006554][T16672] ? netlink_getsockopt+0x550/0x550 [ 873.011791][T16672] ? apparmor_socket_sendmsg+0x8a/0x330 [ 873.017375][T16672] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 873.022686][T16672] ? security_socket_sendmsg+0x7c/0xa0 [ 873.028176][T16672] ? netlink_getsockopt+0x550/0x550 [ 873.033414][T16672] ____sys_sendmsg+0x5ed/0x9a0 [ 873.038222][T16672] ? __sys_sendmsg_sock+0x30/0x30 [ 873.043292][T16672] ? __import_iovec+0x306/0x510 [ 873.048185][T16672] ? import_iovec+0x6f/0xa0 [ 873.052726][T16672] ___sys_sendmsg+0x2a2/0x360 [ 873.057443][T16672] ? __sys_sendmsg+0x2a0/0x2a0 [ 873.062259][T16672] ? percpu_counter_add_batch+0x51/0x150 [ 873.067971][T16672] __se_sys_sendmsg+0x1c3/0x2b0 [ 873.072861][T16672] ? __x64_sys_sendmsg+0x80/0x80 [ 873.077842][T16672] ? syscall_enter_from_user_mode+0x2a/0x80 [ 873.083767][T16672] do_syscall_64+0x4c/0xa0 [ 873.088222][T16672] ? clear_bhb_loop+0x60/0xb0 [ 873.092949][T16672] ? clear_bhb_loop+0x60/0xb0 [ 873.097663][T16672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.103591][T16672] RIP: 0033:0x7f425e59de59 [ 873.108039][T16672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.127693][T16672] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.136158][T16672] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 873.144164][T16672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 873.152168][T16672] RBP: 00007f425e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 873.160173][T16672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.168170][T16672] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 873.176212][T16672] [ 873.558427][T16683] netlink: 'syz.3.3678': attribute type 10 has an invalid length. [ 873.723035][T16682] netlink: 'syz.2.3677': attribute type 10 has an invalid length. [ 873.765650][T16686] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3679'. [ 873.965739][T16686] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 873.977979][T16686] CPU: 0 PID: 16686 Comm: syz.0.3679 Not tainted syzkaller #0 [ 873.985532][T16686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 873.995639][T16686] Call Trace: [ 873.998989][T16686] [ 874.001967][T16686] dump_stack_lvl+0x188/0x24e [ 874.006725][T16686] ? show_regs_print_info+0x12/0x12 [ 874.011991][T16686] ? load_image+0x410/0x410 [ 874.016569][T16686] sysfs_warn_dup+0x8a/0xa0 [ 874.021128][T16686] sysfs_do_create_link_sd+0xc0/0x110 [ 874.026561][T16686] device_add+0x83b/0x1050 [ 874.031052][T16686] wiphy_register+0x1d8b/0x2aa0 [ 874.035989][T16686] ? cfg80211_event_work+0x40/0x40 [ 874.041167][T16686] ? minstrel_ht_alloc+0x894/0xa20 [ 874.046345][T16686] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 874.052469][T16686] ieee80211_register_hw+0x2d48/0x39f0 [ 874.057990][T16686] ? ieee80211_register_hw+0xf61/0x39f0 [ 874.063587][T16686] ? ieee80211_register_hw+0xf61/0x39f0 [ 874.069172][T16686] ? ieee80211_tasklet_handler+0x20/0x20 [ 874.074851][T16686] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 874.081067][T16686] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 874.086831][T16686] ? memcpy+0x3c/0x60 [ 874.090848][T16686] hwsim_new_radio_nl+0xab7/0xc90 [ 874.095924][T16686] genl_family_rcv_msg_doit+0x22f/0x350 [ 874.101514][T16686] ? end_current_label_crit_section+0x170/0x170 [ 874.107805][T16686] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 874.113748][T16686] ? bpf_lsm_capable+0x5/0x10 [ 874.118464][T16686] ? security_capable+0x85/0xb0 [ 874.123368][T16686] genl_rcv_msg+0x601/0x790 [ 874.127910][T16686] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 874.134104][T16686] ? genl_bind+0x360/0x360 [ 874.138556][T16686] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 874.144927][T16686] ? lock_acquire+0x225/0x4a0 [ 874.149647][T16686] netlink_rcv_skb+0x1ef/0x440 [ 874.154477][T16686] ? genl_bind+0x360/0x360 [ 874.158953][T16686] ? netlink_ack+0x1160/0x1160 [ 874.163795][T16686] ? down_read+0x1a8/0x2d0 [ 874.168356][T16686] genl_rcv+0x24/0x40 [ 874.172390][T16686] netlink_unicast+0x7ad/0x920 [ 874.177209][T16686] netlink_sendmsg+0x8ad/0xbd0 [ 874.182021][T16686] ? aa_sock_msg_perm+0x94/0x150 [ 874.186998][T16686] ? netlink_getsockopt+0x550/0x550 [ 874.192264][T16686] ? apparmor_socket_sendmsg+0x8a/0x330 [ 874.197849][T16686] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 874.203185][T16686] ? security_socket_sendmsg+0x7c/0xa0 [ 874.208691][T16686] ? netlink_getsockopt+0x550/0x550 [ 874.213929][T16686] ____sys_sendmsg+0x5ed/0x9a0 [ 874.218750][T16686] ? __sys_sendmsg_sock+0x30/0x30 [ 874.223821][T16686] ? __import_iovec+0x306/0x510 [ 874.228719][T16686] ? import_iovec+0x6f/0xa0 [ 874.233259][T16686] ___sys_sendmsg+0x2a2/0x360 [ 874.237980][T16686] ? __sys_sendmsg+0x2a0/0x2a0 [ 874.242820][T16686] __se_sys_sendmsg+0x1c3/0x2b0 [ 874.247733][T16686] ? __x64_sys_sendmsg+0x80/0x80 [ 874.252723][T16686] ? syscall_enter_from_user_mode+0x2a/0x80 [ 874.258652][T16686] do_syscall_64+0x4c/0xa0 [ 874.263102][T16686] ? clear_bhb_loop+0x60/0xb0 [ 874.267815][T16686] ? clear_bhb_loop+0x60/0xb0 [ 874.272532][T16686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.278457][T16686] RIP: 0033:0x7f425e59de59 [ 874.282918][T16686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.302549][T16686] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.310989][T16686] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 874.318987][T16686] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 874.326995][T16686] RBP: 00007f425e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 874.334994][T16686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.342991][T16686] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 874.351012][T16686] [ 874.476521][T16690] -1: renamed from syzkaller0 [ 874.644803][T16698] netlink: 'syz.2.3682': attribute type 2 has an invalid length. [ 874.741418][T16698] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3682'. [ 875.673716][T16721] netlink: 'syz.2.3688': attribute type 1 has an invalid length. [ 875.689582][T16721] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3688'. [ 875.910928][T16723] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3690'. [ 876.046519][T16727] netlink: 'syz.2.3689': attribute type 2 has an invalid length. [ 876.057378][T16727] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3689'. [ 876.097705][T16723] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 876.125400][T16723] CPU: 1 PID: 16723 Comm: syz.3.3690 Not tainted syzkaller #0 [ 876.132955][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 876.143060][T16723] Call Trace: [ 876.146380][T16723] [ 876.149352][T16723] dump_stack_lvl+0x188/0x24e [ 876.154086][T16723] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 876.160299][T16723] ? show_regs_print_info+0x12/0x12 [ 876.165551][T16723] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 876.171789][T16723] sysfs_warn_dup+0x8a/0xa0 [ 876.176355][T16723] sysfs_do_create_link_sd+0xc0/0x110 [ 876.181791][T16723] device_add+0x83b/0x1050 [ 876.186301][T16723] wiphy_register+0x1d8b/0x2aa0 [ 876.191233][T16723] ? cfg80211_event_work+0x40/0x40 [ 876.196401][T16723] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 876.202623][T16723] ? rtnl_unlock+0x5/0x10 [ 876.207013][T16723] ieee80211_register_hw+0x2d48/0x39f0 [ 876.212552][T16723] ? ieee80211_register_hw+0xf61/0x39f0 [ 876.218177][T16723] ? ieee80211_register_hw+0xf61/0x39f0 [ 876.223817][T16723] ? ieee80211_tasklet_handler+0x20/0x20 [ 876.229528][T16723] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 876.235494][T16723] ? __debug_object_init+0xed/0x440 [ 876.240762][T16723] ? memset+0x1e/0x40 [ 876.244792][T16723] ? __hrtimer_init+0x189/0x270 [ 876.249706][T16723] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 876.255512][T16723] hwsim_new_radio_nl+0xab7/0xc90 [ 876.260636][T16723] genl_family_rcv_msg_doit+0x22f/0x350 [ 876.266252][T16723] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 876.272472][T16723] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 876.278436][T16723] ? bpf_lsm_capable+0x5/0x10 [ 876.283159][T16723] ? security_capable+0x85/0xb0 [ 876.288063][T16723] genl_rcv_msg+0x601/0x790 [ 876.292611][T16723] ? genl_bind+0x360/0x360 [ 876.297058][T16723] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 876.303436][T16723] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 876.309459][T16723] netlink_rcv_skb+0x1ef/0x440 [ 876.314260][T16723] ? genl_bind+0x360/0x360 [ 876.318717][T16723] ? netlink_ack+0x1160/0x1160 [ 876.323525][T16723] ? genl_bind+0x360/0x360 [ 876.327976][T16723] genl_rcv+0x24/0x40 [ 876.332001][T16723] netlink_unicast+0x7ad/0x920 [ 876.336807][T16723] netlink_sendmsg+0x8ad/0xbd0 [ 876.341602][T16723] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 876.347799][T16723] ? netlink_getsockopt+0x550/0x550 [ 876.353039][T16723] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 876.358392][T16723] ? security_socket_sendmsg+0x7c/0xa0 [ 876.363885][T16723] ? netlink_getsockopt+0x550/0x550 [ 876.369119][T16723] ____sys_sendmsg+0x5ed/0x9a0 [ 876.373927][T16723] ? __sys_sendmsg_sock+0x30/0x30 [ 876.378984][T16723] ? __import_iovec+0x306/0x510 [ 876.383891][T16723] ? import_iovec+0x6f/0xa0 [ 876.388446][T16723] ___sys_sendmsg+0x2a2/0x360 [ 876.393166][T16723] ? __sys_sendmsg+0x2a0/0x2a0 [ 876.397992][T16723] ? rcu_is_watching+0x11/0xa0 [ 876.402847][T16723] __se_sys_sendmsg+0x1c3/0x2b0 [ 876.407734][T16723] ? __x64_sys_sendmsg+0x80/0x80 [ 876.412717][T16723] ? lockdep_hardirqs_on+0x94/0x140 [ 876.417958][T16723] do_syscall_64+0x4c/0xa0 [ 876.422405][T16723] ? clear_bhb_loop+0x60/0xb0 [ 876.427124][T16723] ? clear_bhb_loop+0x60/0xb0 [ 876.431847][T16723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.437774][T16723] RIP: 0033:0x7feb0499de59 [ 876.442222][T16723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.461860][T16723] RSP: 002b:00007feb057e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.470305][T16723] RAX: ffffffffffffffda RBX: 00007feb04c25fa0 RCX: 00007feb0499de59 [ 876.478305][T16723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 876.486297][T16723] RBP: 00007feb04a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 876.494297][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.502291][T16723] R13: 00007feb04c26038 R14: 00007feb04c25fa0 R15: 00007ffd4709df58 [ 876.510302][T16723] [ 877.257769][T16744] netlink: 'syz.2.3694': attribute type 10 has an invalid length. [ 877.343107][T16745] -1: renamed from syzkaller0 [ 877.366092][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 877.512859][T16750] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3697'. [ 877.550441][T16750] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 877.586935][T16750] CPU: 0 PID: 16750 Comm: syz.3.3697 Not tainted syzkaller #0 [ 877.594477][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 877.604590][T16750] Call Trace: [ 877.607902][T16750] [ 877.610861][T16750] dump_stack_lvl+0x188/0x24e [ 877.615595][T16750] ? show_regs_print_info+0x12/0x12 [ 877.620851][T16750] ? load_image+0x410/0x410 [ 877.625395][T16750] sysfs_warn_dup+0x8a/0xa0 [ 877.629934][T16750] sysfs_do_create_link_sd+0xc0/0x110 [ 877.635344][T16750] device_add+0x83b/0x1050 [ 877.639804][T16750] wiphy_register+0x1d8b/0x2aa0 [ 877.644707][T16750] ? cfg80211_event_work+0x40/0x40 [ 877.649851][T16750] ? minstrel_ht_alloc+0x894/0xa20 [ 877.655009][T16750] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 877.661113][T16750] ieee80211_register_hw+0x2d48/0x39f0 [ 877.666622][T16750] ? ieee80211_register_hw+0xf61/0x39f0 [ 877.672202][T16750] ? ieee80211_register_hw+0xf61/0x39f0 [ 877.677785][T16750] ? ieee80211_tasklet_handler+0x20/0x20 [ 877.683460][T16750] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 877.689391][T16750] ? __debug_object_init+0xed/0x440 [ 877.694642][T16750] ? memset+0x1e/0x40 [ 877.698666][T16750] ? __hrtimer_init+0x189/0x270 [ 877.703560][T16750] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 877.709337][T16750] ? memcpy+0x3c/0x60 [ 877.713349][T16750] hwsim_new_radio_nl+0xab7/0xc90 [ 877.718436][T16750] genl_family_rcv_msg_doit+0x22f/0x350 [ 877.724018][T16750] ? end_current_label_crit_section+0x170/0x170 [ 877.730297][T16750] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 877.736236][T16750] ? bpf_lsm_capable+0x5/0x10 [ 877.740949][T16750] ? security_capable+0x85/0xb0 [ 877.745846][T16750] genl_rcv_msg+0x601/0x790 [ 877.750396][T16750] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 877.756593][T16750] ? genl_bind+0x360/0x360 [ 877.761040][T16750] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 877.767407][T16750] ? lock_acquire+0x225/0x4a0 [ 877.772125][T16750] netlink_rcv_skb+0x1ef/0x440 [ 877.776919][T16750] ? genl_bind+0x360/0x360 [ 877.781371][T16750] ? netlink_ack+0x1160/0x1160 [ 877.786174][T16750] ? down_read+0x1a8/0x2d0 [ 877.790642][T16750] genl_rcv+0x24/0x40 [ 877.794677][T16750] netlink_unicast+0x7ad/0x920 [ 877.799494][T16750] netlink_sendmsg+0x8ad/0xbd0 [ 877.804305][T16750] ? netlink_getsockopt+0x550/0x550 [ 877.809543][T16750] ? apparmor_socket_sendmsg+0x8a/0x330 [ 877.815126][T16750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 877.820443][T16750] ? security_socket_sendmsg+0x7c/0xa0 [ 877.825941][T16750] ? netlink_getsockopt+0x550/0x550 [ 877.831183][T16750] ____sys_sendmsg+0x5ed/0x9a0 [ 877.835990][T16750] ? __sys_sendmsg_sock+0x30/0x30 [ 877.841043][T16750] ? __import_iovec+0x306/0x510 [ 877.845935][T16750] ? import_iovec+0x6f/0xa0 [ 877.850476][T16750] ___sys_sendmsg+0x2a2/0x360 [ 877.855223][T16750] ? __sys_sendmsg+0x2a0/0x2a0 [ 877.860050][T16750] ? ktime_get+0x7b/0x270 [ 877.864446][T16750] __se_sys_sendmsg+0x1c3/0x2b0 [ 877.869337][T16750] ? ct_nmi_exit+0x145/0x1c0 [ 877.873969][T16750] ? __x64_sys_sendmsg+0x80/0x80 [ 877.878959][T16750] ? lockdep_hardirqs_on+0x94/0x140 [ 877.884195][T16750] do_syscall_64+0x4c/0xa0 [ 877.888646][T16750] ? clear_bhb_loop+0x60/0xb0 [ 877.893383][T16750] ? clear_bhb_loop+0x60/0xb0 [ 877.898093][T16750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.904017][T16750] RIP: 0033:0x7feb0499de59 [ 877.908463][T16750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.928103][T16750] RSP: 002b:00007feb057e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 877.936545][T16750] RAX: ffffffffffffffda RBX: 00007feb04c25fa0 RCX: 00007feb0499de59 [ 877.944544][T16750] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 877.952540][T16750] RBP: 00007feb04a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 877.960534][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.968530][T16750] R13: 00007feb04c26038 R14: 00007feb04c25fa0 R15: 00007ffd4709df58 [ 877.976544][T16750] [ 878.382119][T16759] netlink: 'syz.4.3699': attribute type 2 has an invalid length. [ 878.406018][T16759] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3699'. [ 878.447311][T16761] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 878.534863][T16761] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3700'. [ 878.999256][T16775] netlink: 'syz.0.3704': attribute type 2 has an invalid length. [ 879.090588][T16775] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3704'. [ 879.216892][T16769] -1: renamed from syzkaller0 [ 879.821134][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.828456][ C0] bridge0: topology change detected, propagating [ 879.837141][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.844439][ C0] bridge0: topology change detected, propagating [ 879.881903][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 880.927591][T16804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3716'. [ 881.097556][T16811] netlink: 'syz.2.3713': attribute type 10 has an invalid length. [ 881.130897][T16812] netlink: 'syz.1.3715': attribute type 10 has an invalid length. [ 881.176653][T16804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3716'. [ 881.323201][T16809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3716'. [ 881.396240][T16813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3716'. [ 881.710573][T16821] netlink: 'syz.2.3717': attribute type 2 has an invalid length. [ 881.779426][T16821] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3717'. [ 882.642140][T16837] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3723'. [ 882.805413][T16839] netlink: 'syz.2.3723': attribute type 29 has an invalid length. [ 882.846574][T16839] netlink: 'syz.2.3723': attribute type 29 has an invalid length. [ 882.877304][T16837] netlink: 'syz.2.3723': attribute type 29 has an invalid length. [ 883.343536][T16850] netlink: 'syz.2.3727': attribute type 10 has an invalid length. [ 883.761404][T16860] [ 883.764125][T16860] ============================= [ 883.769446][T16860] WARNING: suspicious RCU usage [ 883.774356][T16860] syzkaller #0 Not tainted [ 883.778889][T16860] ----------------------------- [ 883.783769][T16860] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 883.792362][T16860] [ 883.792362][T16860] other info that might help us debug this: [ 883.792362][T16860] [ 883.802733][T16860] [ 883.802733][T16860] rcu_scheduler_active = 2, debug_locks = 1 [ 883.810975][T16860] 1 lock held by syz.0.3733/16860: [ 883.816282][T16860] #0: ffffffff8cb2dce0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 883.826652][T16860] [ 883.826652][T16860] stack backtrace: [ 883.832671][T16860] CPU: 1 PID: 16860 Comm: syz.0.3733 Not tainted syzkaller #0 [ 883.840181][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.850285][T16860] Call Trace: [ 883.853601][T16860] [ 883.856569][T16860] dump_stack_lvl+0x188/0x24e [ 883.861309][T16860] ? show_regs_print_info+0x12/0x12 [ 883.866573][T16860] ? load_image+0x410/0x410 [ 883.871148][T16860] ? __lock_acquire+0x138a/0x7c40 [ 883.876268][T16860] lockdep_rcu_suspicious+0x1dd/0x300 [ 883.881711][T16860] get_callchain_entry+0x2a5/0x3b0 [ 883.886908][T16860] get_perf_callchain+0xc4/0x490 [ 883.891919][T16860] ? put_callchain_entry+0xb0/0xb0 [ 883.897097][T16860] ? plist_add+0x3d7/0x490 [ 883.901561][T16860] ? verify_lock_unused+0x140/0x140 [ 883.906800][T16860] __bpf_get_stack+0x2de/0x520 [ 883.911603][T16860] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 883.917794][T16860] ? __cant_sleep+0x220/0x220 [ 883.922497][T16860] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 883.928155][T16860] bpf_get_stack_raw_tp+0x189/0x1c0 [ 883.933395][T16860] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 883.938883][T16860] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 883.944288][T16860] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 883.949945][T16860] ? sock_gen_cookie+0x60/0x60 [ 883.954734][T16860] ? sock_gen_cookie+0x60/0x60 [ 883.959522][T16860] bpf_prog_test_run+0x31c/0x390 [ 883.964491][T16860] __sys_bpf+0x62b/0x780 [ 883.968778][T16860] ? bpf_link_show_fdinfo+0x380/0x380 [ 883.974197][T16860] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 883.980132][T16860] ? lock_chain_count+0x20/0x20 [ 883.985021][T16860] __x64_sys_bpf+0x78/0x90 [ 883.989470][T16860] do_syscall_64+0x4c/0xa0 [ 883.993917][T16860] ? clear_bhb_loop+0x60/0xb0 [ 883.998626][T16860] ? clear_bhb_loop+0x60/0xb0 [ 884.003335][T16860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.009254][T16860] RIP: 0033:0x7f425e59de59 [ 884.013697][T16860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.033324][T16860] RSP: 002b:00007f425f459028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 884.041765][T16860] RAX: ffffffffffffffda RBX: 00007f425e825fa0 RCX: 00007f425e59de59 [ 884.049765][T16860] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 884.057760][T16860] RBP: 00007f425e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 884.065750][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.073743][T16860] R13: 00007f425e826038 R14: 00007f425e825fa0 R15: 00007fffb913df28 [ 884.081754][T16860]