last executing test programs: 5.452006247s ago: executing program 0 (id=5599): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x8000, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001540)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x9}, 0x114967, 0x4, 0x9, 0x1, 0x0, 0x3, 0x1, 0x0, 0xffffffff}, 0x0, 0x5, r1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000", 0x8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e371a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 5.19615159s ago: executing program 3 (id=5600): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 4.888601486s ago: executing program 0 (id=5602): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x11, 0x0, 0x0, 0x2}, 0x48) 4.335282675s ago: executing program 3 (id=5603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000040000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1041a1, 0xc, 0x9, 0x1, 0x0, 0x300, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="65aa47c9c1e2b3cbfe6e28e38ec0d73a517f791c4c88fb65c29cfec5cf34ac5519a4f26d5977a7012e0b4ea893146ed4643c491fb0", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, &(0x7f0000000700)=r3}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xf46, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, 0x0, 0xffefffffffffffff, r1, 0x13) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="24540229d123238383e8aad09549675d746c0ebc99ff67fa", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000500000000000000080000950000000000ffe1000000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.207835292s ago: executing program 0 (id=5605): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x42, &(0x7f0000000040), 0xcf) close(r0) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000007}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r8) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r10, 0x29, 0x18, 0x0, 0xfcd8) sendmsg(r10, &(0x7f00000016c0)={&(0x7f0000001300)=@generic={0x1f, "e4509a8a53e08097b46c5853dcd7e2c2d2f5d7dbfbd93ce4328d97da84f440e452eb9336fe8ba370d0301357a60f3459b44e97b589eb032a1454d05dc957776ddfb563695535af6e0550ff0423ab5d4eea5c117fccdbe6944d3e2bf7f3729a3fbb6d1441586ff98a380be6fc7766a1083d89cb25a3876ad522b70b4f2b34"}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001380)="aad8475171e08fd6eeebc1db51cdfc9bf0e96e08c338db47613b0dda4981c16a60a8ea1350388d01cf6ae94196b6118100ee68deee2492ef4e623b2cf89976702f19e99359fc196f798e112d21b9089bee36a380ac84063e9443cc47284d5189e38a1216cee94b43d662c976665eb4238e13773b686e8326ce10fa4312015ab967d6ef7a582cfb3e5d8838aaf447cd7aa0133792eb7e29dc0063f00d38954bf8477cf385b9e5f190d35f0ebc46911c409ddc2cf9153e28a21925d9514720945a8ab6d3b9830e5b0492869906ca83a6aeb8", 0xd1}, {&(0x7f0000001480)="d6741ab2e06d3ab42172d79472cb629fe635ed5e5a6b64ce0004fa482bc5400285078624f9268a9b3ca74b5d6f6d94fbc58e54d6ed7661b610d27010bfa32c810f37db6e65f89d4fd39b85b41c0ddf1eca781bb7f8e4578fa2967b6e4dc8b2343c99bb7a875951088f8e38fb74a01531b47d17aef8121ca09c5daa95564a54e9b1162de0a126f35a123c47aa0772d983098121518b6b1ffa5eec75e28b52ac8ac629bb75272362ee541776e40dbdb63669847b326454ad57dfe1776141cefac9e57384fba947f98fb4e64941c703f5b0f5050d28", 0xd4}, {&(0x7f0000001580)="cfcbbd13cccb0c2eccc13e76035663", 0xf}, {&(0x7f00000015c0)="543e6dac34ca0d2f1dd334f074dd0b7c9d6e880a92bb15594a64fd2d745351eb1a1d310199922a8942cd6e8eb750fd861749b2904c0747d274ccc8e24fab4920ec983046b668b0d3b51addcb085ae3508b3e01e75a71be0f1a5eb1a045edcf96c635da66f5539a875f37e0921055eb392fac0580f7f3736c09a312aa6b7e974a0faabdc6bcc23c6c4780b7f1eefb5945185a", 0x92}], 0x4}, 0x800) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11e7a, 0x4, 0x20007, 0x4, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) 4.04523491s ago: executing program 2 (id=5606): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000000000000a9f38b"], 0x0, 0x2a}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f5590a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x2000000000000132, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x2000}, {0x0, 0x0, 0xb, 0xc}], 0x10, 0x100}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x4000080) close(r1) 3.798766963s ago: executing program 3 (id=5607): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000804) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7d, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10f) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000011000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000010) 3.528014077s ago: executing program 1 (id=5609): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000028000c3a000014100000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x95, &(0x7f0000000600)=""/149, 0x1e00, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x24) socket$kcm(0xa, 0x922000000003, 0x11) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000028000c3a000014100000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x95, &(0x7f0000000600)=""/149, 0x1e00, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x24) (async) 3.47417328s ago: executing program 1 (id=5610): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c45", 0xc}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e", 0x69}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='b *', @ANYRESOCT], 0xe) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x107010, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.960622136s ago: executing program 2 (id=5611): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x8000, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001540)={0x3, 0x80, 0xeb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x9}, 0x114967, 0x4, 0x9, 0x1, 0x0, 0x3, 0x1, 0x0, 0xffffffff}, 0x0, 0x5, r1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000", 0x8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e371a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 1.220265677s ago: executing program 1 (id=5612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x8000}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x260040, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000340)=0x1) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c252001001000000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a5e64733efec44b27595478dca85fdeb13ade695f66fe0c3305a14416765b292d7b6bb393702646bed4e38a6270f067179a2ce22409f97b49abb64b21cf4c02b08a9fa08852e62ca7577baa8562766c1fea39ef882311ef7514f0", @ANYRES32=r3, @ANYRES64=r0], 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$kcm(r4, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x800}) 1.191320698s ago: executing program 0 (id=5613): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 1.190743738s ago: executing program 2 (id=5614): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x1f4, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @noop, @end, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) 1.16366455s ago: executing program 3 (id=5615): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000a00)='syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10057) 1.060084035s ago: executing program 1 (id=5616): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xffffffff, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xffffffff, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) 979.991039ms ago: executing program 2 (id=5617): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="741407df9a5c4a4543ed204e9225b5f27f5935f2690d6247c3e3edc77a913063c46f98bd8ed83f45c6ff4508f4fe1598253236a2e06e026d8d77d4f747ce8af7500faccd1dae015a20498617761e606424f2bd291f70cf8fd0ca1f8ff881ede79da3dc01c71be2a771f99ad75a0f8fd98d17db812e60555c1468a7b9bce699982325a0af6a7879ecb54629ac02199928c1", @ANYRES32=0x1, @ANYBLOB="000000000012000180565b88b86df24e0080000046766b8c3f3ac034a87876095bb72a361bb62dad34b6dd5936bbd36e05ba564e704084b69dad707deaf1e87a4758638e27e7a69b9f21a4a5127839b5ece8b69f1165000cbf9820e04e5a1830a5165b96ab4d137625", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8001}, 0x40, 0x6, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x280f1269, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x3, 0x200}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r3, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r5, &(0x7f0000000300), 0x12) openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) 436.622517ms ago: executing program 1 (id=5618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000480)=r2, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x80}, {0x40, 0x0, 0x0, 0x3}, {0x3, 0xc, 0x0, 0x100b100}]}) 308.293274ms ago: executing program 0 (id=5619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x21, 0x40, 0xfffff008}, {0x6, 0x6, 0x7, 0x400000e5}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'rose0\x00', 0x112}) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x6) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x21, 0x40, 0xfffff008}, {0x6, 0x6, 0x7, 0x400000e5}]}) (async) 212.037909ms ago: executing program 2 (id=5620): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c45", 0xc}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e", 0x69}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='b *', @ANYRESOCT], 0xe) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x107010, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 211.624719ms ago: executing program 3 (id=5621): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x407}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 191.07334ms ago: executing program 1 (id=5622): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89", 0xf}], 0x1}, 0x0) sendmsg$inet(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40010100) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10a602, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRESOCT], 0xe) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x107010, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES8=r4, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c018"], 0x230}, 0x8042) 62.068907ms ago: executing program 3 (id=5623): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000804) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7d, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10f) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000011000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000010) 3.95645ms ago: executing program 0 (id=5624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x8000}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x260040, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000340)=0x1) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c252001001000000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a5e64733efec44b27595478dca85fdeb13ade695f66fe0c3305a14416765b292d7b6bb393702646bed4e38a6270f067179a2ce22409f97b49abb64b21cf4c02b08a9fa08852e62ca7577baa8562766c1fea39ef882311ef7514f0", @ANYRES32=r3, @ANYRES64=r0], 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$kcm(r4, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x800}) 0s ago: executing program 2 (id=5625): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000000000), &(0x7f0000000000), 0xe72}, 0x2c) kernel console output (not intermixed with test programs): ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.552785][T22358] RSP: 002b:00007fe2f7108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.561247][T22358] RAX: ffffffffffffffda RBX: 00007fe2f6415fa0 RCX: 00007fe2f619cdd9 [ 993.569257][T22358] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006 [ 993.577290][T22358] RBP: 00007fe2f7108090 R08: 0000000000000000 R09: 0000000000000000 [ 993.585314][T22358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.593314][T22358] R13: 00007fe2f6416038 R14: 00007fe2f6415fa0 R15: 00007ffe287828a8 [ 993.601362][T22358] [ 993.707736][T22358] mac80211_hwsim hwsim123 wlan1: entered allmulticast mode [ 994.929821][T22381] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 994.954886][T22381] CPU: 1 PID: 22381 Comm: syz.0.5389 Not tainted syzkaller #0 [ 994.962536][T22381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 994.972636][T22381] Call Trace: [ 994.975958][T22381] [ 994.978932][T22381] dump_stack_lvl+0x18c/0x250 [ 994.983674][T22381] ? show_regs_print_info+0x20/0x20 [ 994.988928][T22381] ? load_image+0x420/0x420 [ 994.993503][T22381] sysfs_warn_dup+0x8e/0xa0 [ 994.998059][T22381] sysfs_do_create_link_sd+0xc0/0x110 [ 995.003483][T22381] device_add_class_symlinks+0x1cf/0x240 [ 995.009180][T22381] device_add+0x507/0xc20 [ 995.013566][T22381] wiphy_register+0x1dad/0x2ae0 [ 995.018512][T22381] ? cfg80211_event_work+0x40/0x40 [ 995.023677][T22381] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 995.029911][T22381] ieee80211_register_hw+0x3464/0x4250 [ 995.035487][T22381] ? ieee80211_tasklet_handler+0x20/0x20 [ 995.041176][T22381] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 995.047219][T22381] ? __debug_object_init+0xec/0x450 [ 995.052487][T22381] ? __asan_memset+0x22/0x40 [ 995.057132][T22381] ? __hrtimer_init+0x186/0x270 [ 995.062026][T22381] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 995.067851][T22381] ? mac80211_hwsim_free+0x220/0x220 [ 995.073281][T22381] ? rcu_is_watching+0x15/0xb0 [ 995.078107][T22381] ? kstrndup+0xbd/0x140 [ 995.082437][T22381] hwsim_new_radio_nl+0xdc9/0x1a90 [ 995.087603][T22381] ? __nla_validate+0x50/0x50 [ 995.092367][T22381] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 995.098762][T22381] ? __nla_parse+0x40/0x50 [ 995.103223][T22381] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 995.109593][T22381] genl_family_rcv_msg_doit+0x211/0x310 [ 995.115194][T22381] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 995.121131][T22381] ? bpf_lsm_capable+0x9/0x10 [ 995.125853][T22381] ? security_capable+0x89/0xb0 [ 995.130739][T22381] genl_rcv_msg+0x619/0x7a0 [ 995.135365][T22381] ? genl_bind+0x360/0x360 [ 995.139808][T22381] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 995.146160][T22381] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 995.152793][T22381] netlink_rcv_skb+0x241/0x4d0 [ 995.157587][T22381] ? genl_bind+0x360/0x360 [ 995.162068][T22381] ? netlink_ack+0x1180/0x1180 [ 995.166886][T22381] ? __lock_acquire+0x7d40/0x7d40 [ 995.171966][T22381] ? down_read+0x1ac/0x2e0 [ 995.176439][T22381] genl_rcv+0x28/0x40 [ 995.180453][T22381] netlink_unicast+0x751/0x8d0 [ 995.185266][T22381] netlink_sendmsg+0x8d0/0xbf0 [ 995.190062][T22381] ? lockdep_hardirqs_on+0x98/0x150 [ 995.195295][T22381] ? netlink_getsockopt+0x590/0x590 [ 995.200530][T22381] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 995.205842][T22381] ? security_socket_sendmsg+0x80/0xa0 [ 995.211328][T22381] ? netlink_getsockopt+0x590/0x590 [ 995.216560][T22381] ____sys_sendmsg+0x5ba/0x960 [ 995.221359][T22381] ? __asan_memset+0x22/0x40 [ 995.225979][T22381] ? __sys_sendmsg_sock+0x30/0x30 [ 995.231045][T22381] ? __import_iovec+0x5f2/0x850 [ 995.235945][T22381] ? import_iovec+0x73/0xa0 [ 995.240474][T22381] ___sys_sendmsg+0x2a6/0x360 [ 995.245181][T22381] ? __sys_sendmsg+0x2a0/0x2a0 [ 995.249992][T22381] ? trace_call_bpf+0xc3/0x6c0 [ 995.254790][T22381] ? trace_call_bpf+0xc3/0x6c0 [ 995.259586][T22381] ? trace_call_bpf+0xc3/0x6c0 [ 995.264432][T22381] __se_sys_sendmsg+0x1c2/0x2b0 [ 995.269324][T22381] ? __x64_sys_sendmsg+0x80/0x80 [ 995.274315][T22381] ? lockdep_hardirqs_on+0x98/0x150 [ 995.279577][T22381] do_syscall_64+0x55/0xa0 [ 995.284015][T22381] ? clear_bhb_loop+0x40/0x90 [ 995.288734][T22381] ? clear_bhb_loop+0x40/0x90 [ 995.293460][T22381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.299399][T22381] RIP: 0033:0x7fbb9b39cdd9 [ 995.303842][T22381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.323488][T22381] RSP: 002b:00007fbb9c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 995.331928][T22381] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39cdd9 [ 995.339927][T22381] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 995.347929][T22381] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 995.355930][T22381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.363934][T22381] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffd4e2844a8 [ 995.371966][T22381] [ 995.393359][T20085] Bluetooth: hci0: command 0x0406 tx timeout [ 996.195930][T22388] FAULT_INJECTION: forcing a failure. [ 996.195930][T22388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.259470][T22388] CPU: 0 PID: 22388 Comm: syz.2.5392 Not tainted syzkaller #0 [ 996.267132][T22388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 996.277224][T22388] Call Trace: [ 996.280545][T22388] [ 996.283510][T22388] dump_stack_lvl+0x18c/0x250 [ 996.288249][T22388] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 996.294457][T22388] ? show_regs_print_info+0x20/0x20 [ 996.299719][T22388] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 996.305947][T22388] should_fail_ex+0x39d/0x4d0 [ 996.310712][T22388] _copy_to_user+0x2f/0xa0 [ 996.315208][T22388] bpf_test_finish+0x25a/0x650 [ 996.320024][T22388] ? convert___skb_to_skb+0x590/0x590 [ 996.325450][T22388] ? convert_skb_to___skb+0x420/0x420 [ 996.330890][T22388] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 996.336330][T22388] ? cpu_online+0x60/0x60 [ 996.340705][T22388] bpf_prog_test_run+0x321/0x390 [ 996.345701][T22388] __sys_bpf+0x49d/0x890 [ 996.349992][T22388] ? bpf_link_show_fdinfo+0x390/0x390 [ 996.355432][T22388] ? lock_chain_count+0x20/0x20 [ 996.360360][T22388] __x64_sys_bpf+0x7c/0x90 [ 996.364831][T22388] do_syscall_64+0x55/0xa0 [ 996.369287][T22388] ? clear_bhb_loop+0x40/0x90 [ 996.374019][T22388] ? clear_bhb_loop+0x40/0x90 [ 996.378756][T22388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.384698][T22388] RIP: 0033:0x7fa4ee19cdd9 [ 996.389151][T22388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.408898][T22388] RSP: 002b:00007fa4ef117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 996.417368][T22388] RAX: ffffffffffffffda RBX: 00007fa4ee415fa0 RCX: 00007fa4ee19cdd9 [ 996.425386][T22388] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 996.433401][T22388] RBP: 00007fa4ef117090 R08: 0000000000000000 R09: 0000000000000000 [ 996.441415][T22388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.449431][T22388] R13: 00007fa4ee416038 R14: 00007fa4ee415fa0 R15: 00007ffd816cc688 [ 996.457475][T22388] [ 996.779335][T22399] validate_nla: 10 callbacks suppressed [ 996.779356][T22399] netlink: 'syz.1.5394': attribute type 9 has an invalid length. [ 996.865025][T22399] __nla_validate_parse: 8 callbacks suppressed [ 996.865043][T22399] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5394'. [ 997.030714][T22396] netlink: 'syz.1.5394': attribute type 9 has an invalid length. [ 997.044190][T22396] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5394'. [ 997.181021][T22402] netlink: 'syz.0.5395': attribute type 22 has an invalid length. [ 997.547551][T22409] netlink: 'syz.3.5397': attribute type 28 has an invalid length. [ 997.562002][T22409] netlink: 'syz.3.5397': attribute type 29 has an invalid length. [ 997.590812][T22409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5397'. [ 997.655764][T22412] netlink: 'syz.0.5398': attribute type 2 has an invalid length. [ 997.718067][T22412] netlink: 'syz.0.5398': attribute type 1 has an invalid length. [ 997.775011][T22412] netlink: 'syz.0.5398': attribute type 1 has an invalid length. [ 997.792152][T22412] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5398'. [ 998.158379][T22423] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5402'. [ 998.173334][T22423] netlink: 22828 bytes leftover after parsing attributes in process `syz.0.5402'. [ 998.233537][T22424] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5403'. [ 998.260264][T22424] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.5403'. [ 998.272110][T22424] tipc: Started in network mode [ 998.326561][T22424] tipc: Node identity d, cluster identity 56 [ 998.333123][T22424] tipc: Node number set to 13 [ 998.744231][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5407'. [ 999.036473][T22449] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.5409'. [ 999.109481][T22450] À: port 1(vlan0) entered blocking state [ 999.121388][T22450] À: port 1(vlan0) entered disabled state [ 999.128946][T22450] vlan0: entered allmulticast mode [ 999.151966][T22450] veth0_vlan: entered allmulticast mode [ 999.163477][T22450] vlan0: entered promiscuous mode [ 999.176501][T22452] netlink: 'syz.0.5411': attribute type 2 has an invalid length. [ 999.205066][T22452] netlink: 'syz.0.5411': attribute type 1 has an invalid length. [ 999.737495][T22456] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 999.754747][T22456] CPU: 1 PID: 22456 Comm: syz.0.5413 Not tainted syzkaller #0 [ 999.762388][T22456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.772552][T22456] Call Trace: [ 999.775911][T22456] [ 999.778887][T22456] dump_stack_lvl+0x18c/0x250 [ 999.783646][T22456] ? show_regs_print_info+0x20/0x20 [ 999.788920][T22456] ? load_image+0x420/0x420 [ 999.793494][T22456] sysfs_warn_dup+0x8e/0xa0 [ 999.798063][T22456] sysfs_do_create_link_sd+0xc0/0x110 [ 999.803494][T22456] device_add_class_symlinks+0x1cf/0x240 [ 999.809207][T22456] device_add+0x507/0xc20 [ 999.813604][T22456] wiphy_register+0x1dad/0x2ae0 [ 999.818554][T22456] ? cfg80211_event_work+0x40/0x40 [ 999.823738][T22456] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 999.829874][T22456] ieee80211_register_hw+0x3464/0x4250 [ 999.835418][T22456] ? ieee80211_tasklet_handler+0x20/0x20 [ 999.841286][T22456] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 999.847257][T22456] ? __debug_object_init+0xec/0x450 [ 999.852539][T22456] ? __asan_memset+0x22/0x40 [ 999.857191][T22456] ? __hrtimer_init+0x186/0x270 [ 999.862108][T22456] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 999.867913][T22456] ? mac80211_hwsim_free+0x220/0x220 [ 999.873246][T22456] ? rcu_is_watching+0x15/0xb0 [ 999.878072][T22456] ? kstrndup+0xbd/0x140 [ 999.882375][T22456] hwsim_new_radio_nl+0xdc9/0x1a90 [ 999.887523][T22456] ? __nla_validate+0x50/0x50 [ 999.892243][T22456] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 999.898611][T22456] ? __nla_parse+0x40/0x50 [ 999.903154][T22456] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 999.909543][T22456] genl_family_rcv_msg_doit+0x211/0x310 [ 999.915120][T22456] ? end_current_label_crit_section+0x170/0x170 [ 999.921393][T22456] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 999.927321][T22456] ? bpf_lsm_capable+0x9/0x10 [ 999.932021][T22456] ? security_capable+0x89/0xb0 [ 999.936912][T22456] genl_rcv_msg+0x619/0x7a0 [ 999.941446][T22456] ? genl_bind+0x360/0x360 [ 999.945884][T22456] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 999.952237][T22456] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 999.958867][T22456] ? ref_tracker_free+0x690/0x840 [ 999.963952][T22456] netlink_rcv_skb+0x241/0x4d0 [ 999.968753][T22456] ? genl_bind+0x360/0x360 [ 999.973196][T22456] ? netlink_ack+0x1180/0x1180 [ 999.978006][T22456] ? __lock_acquire+0x7d40/0x7d40 [ 999.983087][T22456] ? down_read+0x1ac/0x2e0 [ 999.987530][T22456] genl_rcv+0x28/0x40 [ 999.991568][T22456] netlink_unicast+0x751/0x8d0 [ 999.996375][T22456] netlink_sendmsg+0x8d0/0xbf0 [ 1000.001183][T22456] ? netlink_getsockopt+0x590/0x590 [ 1000.006424][T22456] ? aa_sock_msg_perm+0x94/0x150 [ 1000.011387][T22456] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1000.016700][T22456] ? security_socket_sendmsg+0x80/0xa0 [ 1000.022195][T22456] ? netlink_getsockopt+0x590/0x590 [ 1000.027448][T22456] ____sys_sendmsg+0x5ba/0x960 [ 1000.032251][T22456] ? __asan_memset+0x22/0x40 [ 1000.036883][T22456] ? __sys_sendmsg_sock+0x30/0x30 [ 1000.041941][T22456] ? __import_iovec+0x5f2/0x850 [ 1000.046831][T22456] ? import_iovec+0x73/0xa0 [ 1000.051367][T22456] ___sys_sendmsg+0x2a6/0x360 [ 1000.056078][T22456] ? __sys_sendmsg+0x2a0/0x2a0 [ 1000.060920][T22456] __se_sys_sendmsg+0x1c2/0x2b0 [ 1000.065809][T22456] ? __x64_sys_sendmsg+0x80/0x80 [ 1000.070798][T22456] ? lockdep_hardirqs_on+0x98/0x150 [ 1000.076044][T22456] do_syscall_64+0x55/0xa0 [ 1000.080538][T22456] ? clear_bhb_loop+0x40/0x90 [ 1000.085242][T22456] ? clear_bhb_loop+0x40/0x90 [ 1000.089953][T22456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.095873][T22456] RIP: 0033:0x7fbb9b39cdd9 [ 1000.100314][T22456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.120048][T22456] RSP: 002b:00007fbb9c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1000.128516][T22456] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39cdd9 [ 1000.136524][T22456] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1000.144522][T22456] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1000.152519][T22456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.160511][T22456] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffd4e2844a8 [ 1000.168526][T22456] [ 1000.498514][T22466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1000.506141][T22466] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.513920][T22466] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.521579][T22466] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.650110][T22468] mac80211_hwsim hwsim109 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1001.091514][T22482] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1001.104972][T22482] CPU: 0 PID: 22482 Comm: syz.1.5422 Not tainted syzkaller #0 [ 1001.112552][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1001.122670][T22482] Call Trace: [ 1001.126003][T22482] [ 1001.128974][T22482] dump_stack_lvl+0x18c/0x250 [ 1001.133721][T22482] ? show_regs_print_info+0x20/0x20 [ 1001.138983][T22482] ? load_image+0x420/0x420 [ 1001.143544][T22482] sysfs_warn_dup+0x8e/0xa0 [ 1001.148090][T22482] sysfs_do_create_link_sd+0xc0/0x110 [ 1001.153506][T22482] device_add_class_symlinks+0x1cf/0x240 [ 1001.159282][T22482] device_add+0x507/0xc20 [ 1001.163765][T22482] wiphy_register+0x1dad/0x2ae0 [ 1001.168692][T22482] ? cfg80211_event_work+0x40/0x40 [ 1001.173843][T22482] ? minstrel_ht_alloc+0x88a/0x990 [ 1001.179007][T22482] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1001.185112][T22482] ieee80211_register_hw+0x3464/0x4250 [ 1001.190640][T22482] ? ieee80211_tasklet_handler+0x20/0x20 [ 1001.196310][T22482] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1001.202255][T22482] ? __debug_object_init+0xec/0x450 [ 1001.207536][T22482] ? __asan_memset+0x22/0x40 [ 1001.212177][T22482] ? __hrtimer_init+0x186/0x270 [ 1001.217077][T22482] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1001.222853][T22482] ? mac80211_hwsim_free+0x220/0x220 [ 1001.228180][T22482] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1001.233334][T22482] ? __nla_validate+0x50/0x50 [ 1001.238077][T22482] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1001.244465][T22482] ? __nla_parse+0x40/0x50 [ 1001.248927][T22482] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1001.255307][T22482] genl_family_rcv_msg_doit+0x211/0x310 [ 1001.260902][T22482] ? end_current_label_crit_section+0x170/0x170 [ 1001.267194][T22482] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1001.273136][T22482] ? bpf_lsm_capable+0x9/0x10 [ 1001.277859][T22482] ? security_capable+0x89/0xb0 [ 1001.282774][T22482] genl_rcv_msg+0x619/0x7a0 [ 1001.287331][T22482] ? genl_bind+0x360/0x360 [ 1001.291854][T22482] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1001.298282][T22482] netlink_rcv_skb+0x241/0x4d0 [ 1001.303096][T22482] ? genl_bind+0x360/0x360 [ 1001.307554][T22482] ? netlink_ack+0x1180/0x1180 [ 1001.312408][T22482] ? __lock_acquire+0x7d40/0x7d40 [ 1001.317478][T22482] ? down_read+0x1ac/0x2e0 [ 1001.321932][T22482] genl_rcv+0x28/0x40 [ 1001.325974][T22482] netlink_unicast+0x751/0x8d0 [ 1001.330796][T22482] netlink_sendmsg+0x8d0/0xbf0 [ 1001.335619][T22482] ? lockdep_hardirqs_on+0x98/0x150 [ 1001.340856][T22482] ? netlink_getsockopt+0x590/0x590 [ 1001.346132][T22482] ? netlink_getsockopt+0x590/0x590 [ 1001.351391][T22482] ? netlink_getsockopt+0x590/0x590 [ 1001.356657][T22482] ____sys_sendmsg+0x5ba/0x960 [ 1001.361466][T22482] ? __asan_memset+0x22/0x40 [ 1001.366095][T22482] ? __sys_sendmsg_sock+0x30/0x30 [ 1001.371155][T22482] ? __import_iovec+0x5f2/0x850 [ 1001.376047][T22482] ? import_iovec+0x73/0xa0 [ 1001.380582][T22482] ___sys_sendmsg+0x2a6/0x360 [ 1001.385304][T22482] ? __sys_sendmsg+0x2a0/0x2a0 [ 1001.390172][T22482] __se_sys_sendmsg+0x1c2/0x2b0 [ 1001.395075][T22482] ? __x64_sys_sendmsg+0x80/0x80 [ 1001.400080][T22482] ? lockdep_hardirqs_on+0x98/0x150 [ 1001.405325][T22482] do_syscall_64+0x55/0xa0 [ 1001.409777][T22482] ? clear_bhb_loop+0x40/0x90 [ 1001.414582][T22482] ? clear_bhb_loop+0x40/0x90 [ 1001.419307][T22482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.425246][T22482] RIP: 0033:0x7fe2f619cdd9 [ 1001.429716][T22482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.449401][T22482] RSP: 002b:00007fe2f70e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.457857][T22482] RAX: ffffffffffffffda RBX: 00007fe2f6416090 RCX: 00007fe2f619cdd9 [ 1001.465870][T22482] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1001.473882][T22482] RBP: 00007fe2f6232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1001.481895][T22482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.489896][T22482] R13: 00007fe2f6416128 R14: 00007fe2f6416090 R15: 00007ffe287828a8 [ 1001.497932][T22482] [ 1001.783367][T22485] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1001.795601][T22485] CPU: 0 PID: 22485 Comm: syz.0.5423 Not tainted syzkaller #0 [ 1001.803136][T22485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1001.813252][T22485] Call Trace: [ 1001.816585][T22485] [ 1001.819563][T22485] dump_stack_lvl+0x18c/0x250 [ 1001.824323][T22485] ? show_regs_print_info+0x20/0x20 [ 1001.829597][T22485] ? load_image+0x420/0x420 [ 1001.834170][T22485] sysfs_warn_dup+0x8e/0xa0 [ 1001.838723][T22485] sysfs_do_create_link_sd+0xc0/0x110 [ 1001.844148][T22485] device_add_class_symlinks+0x1cf/0x240 [ 1001.849840][T22485] device_add+0x507/0xc20 [ 1001.854233][T22485] wiphy_register+0x1dad/0x2ae0 [ 1001.859181][T22485] ? cfg80211_event_work+0x40/0x40 [ 1001.864349][T22485] ? minstrel_ht_alloc+0x88a/0x990 [ 1001.869540][T22485] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1001.875670][T22485] ieee80211_register_hw+0x3464/0x4250 [ 1001.881205][T22485] ? ieee80211_tasklet_handler+0x20/0x20 [ 1001.886874][T22485] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1001.892804][T22485] ? __debug_object_init+0xec/0x450 [ 1001.898045][T22485] ? __asan_memset+0x22/0x40 [ 1001.902676][T22485] ? __hrtimer_init+0x186/0x270 [ 1001.907562][T22485] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1001.913327][T22485] ? mac80211_hwsim_free+0x220/0x220 [ 1001.918634][T22485] ? rcu_is_watching+0x15/0xb0 [ 1001.923431][T22485] ? kstrndup+0xbd/0x140 [ 1001.927715][T22485] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1001.932860][T22485] ? __nla_validate+0x50/0x50 [ 1001.937570][T22485] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1001.943938][T22485] ? __nla_parse+0x40/0x50 [ 1001.948377][T22485] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1001.954755][T22485] genl_family_rcv_msg_doit+0x211/0x310 [ 1001.960359][T22485] ? end_current_label_crit_section+0x170/0x170 [ 1001.966641][T22485] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1001.972563][T22485] ? bpf_lsm_capable+0x9/0x10 [ 1001.977270][T22485] ? security_capable+0x89/0xb0 [ 1001.982160][T22485] genl_rcv_msg+0x619/0x7a0 [ 1001.986700][T22485] ? genl_bind+0x360/0x360 [ 1001.991134][T22485] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1001.997139][T22485] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1002.003535][T22485] ? ref_tracker_free+0x690/0x840 [ 1002.008624][T22485] netlink_rcv_skb+0x241/0x4d0 [ 1002.013439][T22485] ? genl_bind+0x360/0x360 [ 1002.017888][T22485] ? netlink_ack+0x1180/0x1180 [ 1002.022696][T22485] ? __lock_acquire+0x7d40/0x7d40 [ 1002.027783][T22485] ? down_read+0x1ac/0x2e0 [ 1002.032276][T22485] genl_rcv+0x28/0x40 [ 1002.036292][T22485] netlink_unicast+0x751/0x8d0 [ 1002.041109][T22485] netlink_sendmsg+0x8d0/0xbf0 [ 1002.045923][T22485] ? netlink_getsockopt+0x590/0x590 [ 1002.051166][T22485] ? aa_sock_msg_perm+0x94/0x150 [ 1002.056166][T22485] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1002.061486][T22485] ? security_socket_sendmsg+0x80/0xa0 [ 1002.066973][T22485] ? netlink_getsockopt+0x590/0x590 [ 1002.072215][T22485] ____sys_sendmsg+0x5ba/0x960 [ 1002.077014][T22485] ? __asan_memset+0x22/0x40 [ 1002.081640][T22485] ? __sys_sendmsg_sock+0x30/0x30 [ 1002.086690][T22485] ? __import_iovec+0x5f2/0x850 [ 1002.091576][T22485] ? import_iovec+0x73/0xa0 [ 1002.096112][T22485] ___sys_sendmsg+0x2a6/0x360 [ 1002.100836][T22485] ? __sys_sendmsg+0x2a0/0x2a0 [ 1002.105666][T22485] __se_sys_sendmsg+0x1c2/0x2b0 [ 1002.110547][T22485] ? __x64_sys_sendmsg+0x80/0x80 [ 1002.115524][T22485] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.120762][T22485] do_syscall_64+0x55/0xa0 [ 1002.125219][T22485] ? clear_bhb_loop+0x40/0x90 [ 1002.129934][T22485] ? clear_bhb_loop+0x40/0x90 [ 1002.134644][T22485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.140568][T22485] RIP: 0033:0x7fbb9b39cdd9 [ 1002.145002][T22485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.164631][T22485] RSP: 002b:00007fbb9c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.173070][T22485] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39cdd9 [ 1002.181082][T22485] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1002.189092][T22485] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1002.197090][T22485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.205090][T22485] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffd4e2844a8 [ 1002.213105][T22485] [ 1003.108006][T22497] __nla_validate_parse: 9 callbacks suppressed [ 1003.116678][T22497] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5427'. [ 1003.643532][T22496] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5428'. [ 1003.673747][T22497] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.5427'. [ 1003.789264][T22508] IPv6: Can't replace route, no match found [ 1003.918064][T22514] validate_nla: 6 callbacks suppressed [ 1003.918118][T22514] netlink: 'syz.3.5432': attribute type 2 has an invalid length. [ 1003.964091][T22512] netlink: 'syz.0.5431': attribute type 16 has an invalid length. [ 1003.985380][T22512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5431'. [ 1004.001469][T22514] netlink: 'syz.3.5432': attribute type 1 has an invalid length. [ 1004.036013][T22520] netlink: 'syz.3.5432': attribute type 1 has an invalid length. [ 1004.062899][T22520] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5432'. [ 1004.096666][T22521] netlink: 'syz.1.5434': attribute type 9 has an invalid length. [ 1004.114609][T22521] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1004.290807][T22526] netlink: 'syz.1.5434': attribute type 9 has an invalid length. [ 1004.306655][T22526] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1004.367610][T22529] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1004.442626][T22529] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1004.452895][T22529] CPU: 0 PID: 22529 Comm: syz.2.5436 Not tainted syzkaller #0 [ 1004.460424][T22529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.470526][T22529] Call Trace: [ 1004.473852][T22529] [ 1004.476823][T22529] dump_stack_lvl+0x18c/0x250 [ 1004.481570][T22529] ? show_regs_print_info+0x20/0x20 [ 1004.486837][T22529] ? load_image+0x420/0x420 [ 1004.491409][T22529] sysfs_warn_dup+0x8e/0xa0 [ 1004.495953][T22529] sysfs_do_create_link_sd+0xc0/0x110 [ 1004.501364][T22529] device_add_class_symlinks+0x1cf/0x240 [ 1004.507033][T22529] device_add+0x507/0xc20 [ 1004.511396][T22529] wiphy_register+0x1dad/0x2ae0 [ 1004.516280][T22529] ? lock_chain_count+0x20/0x20 [ 1004.521179][T22529] ? cfg80211_event_work+0x40/0x40 [ 1004.526331][T22529] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1004.532439][T22529] ieee80211_register_hw+0x3464/0x4250 [ 1004.537940][T22529] ? ieee80211_tasklet_handler+0x20/0x20 [ 1004.543594][T22529] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1004.549520][T22529] ? __debug_object_init+0xec/0x450 [ 1004.554756][T22529] ? __asan_memset+0x22/0x40 [ 1004.559374][T22529] ? __hrtimer_init+0x186/0x270 [ 1004.564258][T22529] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1004.570026][T22529] ? mac80211_hwsim_free+0x220/0x220 [ 1004.575339][T22529] ? rcu_is_watching+0x15/0xb0 [ 1004.580135][T22529] ? kstrndup+0xbd/0x140 [ 1004.584421][T22529] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1004.589569][T22529] ? mark_lock+0x94/0x320 [ 1004.593945][T22529] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1004.599998][T22529] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1004.606362][T22529] ? lockdep_hardirqs_on+0x98/0x150 [ 1004.611596][T22529] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1004.617786][T22529] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 1004.624153][T22529] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 1004.629736][T22529] genl_family_rcv_msg_doit+0x211/0x310 [ 1004.635310][T22529] ? end_current_label_crit_section+0x170/0x170 [ 1004.641581][T22529] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1004.647503][T22529] ? bpf_lsm_capable+0x9/0x10 [ 1004.652208][T22529] ? security_capable+0x89/0xb0 [ 1004.657088][T22529] genl_rcv_msg+0x619/0x7a0 [ 1004.661626][T22529] ? genl_bind+0x360/0x360 [ 1004.666078][T22529] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1004.672084][T22529] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1004.678457][T22529] ? ref_tracker_free+0x690/0x840 [ 1004.683525][T22529] netlink_rcv_skb+0x241/0x4d0 [ 1004.688326][T22529] ? genl_bind+0x360/0x360 [ 1004.692769][T22529] ? netlink_ack+0x1180/0x1180 [ 1004.697584][T22529] ? __lock_acquire+0x7d40/0x7d40 [ 1004.702653][T22529] ? down_read+0x1ac/0x2e0 [ 1004.707107][T22529] genl_rcv+0x28/0x40 [ 1004.711111][T22529] netlink_unicast+0x751/0x8d0 [ 1004.715915][T22529] netlink_sendmsg+0x8d0/0xbf0 [ 1004.720732][T22529] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1004.726578][T22529] ? netlink_getsockopt+0x590/0x590 [ 1004.731805][T22529] ? aa_sock_msg_perm+0x94/0x150 [ 1004.736770][T22529] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1004.742094][T22529] ? security_socket_sendmsg+0x80/0xa0 [ 1004.747580][T22529] ? netlink_getsockopt+0x590/0x590 [ 1004.752821][T22529] ____sys_sendmsg+0x5ba/0x960 [ 1004.757613][T22529] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1004.763805][T22529] ? __asan_memset+0x22/0x40 [ 1004.768433][T22529] ? __sys_sendmsg_sock+0x30/0x30 [ 1004.773518][T22529] ? __import_iovec+0x5f2/0x850 [ 1004.778404][T22529] ? import_iovec+0x73/0xa0 [ 1004.782940][T22529] ___sys_sendmsg+0x2a6/0x360 [ 1004.787651][T22529] ? __sys_sendmsg+0x2a0/0x2a0 [ 1004.792510][T22529] __se_sys_sendmsg+0x1c2/0x2b0 [ 1004.797389][T22529] ? __x64_sys_sendmsg+0x80/0x80 [ 1004.802373][T22529] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1004.808305][T22529] do_syscall_64+0x55/0xa0 [ 1004.812747][T22529] ? clear_bhb_loop+0x40/0x90 [ 1004.817453][T22529] ? clear_bhb_loop+0x40/0x90 [ 1004.822164][T22529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.828091][T22529] RIP: 0033:0x7fa4ee19cdd9 [ 1004.832532][T22529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.852168][T22529] RSP: 002b:00007fa4ef0f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.860607][T22529] RAX: ffffffffffffffda RBX: 00007fa4ee416090 RCX: 00007fa4ee19cdd9 [ 1004.868605][T22529] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1004.876598][T22529] RBP: 00007fa4ee232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1004.884597][T22529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.892594][T22529] R13: 00007fa4ee416128 R14: 00007fa4ee416090 R15: 00007ffd816cc688 [ 1004.900608][T22529] [ 1005.207385][T22533] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1005.224910][T22533] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1005.542044][T22549] netlink: 'syz.3.5443': attribute type 29 has an invalid length. [ 1005.555062][T22549] netlink: 'syz.3.5443': attribute type 29 has an invalid length. [ 1005.580392][T22549] netlink: 'syz.3.5443': attribute type 29 has an invalid length. [ 1005.663787][T22549] netlink: 'syz.3.5443': attribute type 29 has an invalid length. [ 1006.216604][T22563] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1006.248996][T22563] CPU: 1 PID: 22563 Comm: syz.1.5449 Not tainted syzkaller #0 [ 1006.256563][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1006.266664][T22563] Call Trace: [ 1006.269982][T22563] [ 1006.272961][T22563] dump_stack_lvl+0x18c/0x250 [ 1006.277700][T22563] ? show_regs_print_info+0x20/0x20 [ 1006.282965][T22563] ? load_image+0x420/0x420 [ 1006.287544][T22563] sysfs_warn_dup+0x8e/0xa0 [ 1006.292102][T22563] sysfs_do_create_link_sd+0xc0/0x110 [ 1006.297547][T22563] device_add_class_symlinks+0x1cf/0x240 [ 1006.303257][T22563] device_add+0x507/0xc20 [ 1006.307663][T22563] wiphy_register+0x1dad/0x2ae0 [ 1006.312600][T22563] ? cfg80211_event_work+0x40/0x40 [ 1006.317783][T22563] ? minstrel_ht_alloc+0x88a/0x990 [ 1006.322970][T22563] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1006.329105][T22563] ieee80211_register_hw+0x3464/0x4250 [ 1006.334646][T22563] ? ieee80211_tasklet_handler+0x20/0x20 [ 1006.340329][T22563] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1006.346285][T22563] ? __debug_object_init+0xec/0x450 [ 1006.351561][T22563] ? __asan_memset+0x22/0x40 [ 1006.356229][T22563] ? __hrtimer_init+0x186/0x270 [ 1006.361151][T22563] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1006.366968][T22563] ? mac80211_hwsim_free+0x220/0x220 [ 1006.372316][T22563] ? rcu_is_watching+0x15/0xb0 [ 1006.377149][T22563] ? kstrndup+0xbd/0x140 [ 1006.381480][T22563] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1006.386661][T22563] ? __nla_validate+0x50/0x50 [ 1006.391411][T22563] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1006.397818][T22563] ? __nla_parse+0x40/0x50 [ 1006.402286][T22563] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1006.408680][T22563] genl_family_rcv_msg_doit+0x211/0x310 [ 1006.414287][T22563] ? end_current_label_crit_section+0x170/0x170 [ 1006.420588][T22563] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1006.426546][T22563] ? bpf_lsm_capable+0x9/0x10 [ 1006.431275][T22563] ? security_capable+0x89/0xb0 [ 1006.436193][T22563] genl_rcv_msg+0x619/0x7a0 [ 1006.440765][T22563] ? genl_bind+0x360/0x360 [ 1006.445235][T22563] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1006.451637][T22563] netlink_rcv_skb+0x241/0x4d0 [ 1006.456468][T22563] ? genl_bind+0x360/0x360 [ 1006.460943][T22563] ? netlink_ack+0x1180/0x1180 [ 1006.465782][T22563] ? __lock_acquire+0x7d40/0x7d40 [ 1006.470896][T22563] ? down_read+0x1ac/0x2e0 [ 1006.475373][T22563] genl_rcv+0x28/0x40 [ 1006.479413][T22563] netlink_unicast+0x751/0x8d0 [ 1006.484254][T22563] netlink_sendmsg+0x8d0/0xbf0 [ 1006.489105][T22563] ? netlink_getsockopt+0x590/0x590 [ 1006.494370][T22563] ? aa_sock_msg_perm+0x94/0x150 [ 1006.499389][T22563] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1006.504738][T22563] ? security_socket_sendmsg+0x80/0xa0 [ 1006.510263][T22563] ? netlink_getsockopt+0x590/0x590 [ 1006.515543][T22563] ____sys_sendmsg+0x5ba/0x960 [ 1006.520376][T22563] ? __asan_memset+0x22/0x40 [ 1006.525028][T22563] ? __sys_sendmsg_sock+0x30/0x30 [ 1006.530104][T22563] ? __import_iovec+0x5f2/0x850 [ 1006.535045][T22563] ? import_iovec+0x73/0xa0 [ 1006.539610][T22563] ___sys_sendmsg+0x2a6/0x360 [ 1006.544336][T22563] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1006.550099][T22563] ? __sys_sendmsg+0x2a0/0x2a0 [ 1006.554906][T22563] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1006.560930][T22563] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1006.567131][T22563] ? __fdget+0x1a2/0x210 [ 1006.571415][T22563] __se_sys_sendmsg+0x1c2/0x2b0 [ 1006.576295][T22563] ? __x64_sys_sendmsg+0x80/0x80 [ 1006.581268][T22563] ? lockdep_hardirqs_on+0x98/0x150 [ 1006.586496][T22563] do_syscall_64+0x55/0xa0 [ 1006.590929][T22563] ? clear_bhb_loop+0x40/0x90 [ 1006.595634][T22563] ? clear_bhb_loop+0x40/0x90 [ 1006.600344][T22563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.606265][T22563] RIP: 0033:0x7fe2f619cdd9 [ 1006.610704][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.630349][T22563] RSP: 002b:00007fe2f7108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.638815][T22563] RAX: ffffffffffffffda RBX: 00007fe2f6415fa0 RCX: 00007fe2f619cdd9 [ 1006.646817][T22563] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1006.654818][T22563] RBP: 00007fe2f6232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1006.662826][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.670847][T22563] R13: 00007fe2f6416038 R14: 00007fe2f6415fa0 R15: 00007ffe287828a8 [ 1006.678863][T22563] [ 1007.423410][T22586] bridge0: port 3(team0) entered disabled state [ 1007.442345][T22586] bridge_slave_1: left allmulticast mode [ 1007.455630][T22586] bridge_slave_1: left promiscuous mode [ 1007.483332][T22586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.501264][T22586] bridge_slave_0: left allmulticast mode [ 1007.507773][T22586] bridge_slave_0: left promiscuous mode [ 1007.513556][T22586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.372862][T22603] __nla_validate_parse: 8 callbacks suppressed [ 1008.372883][T22603] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5461'. [ 1008.757724][T22617] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1008.872219][T22617] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1008.895130][T22617] CPU: 1 PID: 22617 Comm: syz.0.5463 Not tainted syzkaller #0 [ 1008.902682][T22617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.912773][T22617] Call Trace: [ 1008.916085][T22617] [ 1008.919046][T22617] dump_stack_lvl+0x18c/0x250 [ 1008.923780][T22617] ? show_regs_print_info+0x20/0x20 [ 1008.929020][T22617] ? load_image+0x420/0x420 [ 1008.933563][T22617] sysfs_warn_dup+0x8e/0xa0 [ 1008.938096][T22617] sysfs_do_create_link_sd+0xc0/0x110 [ 1008.943496][T22617] device_add_class_symlinks+0x1cf/0x240 [ 1008.949165][T22617] device_add+0x507/0xc20 [ 1008.953530][T22617] wiphy_register+0x1dad/0x2ae0 [ 1008.958419][T22617] ? cfg80211_event_work+0x40/0x40 [ 1008.963571][T22617] ? minstrel_ht_alloc+0x88a/0x990 [ 1008.968741][T22617] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1008.974874][T22617] ieee80211_register_hw+0x3464/0x4250 [ 1008.980424][T22617] ? ieee80211_tasklet_handler+0x20/0x20 [ 1008.986106][T22617] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1008.992052][T22617] ? __debug_object_init+0xec/0x450 [ 1008.997309][T22617] ? __asan_memset+0x22/0x40 [ 1009.001934][T22617] ? __hrtimer_init+0x186/0x270 [ 1009.006813][T22617] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1009.012579][T22617] ? mac80211_hwsim_free+0x220/0x220 [ 1009.017891][T22617] ? rcu_is_watching+0x15/0xb0 [ 1009.022693][T22617] ? kstrndup+0xbd/0x140 [ 1009.026972][T22617] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1009.032112][T22617] ? __nla_validate+0x50/0x50 [ 1009.036826][T22617] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1009.043283][T22617] ? __nla_parse+0x40/0x50 [ 1009.047730][T22617] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1009.054090][T22617] genl_family_rcv_msg_doit+0x211/0x310 [ 1009.059671][T22617] ? end_current_label_crit_section+0x170/0x170 [ 1009.065942][T22617] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1009.071870][T22617] ? bpf_lsm_capable+0x9/0x10 [ 1009.076580][T22617] ? security_capable+0x89/0xb0 [ 1009.081477][T22617] genl_rcv_msg+0x619/0x7a0 [ 1009.086011][T22617] ? genl_bind+0x360/0x360 [ 1009.090450][T22617] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1009.096809][T22617] ? ref_tracker_free+0x690/0x840 [ 1009.101873][T22617] netlink_rcv_skb+0x241/0x4d0 [ 1009.106679][T22617] ? genl_bind+0x360/0x360 [ 1009.111117][T22617] ? netlink_ack+0x1180/0x1180 [ 1009.115921][T22617] ? __lock_acquire+0x7d40/0x7d40 [ 1009.120979][T22617] ? down_read+0x1ac/0x2e0 [ 1009.125425][T22617] genl_rcv+0x28/0x40 [ 1009.129427][T22617] netlink_unicast+0x751/0x8d0 [ 1009.134233][T22617] netlink_sendmsg+0x8d0/0xbf0 [ 1009.139030][T22617] ? kasan_set_track+0x4e/0x70 [ 1009.143829][T22617] ? netlink_getsockopt+0x590/0x590 [ 1009.149064][T22617] ? aa_sock_msg_perm+0x94/0x150 [ 1009.154033][T22617] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1009.159350][T22617] ? security_socket_sendmsg+0x80/0xa0 [ 1009.164834][T22617] ? netlink_getsockopt+0x590/0x590 [ 1009.170069][T22617] ____sys_sendmsg+0x5ba/0x960 [ 1009.174866][T22617] ? __asan_memset+0x22/0x40 [ 1009.179489][T22617] ? __sys_sendmsg_sock+0x30/0x30 [ 1009.184542][T22617] ? __import_iovec+0x5f2/0x850 [ 1009.189426][T22617] ? import_iovec+0x73/0xa0 [ 1009.193958][T22617] ___sys_sendmsg+0x2a6/0x360 [ 1009.198689][T22617] ? __lock_acquire+0x7d40/0x7d40 [ 1009.203740][T22617] ? __sys_sendmsg+0x2a0/0x2a0 [ 1009.208594][T22617] __se_sys_sendmsg+0x1c2/0x2b0 [ 1009.213467][T22617] ? __x64_sys_sendmsg+0x80/0x80 [ 1009.218435][T22617] ? lockdep_hardirqs_on+0x98/0x150 [ 1009.223700][T22617] do_syscall_64+0x55/0xa0 [ 1009.228136][T22617] ? clear_bhb_loop+0x40/0x90 [ 1009.232847][T22617] ? clear_bhb_loop+0x40/0x90 [ 1009.237555][T22617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1009.243499][T22617] RIP: 0033:0x7fbb9b39cdd9 [ 1009.247943][T22617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.267573][T22617] RSP: 002b:00007fbb9c325028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.276037][T22617] RAX: ffffffffffffffda RBX: 00007fbb9b616090 RCX: 00007fbb9b39cdd9 [ 1009.284032][T22617] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1009.292025][T22617] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1009.300021][T22617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.308016][T22617] R13: 00007fbb9b616128 R14: 00007fbb9b616090 R15: 00007ffd4e2844a8 [ 1009.316022][T22617] [ 1009.500302][T22621] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1009.679268][T22621] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1009.870055][T22631] validate_nla: 16 callbacks suppressed [ 1009.870074][T22631] netlink: 'syz.0.5468': attribute type 9 has an invalid length. [ 1009.893692][T22631] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1010.594665][T20085] Bluetooth: hci3: command 0x0406 tx timeout [ 1010.662600][T22639] netlink: 'syz.2.5469': attribute type 2 has an invalid length. [ 1010.683222][T22635] netlink: 'syz.0.5468': attribute type 9 has an invalid length. [ 1010.710879][T22635] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1010.738462][T22639] netlink: 'syz.2.5469': attribute type 1 has an invalid length. [ 1010.762738][T22639] netlink: 'syz.2.5469': attribute type 1 has an invalid length. [ 1010.771222][T22639] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1010.789985][T22642] netlink: 'syz.3.5470': attribute type 16 has an invalid length. [ 1010.799835][T22642] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5470'. [ 1010.970753][T22648] netlink: 'syz.1.5473': attribute type 29 has an invalid length. [ 1010.994199][T22648] netlink: 'syz.1.5473': attribute type 29 has an invalid length. [ 1011.048761][T22651] netlink: 'syz.1.5473': attribute type 29 has an invalid length. [ 1011.088006][T22650] FAULT_INJECTION: forcing a failure. [ 1011.088006][T22650] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.142197][T22648] netlink: 'syz.1.5473': attribute type 29 has an invalid length. [ 1011.150873][T22650] CPU: 0 PID: 22650 Comm: syz.3.5474 Not tainted syzkaller #0 [ 1011.158454][T22650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1011.168582][T22650] Call Trace: [ 1011.171908][T22650] [ 1011.174890][T22650] dump_stack_lvl+0x18c/0x250 [ 1011.179666][T22650] ? show_regs_print_info+0x20/0x20 [ 1011.184962][T22650] ? load_image+0x420/0x420 [ 1011.189551][T22650] ? __might_sleep+0xe0/0xe0 [ 1011.194198][T22650] ? __lock_acquire+0x7d40/0x7d40 [ 1011.199274][T22650] ? mark_lock+0x94/0x320 [ 1011.203675][T22650] should_fail_ex+0x39d/0x4d0 [ 1011.208426][T22650] should_failslab+0x9/0x20 [ 1011.212996][T22650] slab_pre_alloc_hook+0x59/0x310 [ 1011.218073][T22650] kmem_cache_alloc_node+0x60/0x320 [ 1011.223314][T22650] ? __alloc_skb+0x103/0x2c0 [ 1011.227953][T22650] __alloc_skb+0x103/0x2c0 [ 1011.232420][T22650] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 1011.238381][T22650] addrconf_ifdown+0x1574/0x18c0 [ 1011.243386][T22650] ? tls_dev_event+0x74d/0xf40 [ 1011.248189][T22650] ? addrconf_cleanup+0x1e0/0x1e0 [ 1011.253279][T22650] addrconf_notify+0x6c6/0x1010 [ 1011.258169][T22650] notifier_call_chain+0x197/0x380 [ 1011.263336][T22650] unregister_netdevice_many_notify+0x100d/0x1900 [ 1011.269810][T22650] ? trace_event_raw_event_lock+0x250/0x250 [ 1011.275744][T22650] ? unregister_netdevice_many+0x20/0x20 [ 1011.281452][T22650] ? aa_get_newest_label+0xfd/0x5c0 [ 1011.286697][T22650] ? end_current_label_crit_section+0x170/0x170 [ 1011.292986][T22650] unregister_netdevice_queue+0x32c/0x370 [ 1011.298744][T22650] ? apparmor_capable+0x137/0x1a0 [ 1011.303809][T22650] ? list_netdevice+0x730/0x730 [ 1011.308700][T22650] ? security_capable+0x89/0xb0 [ 1011.313602][T22650] ip_tunnel_ctl+0x20c/0x1970 [ 1011.318322][T22650] ? __might_fault+0xaa/0x120 [ 1011.323056][T22650] vti_tunnel_ctl+0x1f9/0x390 [ 1011.327788][T22650] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 1011.333369][T22650] ? dev_ioctl+0x83c/0x1140 [ 1011.337912][T22650] ? ip_tunnel_update+0xb10/0xb10 [ 1011.342983][T22650] ? dev_ifsioc+0x958/0xc40 [ 1011.347535][T22650] dev_ioctl+0x84c/0x1140 [ 1011.351917][T22650] sock_ioctl+0x74c/0x7e0 [ 1011.356285][T22650] ? sock_poll+0x3e0/0x3e0 [ 1011.360759][T22650] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1011.365727][T22650] ? security_file_ioctl+0x80/0xa0 [ 1011.370869][T22650] ? sock_poll+0x3e0/0x3e0 [ 1011.375323][T22650] __se_sys_ioctl+0xfd/0x170 [ 1011.379958][T22650] do_syscall_64+0x55/0xa0 [ 1011.384404][T22650] ? clear_bhb_loop+0x40/0x90 [ 1011.389120][T22650] ? clear_bhb_loop+0x40/0x90 [ 1011.393846][T22650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1011.399784][T22650] RIP: 0033:0x7f093eb9cdd9 [ 1011.404271][T22650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.423916][T22650] RSP: 002b:00007f093fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1011.432374][T22650] RAX: ffffffffffffffda RBX: 00007f093ee15fa0 RCX: 00007f093eb9cdd9 [ 1011.440381][T22650] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 000000000000000d [ 1011.448383][T22650] RBP: 00007f093fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.456394][T22650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.464393][T22650] R13: 00007f093ee16038 R14: 00007f093ee15fa0 R15: 00007ffda9fa80d8 [ 1011.472428][T22650] [ 1011.606915][T22653] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5475'. [ 1011.910306][T22657] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1011.954004][T22657] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1011.983280][T22657] CPU: 1 PID: 22657 Comm: syz.1.5476 Not tainted syzkaller #0 [ 1011.990842][T22657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1012.000943][T22657] Call Trace: [ 1012.004262][T22657] [ 1012.007278][T22657] dump_stack_lvl+0x18c/0x250 [ 1012.012021][T22657] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1012.018244][T22657] ? show_regs_print_info+0x20/0x20 [ 1012.023542][T22657] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1012.029773][T22657] ? dump_stack+0x9/0x20 [ 1012.034100][T22657] sysfs_warn_dup+0x8e/0xa0 [ 1012.038659][T22657] sysfs_do_create_link_sd+0xc0/0x110 [ 1012.044096][T22657] device_add_class_symlinks+0x1cf/0x240 [ 1012.049809][T22657] device_add+0x507/0xc20 [ 1012.054213][T22657] wiphy_register+0x1dad/0x2ae0 [ 1012.059146][T22657] ? cfg80211_event_work+0x40/0x40 [ 1012.064316][T22657] ? minstrel_ht_alloc+0x88a/0x990 [ 1012.069503][T22657] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1012.075648][T22657] ieee80211_register_hw+0x3464/0x4250 [ 1012.081185][T22657] ? ieee80211_tasklet_handler+0x20/0x20 [ 1012.086873][T22657] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1012.092832][T22657] ? __debug_object_init+0xec/0x450 [ 1012.098101][T22657] ? __asan_memset+0x22/0x40 [ 1012.102748][T22657] ? __hrtimer_init+0x186/0x270 [ 1012.107659][T22657] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1012.113455][T22657] ? mac80211_hwsim_free+0x220/0x220 [ 1012.118798][T22657] ? rcu_is_watching+0x15/0xb0 [ 1012.123623][T22657] ? kstrndup+0xbd/0x140 [ 1012.127938][T22657] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1012.133111][T22657] ? __nla_validate+0x50/0x50 [ 1012.137859][T22657] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1012.144251][T22657] ? __nla_parse+0x40/0x50 [ 1012.148723][T22657] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1012.155119][T22657] genl_family_rcv_msg_doit+0x211/0x310 [ 1012.160722][T22657] ? end_current_label_crit_section+0x170/0x170 [ 1012.167028][T22657] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1012.172990][T22657] ? bpf_lsm_capable+0x9/0x10 [ 1012.177734][T22657] ? security_capable+0x89/0xb0 [ 1012.182665][T22657] genl_rcv_msg+0x619/0x7a0 [ 1012.187242][T22657] ? genl_bind+0x360/0x360 [ 1012.191713][T22657] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1012.198099][T22657] ? kasan_check_range+0x17e/0x290 [ 1012.203281][T22657] netlink_rcv_skb+0x241/0x4d0 [ 1012.208122][T22657] ? genl_bind+0x360/0x360 [ 1012.212607][T22657] ? netlink_ack+0x1180/0x1180 [ 1012.217445][T22657] ? __lock_acquire+0x7d40/0x7d40 [ 1012.222555][T22657] ? down_read+0x1ac/0x2e0 [ 1012.227032][T22657] genl_rcv+0x28/0x40 [ 1012.231080][T22657] netlink_unicast+0x751/0x8d0 [ 1012.235928][T22657] netlink_sendmsg+0x8d0/0xbf0 [ 1012.240777][T22657] ? netlink_getsockopt+0x590/0x590 [ 1012.246067][T22657] ? aa_sock_msg_perm+0x94/0x150 [ 1012.251103][T22657] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1012.256452][T22657] ? security_socket_sendmsg+0x80/0xa0 [ 1012.261970][T22657] ? netlink_getsockopt+0x590/0x590 [ 1012.267251][T22657] ____sys_sendmsg+0x5ba/0x960 [ 1012.272088][T22657] ? __asan_memset+0x22/0x40 [ 1012.276738][T22657] ? __sys_sendmsg_sock+0x30/0x30 [ 1012.281820][T22657] ? __import_iovec+0x5f2/0x850 [ 1012.286743][T22657] ? import_iovec+0x73/0xa0 [ 1012.291330][T22657] ___sys_sendmsg+0x2a6/0x360 [ 1012.296064][T22657] ? __sys_sendmsg+0x2a0/0x2a0 [ 1012.300909][T22657] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1012.307245][T22657] __se_sys_sendmsg+0x1c2/0x2b0 [ 1012.312157][T22657] ? __x64_sys_sendmsg+0x80/0x80 [ 1012.317169][T22657] ? lockdep_hardirqs_on+0x98/0x150 [ 1012.322434][T22657] do_syscall_64+0x55/0xa0 [ 1012.326903][T22657] ? clear_bhb_loop+0x40/0x90 [ 1012.331634][T22657] ? clear_bhb_loop+0x40/0x90 [ 1012.336368][T22657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1012.342318][T22657] RIP: 0033:0x7fe2f619cdd9 [ 1012.346786][T22657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.366447][T22657] RSP: 002b:00007fe2f7108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.374926][T22657] RAX: ffffffffffffffda RBX: 00007fe2f6415fa0 RCX: 00007fe2f619cdd9 [ 1012.382944][T22657] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1012.390965][T22657] RBP: 00007fe2f6232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1012.398993][T22657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.407039][T22657] R13: 00007fe2f6416038 R14: 00007fe2f6415fa0 R15: 00007ffe287828a8 [ 1012.415098][T22657] [ 1013.699448][T22696] __nla_validate_parse: 6 callbacks suppressed [ 1013.699489][T22696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5485'. [ 1014.008504][T22704] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5488'. [ 1014.065231][T22704] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1014.073515][T22704] CPU: 0 PID: 22704 Comm: syz.1.5488 Not tainted syzkaller #0 [ 1014.081033][T22704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.091129][T22704] Call Trace: [ 1014.094433][T22704] [ 1014.097397][T22704] dump_stack_lvl+0x18c/0x250 [ 1014.102149][T22704] ? show_regs_print_info+0x20/0x20 [ 1014.107396][T22704] ? load_image+0x420/0x420 [ 1014.112033][T22704] sysfs_warn_dup+0x8e/0xa0 [ 1014.116674][T22704] sysfs_do_create_link_sd+0xc0/0x110 [ 1014.122087][T22704] device_add_class_symlinks+0x1cf/0x240 [ 1014.127851][T22704] device_add+0x507/0xc20 [ 1014.132214][T22704] wiphy_register+0x1dad/0x2ae0 [ 1014.137197][T22704] ? cfg80211_event_work+0x40/0x40 [ 1014.142686][T22704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.148964][T22704] ? ieee80211_register_hw+0x3299/0x4250 [ 1014.154637][T22704] ieee80211_register_hw+0x3464/0x4250 [ 1014.160201][T22704] ? ieee80211_tasklet_handler+0x20/0x20 [ 1014.165858][T22704] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1014.171781][T22704] ? __debug_object_init+0xec/0x450 [ 1014.177020][T22704] ? __asan_memset+0x22/0x40 [ 1014.181644][T22704] ? __hrtimer_init+0x186/0x270 [ 1014.186535][T22704] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1014.192301][T22704] ? mac80211_hwsim_free+0x220/0x220 [ 1014.197610][T22704] ? rcu_is_watching+0x15/0xb0 [ 1014.202402][T22704] ? kstrndup+0xbd/0x140 [ 1014.206684][T22704] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1014.211820][T22704] ? mark_lock+0x94/0x320 [ 1014.216186][T22704] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1014.222205][T22704] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1014.228557][T22704] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.233778][T22704] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.239965][T22704] ? genl_family_rcv_msg_attrs_parse+0x20e/0x290 [ 1014.246325][T22704] genl_family_rcv_msg_doit+0x211/0x310 [ 1014.251901][T22704] ? end_current_label_crit_section+0x170/0x170 [ 1014.258175][T22704] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1014.264105][T22704] ? bpf_lsm_capable+0x9/0x10 [ 1014.268816][T22704] ? security_capable+0x89/0xb0 [ 1014.273701][T22704] genl_rcv_msg+0x619/0x7a0 [ 1014.278257][T22704] ? genl_bind+0x360/0x360 [ 1014.282699][T22704] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1014.289067][T22704] netlink_rcv_skb+0x241/0x4d0 [ 1014.293865][T22704] ? genl_bind+0x360/0x360 [ 1014.298311][T22704] ? netlink_ack+0x1180/0x1180 [ 1014.303123][T22704] ? __lock_acquire+0x7d40/0x7d40 [ 1014.308177][T22704] ? down_read+0x1ac/0x2e0 [ 1014.312625][T22704] genl_rcv+0x28/0x40 [ 1014.316636][T22704] netlink_unicast+0x751/0x8d0 [ 1014.321441][T22704] netlink_sendmsg+0x8d0/0xbf0 [ 1014.326237][T22704] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.331498][T22704] ? netlink_getsockopt+0x590/0x590 [ 1014.336734][T22704] ? security_socket_sendmsg+0x45/0xa0 [ 1014.342223][T22704] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1014.347539][T22704] ? security_socket_sendmsg+0x80/0xa0 [ 1014.353032][T22704] ? netlink_getsockopt+0x590/0x590 [ 1014.358267][T22704] ____sys_sendmsg+0x5ba/0x960 [ 1014.363067][T22704] ? __asan_memset+0x22/0x40 [ 1014.367695][T22704] ? __sys_sendmsg_sock+0x30/0x30 [ 1014.372738][T22704] ? __import_iovec+0x5f2/0x850 [ 1014.377632][T22704] ? import_iovec+0x73/0xa0 [ 1014.382180][T22704] ___sys_sendmsg+0x2a6/0x360 [ 1014.386889][T22704] ? __sys_sendmsg+0x2a0/0x2a0 [ 1014.391714][T22704] __se_sys_sendmsg+0x1c2/0x2b0 [ 1014.396604][T22704] ? __x64_sys_sendmsg+0x80/0x80 [ 1014.401580][T22704] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1014.407498][T22704] do_syscall_64+0x55/0xa0 [ 1014.411947][T22704] ? clear_bhb_loop+0x40/0x90 [ 1014.416649][T22704] ? clear_bhb_loop+0x40/0x90 [ 1014.421362][T22704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.427284][T22704] RIP: 0033:0x7fe2f619cdd9 [ 1014.431722][T22704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.451499][T22704] RSP: 002b:00007fe2f7108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.459952][T22704] RAX: ffffffffffffffda RBX: 00007fe2f6415fa0 RCX: 00007fe2f619cdd9 [ 1014.467982][T22704] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1014.475992][T22704] RBP: 00007fe2f6232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1014.484002][T22704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.491993][T22704] R13: 00007fe2f6416038 R14: 00007fe2f6415fa0 R15: 00007ffe287828a8 [ 1014.500005][T22704] [ 1014.899813][T22717] validate_nla: 17 callbacks suppressed [ 1014.899878][T22717] netlink: 'syz.1.5492': attribute type 2 has an invalid length. [ 1015.010231][T22717] netlink: 'syz.1.5492': attribute type 1 has an invalid length. [ 1015.024731][T22718] netlink: 'syz.1.5492': attribute type 1 has an invalid length. [ 1015.034639][T22717] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.5492'. [ 1015.394191][T22732] netlink: 'syz.0.5497': attribute type 16 has an invalid length. [ 1015.406434][T22732] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5497'. [ 1015.654053][T22738] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1015.750010][T22738] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1015.784086][T22738] CPU: 0 PID: 22738 Comm: syz.0.5499 Not tainted syzkaller #0 [ 1015.791671][T22738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.801861][T22738] Call Trace: [ 1015.805182][T22738] [ 1015.808153][T22738] dump_stack_lvl+0x18c/0x250 [ 1015.812889][T22738] ? show_regs_print_info+0x20/0x20 [ 1015.818144][T22738] ? load_image+0x420/0x420 [ 1015.822722][T22738] sysfs_warn_dup+0x8e/0xa0 [ 1015.827294][T22738] sysfs_do_create_link_sd+0xc0/0x110 [ 1015.832732][T22738] device_add_class_symlinks+0x1cf/0x240 [ 1015.838431][T22738] device_add+0x507/0xc20 [ 1015.842838][T22738] wiphy_register+0x1dad/0x2ae0 [ 1015.847761][T22738] ? cfg80211_event_work+0x40/0x40 [ 1015.853002][T22738] ? minstrel_ht_alloc+0x88a/0x990 [ 1015.858174][T22738] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1015.864335][T22738] ieee80211_register_hw+0x3464/0x4250 [ 1015.869890][T22738] ? ieee80211_tasklet_handler+0x20/0x20 [ 1015.875568][T22738] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1015.881519][T22738] ? __debug_object_init+0xec/0x450 [ 1015.886779][T22738] ? __asan_memset+0x22/0x40 [ 1015.891422][T22738] ? __hrtimer_init+0x186/0x270 [ 1015.896337][T22738] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1015.902132][T22738] ? mac80211_hwsim_free+0x220/0x220 [ 1015.907457][T22738] ? rcu_is_watching+0x15/0xb0 [ 1015.912276][T22738] ? kstrndup+0xbd/0x140 [ 1015.916577][T22738] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1015.921740][T22738] ? __nla_validate+0x50/0x50 [ 1015.926471][T22738] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1015.932865][T22738] ? __nla_parse+0x40/0x50 [ 1015.937332][T22738] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1015.943723][T22738] genl_family_rcv_msg_doit+0x211/0x310 [ 1015.949321][T22738] ? end_current_label_crit_section+0x170/0x170 [ 1015.955620][T22738] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1015.961568][T22738] ? bpf_lsm_capable+0x9/0x10 [ 1015.966294][T22738] ? security_capable+0x89/0xb0 [ 1015.971204][T22738] genl_rcv_msg+0x619/0x7a0 [ 1015.975776][T22738] ? genl_bind+0x360/0x360 [ 1015.980238][T22738] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1015.986642][T22738] netlink_rcv_skb+0x241/0x4d0 [ 1015.991467][T22738] ? genl_bind+0x360/0x360 [ 1015.995928][T22738] ? netlink_ack+0x1180/0x1180 [ 1016.000756][T22738] ? __lock_acquire+0x7d40/0x7d40 [ 1016.005836][T22738] ? down_read+0x1ac/0x2e0 [ 1016.010307][T22738] genl_rcv+0x28/0x40 [ 1016.014334][T22738] netlink_unicast+0x751/0x8d0 [ 1016.019164][T22738] netlink_sendmsg+0x8d0/0xbf0 [ 1016.023997][T22738] ? netlink_getsockopt+0x590/0x590 [ 1016.029257][T22738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1016.035460][T22738] ? aa_sock_msg_perm+0x94/0x150 [ 1016.040456][T22738] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1016.045797][T22738] ? security_socket_sendmsg+0x80/0xa0 [ 1016.051303][T22738] ? netlink_getsockopt+0x590/0x590 [ 1016.056559][T22738] ____sys_sendmsg+0x5ba/0x960 [ 1016.061390][T22738] ? __asan_memset+0x22/0x40 [ 1016.066027][T22738] ? __sys_sendmsg_sock+0x30/0x30 [ 1016.071101][T22738] ? __import_iovec+0x5f2/0x850 [ 1016.076053][T22738] ? import_iovec+0x73/0xa0 [ 1016.080609][T22738] ___sys_sendmsg+0x2a6/0x360 [ 1016.085334][T22738] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1016.091105][T22738] ? __sys_sendmsg+0x2a0/0x2a0 [ 1016.095940][T22738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1016.102189][T22738] __se_sys_sendmsg+0x1c2/0x2b0 [ 1016.107088][T22738] ? __x64_sys_sendmsg+0x80/0x80 [ 1016.112085][T22738] ? lockdep_hardirqs_on+0x98/0x150 [ 1016.117335][T22738] do_syscall_64+0x55/0xa0 [ 1016.121794][T22738] ? clear_bhb_loop+0x40/0x90 [ 1016.126533][T22738] ? clear_bhb_loop+0x40/0x90 [ 1016.131271][T22738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.137228][T22738] RIP: 0033:0x7fbb9b39cdd9 [ 1016.141686][T22738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.161338][T22738] RSP: 002b:00007fbb9c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.169801][T22738] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39cdd9 [ 1016.177823][T22738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1016.185830][T22738] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1016.193839][T22738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.201861][T22738] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffd4e2844a8 [ 1016.209908][T22738] [ 1016.542814][T22740] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1016.642465][T22740] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1016.654706][T22740] CPU: 1 PID: 22740 Comm: syz.2.5500 Not tainted syzkaller #0 [ 1016.662255][T22740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.672357][T22740] Call Trace: [ 1016.675678][T22740] [ 1016.678653][T22740] dump_stack_lvl+0x18c/0x250 [ 1016.683404][T22740] ? show_regs_print_info+0x20/0x20 [ 1016.688663][T22740] ? load_image+0x420/0x420 [ 1016.693235][T22740] ? kasan_save_alloc_info+0xb/0x30 [ 1016.698513][T22740] sysfs_warn_dup+0x8e/0xa0 [ 1016.703069][T22740] sysfs_do_create_link_sd+0xc0/0x110 [ 1016.708512][T22740] device_add_class_symlinks+0x1cf/0x240 [ 1016.714231][T22740] device_add+0x507/0xc20 [ 1016.718615][T22740] wiphy_register+0x1dad/0x2ae0 [ 1016.723608][T22740] ? cfg80211_event_work+0x40/0x40 [ 1016.728761][T22740] ? minstrel_ht_alloc+0x88a/0x990 [ 1016.733956][T22740] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1016.740081][T22740] ieee80211_register_hw+0x3464/0x4250 [ 1016.745609][T22740] ? ieee80211_tasklet_handler+0x20/0x20 [ 1016.751281][T22740] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1016.757235][T22740] ? __debug_object_init+0xec/0x450 [ 1016.762518][T22740] ? __asan_memset+0x22/0x40 [ 1016.767174][T22740] ? __hrtimer_init+0x186/0x270 [ 1016.772082][T22740] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1016.777885][T22740] ? mac80211_hwsim_free+0x220/0x220 [ 1016.783224][T22740] ? rcu_is_watching+0x15/0xb0 [ 1016.788037][T22740] ? kstrndup+0xbd/0x140 [ 1016.792335][T22740] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1016.797500][T22740] ? __nla_validate+0x50/0x50 [ 1016.802238][T22740] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1016.808631][T22740] ? __nla_parse+0x40/0x50 [ 1016.813124][T22740] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1016.819523][T22740] genl_family_rcv_msg_doit+0x211/0x310 [ 1016.825142][T22740] ? end_current_label_crit_section+0x170/0x170 [ 1016.831448][T22740] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1016.837411][T22740] ? bpf_lsm_capable+0x9/0x10 [ 1016.842148][T22740] ? security_capable+0x89/0xb0 [ 1016.847095][T22740] genl_rcv_msg+0x619/0x7a0 [ 1016.851656][T22740] ? genl_bind+0x360/0x360 [ 1016.856118][T22740] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1016.862525][T22740] netlink_rcv_skb+0x241/0x4d0 [ 1016.867383][T22740] ? genl_bind+0x360/0x360 [ 1016.871854][T22740] ? netlink_ack+0x1180/0x1180 [ 1016.876810][T22740] ? genl_bind+0x360/0x360 [ 1016.881277][T22740] genl_rcv+0x28/0x40 [ 1016.885300][T22740] netlink_unicast+0x751/0x8d0 [ 1016.890129][T22740] netlink_sendmsg+0x8d0/0xbf0 [ 1016.894974][T22740] ? netlink_getsockopt+0x590/0x590 [ 1016.900253][T22740] ? aa_sock_msg_perm+0x94/0x150 [ 1016.905251][T22740] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1016.910590][T22740] ? security_socket_sendmsg+0x80/0xa0 [ 1016.916101][T22740] ? netlink_getsockopt+0x590/0x590 [ 1016.921372][T22740] ____sys_sendmsg+0x5ba/0x960 [ 1016.926195][T22740] ? lockdep_hardirqs_on+0x98/0x150 [ 1016.931450][T22740] ? __sys_sendmsg_sock+0x30/0x30 [ 1016.936532][T22740] ? ___sys_sendmsg+0x28b/0x360 [ 1016.941446][T22740] ___sys_sendmsg+0x2a6/0x360 [ 1016.946174][T22740] ? __sys_sendmsg+0x2a0/0x2a0 [ 1016.951043][T22740] __se_sys_sendmsg+0x1c2/0x2b0 [ 1016.955944][T22740] ? __x64_sys_sendmsg+0x80/0x80 [ 1016.960951][T22740] ? lockdep_hardirqs_on+0x98/0x150 [ 1016.966207][T22740] do_syscall_64+0x55/0xa0 [ 1016.970671][T22740] ? clear_bhb_loop+0x40/0x90 [ 1016.975403][T22740] ? clear_bhb_loop+0x40/0x90 [ 1016.980143][T22740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.986100][T22740] RIP: 0033:0x7fa4ee19cdd9 [ 1016.990574][T22740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.010319][T22740] RSP: 002b:00007fa4ef117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.018789][T22740] RAX: ffffffffffffffda RBX: 00007fa4ee415fa0 RCX: 00007fa4ee19cdd9 [ 1017.026816][T22740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1017.034841][T22740] RBP: 00007fa4ee232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1017.042860][T22740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.050876][T22740] R13: 00007fa4ee416038 R14: 00007fa4ee415fa0 R15: 00007ffd816cc688 [ 1017.058938][T22740] [ 1017.265841][T22747] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5501'. [ 1017.308653][T22747] netlink: 22828 bytes leftover after parsing attributes in process `syz.0.5501'. [ 1017.605754][T22755] netlink: 'syz.2.5504': attribute type 2 has an invalid length. [ 1017.651332][T22755] netlink: 'syz.2.5504': attribute type 1 has an invalid length. [ 1017.713090][T22755] netlink: 'syz.2.5504': attribute type 1 has an invalid length. [ 1017.726871][T22755] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1017.978854][T22760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1018.558331][T22765] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1018.578841][T22765] CPU: 1 PID: 22765 Comm: syz.2.5509 Not tainted syzkaller #0 [ 1018.586409][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1018.596507][T22765] Call Trace: [ 1018.599834][T22765] [ 1018.602818][T22765] dump_stack_lvl+0x18c/0x250 [ 1018.607563][T22765] ? show_regs_print_info+0x20/0x20 [ 1018.612825][T22765] ? load_image+0x420/0x420 [ 1018.617420][T22765] sysfs_warn_dup+0x8e/0xa0 [ 1018.621973][T22765] sysfs_do_create_link_sd+0xc0/0x110 [ 1018.627412][T22765] device_add_class_symlinks+0x1cf/0x240 [ 1018.633118][T22765] device_add+0x507/0xc20 [ 1018.637528][T22765] wiphy_register+0x1dad/0x2ae0 [ 1018.642487][T22765] ? cfg80211_event_work+0x40/0x40 [ 1018.647650][T22765] ? minstrel_ht_alloc+0x88a/0x990 [ 1018.652841][T22765] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1018.658977][T22765] ieee80211_register_hw+0x3464/0x4250 [ 1018.664554][T22765] ? ieee80211_tasklet_handler+0x20/0x20 [ 1018.670235][T22765] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1018.676193][T22765] ? __debug_object_init+0xec/0x450 [ 1018.681453][T22765] ? __asan_memset+0x22/0x40 [ 1018.686105][T22765] ? __hrtimer_init+0x186/0x270 [ 1018.691028][T22765] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1018.696862][T22765] ? mac80211_hwsim_free+0x220/0x220 [ 1018.702190][T22765] ? rcu_is_watching+0x15/0xb0 [ 1018.707006][T22765] ? kstrndup+0xbd/0x140 [ 1018.711332][T22765] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1018.716516][T22765] ? __nla_validate+0x50/0x50 [ 1018.721274][T22765] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1018.727672][T22765] ? __nla_parse+0x24/0x50 [ 1018.732152][T22765] ? __nla_parse+0x40/0x50 [ 1018.736626][T22765] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1018.743015][T22765] genl_family_rcv_msg_doit+0x211/0x310 [ 1018.748611][T22765] ? end_current_label_crit_section+0x170/0x170 [ 1018.754921][T22765] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1018.760892][T22765] ? bpf_lsm_capable+0x9/0x10 [ 1018.765612][T22765] ? security_capable+0x89/0xb0 [ 1018.770540][T22765] genl_rcv_msg+0x619/0x7a0 [ 1018.775108][T22765] ? genl_bind+0x360/0x360 [ 1018.779571][T22765] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1018.785976][T22765] ? perf_trace_lock+0x304/0x3b0 [ 1018.791032][T22765] netlink_rcv_skb+0x241/0x4d0 [ 1018.795877][T22765] ? genl_bind+0x360/0x360 [ 1018.800346][T22765] ? netlink_ack+0x1180/0x1180 [ 1018.805223][T22765] ? __lock_acquire+0x7d40/0x7d40 [ 1018.810310][T22765] ? down_read+0x1ac/0x2e0 [ 1018.814782][T22765] genl_rcv+0x28/0x40 [ 1018.818810][T22765] netlink_unicast+0x751/0x8d0 [ 1018.823666][T22765] netlink_sendmsg+0x8d0/0xbf0 [ 1018.828544][T22765] ? netlink_getsockopt+0x590/0x590 [ 1018.833811][T22765] ? aa_sock_msg_perm+0x94/0x150 [ 1018.838817][T22765] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1018.844160][T22765] ? security_socket_sendmsg+0x80/0xa0 [ 1018.849695][T22765] ? netlink_getsockopt+0x590/0x590 [ 1018.854988][T22765] ____sys_sendmsg+0x5ba/0x960 [ 1018.859809][T22765] ? __asan_memset+0x22/0x40 [ 1018.864447][T22765] ? __sys_sendmsg_sock+0x30/0x30 [ 1018.869517][T22765] ? __import_iovec+0x5f2/0x850 [ 1018.874472][T22765] ? import_iovec+0x73/0xa0 [ 1018.879040][T22765] ___sys_sendmsg+0x2a6/0x360 [ 1018.883793][T22765] ? __sys_sendmsg+0x2a0/0x2a0 [ 1018.888755][T22765] __se_sys_sendmsg+0x1c2/0x2b0 [ 1018.893687][T22765] ? __x64_sys_sendmsg+0x80/0x80 [ 1018.898736][T22765] ? lockdep_hardirqs_on+0x98/0x150 [ 1018.903997][T22765] do_syscall_64+0x55/0xa0 [ 1018.908464][T22765] ? clear_bhb_loop+0x40/0x90 [ 1018.913191][T22765] ? clear_bhb_loop+0x40/0x90 [ 1018.917923][T22765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1018.923864][T22765] RIP: 0033:0x7fa4ee19cdd9 [ 1018.928329][T22765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.947981][T22765] RSP: 002b:00007fa4ef117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.956442][T22765] RAX: ffffffffffffffda RBX: 00007fa4ee415fa0 RCX: 00007fa4ee19cdd9 [ 1018.964493][T22765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1018.972535][T22765] RBP: 00007fa4ee232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1018.980558][T22765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.988587][T22765] R13: 00007fa4ee416038 R14: 00007fa4ee415fa0 R15: 00007ffd816cc688 [ 1018.996660][T22765] [ 1019.135398][T22770] wg2: entered promiscuous mode [ 1019.140378][T22770] wg2: entered allmulticast mode [ 1019.409854][T22774] __nla_validate_parse: 1 callbacks suppressed [ 1019.409892][T22774] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5520'. [ 1019.472029][T22774] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1019.518229][T22774] CPU: 0 PID: 22774 Comm: syz.0.5520 Not tainted syzkaller #0 [ 1019.525914][T22774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.536033][T22774] Call Trace: [ 1019.539364][T22774] [ 1019.542345][T22774] dump_stack_lvl+0x18c/0x250 [ 1019.547187][T22774] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1019.553419][T22774] ? show_regs_print_info+0x20/0x20 [ 1019.558701][T22774] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1019.564966][T22774] sysfs_warn_dup+0x8e/0xa0 [ 1019.569521][T22774] sysfs_do_create_link_sd+0xc0/0x110 [ 1019.574961][T22774] device_add_class_symlinks+0x1cf/0x240 [ 1019.580667][T22774] device_add+0x507/0xc20 [ 1019.585093][T22774] wiphy_register+0x1dad/0x2ae0 [ 1019.590014][T22774] ? cfg80211_event_work+0x40/0x40 [ 1019.595179][T22774] ? minstrel_ht_alloc+0x88a/0x990 [ 1019.600357][T22774] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1019.606483][T22774] ieee80211_register_hw+0x3464/0x4250 [ 1019.612028][T22774] ? ieee80211_tasklet_handler+0x20/0x20 [ 1019.617728][T22774] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1019.623701][T22774] ? __debug_object_init+0xec/0x450 [ 1019.628978][T22774] ? __asan_memset+0x22/0x40 [ 1019.633634][T22774] ? __hrtimer_init+0x186/0x270 [ 1019.638540][T22774] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1019.644347][T22774] ? mac80211_hwsim_free+0x220/0x220 [ 1019.649699][T22774] ? rcu_is_watching+0x15/0xb0 [ 1019.654576][T22774] ? kstrndup+0xbd/0x140 [ 1019.658888][T22774] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1019.664075][T22774] ? __nla_validate+0x50/0x50 [ 1019.668820][T22774] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1019.675222][T22774] ? __nla_parse+0x40/0x50 [ 1019.679746][T22774] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1019.686320][T22774] genl_family_rcv_msg_doit+0x211/0x310 [ 1019.688395][T22781] netlink: 'syz.3.5513': attribute type 3 has an invalid length. [ 1019.691906][T22774] ? end_current_label_crit_section+0x170/0x170 [ 1019.705964][T22774] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1019.711925][T22774] ? bpf_lsm_capable+0x9/0x10 [ 1019.716655][T22774] ? security_capable+0x89/0xb0 [ 1019.721583][T22774] genl_rcv_msg+0x619/0x7a0 [ 1019.726162][T22774] ? genl_bind+0x360/0x360 [ 1019.730632][T22774] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1019.737027][T22774] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1019.742843][T22774] netlink_rcv_skb+0x241/0x4d0 [ 1019.747690][T22774] ? genl_bind+0x360/0x360 [ 1019.752171][T22774] ? netlink_ack+0x1180/0x1180 [ 1019.754876][T22781] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5513'. [ 1019.756987][T22774] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1019.772545][T22774] ? down_read+0x1ac/0x2e0 [ 1019.777024][T22774] genl_rcv+0x28/0x40 [ 1019.781052][T22774] netlink_unicast+0x751/0x8d0 [ 1019.785906][T22774] netlink_sendmsg+0x8d0/0xbf0 [ 1019.790749][T22774] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1019.797001][T22774] ? netlink_getsockopt+0x590/0x590 [ 1019.802285][T22774] ? aa_sock_msg_perm+0x94/0x150 [ 1019.807297][T22774] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1019.812651][T22774] ? security_socket_sendmsg+0x80/0xa0 [ 1019.818171][T22774] ? netlink_getsockopt+0x590/0x590 [ 1019.823432][T22774] ____sys_sendmsg+0x5ba/0x960 [ 1019.828260][T22774] ? __asan_memset+0x22/0x40 [ 1019.832906][T22774] ? __sys_sendmsg_sock+0x30/0x30 [ 1019.837979][T22774] ? __import_iovec+0x5f2/0x850 [ 1019.842910][T22774] ? import_iovec+0x73/0xa0 [ 1019.847463][T22774] ___sys_sendmsg+0x2a6/0x360 [ 1019.852218][T22774] ? __sys_sendmsg+0x2a0/0x2a0 [ 1019.857084][T22774] __se_sys_sendmsg+0x1c2/0x2b0 [ 1019.861988][T22774] ? __x64_sys_sendmsg+0x80/0x80 [ 1019.867003][T22774] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1019.872957][T22774] do_syscall_64+0x55/0xa0 [ 1019.877417][T22774] ? clear_bhb_loop+0x40/0x90 [ 1019.882160][T22774] ? clear_bhb_loop+0x40/0x90 [ 1019.886902][T22774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.892873][T22774] RIP: 0033:0x7fbb9b39cdd9 [ 1019.897327][T22774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.916964][T22774] RSP: 002b:00007fbb9c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.925418][T22774] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39cdd9 [ 1019.933416][T22774] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1019.941436][T22774] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1019.949439][T22774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.957451][T22774] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffd4e2844a8 [ 1019.965463][T22774] [ 1020.068952][T22780] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5512'. [ 1020.095181][T22780] netlink: 22828 bytes leftover after parsing attributes in process `syz.2.5512'. [ 1020.459577][T22795] netlink: 'syz.3.5516': attribute type 21 has an invalid length. [ 1020.669406][T22801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5518'. [ 1021.204723][T22813] wg2: entered promiscuous mode [ 1021.256821][T22813] wg2: entered allmulticast mode [ 1021.473132][T22814] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1021.540961][T22814] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1021.565896][T22814] CPU: 0 PID: 22814 Comm: syz.0.5524 Not tainted syzkaller #0 [ 1021.573447][T22814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1021.583569][T22814] Call Trace: [ 1021.586910][T22814] [ 1021.589896][T22814] dump_stack_lvl+0x18c/0x250 [ 1021.594659][T22814] ? show_regs_print_info+0x20/0x20 [ 1021.599951][T22814] ? load_image+0x420/0x420 [ 1021.604527][T22814] sysfs_warn_dup+0x8e/0xa0 [ 1021.609097][T22814] sysfs_do_create_link_sd+0xc0/0x110 [ 1021.614534][T22814] device_add_class_symlinks+0x1cf/0x240 [ 1021.620220][T22814] device_add+0x507/0xc20 [ 1021.624602][T22814] wiphy_register+0x1dad/0x2ae0 [ 1021.629539][T22814] ? cfg80211_event_work+0x40/0x40 [ 1021.634708][T22814] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1021.640939][T22814] ieee80211_register_hw+0x3464/0x4250 [ 1021.646474][T22814] ? ieee80211_tasklet_handler+0x20/0x20 [ 1021.652199][T22814] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1021.658223][T22814] ? __debug_object_init+0xec/0x450 [ 1021.663468][T22814] ? __asan_memset+0x22/0x40 [ 1021.668098][T22814] ? __hrtimer_init+0x186/0x270 [ 1021.672981][T22814] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1021.678754][T22814] ? mac80211_hwsim_free+0x220/0x220 [ 1021.684069][T22814] ? rcu_is_watching+0x15/0xb0 [ 1021.688878][T22814] ? kstrndup+0xbd/0x140 [ 1021.693166][T22814] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1021.698321][T22814] ? __nla_validate+0x50/0x50 [ 1021.703034][T22814] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1021.709403][T22814] ? __nla_parse+0x40/0x50 [ 1021.713850][T22814] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1021.720211][T22814] genl_family_rcv_msg_doit+0x211/0x310 [ 1021.725785][T22814] ? end_current_label_crit_section+0x170/0x170 [ 1021.732071][T22814] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1021.737994][T22814] ? bpf_lsm_capable+0x9/0x10 [ 1021.742706][T22814] ? security_capable+0x89/0xb0 [ 1021.747606][T22814] genl_rcv_msg+0x619/0x7a0 [ 1021.752138][T22814] ? genl_bind+0x360/0x360 [ 1021.756573][T22814] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1021.762933][T22814] netlink_rcv_skb+0x241/0x4d0 [ 1021.767735][T22814] ? genl_bind+0x360/0x360 [ 1021.772174][T22814] ? netlink_ack+0x1180/0x1180 [ 1021.776981][T22814] ? __lock_acquire+0x7d40/0x7d40 [ 1021.782041][T22814] ? down_read+0x1ac/0x2e0 [ 1021.786491][T22814] genl_rcv+0x28/0x40 [ 1021.790504][T22814] netlink_unicast+0x751/0x8d0 [ 1021.795327][T22814] netlink_sendmsg+0x8d0/0xbf0 [ 1021.800136][T22814] ? perf_trace_lock+0x304/0x3b0 [ 1021.805102][T22814] ? netlink_getsockopt+0x590/0x590 [ 1021.810330][T22814] ? aa_sock_msg_perm+0x94/0x150 [ 1021.815333][T22814] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1021.820655][T22814] ? security_socket_sendmsg+0x80/0xa0 [ 1021.826144][T22814] ? netlink_getsockopt+0x590/0x590 [ 1021.831370][T22814] ____sys_sendmsg+0x5ba/0x960 [ 1021.836173][T22814] ? __asan_memset+0x22/0x40 [ 1021.840799][T22814] ? __sys_sendmsg_sock+0x30/0x30 [ 1021.845870][T22814] ? __import_iovec+0x5f2/0x850 [ 1021.850771][T22814] ? import_iovec+0x73/0xa0 [ 1021.855315][T22814] ___sys_sendmsg+0x2a6/0x360 [ 1021.860034][T22814] ? __sys_sendmsg+0x2a0/0x2a0 [ 1021.864876][T22814] __se_sys_sendmsg+0x1c2/0x2b0 [ 1021.869763][T22814] ? __x64_sys_sendmsg+0x80/0x80 [ 1021.874742][T22814] ? lockdep_hardirqs_on+0x98/0x150 [ 1021.879974][T22814] do_syscall_64+0x55/0xa0 [ 1021.884412][T22814] ? clear_bhb_loop+0x40/0x90 [ 1021.889130][T22814] ? clear_bhb_loop+0x40/0x90 [ 1021.893850][T22814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1021.899774][T22814] RIP: 0033:0x7fbb9b39cdd9 [ 1021.904213][T22814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.923844][T22814] RSP: 002b:00007fbb9c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.932289][T22814] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39cdd9 [ 1021.940286][T22814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1021.948275][T22814] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1021.956265][T22814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.964254][T22814] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffd4e2844a8 [ 1021.972376][T22814] [ 1022.084812][T22816] netlink: 'syz.2.5525': attribute type 3 has an invalid length. [ 1022.098720][T22816] netlink: 'syz.2.5525': attribute type 6 has an invalid length. [ 1022.118580][T22816] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.5525'. [ 1022.263206][T22818] FAULT_INJECTION: forcing a failure. [ 1022.263206][T22818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.277921][T22818] CPU: 0 PID: 22818 Comm: syz.3.5526 Not tainted syzkaller #0 [ 1022.285464][T22818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.295562][T22818] Call Trace: [ 1022.298882][T22818] [ 1022.301860][T22818] dump_stack_lvl+0x18c/0x250 [ 1022.306609][T22818] ? show_regs_print_info+0x20/0x20 [ 1022.311879][T22818] ? load_image+0x420/0x420 [ 1022.316446][T22818] ? __might_fault+0xaa/0x120 [ 1022.321174][T22818] ? __lock_acquire+0x7d40/0x7d40 [ 1022.326261][T22818] should_fail_ex+0x39d/0x4d0 [ 1022.331007][T22818] fpu__restore_sig+0x21d/0x11c0 [ 1022.336033][T22818] ? copy_fpstate_to_sigframe+0xc60/0xc60 [ 1022.341924][T22818] ? __lock_acquire+0x7d40/0x7d40 [ 1022.347008][T22818] ? __might_fault+0xc6/0x120 [ 1022.351740][T22818] ? __might_fault+0xaa/0x120 [ 1022.356553][T22818] __ia32_sys_rt_sigreturn+0x6e2/0x860 [ 1022.362082][T22818] ? x64_setup_rt_frame+0xc40/0xc40 [ 1022.367365][T22818] ? lock_chain_count+0x20/0x20 [ 1022.372270][T22818] ? lockdep_hardirqs_on+0x98/0x150 [ 1022.377558][T22818] do_syscall_64+0x55/0xa0 [ 1022.382018][T22818] ? clear_bhb_loop+0x40/0x90 [ 1022.386741][T22818] ? clear_bhb_loop+0x40/0x90 [ 1022.391467][T22818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.397418][T22818] RIP: 0033:0x7f093eb9cdd9 [ 1022.401869][T22818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.421521][T22818] RSP: 002b:00007f093fb07028 EFLAGS: 00000246 [ 1022.427633][T22818] RAX: 0000000000000000 RBX: 00007f093ee15fa0 RCX: 00007f093eb9cdd9 [ 1022.435642][T22818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1022.443655][T22818] RBP: 00007f093fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.451677][T22818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.459695][T22818] R13: 00007f093ee16038 R14: 00007f093ee15fa0 R15: 00007ffda9fa80d8 [ 1022.467729][T22818] [ 1023.157194][T22841] netlink: 'syz.2.5532': attribute type 2 has an invalid length. [ 1023.230281][T22841] netlink: 'syz.2.5532': attribute type 1 has an invalid length. [ 1023.336741][T22841] netlink: 'syz.2.5532': attribute type 1 has an invalid length. [ 1023.364702][T22841] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1024.124990][T22855] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1024.171294][T22855] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1024.195999][T22855] CPU: 0 PID: 22855 Comm: syz.3.5536 Not tainted syzkaller #0 [ 1024.203573][T22855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1024.213764][T22855] Call Trace: [ 1024.217081][T22855] [ 1024.220042][T22855] dump_stack_lvl+0x18c/0x250 [ 1024.224815][T22855] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.231022][T22855] ? show_regs_print_info+0x20/0x20 [ 1024.236263][T22855] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.242451][T22855] ? dump_stack+0x9/0x20 [ 1024.246728][T22855] sysfs_warn_dup+0x8e/0xa0 [ 1024.251259][T22855] sysfs_do_create_link_sd+0xc0/0x110 [ 1024.256663][T22855] device_add_class_symlinks+0x1cf/0x240 [ 1024.262328][T22855] device_add+0x507/0xc20 [ 1024.266692][T22855] wiphy_register+0x1dad/0x2ae0 [ 1024.271583][T22855] ? cfg80211_event_work+0x40/0x40 [ 1024.276716][T22855] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.282910][T22855] ? ieee80211_register_hw+0x33b5/0x4250 [ 1024.288585][T22855] ieee80211_register_hw+0x3464/0x4250 [ 1024.294088][T22855] ? ieee80211_tasklet_handler+0x20/0x20 [ 1024.299747][T22855] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1024.305670][T22855] ? __debug_object_init+0xec/0x450 [ 1024.310900][T22855] ? __asan_memset+0x22/0x40 [ 1024.315526][T22855] ? __hrtimer_init+0x186/0x270 [ 1024.320405][T22855] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1024.326172][T22855] ? mac80211_hwsim_free+0x220/0x220 [ 1024.331479][T22855] ? rcu_is_watching+0x15/0xb0 [ 1024.336277][T22855] ? kstrndup+0xbd/0x140 [ 1024.340560][T22855] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1024.345705][T22855] ? lock_chain_count+0x20/0x20 [ 1024.350594][T22855] ? __nla_validate+0x50/0x50 [ 1024.355329][T22855] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1024.361693][T22855] ? __nla_parse+0x24/0x50 [ 1024.366134][T22855] ? __nla_validate_parse+0x5/0x2ea0 [ 1024.371449][T22855] ? __nla_parse+0x40/0x50 [ 1024.375905][T22855] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1024.382270][T22855] genl_family_rcv_msg_doit+0x211/0x310 [ 1024.387863][T22855] ? end_current_label_crit_section+0x170/0x170 [ 1024.394149][T22855] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1024.400123][T22855] ? bpf_lsm_capable+0x9/0x10 [ 1024.404858][T22855] ? security_capable+0x89/0xb0 [ 1024.409772][T22855] genl_rcv_msg+0x619/0x7a0 [ 1024.414327][T22855] ? genl_bind+0x360/0x360 [ 1024.418773][T22855] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1024.425135][T22855] ? netlink_rcv_skb+0x1dd/0x4d0 [ 1024.430109][T22855] netlink_rcv_skb+0x241/0x4d0 [ 1024.434904][T22855] ? genl_bind+0x360/0x360 [ 1024.439350][T22855] ? netlink_ack+0x1180/0x1180 [ 1024.444203][T22855] ? __lock_acquire+0x7d40/0x7d40 [ 1024.449282][T22855] ? down_read+0x1ac/0x2e0 [ 1024.453734][T22855] genl_rcv+0x28/0x40 [ 1024.457746][T22855] netlink_unicast+0x751/0x8d0 [ 1024.462554][T22855] netlink_sendmsg+0x8d0/0xbf0 [ 1024.467357][T22855] ? netlink_getsockopt+0x590/0x590 [ 1024.472592][T22855] ? aa_sock_msg_perm+0x94/0x150 [ 1024.477579][T22855] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1024.482896][T22855] ? security_socket_sendmsg+0x80/0xa0 [ 1024.488385][T22855] ? netlink_getsockopt+0x590/0x590 [ 1024.493635][T22855] ____sys_sendmsg+0x5ba/0x960 [ 1024.498433][T22855] ? __asan_memset+0x22/0x40 [ 1024.503090][T22855] ? __sys_sendmsg_sock+0x30/0x30 [ 1024.508139][T22855] ? __import_iovec+0x5f2/0x850 [ 1024.513020][T22855] ? import_iovec+0x73/0xa0 [ 1024.517557][T22855] ___sys_sendmsg+0x2a6/0x360 [ 1024.522280][T22855] ? __sys_sendmsg+0x2a0/0x2a0 [ 1024.527115][T22855] __se_sys_sendmsg+0x1c2/0x2b0 [ 1024.531992][T22855] ? __x64_sys_sendmsg+0x80/0x80 [ 1024.536979][T22855] ? lockdep_hardirqs_on+0x98/0x150 [ 1024.542218][T22855] do_syscall_64+0x55/0xa0 [ 1024.546667][T22855] ? clear_bhb_loop+0x40/0x90 [ 1024.551385][T22855] ? clear_bhb_loop+0x40/0x90 [ 1024.556116][T22855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.562044][T22855] RIP: 0033:0x7f093eb9cdd9 [ 1024.566490][T22855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.586129][T22855] RSP: 002b:00007f093fb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.594584][T22855] RAX: ffffffffffffffda RBX: 00007f093ee15fa0 RCX: 00007f093eb9cdd9 [ 1024.602586][T22855] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1024.610587][T22855] RBP: 00007f093ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1024.618586][T22855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.626581][T22855] R13: 00007f093ee16038 R14: 00007f093ee15fa0 R15: 00007ffda9fa80d8 [ 1024.634591][T22855] [ 1025.048838][T22864] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5539'. [ 1025.629847][T22870] netlink: 'syz.2.5541': attribute type 9 has an invalid length. [ 1025.667844][T22870] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1025.965039][T20085] Bluetooth: hci1: command 0x0406 tx timeout [ 1026.037366][T22873] netlink: 'syz.2.5541': attribute type 9 has an invalid length. [ 1026.094521][T22873] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1026.188247][T22879] netlink: 'syz.3.5543': attribute type 16 has an invalid length. [ 1026.219889][T22879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5543'. [ 1026.479370][T22887] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1026.538136][T22887] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1026.554690][T22887] CPU: 0 PID: 22887 Comm: syz.3.5547 Not tainted syzkaller #0 [ 1026.562237][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1026.572360][T22887] Call Trace: [ 1026.575676][T22887] [ 1026.578634][T22887] dump_stack_lvl+0x18c/0x250 [ 1026.583372][T22887] ? show_regs_print_info+0x20/0x20 [ 1026.588612][T22887] ? load_image+0x420/0x420 [ 1026.593165][T22887] sysfs_warn_dup+0x8e/0xa0 [ 1026.597706][T22887] sysfs_do_create_link_sd+0xc0/0x110 [ 1026.603141][T22887] device_add_class_symlinks+0x1cf/0x240 [ 1026.608822][T22887] device_add+0x507/0xc20 [ 1026.613187][T22887] wiphy_register+0x1dad/0x2ae0 [ 1026.618076][T22887] ? cfg80211_event_work+0x40/0x40 [ 1026.623205][T22887] ? minstrel_ht_alloc+0x88a/0x990 [ 1026.628354][T22887] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1026.634457][T22887] ieee80211_register_hw+0x3464/0x4250 [ 1026.639970][T22887] ? ieee80211_tasklet_handler+0x20/0x20 [ 1026.645629][T22887] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1026.651555][T22887] ? __debug_object_init+0xec/0x450 [ 1026.656793][T22887] ? __asan_memset+0x22/0x40 [ 1026.661412][T22887] ? __hrtimer_init+0x186/0x270 [ 1026.666295][T22887] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1026.672063][T22887] ? mac80211_hwsim_free+0x220/0x220 [ 1026.677379][T22887] ? rcu_is_watching+0x15/0xb0 [ 1026.682173][T22887] ? kstrndup+0xbd/0x140 [ 1026.686460][T22887] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1026.691599][T22887] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1026.697348][T22887] ? mark_lock+0x94/0x320 [ 1026.701744][T22887] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1026.708114][T22887] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1026.714319][T22887] ? lockdep_hardirqs_on+0x98/0x150 [ 1026.719559][T22887] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1026.725785][T22887] genl_family_rcv_msg_doit+0x211/0x310 [ 1026.731358][T22887] ? end_current_label_crit_section+0x170/0x170 [ 1026.737635][T22887] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1026.743559][T22887] ? bpf_lsm_capable+0x9/0x10 [ 1026.748289][T22887] ? security_capable+0x89/0xb0 [ 1026.753183][T22887] genl_rcv_msg+0x619/0x7a0 [ 1026.757723][T22887] ? genl_bind+0x360/0x360 [ 1026.762167][T22887] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1026.768534][T22887] netlink_rcv_skb+0x241/0x4d0 [ 1026.773333][T22887] ? genl_bind+0x360/0x360 [ 1026.777774][T22887] ? netlink_ack+0x1180/0x1180 [ 1026.782578][T22887] ? __lock_acquire+0x7d40/0x7d40 [ 1026.787638][T22887] ? down_read+0x1ac/0x2e0 [ 1026.792079][T22887] genl_rcv+0x28/0x40 [ 1026.796087][T22887] netlink_unicast+0x751/0x8d0 [ 1026.800893][T22887] netlink_sendmsg+0x8d0/0xbf0 [ 1026.805701][T22887] ? netlink_getsockopt+0x590/0x590 [ 1026.810937][T22887] ? aa_sock_msg_perm+0x94/0x150 [ 1026.815909][T22887] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1026.821229][T22887] ? security_socket_sendmsg+0x80/0xa0 [ 1026.826733][T22887] ? netlink_getsockopt+0x590/0x590 [ 1026.831990][T22887] ____sys_sendmsg+0x5ba/0x960 [ 1026.836786][T22887] ? __asan_memset+0x22/0x40 [ 1026.841434][T22887] ? __sys_sendmsg_sock+0x30/0x30 [ 1026.846493][T22887] ? __import_iovec+0x5f2/0x850 [ 1026.851409][T22887] ? import_iovec+0x73/0xa0 [ 1026.855944][T22887] ___sys_sendmsg+0x2a6/0x360 [ 1026.860658][T22887] ? __sys_sendmsg+0x2a0/0x2a0 [ 1026.865455][T22887] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1026.871480][T22887] ? lockdep_hardirqs_on+0x98/0x150 [ 1026.876727][T22887] ? kasan_check_range+0x8f/0x290 [ 1026.881788][T22887] __se_sys_sendmsg+0x1c2/0x2b0 [ 1026.886674][T22887] ? __x64_sys_sendmsg+0x80/0x80 [ 1026.891659][T22887] ? lockdep_hardirqs_on+0x98/0x150 [ 1026.896893][T22887] do_syscall_64+0x55/0xa0 [ 1026.901334][T22887] ? clear_bhb_loop+0x40/0x90 [ 1026.906054][T22887] ? clear_bhb_loop+0x40/0x90 [ 1026.910779][T22887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.916708][T22887] RIP: 0033:0x7f093eb9cdd9 [ 1026.921151][T22887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.940792][T22887] RSP: 002b:00007f093fb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.949265][T22887] RAX: ffffffffffffffda RBX: 00007f093ee15fa0 RCX: 00007f093eb9cdd9 [ 1026.957275][T22887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1026.965273][T22887] RBP: 00007f093ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1026.973275][T22887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.981283][T22887] R13: 00007f093ee16038 R14: 00007f093ee15fa0 R15: 00007ffda9fa80d8 [ 1026.989306][T22887] [ 1027.270267][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5550'. [ 1027.463595][T22896] netlink: 'syz.0.5548': attribute type 29 has an invalid length. [ 1027.504976][T22896] netlink: 'syz.0.5548': attribute type 29 has an invalid length. [ 1027.515394][T22907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5549'. [ 1027.539528][T22907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5549'. [ 1027.575579][T22907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5549'. [ 1027.824660][T22912] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1028.505730][T22919] netlink: 'syz.2.5553': attribute type 23 has an invalid length. [ 1029.141288][T22927] netlink: 'syz.1.5556': attribute type 153 has an invalid length. [ 1029.168967][T22931] FAULT_INJECTION: forcing a failure. [ 1029.168967][T22931] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.184719][T22927] netlink: 'syz.1.5556': attribute type 1 has an invalid length. [ 1029.228873][T22931] CPU: 1 PID: 22931 Comm: syz.3.5558 Not tainted syzkaller #0 [ 1029.236444][T22931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.246554][T22931] Call Trace: [ 1029.249890][T22931] [ 1029.252906][T22931] dump_stack_lvl+0x18c/0x250 [ 1029.257658][T22931] ? show_regs_print_info+0x20/0x20 [ 1029.262923][T22931] ? load_image+0x420/0x420 [ 1029.267487][T22931] ? __might_sleep+0xe0/0xe0 [ 1029.272133][T22931] ? __lock_acquire+0x7d40/0x7d40 [ 1029.277209][T22931] should_fail_ex+0x39d/0x4d0 [ 1029.281967][T22931] should_failslab+0x9/0x20 [ 1029.286516][T22931] slab_pre_alloc_hook+0x59/0x310 [ 1029.291571][T22931] ? apparmor_sk_alloc_security+0x77/0x100 [ 1029.297408][T22931] __kmem_cache_alloc_node+0x53/0x250 [ 1029.302816][T22931] ? apparmor_sk_alloc_security+0x77/0x100 [ 1029.308658][T22931] kmalloc_trace+0x2a/0xe0 [ 1029.313113][T22931] apparmor_sk_alloc_security+0x77/0x100 [ 1029.318778][T22931] security_sk_alloc+0x6e/0xa0 [ 1029.323573][T22931] sk_prot_alloc+0x101/0x210 [ 1029.328187][T22931] ? sk_alloc+0x24/0x360 [ 1029.332458][T22931] sk_alloc+0x3a/0x360 [ 1029.336563][T22931] ? bpf_ctx_init+0x163/0x1a0 [ 1029.341266][T22931] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 1029.346847][T22931] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 1029.352244][T22931] ? __fget_files+0x28/0x4b0 [ 1029.356859][T22931] ? __fget_files+0x28/0x4b0 [ 1029.361476][T22931] ? __fget_files+0x43d/0x4b0 [ 1029.366194][T22931] ? cpu_online+0x60/0x60 [ 1029.370556][T22931] bpf_prog_test_run+0x321/0x390 [ 1029.375518][T22931] __sys_bpf+0x49d/0x890 [ 1029.379787][T22931] ? bpf_link_show_fdinfo+0x390/0x390 [ 1029.385196][T22931] ? lock_chain_count+0x20/0x20 [ 1029.390064][T22931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1029.396089][T22931] __x64_sys_bpf+0x7c/0x90 [ 1029.400533][T22931] do_syscall_64+0x55/0xa0 [ 1029.404979][T22931] ? clear_bhb_loop+0x40/0x90 [ 1029.409697][T22931] ? clear_bhb_loop+0x40/0x90 [ 1029.414399][T22931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.420345][T22931] RIP: 0033:0x7f093eb9cdd9 [ 1029.424783][T22931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.444421][T22931] RSP: 002b:00007f093fb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1029.452878][T22931] RAX: ffffffffffffffda RBX: 00007f093ee15fa0 RCX: 00007f093eb9cdd9 [ 1029.460878][T22931] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 1029.468881][T22931] RBP: 00007f093fb07090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.476888][T22931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.484873][T22931] R13: 00007f093ee16038 R14: 00007f093ee15fa0 R15: 00007ffda9fa80d8 [ 1029.492881][T22931] [ 1029.496208][T22925] netlink: 'syz.1.5556': attribute type 10 has an invalid length. [ 1029.524856][T22925] mac80211_hwsim hwsim123 wlan1: left allmulticast mode [ 1029.555416][T22925] mac80211_hwsim hwsim123 wlan1: entered promiscuous mode [ 1029.563955][T22925] mac80211_hwsim hwsim123 wlan1: entered allmulticast mode [ 1029.612752][T22925] team0: Port device wlan1 added [ 1032.268217][T22940] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1032.345212][T22940] CPU: 1 PID: 22940 Comm: syz.2.5559 Not tainted syzkaller #0 [ 1032.352773][T22940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1032.362881][T22940] Call Trace: [ 1032.366230][T22940] [ 1032.369209][T22940] dump_stack_lvl+0x18c/0x250 [ 1032.373951][T22940] ? show_regs_print_info+0x20/0x20 [ 1032.379207][T22940] ? load_image+0x420/0x420 [ 1032.383797][T22940] sysfs_warn_dup+0x8e/0xa0 [ 1032.388376][T22940] sysfs_do_create_link_sd+0xc0/0x110 [ 1032.393794][T22940] device_add_class_symlinks+0x1cf/0x240 [ 1032.399505][T22940] device_add+0x507/0xc20 [ 1032.403898][T22940] wiphy_register+0x1dad/0x2ae0 [ 1032.408822][T22940] ? cfg80211_event_work+0x40/0x40 [ 1032.413978][T22940] ? minstrel_ht_alloc+0x88a/0x990 [ 1032.419147][T22940] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1032.425277][T22940] ieee80211_register_hw+0x3464/0x4250 [ 1032.430808][T22940] ? ieee80211_tasklet_handler+0x20/0x20 [ 1032.436480][T22940] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1032.442435][T22940] ? __debug_object_init+0xec/0x450 [ 1032.447700][T22940] ? __asan_memset+0x22/0x40 [ 1032.452337][T22940] ? __hrtimer_init+0x186/0x270 [ 1032.457240][T22940] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1032.463026][T22940] ? mac80211_hwsim_free+0x220/0x220 [ 1032.468350][T22940] ? rcu_is_watching+0x15/0xb0 [ 1032.473175][T22940] ? kstrndup+0xbd/0x140 [ 1032.477482][T22940] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1032.482639][T22940] ? __nla_validate+0x50/0x50 [ 1032.487370][T22940] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1032.493807][T22940] ? __nla_parse+0x40/0x50 [ 1032.498303][T22940] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1032.504731][T22940] genl_family_rcv_msg_doit+0x211/0x310 [ 1032.510318][T22940] ? end_current_label_crit_section+0x170/0x170 [ 1032.516612][T22940] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1032.522563][T22940] ? bpf_lsm_capable+0x9/0x10 [ 1032.527286][T22940] ? security_capable+0x89/0xb0 [ 1032.532205][T22940] genl_rcv_msg+0x619/0x7a0 [ 1032.536757][T22940] ? genl_bind+0x360/0x360 [ 1032.541221][T22940] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1032.547603][T22940] ? ref_tracker_free+0x690/0x840 [ 1032.552688][T22940] netlink_rcv_skb+0x241/0x4d0 [ 1032.557516][T22940] ? genl_bind+0x360/0x360 [ 1032.561989][T22940] ? netlink_ack+0x1180/0x1180 [ 1032.566851][T22940] ? __lock_acquire+0x7d40/0x7d40 [ 1032.571924][T22940] ? down_read+0x1ac/0x2e0 [ 1032.576385][T22940] genl_rcv+0x28/0x40 [ 1032.580415][T22940] netlink_unicast+0x751/0x8d0 [ 1032.585241][T22940] netlink_sendmsg+0x8d0/0xbf0 [ 1032.590063][T22940] ? kasan_set_track+0x4e/0x70 [ 1032.594884][T22940] ? netlink_getsockopt+0x590/0x590 [ 1032.600140][T22940] ? aa_sock_msg_perm+0x94/0x150 [ 1032.605125][T22940] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1032.610458][T22940] ? security_socket_sendmsg+0x80/0xa0 [ 1032.615961][T22940] ? netlink_getsockopt+0x590/0x590 [ 1032.621216][T22940] ____sys_sendmsg+0x5ba/0x960 [ 1032.626025][T22940] ? __asan_memset+0x22/0x40 [ 1032.630670][T22940] ? __sys_sendmsg_sock+0x30/0x30 [ 1032.635733][T22940] ? __import_iovec+0x5f2/0x850 [ 1032.640642][T22940] ? import_iovec+0x73/0xa0 [ 1032.645185][T22940] ___sys_sendmsg+0x2a6/0x360 [ 1032.649887][T22940] ? __lock_acquire+0x7d40/0x7d40 [ 1032.654945][T22940] ? __sys_sendmsg+0x2a0/0x2a0 [ 1032.659800][T22940] __se_sys_sendmsg+0x1c2/0x2b0 [ 1032.664693][T22940] ? __x64_sys_sendmsg+0x80/0x80 [ 1032.669684][T22940] ? lockdep_hardirqs_on+0x98/0x150 [ 1032.674917][T22940] do_syscall_64+0x55/0xa0 [ 1032.679355][T22940] ? clear_bhb_loop+0x40/0x90 [ 1032.684059][T22940] ? clear_bhb_loop+0x40/0x90 [ 1032.688769][T22940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1032.694698][T22940] RIP: 0033:0x7fa4ee19cdd9 [ 1032.699138][T22940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.718778][T22940] RSP: 002b:00007fa4ef0f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.727222][T22940] RAX: ffffffffffffffda RBX: 00007fa4ee416090 RCX: 00007fa4ee19cdd9 [ 1032.735233][T22940] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1032.743233][T22940] RBP: 00007fa4ee232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1032.751232][T22940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.759263][T22940] R13: 00007fa4ee416128 R14: 00007fa4ee416090 R15: 00007ffd816cc688 [ 1032.767290][T22940] [ 1032.995890][T22950] __nla_validate_parse: 3 callbacks suppressed [ 1032.995915][T22950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1033.062722][T22951] syzkaller0: entered promiscuous mode [ 1033.071170][T22951] syzkaller0: entered allmulticast mode [ 1033.086357][T22950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1033.096985][T22952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1033.359544][T22954] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5565'. [ 1033.704358][T22960] netlink: 'syz.3.5568': attribute type 2 has an invalid length. [ 1033.789311][T22963] netlink: 'syz.3.5568': attribute type 1 has an invalid length. [ 1033.837989][T22960] netlink: 'syz.3.5568': attribute type 1 has an invalid length. [ 1033.942231][T22960] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5568'. [ 1034.129696][T22967] netlink: 'syz.0.5569': attribute type 10 has an invalid length. [ 1034.202901][T22967] team0: Port device wlan1 added [ 1034.295659][T22962] netlink: 'syz.0.5569': attribute type 153 has an invalid length. [ 1034.374053][T22962] netlink: 'syz.0.5569': attribute type 1 has an invalid length. [ 1034.395717][T22962] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1034.526383][T22975] netlink: 'syz.2.5571': attribute type 16 has an invalid length. [ 1034.574712][T22975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5571'. [ 1034.723237][T22980] netlink: 'syz.1.5573': attribute type 10 has an invalid length. [ 1034.772505][T22983] netlink: 'syz.1.5573': attribute type 9 has an invalid length. [ 1034.841765][T22983] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5573'. [ 1035.013207][T22980] bond0: (slave geneve0): Releasing backup interface [ 1035.162757][T22989] netlink: 'syz.3.5570': attribute type 21 has an invalid length. [ 1035.280713][T22978] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1035.315605][T22978] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1035.343694][T22994] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1035.366523][T22994] CPU: 1 PID: 22994 Comm: syz.2.5574 Not tainted syzkaller #0 [ 1035.374074][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.384164][T22994] Call Trace: [ 1035.387493][T22994] [ 1035.390478][T22994] dump_stack_lvl+0x18c/0x250 [ 1035.395241][T22994] ? show_regs_print_info+0x20/0x20 [ 1035.400528][T22994] ? load_image+0x420/0x420 [ 1035.405113][T22994] sysfs_warn_dup+0x8e/0xa0 [ 1035.409674][T22994] sysfs_do_create_link_sd+0xc0/0x110 [ 1035.415111][T22994] device_add_class_symlinks+0x1cf/0x240 [ 1035.420826][T22994] device_add+0x507/0xc20 [ 1035.425218][T22994] wiphy_register+0x1dad/0x2ae0 [ 1035.430148][T22994] ? cfg80211_event_work+0x40/0x40 [ 1035.435318][T22994] ? minstrel_ht_alloc+0x88a/0x990 [ 1035.440506][T22994] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1035.446646][T22994] ieee80211_register_hw+0x3464/0x4250 [ 1035.452188][T22994] ? ieee80211_tasklet_handler+0x20/0x20 [ 1035.457877][T22994] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1035.463844][T22994] ? __debug_object_init+0xec/0x450 [ 1035.469115][T22994] ? __asan_memset+0x22/0x40 [ 1035.473817][T22994] ? __hrtimer_init+0x186/0x270 [ 1035.478732][T22994] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1035.484534][T22994] ? mac80211_hwsim_free+0x220/0x220 [ 1035.489869][T22994] ? rcu_is_watching+0x15/0xb0 [ 1035.494688][T22994] ? kstrndup+0xbd/0x140 [ 1035.499012][T22994] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1035.504182][T22994] ? __nla_validate+0x50/0x50 [ 1035.508923][T22994] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1035.515321][T22994] ? __nla_parse+0x40/0x50 [ 1035.519790][T22994] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1035.526178][T22994] genl_family_rcv_msg_doit+0x211/0x310 [ 1035.531771][T22994] ? end_current_label_crit_section+0x170/0x170 [ 1035.538071][T22994] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1035.544018][T22994] ? bpf_lsm_capable+0x9/0x10 [ 1035.548773][T22994] ? security_capable+0x89/0xb0 [ 1035.553693][T22994] genl_rcv_msg+0x619/0x7a0 [ 1035.558259][T22994] ? genl_bind+0x360/0x360 [ 1035.562722][T22994] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1035.569108][T22994] ? ref_tracker_free+0x690/0x840 [ 1035.574191][T22994] netlink_rcv_skb+0x241/0x4d0 [ 1035.579008][T22994] ? genl_bind+0x360/0x360 [ 1035.583477][T22994] ? netlink_ack+0x1180/0x1180 [ 1035.588310][T22994] ? __lock_acquire+0x7d40/0x7d40 [ 1035.593389][T22994] ? down_read+0x1ac/0x2e0 [ 1035.597859][T22994] genl_rcv+0x28/0x40 [ 1035.601883][T22994] netlink_unicast+0x751/0x8d0 [ 1035.606720][T22994] netlink_sendmsg+0x8d0/0xbf0 [ 1035.611543][T22994] ? kasan_set_track+0x4e/0x70 [ 1035.616370][T22994] ? netlink_getsockopt+0x590/0x590 [ 1035.621632][T22994] ? aa_sock_msg_perm+0x94/0x150 [ 1035.626638][T22994] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1035.631979][T22994] ? security_socket_sendmsg+0x80/0xa0 [ 1035.637494][T22994] ? netlink_getsockopt+0x590/0x590 [ 1035.642762][T22994] ____sys_sendmsg+0x5ba/0x960 [ 1035.647588][T22994] ? __asan_memset+0x22/0x40 [ 1035.652239][T22994] ? __sys_sendmsg_sock+0x30/0x30 [ 1035.657330][T22994] ? __import_iovec+0x5f2/0x850 [ 1035.662252][T22994] ? import_iovec+0x73/0xa0 [ 1035.666824][T22994] ___sys_sendmsg+0x2a6/0x360 [ 1035.671552][T22994] ? __lock_acquire+0x7d40/0x7d40 [ 1035.676653][T22994] ? __sys_sendmsg+0x2a0/0x2a0 [ 1035.681531][T22994] __se_sys_sendmsg+0x1c2/0x2b0 [ 1035.686441][T22994] ? __x64_sys_sendmsg+0x80/0x80 [ 1035.691445][T22994] ? lockdep_hardirqs_on+0x98/0x150 [ 1035.696860][T22994] do_syscall_64+0x55/0xa0 [ 1035.701310][T22994] ? clear_bhb_loop+0x40/0x90 [ 1035.706026][T22994] ? clear_bhb_loop+0x40/0x90 [ 1035.710729][T22994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.716655][T22994] RIP: 0033:0x7fa4ee19cdd9 [ 1035.721111][T22994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.740758][T22994] RSP: 002b:00007fa4ef0f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.749202][T22994] RAX: ffffffffffffffda RBX: 00007fa4ee416090 RCX: 00007fa4ee19cdd9 [ 1035.757205][T22994] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1035.765201][T22994] RBP: 00007fa4ee232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1035.773201][T22994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.781200][T22994] R13: 00007fa4ee416128 R14: 00007fa4ee416090 R15: 00007ffd816cc688 [ 1035.789210][T22994] [ 1035.843654][T23000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1036.144836][T23011] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1036.175391][T23011] dvmrp1: linktype set to 804 [ 1036.194106][T23011] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 1036.214709][T23011] dvmrp1: persist enabled [ 1036.364067][T23013] mac80211_hwsim hwsim120 wlan1: left allmulticast mode [ 1036.449470][T23013] team0: Port device wlan1 added [ 1037.237731][T23032] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1037.256958][T23032] CPU: 0 PID: 23032 Comm: syz.3.5586 Not tainted syzkaller #0 [ 1037.264495][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1037.274593][T23032] Call Trace: [ 1037.277919][T23032] [ 1037.280892][T23032] dump_stack_lvl+0x18c/0x250 [ 1037.285638][T23032] ? show_regs_print_info+0x20/0x20 [ 1037.290903][T23032] ? load_image+0x420/0x420 [ 1037.295456][T23032] sysfs_warn_dup+0x8e/0xa0 [ 1037.299988][T23032] sysfs_do_create_link_sd+0xc0/0x110 [ 1037.305388][T23032] device_add_class_symlinks+0x1cf/0x240 [ 1037.311055][T23032] device_add+0x507/0xc20 [ 1037.315416][T23032] wiphy_register+0x1dad/0x2ae0 [ 1037.320303][T23032] ? cfg80211_event_work+0x40/0x40 [ 1037.325438][T23032] ? minstrel_ht_alloc+0x88a/0x990 [ 1037.330590][T23032] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1037.336701][T23032] ieee80211_register_hw+0x3464/0x4250 [ 1037.342291][T23032] ? ieee80211_tasklet_handler+0x20/0x20 [ 1037.347972][T23032] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1037.353901][T23032] ? __debug_object_init+0xec/0x450 [ 1037.359144][T23032] ? __asan_memset+0x22/0x40 [ 1037.363788][T23032] ? __hrtimer_init+0x186/0x270 [ 1037.368670][T23032] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1037.374436][T23032] ? mac80211_hwsim_free+0x220/0x220 [ 1037.379752][T23032] ? rcu_is_watching+0x15/0xb0 [ 1037.384572][T23032] ? kstrndup+0xbd/0x140 [ 1037.388865][T23032] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1037.394002][T23032] ? __nla_validate+0x50/0x50 [ 1037.398724][T23032] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1037.405095][T23032] ? __nla_parse+0x40/0x50 [ 1037.409550][T23032] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1037.415910][T23032] genl_family_rcv_msg_doit+0x211/0x310 [ 1037.421484][T23032] ? end_current_label_crit_section+0x170/0x170 [ 1037.427756][T23032] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1037.433678][T23032] ? bpf_lsm_capable+0x9/0x10 [ 1037.438391][T23032] ? security_capable+0x89/0xb0 [ 1037.443295][T23032] genl_rcv_msg+0x619/0x7a0 [ 1037.447845][T23032] ? genl_bind+0x360/0x360 [ 1037.452289][T23032] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1037.458655][T23032] netlink_rcv_skb+0x241/0x4d0 [ 1037.463457][T23032] ? genl_bind+0x360/0x360 [ 1037.467892][T23032] ? netlink_ack+0x1180/0x1180 [ 1037.472721][T23032] ? __lock_acquire+0x7d40/0x7d40 [ 1037.477785][T23032] ? down_read+0x1ac/0x2e0 [ 1037.482231][T23032] genl_rcv+0x28/0x40 [ 1037.486238][T23032] netlink_unicast+0x751/0x8d0 [ 1037.491062][T23032] netlink_sendmsg+0x8d0/0xbf0 [ 1037.495875][T23032] ? netlink_getsockopt+0x590/0x590 [ 1037.501111][T23032] ? aa_sock_msg_perm+0x94/0x150 [ 1037.506095][T23032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1037.511415][T23032] ? security_socket_sendmsg+0x80/0xa0 [ 1037.516901][T23032] ? netlink_getsockopt+0x590/0x590 [ 1037.522167][T23032] ____sys_sendmsg+0x5ba/0x960 [ 1037.526966][T23032] ? __asan_memset+0x22/0x40 [ 1037.531588][T23032] ? __sys_sendmsg_sock+0x30/0x30 [ 1037.536643][T23032] ? __import_iovec+0x5f2/0x850 [ 1037.541540][T23032] ? import_iovec+0x73/0xa0 [ 1037.546068][T23032] ___sys_sendmsg+0x2a6/0x360 [ 1037.550775][T23032] ? __sys_sendmsg+0x2a0/0x2a0 [ 1037.555626][T23032] __se_sys_sendmsg+0x1c2/0x2b0 [ 1037.560512][T23032] ? __x64_sys_sendmsg+0x80/0x80 [ 1037.565498][T23032] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.570733][T23032] do_syscall_64+0x55/0xa0 [ 1037.575168][T23032] ? clear_bhb_loop+0x40/0x90 [ 1037.579877][T23032] ? clear_bhb_loop+0x40/0x90 [ 1037.584579][T23032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.590497][T23032] RIP: 0033:0x7f093eb9cdd9 [ 1037.594931][T23032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.614565][T23032] RSP: 002b:00007f093fb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.623012][T23032] RAX: ffffffffffffffda RBX: 00007f093ee15fa0 RCX: 00007f093eb9cdd9 [ 1037.631012][T23032] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1037.639011][T23032] RBP: 00007f093ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1037.647194][T23032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.655191][T23032] R13: 00007f093ee16038 R14: 00007f093ee15fa0 R15: 00007ffda9fa80d8 [ 1037.663308][T23032] [ 1037.765917][T23042] caif0: entered promiscuous mode [ 1037.771252][T23042] caif0: entered allmulticast mode [ 1037.777575][T23042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1037.931444][T23041] syzkaller0: entered promiscuous mode [ 1037.957954][T23041] syzkaller0: entered allmulticast mode [ 1038.076128][T23057] __nla_validate_parse: 9 callbacks suppressed [ 1038.076151][T23057] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5594'. [ 1038.110747][T23053] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5593'. [ 1038.151215][T23057] openvswitch: netlink: Flow key attr not present in new flow. [ 1040.498354][T23048] validate_nla: 9 callbacks suppressed [ 1040.498373][T23048] netlink: 'syz.3.5592': attribute type 21 has an invalid length. [ 1040.673241][T23066] netlink: 'syz.1.5597': attribute type 2 has an invalid length. [ 1040.697756][T23069] netlink: 'syz.3.5598': attribute type 16 has an invalid length. [ 1040.722374][T23069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5598'. [ 1040.780095][T23073] netlink: 'syz.1.5597': attribute type 1 has an invalid length. [ 1040.820808][T23066] netlink: 'syz.1.5597': attribute type 1 has an invalid length. [ 1040.855172][T23073] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.5597'. [ 1040.894914][T23072] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5599'. [ 1040.927628][T23072] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5599'. [ 1041.140060][T23080] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5600'. [ 1041.198217][T23080] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1041.230915][T23080] CPU: 1 PID: 23080 Comm: syz.3.5600 Not tainted syzkaller #0 [ 1041.238494][T23080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.248600][T23080] Call Trace: [ 1041.251935][T23080] [ 1041.254913][T23080] dump_stack_lvl+0x18c/0x250 [ 1041.259665][T23080] ? show_regs_print_info+0x20/0x20 [ 1041.264925][T23080] ? load_image+0x420/0x420 [ 1041.269500][T23080] sysfs_warn_dup+0x8e/0xa0 [ 1041.274053][T23080] sysfs_do_create_link_sd+0xc0/0x110 [ 1041.279493][T23080] device_add_class_symlinks+0x1cf/0x240 [ 1041.285228][T23080] device_add+0x507/0xc20 [ 1041.289596][T23080] wiphy_register+0x1dad/0x2ae0 [ 1041.294510][T23080] ? cfg80211_event_work+0x40/0x40 [ 1041.299658][T23080] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1041.305856][T23080] ? ieee80211_register_hw+0x3299/0x4250 [ 1041.311511][T23080] ieee80211_register_hw+0x3464/0x4250 [ 1041.317032][T23080] ? ieee80211_tasklet_handler+0x20/0x20 [ 1041.322682][T23080] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1041.328634][T23080] ? __debug_object_init+0xec/0x450 [ 1041.333885][T23080] ? __asan_memset+0x22/0x40 [ 1041.338526][T23080] ? __hrtimer_init+0x186/0x270 [ 1041.343410][T23080] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1041.349213][T23080] ? mac80211_hwsim_free+0x220/0x220 [ 1041.354536][T23080] ? hwsim_new_radio_nl+0xdb9/0x1a90 [ 1041.359849][T23080] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1041.364993][T23080] ? __nla_validate+0x50/0x50 [ 1041.369703][T23080] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1041.376070][T23080] ? __nla_parse+0x40/0x50 [ 1041.380519][T23080] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1041.386878][T23080] genl_family_rcv_msg_doit+0x211/0x310 [ 1041.392450][T23080] ? end_current_label_crit_section+0x170/0x170 [ 1041.398731][T23080] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1041.404657][T23080] ? bpf_lsm_capable+0x9/0x10 [ 1041.409369][T23080] ? security_capable+0x89/0xb0 [ 1041.414261][T23080] genl_rcv_msg+0x619/0x7a0 [ 1041.418798][T23080] ? genl_bind+0x360/0x360 [ 1041.423237][T23080] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1041.429591][T23080] ? kasan_check_range+0xa8/0x290 [ 1041.434653][T23080] netlink_rcv_skb+0x241/0x4d0 [ 1041.439455][T23080] ? genl_bind+0x360/0x360 [ 1041.443893][T23080] ? netlink_ack+0x1180/0x1180 [ 1041.448704][T23080] ? __lock_acquire+0x7d40/0x7d40 [ 1041.453767][T23080] ? down_read+0x1ac/0x2e0 [ 1041.458215][T23080] genl_rcv+0x28/0x40 [ 1041.462222][T23080] netlink_unicast+0x751/0x8d0 [ 1041.467026][T23080] netlink_sendmsg+0x8d0/0xbf0 [ 1041.471840][T23080] ? netlink_getsockopt+0x590/0x590 [ 1041.477073][T23080] ? aa_sock_msg_perm+0x94/0x150 [ 1041.482040][T23080] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1041.487354][T23080] ? security_socket_sendmsg+0x80/0xa0 [ 1041.492838][T23080] ? netlink_getsockopt+0x590/0x590 [ 1041.498082][T23080] ____sys_sendmsg+0x5ba/0x960 [ 1041.502887][T23080] ? __asan_memset+0x22/0x40 [ 1041.507509][T23080] ? __sys_sendmsg_sock+0x30/0x30 [ 1041.512555][T23080] ? __import_iovec+0x5f2/0x850 [ 1041.517432][T23080] ? import_iovec+0x73/0xa0 [ 1041.521960][T23080] ___sys_sendmsg+0x2a6/0x360 [ 1041.526661][T23080] ? __sys_sendmsg+0x2a0/0x2a0 [ 1041.531495][T23080] __se_sys_sendmsg+0x1c2/0x2b0 [ 1041.536368][T23080] ? __x64_sys_sendmsg+0x80/0x80 [ 1041.541345][T23080] ? lockdep_hardirqs_on+0x98/0x150 [ 1041.546582][T23080] do_syscall_64+0x55/0xa0 [ 1041.551018][T23080] ? clear_bhb_loop+0x40/0x90 [ 1041.555728][T23080] ? clear_bhb_loop+0x40/0x90 [ 1041.560464][T23080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.566385][T23080] RIP: 0033:0x7f093eb9cdd9 [ 1041.570829][T23080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.590484][T23080] RSP: 002b:00007f093fb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.598923][T23080] RAX: ffffffffffffffda RBX: 00007f093ee15fa0 RCX: 00007f093eb9cdd9 [ 1041.606942][T23080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1041.614987][T23080] RBP: 00007f093ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1041.622990][T23080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.630986][T23080] R13: 00007f093ee16038 R14: 00007f093ee15fa0 R15: 00007ffda9fa80d8 [ 1041.639016][T23080] [ 1041.647525][T20085] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.920690][T23091] netlink: 'syz.3.5603': attribute type 10 has an invalid length. [ 1041.929511][T23091] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.5603'. [ 1042.382165][T23094] syzkaller0: entered promiscuous mode [ 1042.388426][T23094] syzkaller0: entered allmulticast mode [ 1042.608812][T23114] netlink: 'syz.3.5607': attribute type 21 has an invalid length. [ 1042.810210][T23118] netlink: 'syz.1.5610': attribute type 1 has an invalid length. [ 1042.827606][T23118] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.5610'. [ 1043.239355][T23120] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1044.819358][T23116] netlink: 'syz.1.5610': attribute type 2 has an invalid length. [ 1044.832113][T23117] netlink: 'syz.1.5610': attribute type 1 has an invalid length. [ 1044.846071][T23120] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1044.970138][T23126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5612'. [ 1045.051111][T23130] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5613'. [ 1045.110741][T23130] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1045.134972][T23130] CPU: 0 PID: 23130 Comm: syz.0.5613 Not tainted syzkaller #0 [ 1045.142538][T23130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1045.152641][T23130] Call Trace: [ 1045.155952][T23130] [ 1045.158916][T23130] dump_stack_lvl+0x18c/0x250 [ 1045.163642][T23130] ? show_regs_print_info+0x20/0x20 [ 1045.168887][T23130] ? load_image+0x420/0x420 [ 1045.173452][T23130] sysfs_warn_dup+0x8e/0xa0 [ 1045.178000][T23130] sysfs_do_create_link_sd+0xc0/0x110 [ 1045.183402][T23130] device_add_class_symlinks+0x1cf/0x240 [ 1045.189070][T23130] device_add+0x507/0xc20 [ 1045.193441][T23130] wiphy_register+0x1dad/0x2ae0 [ 1045.198424][T23130] ? cfg80211_event_work+0x40/0x40 [ 1045.203586][T23130] ? minstrel_ht_alloc+0x88a/0x990 [ 1045.208766][T23130] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1045.214892][T23130] ieee80211_register_hw+0x3464/0x4250 [ 1045.220420][T23130] ? ieee80211_tasklet_handler+0x20/0x20 [ 1045.226089][T23130] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1045.232021][T23130] ? __debug_object_init+0xec/0x450 [ 1045.237259][T23130] ? __asan_memset+0x22/0x40 [ 1045.241889][T23130] ? __hrtimer_init+0x186/0x270 [ 1045.246789][T23130] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1045.252552][T23130] ? mac80211_hwsim_free+0x220/0x220 [ 1045.257867][T23130] ? rcu_is_watching+0x15/0xb0 [ 1045.262665][T23130] ? kstrndup+0xbd/0x140 [ 1045.266960][T23130] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1045.272105][T23130] ? __nla_validate+0x50/0x50 [ 1045.276817][T23130] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1045.283181][T23130] ? __nla_parse+0x40/0x50 [ 1045.287628][T23130] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1045.293987][T23130] genl_family_rcv_msg_doit+0x211/0x310 [ 1045.299558][T23130] ? end_current_label_crit_section+0x170/0x170 [ 1045.305839][T23130] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1045.311851][T23130] ? bpf_lsm_capable+0x9/0x10 [ 1045.316563][T23130] ? security_capable+0x89/0xb0 [ 1045.321463][T23130] genl_rcv_msg+0x619/0x7a0 [ 1045.326002][T23130] ? genl_bind+0x360/0x360 [ 1045.330445][T23130] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1045.336451][T23130] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1045.342871][T23130] ? ref_tracker_free+0x690/0x840 [ 1045.347957][T23130] netlink_rcv_skb+0x241/0x4d0 [ 1045.352758][T23130] ? genl_bind+0x360/0x360 [ 1045.357200][T23130] ? netlink_ack+0x1180/0x1180 [ 1045.362011][T23130] ? __lock_acquire+0x7d40/0x7d40 [ 1045.367084][T23130] ? down_read+0x1ac/0x2e0 [ 1045.371531][T23130] genl_rcv+0x28/0x40 [ 1045.375551][T23130] netlink_unicast+0x751/0x8d0 [ 1045.380358][T23130] netlink_sendmsg+0x8d0/0xbf0 [ 1045.385161][T23130] ? lockdep_hardirqs_on+0x98/0x150 [ 1045.390395][T23130] ? netlink_getsockopt+0x590/0x590 [ 1045.395663][T23130] ? aa_sock_msg_perm+0x94/0x150 [ 1045.400633][T23130] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1045.405941][T23130] ? security_socket_sendmsg+0x80/0xa0 [ 1045.411419][T23130] ? netlink_getsockopt+0x590/0x590 [ 1045.416658][T23130] ____sys_sendmsg+0x5ba/0x960 [ 1045.421459][T23130] ? __asan_memset+0x22/0x40 [ 1045.426080][T23130] ? __sys_sendmsg_sock+0x30/0x30 [ 1045.431125][T23130] ? __import_iovec+0x5f2/0x850 [ 1045.436026][T23130] ? import_iovec+0x73/0xa0 [ 1045.440559][T23130] ___sys_sendmsg+0x2a6/0x360 [ 1045.445277][T23130] ? __sys_sendmsg+0x2a0/0x2a0 [ 1045.450093][T23130] ? lock_chain_count+0x20/0x20 [ 1045.454990][T23130] __se_sys_sendmsg+0x1c2/0x2b0 [ 1045.459866][T23130] ? __x64_sys_sendmsg+0x80/0x80 [ 1045.464846][T23130] ? lockdep_hardirqs_on+0x98/0x150 [ 1045.470078][T23130] do_syscall_64+0x55/0xa0 [ 1045.474527][T23130] ? clear_bhb_loop+0x40/0x90 [ 1045.479246][T23130] ? clear_bhb_loop+0x40/0x90 [ 1045.483957][T23130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1045.489886][T23130] RIP: 0033:0x7fbb9b39cdd9 [ 1045.494327][T23130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.513965][T23130] RSP: 002b:00007fbb9c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1045.522421][T23130] RAX: ffffffffffffffda RBX: 00007fbb9b615fa0 RCX: 00007fbb9b39cdd9 [ 1045.530423][T23130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1045.538423][T23130] RBP: 00007fbb9b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1045.546436][T23130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.554434][T23130] R13: 00007fbb9b616038 R14: 00007fbb9b615fa0 R15: 00007ffd4e2844a8 [ 1045.562448][T23130] [ 1045.623726][T23138] validate_nla: 1 callbacks suppressed [ 1045.623742][T23138] netlink: 'syz.2.5617': attribute type 13 has an invalid length. [ 1045.652771][T23138] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5617'. [ 1045.720732][T23138] erspan0: refused to change device tx_queue_len [ 1045.744523][T23138] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1045.932739][T23148] netlink: 'syz.2.5620': attribute type 2 has an invalid length. [ 1045.960818][T23148] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 1045.963487][ T5769] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1046.004298][T23148] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 1046.012719][T23148] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5620'. [ 1046.153249][ C0] [ 1046.153260][ C0] ================================ [ 1046.153267][ C0] WARNING: inconsistent lock state [ 1046.153277][ C0] syzkaller #0 Not tainted [ 1046.153288][ C0] -------------------------------- [ 1046.153292][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1046.153301][ C0] syz.1.5622/23151 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1046.153323][ C0] ffff888077fc9238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 1046.153385][ C0] {INITIAL USE} state was registered at: [ 1046.153396][ C0] lock_acquire+0x19e/0x420 [ 1046.153419][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1046.153441][ C0] trie_delete_elem+0x96/0x6a0 [ 1046.153463][ C0] generic_map_delete_batch+0x423/0x6d0 [ 1046.153476][ C0] bpf_map_do_batch+0x477/0x610 [ 1046.153492][ C0] __sys_bpf+0x69e/0x890 [ 1046.153505][ C0] __x64_sys_bpf+0x7c/0x90 [ 1046.153518][ C0] do_syscall_64+0x55/0xa0 [ 1046.153531][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1046.153550][ C0] irq event stamp: 4258 [ 1046.153555][ C0] hardirqs last enabled at (4257): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1046.153581][ C0] hardirqs last disabled at (4258): [] exc_debug+0x73/0x140 [ 1046.153600][ C0] softirqs last enabled at (4030): [] netlink_insert+0x109f/0x13a0 [ 1046.153627][ C0] softirqs last disabled at (4026): [] release_sock+0x2f/0x1c0 [ 1046.153650][ C0] [ 1046.153650][ C0] other info that might help us debug this: [ 1046.153655][ C0] Possible unsafe locking scenario: [ 1046.153655][ C0] [ 1046.153659][ C0] CPU0 [ 1046.153662][ C0] ---- [ 1046.153665][ C0] lock(&trie->lock); [ 1046.153675][ C0] [ 1046.153679][ C0] lock(&trie->lock); [ 1046.153689][ C0] [ 1046.153689][ C0] *** DEADLOCK *** [ 1046.153689][ C0] [ 1046.153693][ C0] no locks held by syz.1.5622/23151. [ 1046.153701][ C0] [ 1046.153701][ C0] stack backtrace: [ 1046.153707][ C0] CPU: 0 PID: 23151 Comm: syz.1.5622 Not tainted syzkaller #0 [ 1046.153724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.153736][ C0] Call Trace: [ 1046.153743][ C0] <#DB> [ 1046.153751][ C0] dump_stack_lvl+0x18c/0x250 [ 1046.153782][ C0] ? show_regs_print_info+0x20/0x20 [ 1046.153815][ C0] ? print_usage_bug+0x475/0x690 [ 1046.153837][ C0] ? verify_lock_unused+0x18/0x140 [ 1046.153861][ C0] lock_acquire+0x2c2/0x420 [ 1046.153884][ C0] ? trie_delete_elem+0x96/0x6a0 [ 1046.153909][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1046.153930][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 1046.153956][ C0] ? __perf_cgroup_move+0x60/0x60 [ 1046.153976][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1046.153998][ C0] ? trie_delete_elem+0x96/0x6a0 [ 1046.154022][ C0] ? _raw_spin_lock+0x40/0x40 [ 1046.154043][ C0] ? perf_prepare_sample+0x156d/0x1df0 [ 1046.154065][ C0] trie_delete_elem+0x96/0x6a0 [ 1046.154091][ C0] ? __cant_sleep+0x220/0x220 [ 1046.154120][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1046.154140][ C0] bpf_overflow_handler+0x1fc/0x510 [ 1046.154165][ C0] ? irq_work_queue+0xbc/0x140 [ 1046.154185][ C0] ? __perf_event_overflow+0x4f1/0x630 [ 1046.154204][ C0] ? bpf_overflow_handler+0xde/0x510 [ 1046.154239][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 1046.154269][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1046.154292][ C0] __perf_event_overflow+0x447/0x630 [ 1046.154317][ C0] perf_swevent_event+0x319/0x570 [ 1046.154340][ C0] ? perf_tp_event+0x1520/0x1520 [ 1046.154361][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 1046.154398][ C0] perf_bp_event+0x319/0x430 [ 1046.154421][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 1046.154441][ C0] ? rcu_is_watching+0x15/0xb0 [ 1046.154466][ C0] ? lock_release+0xb5/0x8c0 [ 1046.154499][ C0] ? lock_acquire+0x2c2/0x420 [ 1046.154522][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1046.154549][ C0] notifier_call_chain+0x197/0x380 [ 1046.154575][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 1046.154600][ C0] atomic_notifier_call_chain+0xda/0x180 [ 1046.154625][ C0] notify_die+0x145/0x1a0 [ 1046.154650][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1046.154678][ C0] ? rcu_is_watching+0x15/0xb0 [ 1046.154704][ C0] notify_debug+0x2e/0x50 [ 1046.154721][ C0] exc_debug+0xde/0x140 [ 1046.154741][ C0] asm_exc_debug+0x1e/0x40 [ 1046.154762][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1046.154783][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1046.154800][ C0] RSP: 0018:ffffc9000361f938 EFLAGS: 00050206 [ 1046.154816][ C0] RAX: ffffffff8427e501 RBX: 000000000000fe33 RCX: 000000000000fb73 [ 1046.154830][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc9000404f2c0 [ 1046.154843][ C0] RBP: ffffc9000361fa90 R08: ffffc9000405ee32 R09: 1ffff9200080bdc6 [ 1046.154856][ C0] R10: dffffc0000000000 R11: fffff5200080bdc7 R12: ffffc9000404f000 [ 1046.154870][ C0] R13: 0000200000000080 R14: ffffc9000361fc18 R15: 1ffff920006c3f83 [ 1046.154887][ C0] ? _copy_from_iter+0x201/0x12e0 [ 1046.154921][ C0] [ 1046.154927][ C0] [ 1046.154933][ C0] _copy_from_iter+0x24e/0x12e0 [ 1046.154961][ C0] ? find_vmap_area+0xfc/0x110 [ 1046.154985][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1046.155008][ C0] ? copyout_mc+0x70/0x70 [ 1046.155034][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1046.155060][ C0] ? _raw_spin_unlock+0x28/0x40 [ 1046.155082][ C0] ? find_vmap_area+0xfc/0x110 [ 1046.155105][ C0] ? __check_object_size+0x506/0xa20 [ 1046.155125][ C0] netlink_sendmsg+0x76b/0xbf0 [ 1046.155154][ C0] ? tomoyo_socket_sendmsg_permission+0xb9/0x2f0 [ 1046.155180][ C0] ? netlink_getsockopt+0x590/0x590 [ 1046.155209][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 1046.155233][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1046.155256][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 1046.155280][ C0] sock_write_iter+0x2df/0x420 [ 1046.155303][ C0] ? sock_read_iter+0x3e0/0x3e0 [ 1046.155328][ C0] ? common_file_perm+0x198/0x1f0 [ 1046.155375][ C0] vfs_write+0x46c/0x990 [ 1046.155409][ C0] ? file_end_write+0x250/0x250 [ 1046.155454][ C0] ? __fget_files+0x43d/0x4b0 [ 1046.155488][ C0] ? __fdget_pos+0x1d8/0x330 [ 1046.155512][ C0] ? ksys_write+0x75/0x260 [ 1046.155539][ C0] ksys_write+0x150/0x260 [ 1046.155567][ C0] ? __ia32_sys_read+0x90/0x90 [ 1046.155596][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1046.155623][ C0] do_syscall_64+0x55/0xa0 [ 1046.155641][ C0] ? clear_bhb_loop+0x40/0x90 [ 1046.155665][ C0] ? clear_bhb_loop+0x40/0x90 [ 1046.155691][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1046.155714][ C0] RIP: 0033:0x7fe2f619cdd9 [ 1046.155729][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.155747][ C0] RSP: 002b:00007fe2f7108028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1046.155767][ C0] RAX: ffffffffffffffda RBX: 00007fe2f6415fa0 RCX: 00007fe2f619cdd9 [ 1046.155781][ C0] RDX: 000000000000fe33 RSI: 0000200000000080 RDI: 000000000000000e [ 1046.155794][ C0] RBP: 00007fe2f6232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1046.155807][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.155819][ C0] R13: 00007fe2f6416038 R14: 00007fe2f6415fa0 R15: 00007ffe287828a8 [ 1046.155842][ C0] [ 1046.218331][T23154] netlink: 'syz.0.5624': attribute type 16 has an invalid length. [ 1046.915373][T23154] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5624'. [ 1046.937247][T23151] netlink: 'syz.1.5622': attribute type 1 has an invalid length. [ 1046.986005][T23163] netlink: 'syz.3.5623': attribute type 21 has an invalid length. [ 1048.035009][ T5769] Bluetooth: hci4: command 0x0406 tx timeout [ 1054.598719][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.605145][ T1282] ieee802154 phy1 wpan1: encryption failed: -22