last executing test programs:

14m47.114499416s ago: executing program 2 (id=35):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x15)

14m46.670514523s ago: executing program 2 (id=37):
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
close(0xffffffffffffffff)

14m46.26948072s ago: executing program 2 (id=40):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b0000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x9e, &(0x7f0000000980)=""/158, 0x40f00, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x1000, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x3, 0x1, 0x7}, {0x4, 0x3, 0x4, 0x7}], 0x10, 0x10001}, 0x94)
r1 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x305500, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x86, &(0x7f0000000080)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004000000000000000002000000000000000000000000000003000000000300000001000000000000000000e1432cbd4802d2366cf2c03d75a3c01b5ac168e5e9895bda4d508fca73e78ad4060c521aac39f82dab2e8b4f84b4b49b8aab693d1d0c9ac8014e81f5b7f20fae4b4cff715b58688354d506e80c6b39960cc967c2481f7a410eb98a585ec9dc286bbf5e21c6038cf841334e03c5f671f461130fd2ba8d56"], 0x0, 0x4a}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14m45.207838967s ago: executing program 2 (id=46):
r0 = gettid()
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000003c0)=0x1000, 0x12)
r3 = openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0)=r0, 0x12)
write$cgroup_int(r2, &(0x7f0000000100), 0x12)

14m44.210476283s ago: executing program 2 (id=51):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000f000004000000000100", @ANYRES32, @ANYBLOB="010100"/19, @ANYRES32=0x0, @ANYBLOB="0000000003000000030000"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff000000000083"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

14m43.829948829s ago: executing program 2 (id=53):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0}, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r7)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)

14m28.045282076s ago: executing program 32 (id=53):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, 0x0}, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r7)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)

14m14.487258696s ago: executing program 1 (id=161):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x9e, &(0x7f0000000980)=""/158, 0x40f00, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x1000, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x3, 0x1, 0x7}, {0x4, 0x3, 0x4, 0x7}], 0x10, 0x10001}, 0x94)
r1 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x305500, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x86, &(0x7f0000000080)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004000000000000000002000000000000000000000000000003000000000300000001000000000000000000e1432cbd4802d2366cf2c03d75a3c01b5ac168e5e9895bda4d508fca73e78ad4060c521aac39f82dab2e8b4f84b4b49b8aab693d1d0c9ac8014e81f5b7f20fae4b4cff715b58688354d506e80c6b39960cc967c2481f7a410eb98a585ec9dc286bbf5e21c6038cf841334e03c5f671f461130fd2ba8d56"], 0x0, 0x4a}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14m13.261479806s ago: executing program 1 (id=163):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r1, 0x0, 0x1ba8847c99}, 0x38)

14m12.250872412s ago: executing program 1 (id=167):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x200000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

14m11.808538609s ago: executing program 1 (id=168):
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
close(0xffffffffffffffff)

14m11.19497223s ago: executing program 1 (id=170):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14m10.718442397s ago: executing program 1 (id=173):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/226, 0xe2}], 0x1}, 0x3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r5)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)

13m55.564318563s ago: executing program 33 (id=173):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000d00)={&(0x7f0000000300), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/226, 0xe2}], 0x1}, 0x3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r5)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90)

7.131813788s ago: executing program 5 (id=4284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x301001, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081044e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x308)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

6.498240669s ago: executing program 6 (id=4288):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0xc0045878, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

6.250750513s ago: executing program 3 (id=4290):
r0 = socket$kcm(0xa, 0x3, 0x73)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000080000000000000000400000095000000000000009500100000000000"], &(0x7f0000000100)='GPL\x00', 0x80000071, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x8, 0x6}, 0x10, 0x1369c, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0x10, 0xa}], 0x10, 0x2}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r3)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003d)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r3}, 0xc)
mkdirat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x1ff)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)

6.194746645s ago: executing program 4 (id=4291):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x82, &(0x7f0000000000), 0x8)
sendmsg$inet(r2, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000025000000001800000020646c2500000000002020207b1af82100000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003400000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x95, &(0x7f0000000000)=""/149}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000))
recvmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1}, 0x10142)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x10, 0x0, 0x5, 0x4, 0x0, 0x800, 0x800, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x10008, 0x8000, 0x7, 0x7, 0x4, 0x7, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x10, r1, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700", 0x2c}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="1731484e6e9c", 0x6}], 0x1}, 0xc000)
sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)

5.354678149s ago: executing program 6 (id=4292):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
socketpair(0x1d, 0x5, 0xfffffffa, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x0, 0x2, 0x0, 0x3fffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b646edef69853362ac34071", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(r3)
close(r2)

4.67076582s ago: executing program 5 (id=4293):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
socketpair(0x1d, 0x5, 0xfffffffa, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x0, 0x2, 0x0, 0x3fffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b646edef69853362ac34071", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(r3)
close(r2)

4.549696423s ago: executing program 0 (id=4294):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

4.302348947s ago: executing program 0 (id=4295):
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0xfffffff9}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r2}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK    \x00'}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48)
r7 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r10 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r10, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848410000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x39, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000633a77fbac141416e000030a83040211fe8000000e1e0000845013f2325f1a3901050b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)

4.301792557s ago: executing program 4 (id=4296):
r0 = socket$kcm(0xa, 0x3, 0x73)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000080000000000000000400000095000000000000009500100000000000"], &(0x7f0000000100)='GPL\x00', 0x80000071, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x8, 0x6}, 0x10, 0x1369c, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0x10, 0xa}], 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r2)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)

4.209442538s ago: executing program 6 (id=4297):
r0 = socket$kcm(0xa, 0x3, 0x73)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000080000000000000000400000095000000000000009500100000000000"], &(0x7f0000000100)='GPL\x00', 0x80000071, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x8, 0x6}, 0x10, 0x1369c, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0x10, 0xa}], 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r2)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d)
write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2d, 'perf_event'}]}, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)

4.11344613s ago: executing program 5 (id=4298):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x100122}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100824, 0x0, 0xd8, 0x5, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1e, 0x1, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)

3.913747264s ago: executing program 3 (id=4299):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca25b3659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf5f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730af36bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d26ce7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652cecbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff)

3.672953218s ago: executing program 3 (id=4300):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, 0x0, 0x0) (fail_nth: 1)

3.663851128s ago: executing program 0 (id=4301):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000100), 0x0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200"/72], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10)

2.568904336s ago: executing program 5 (id=4302):
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101180, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x4000})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000029b3e999500000000000000460061afa000ba0ef32abc8c9f59fcbe64067fe4e327cd4518f680cfb30742c982a2c4dc"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x42, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5", &(0x7f0000000640)=""/148, 0x3, 0x0, 0xc8, 0x3a, &(0x7f0000000700)="0f9cddec1c88c7c091d3a34ae10b7d44379a7e77db08bba0d05f4207889cfc151c2191b05a5f2992cedcf56ae5e6eb8e9b5166f0813ba620c9249ace90ee8bd96d17b89a0ad0d29ed3e5a9403b3cdba2ce611016fd5f33a46451425d1788afbf69a45ddd0cb2eb0a64a48e4a94809951bded43bcd0f69e3c5f042dc009a2ea443968ae20cff0a98d2c3a0571461e3d45ed95048bc0f92b75fcb34d0ef6550092fd7ee410578819392d747827c8c8059ca9a19ee7eef1ec32f8fd2e9dfc22da286699c7fe952ab42d", &(0x7f0000000800)="4ba0ce256558b94dd7b57dd13b02d56fcd7a660fb01cde9b940331212ffeb48f97fa4a266b031fb30eaae2b3b3e2dcaf2d113f5090d233a328c4", 0x5, 0x0, 0x80000000}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000008"], &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r6, 0x11}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x4a)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)

2.301947761s ago: executing program 3 (id=4303):
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101180, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x4000})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r3 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000029b3e999500000000000000460061afa000ba0ef32abc8c9f59fcbe64067fe4e327cd4518f680cfb30742c982a2c4dc"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x42, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5", &(0x7f0000000640)=""/148, 0x3, 0x0, 0xc8, 0x3a, &(0x7f0000000700)="0f9cddec1c88c7c091d3a34ae10b7d44379a7e77db08bba0d05f4207889cfc151c2191b05a5f2992cedcf56ae5e6eb8e9b5166f0813ba620c9249ace90ee8bd96d17b89a0ad0d29ed3e5a9403b3cdba2ce611016fd5f33a46451425d1788afbf69a45ddd0cb2eb0a64a48e4a94809951bded43bcd0f69e3c5f042dc009a2ea443968ae20cff0a98d2c3a0571461e3d45ed95048bc0f92b75fcb34d0ef6550092fd7ee410578819392d747827c8c8059ca9a19ee7eef1ec32f8fd2e9dfc22da286699c7fe952ab42d", &(0x7f0000000800)="4ba0ce256558b94dd7b57dd13b02d56fcd7a660fb01cde9b940331212ffeb48f97fa4a266b031fb30eaae2b3b3e2dcaf2d113f5090d233a328c4", 0x5, 0x0, 0x80000000}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000008"], &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r6, 0x11}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x4a)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)

2.300792661s ago: executing program 0 (id=4304):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x301001, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081044e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x308)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

1.955975306s ago: executing program 3 (id=4305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x82, &(0x7f0000000000), 0x8)
sendmsg$inet(r2, &(0x7f00000011c0)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0xfc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r3, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000025000000001800000020646c2500000000002020207b1af82100000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003400000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x95, &(0x7f0000000000)=""/149}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000))
recvmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000240), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1}, 0x10142)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x10, 0x0, 0x5, 0x4, 0x0, 0x800, 0x800, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x10008, 0x8000, 0x7, 0x7, 0x4, 0x7, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x10, r1, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700", 0x2c}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="1731484e6e9c", 0x6}], 0x1}, 0xc000)
sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)

1.955055837s ago: executing program 4 (id=4306):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x2, 0x5, 0x84)
r6 = perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x1, 0x5, 0x7, 0x8, 0x0, 0xfffffffeffffffff, 0x0, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x4, 0xa, 0x401, 0x2, 0xf, 0x2, 0xfff, 0x0, 0x5f}, 0x0, 0x10, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000900)='GPL\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c791", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200", 0x12}], 0x1}, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x5}, {0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x20)
recvmsg$unix(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000), 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000006b0000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0)

1.935010787s ago: executing program 5 (id=4307):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
socketpair(0x1d, 0x5, 0xfffffffa, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x0, 0x2, 0x0, 0x3fffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b646edef69853362ac34071", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(r3)
close(r2)

1.906062598s ago: executing program 6 (id=4308):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

1.619910803s ago: executing program 4 (id=4309):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040001000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
socketpair(0x1d, 0x5, 0xfffffffa, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x0, 0x0, 0x2, 0x0, 0x3fffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b646edef69853362ac34071", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(r3)
close(r2)

1.617893132s ago: executing program 0 (id=4319):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x301001, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081044e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x308)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

1.557346674s ago: executing program 5 (id=4310):
r0 = socket$kcm(0xa, 0x3, 0x73)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000080000000000000000400000095000000000000009500100000000000"], &(0x7f0000000100)='GPL\x00', 0x80000071, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x8, 0x6}, 0x10, 0x1369c, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0x10, 0xa}], 0x10, 0x2}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r3)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003d)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r3}, 0xc)
mkdirat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x1ff)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)

831.423176ms ago: executing program 4 (id=4311):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca25b3659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf5f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730af36bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d26ce7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652cecbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff)

819.958826ms ago: executing program 6 (id=4312):
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0xfffffff9}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r2}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK    \x00'}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

456.202863ms ago: executing program 3 (id=4313):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x100122}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100824, 0x0, 0xd8, 0x5, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1e, 0x1, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)

200.989116ms ago: executing program 4 (id=4314):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) (fail_nth: 1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

138.182858ms ago: executing program 0 (id=4315):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000100), 0x0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200"/72], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10)

0s ago: executing program 6 (id=4316):
r0 = socket$kcm(0xa, 0x3, 0x73)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000080000000000000000400000095000000000000009500100000000000"], &(0x7f0000000100)='GPL\x00', 0x80000071, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x8, 0x8, 0x6}, 0x10, 0x1369c, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0x10, 0xa}], 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r2)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003d)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)

kernel console output (not intermixed with test programs):

ardirqs_on_prepare+0x3fc/0x760
[  944.259840][T17487]  kernel_clone+0x225/0x8b0
[  944.264364][T17487]  ? create_io_thread+0x120/0x120
[  944.269761][T17487]  ? __x64_sys_clone+0x84/0x1d0
[  944.274640][T17487]  __x64_sys_clone+0x17c/0x1d0
[  944.279431][T17487]  ? __ia32_sys_vfork+0x100/0x100
[  944.284487][T17487]  ? lock_chain_count+0x20/0x20
[  944.289388][T17487]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  944.295411][T17487]  ? lockdep_hardirqs_on+0x94/0x140
[  944.300652][T17487]  do_syscall_64+0x4c/0xa0
[  944.305084][T17487]  ? clear_bhb_loop+0x60/0xb0
[  944.309779][T17487]  ? clear_bhb_loop+0x60/0xb0
[  944.314479][T17487]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  944.320486][T17487] RIP: 0033:0x7fdde918e9a9
[  944.324917][T17487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  944.344540][T17487] RSP: 002b:00007fddea068fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  944.352973][T17487] RAX: ffffffffffffffda RBX: 00007fdde93b5fa0 RCX: 00007fdde918e9a9
[  944.360969][T17487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040001000
[  944.368956][T17487] RBP: 00007fddea069090 R08: 0000000000000000 R09: 0000000000000000
[  944.376963][T17487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  944.384982][T17487] R13: 0000000000000000 R14: 00007fdde93b5fa0 R15: 00007ffe4f41a878
[  944.393007][T17487]  </TASK>
[  944.735481][T17493] netlink: 'syz.5.4131': attribute type 20 has an invalid length.
[  944.759422][   T56] wlan1: Creating new IBSS network, BSSID 46:ac:57:96:d8:34
[  944.895482][T17501] netlink: 'syz.3.4134': attribute type 2 has an invalid length.
[  944.943745][T17501] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4134'.
[  945.050161][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4135'.
[  945.062589][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4135'.
[  945.073188][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4135'.
[  945.110441][T17505] IPv6: Can't replace route, no match found
[  945.159931][T17505] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  945.308148][T17508] netlink: 'syz.6.4147': attribute type 20 has an invalid length.
[  945.893420][T17525] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4143'.
[  946.236785][T17538] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4146'.
[  946.717183][T17550] FAULT_INJECTION: forcing a failure.
[  946.717183][T17550] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  946.761363][   T33] wlan1: Trigger new scan to find an IBSS to join
[  946.785320][T17550] CPU: 0 PID: 17550 Comm: syz.3.4150 Not tainted 6.1.147-syzkaller #0
[  946.793558][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  946.803748][T17550] Call Trace:
[  946.807055][T17550]  <TASK>
[  946.810012][T17550]  dump_stack_lvl+0x168/0x22e
[  946.814743][T17550]  ? show_regs_print_info+0x12/0x12
[  946.819989][T17550]  ? load_image+0x3b0/0x3b0
[  946.824543][T17550]  ? __lock_acquire+0x7c50/0x7c50
[  946.829620][T17550]  ? verify_lock_unused+0x140/0x140
[  946.834892][T17550]  should_fail_ex+0x399/0x4d0
[  946.839622][T17550]  _copy_from_user+0x2c/0x170
[  946.844341][T17550]  ___sys_sendmsg+0x155/0x290
[  946.849053][T17550]  ? __sys_sendmsg+0x270/0x270
[  946.853848][T17550]  ? __lock_acquire+0x7c50/0x7c50
[  946.859021][T17550]  ? __fdget+0x17c/0x200
[  946.863294][T17550]  __se_sys_sendmsg+0x19e/0x270
[  946.868180][T17550]  ? perf_trace_preemptirq_template+0x287/0x330
[  946.874455][T17550]  ? __x64_sys_sendmsg+0x80/0x80
[  946.879429][T17550]  ? lockdep_hardirqs_on+0x94/0x140
[  946.884652][T17550]  do_syscall_64+0x4c/0xa0
[  946.889086][T17550]  ? clear_bhb_loop+0x60/0xb0
[  946.893782][T17550]  ? clear_bhb_loop+0x60/0xb0
[  946.898476][T17550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  946.904391][T17550] RIP: 0033:0x7f54eb98e9a9
[  946.908818][T17550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  946.928442][T17550] RSP: 002b:00007f54ec77f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  946.936871][T17550] RAX: ffffffffffffffda RBX: 00007f54ebbb5fa0 RCX: 00007f54eb98e9a9
[  946.944858][T17550] RDX: 0000000004000091 RSI: 0000200000000280 RDI: 0000000000000008
[  946.952843][T17550] RBP: 00007f54ec77f090 R08: 0000000000000000 R09: 0000000000000000
[  946.960827][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  946.968810][T17550] R13: 0000000000000000 R14: 00007f54ebbb5fa0 R15: 00007ffe44824cf8
[  946.976810][T17550]  </TASK>
[  947.153125][T17556] IPv6: Can't replace route, no match found
[  947.175087][T17556] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  947.331618][T17558] netlink: 'syz.0.4153': attribute type 20 has an invalid length.
[  947.800842][ T4376] wlan1: Trigger new scan to find an IBSS to join
[  948.068762][T17573] FAULT_INJECTION: forcing a failure.
[  948.068762][T17573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  948.144761][T17573] CPU: 0 PID: 17573 Comm: syz.6.4158 Not tainted 6.1.147-syzkaller #0
[  948.153011][T17573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  948.163122][T17573] Call Trace:
[  948.166438][T17573]  <TASK>
[  948.169409][T17573]  dump_stack_lvl+0x168/0x22e
[  948.174153][T17573]  ? show_regs_print_info+0x12/0x12
[  948.179487][T17573]  ? load_image+0x3b0/0x3b0
[  948.184052][T17573]  ? __lock_acquire+0x7c50/0x7c50
[  948.189121][T17573]  ? verify_lock_unused+0x140/0x140
[  948.194357][T17573]  should_fail_ex+0x399/0x4d0
[  948.199063][T17573]  _copy_from_user+0x2c/0x170
[  948.203762][T17573]  ___sys_sendmsg+0x155/0x290
[  948.208456][T17573]  ? __sys_sendmsg+0x270/0x270
[  948.213252][T17573]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  948.219027][T17573]  ? __fdget+0x17c/0x200
[  948.223287][T17573]  __se_sys_sendmsg+0x19e/0x270
[  948.228158][T17573]  ? __x64_sys_sendmsg+0x80/0x80
[  948.233124][T17573]  ? syscall_enter_from_user_mode+0x2a/0x80
[  948.239097][T17573]  do_syscall_64+0x4c/0xa0
[  948.243526][T17573]  ? clear_bhb_loop+0x60/0xb0
[  948.248215][T17573]  ? clear_bhb_loop+0x60/0xb0
[  948.252905][T17573]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  948.258820][T17573] RIP: 0033:0x7f8dafb8e9a9
[  948.263271][T17573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  948.282889][T17573] RSP: 002b:00007f8db09a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  948.291399][T17573] RAX: ffffffffffffffda RBX: 00007f8dafdb5fa0 RCX: 00007f8dafb8e9a9
[  948.299384][T17573] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  948.307462][T17573] RBP: 00007f8db09a0090 R08: 0000000000000000 R09: 0000000000000000
[  948.315442][T17573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  948.323511][T17573] R13: 0000000000000000 R14: 00007f8dafdb5fa0 R15: 00007ffc47f14028
[  948.331512][T17573]  </TASK>
[  948.527308][T17580] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4161'.
[  948.747443][T17580] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  948.781479][T17580] CPU: 0 PID: 17580 Comm: syz.0.4161 Not tainted 6.1.147-syzkaller #0
[  948.789749][T17580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  948.799870][T17580] Call Trace:
[  948.803205][T17580]  <TASK>
[  948.806198][T17580]  dump_stack_lvl+0x168/0x22e
[  948.810957][T17580]  ? show_regs_print_info+0x12/0x12
[  948.816237][T17580]  ? load_image+0x3b0/0x3b0
[  948.820850][T17580]  sysfs_warn_dup+0x8a/0xa0
[  948.825427][T17580]  sysfs_do_create_link_sd+0xc0/0x110
[  948.830879][T17580]  device_add+0x7ed/0xfb0
[  948.835292][T17580]  wiphy_register+0x1e68/0x2bd0
[  948.840260][T17580]  ? cfg80211_event_work+0x40/0x40
[  948.845454][T17580]  ? minstrel_ht_alloc+0x894/0xa20
[  948.850650][T17580]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  948.856803][T17580]  ieee80211_register_hw+0x2c29/0x38c0
[  948.862355][T17580]  ? ieee80211_register_hw+0xeb1/0x38c0
[  948.867953][T17580]  ? ieee80211_register_hw+0xeb1/0x38c0
[  948.873569][T17580]  ? ieee80211_tasklet_handler+0x20/0x20
[  948.879286][T17580]  ? memset+0x1e/0x40
[  948.883334][T17580]  ? __hrtimer_init+0x186/0x270
[  948.888256][T17580]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  948.894087][T17580]  hwsim_new_radio_nl+0xafa/0xce0
[  948.899228][T17580]  genl_family_rcv_msg_doit+0x22e/0x320
[  948.904850][T17580]  ? end_current_label_crit_section+0x170/0x170
[  948.911178][T17580]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  948.917168][T17580]  ? bpf_lsm_capable+0x5/0x10
[  948.921904][T17580]  ? security_capable+0x85/0xb0
[  948.926803][T17580]  genl_rcv_msg+0x5f2/0x780
[  948.931367][T17580]  ? genl_bind+0x350/0x350
[  948.935815][T17580]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  948.942243][T17580]  netlink_rcv_skb+0x1de/0x420
[  948.947044][T17580]  ? genl_bind+0x350/0x350
[  948.951503][T17580]  ? netlink_ack+0x1100/0x1100
[  948.956322][T17580]  ? down_read+0x1a8/0x2d0
[  948.960776][T17580]  genl_rcv+0x24/0x40
[  948.964793][T17580]  netlink_unicast+0x74d/0x8d0
[  948.969606][T17580]  netlink_sendmsg+0x89e/0xbc0
[  948.974419][T17580]  ? netlink_getsockopt+0x540/0x540
[  948.979692][T17580]  ? aa_sock_msg_perm+0x94/0x150
[  948.984669][T17580]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  948.989975][T17580]  ? security_socket_sendmsg+0x7c/0xa0
[  948.995471][T17580]  ? netlink_getsockopt+0x540/0x540
[  949.000700][T17580]  ____sys_sendmsg+0x59b/0x970
[  949.005507][T17580]  ? __sys_sendmsg_sock+0x30/0x30
[  949.010553][T17580]  ? __import_iovec+0x315/0x500
[  949.015448][T17580]  ? import_iovec+0x6f/0xa0
[  949.019988][T17580]  ___sys_sendmsg+0x21c/0x290
[  949.024696][T17580]  ? __sys_sendmsg+0x270/0x270
[  949.029562][T17580]  ? __fdget+0x17c/0x200
[  949.033842][T17580]  __se_sys_sendmsg+0x19e/0x270
[  949.038722][T17580]  ? __x64_sys_sendmsg+0x80/0x80
[  949.043715][T17580]  ? lockdep_hardirqs_on+0x94/0x140
[  949.050178][T17580]  do_syscall_64+0x4c/0xa0
[  949.054998][T17580]  ? clear_bhb_loop+0x60/0xb0
[  949.059711][T17580]  ? clear_bhb_loop+0x60/0xb0
[  949.064422][T17580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  949.070353][T17580] RIP: 0033:0x7f1ec0b8e9a9
[  949.074798][T17580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  949.094632][T17580] RSP: 002b:00007f1ec1a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  949.103077][T17580] RAX: ffffffffffffffda RBX: 00007f1ec0db5fa0 RCX: 00007f1ec0b8e9a9
[  949.111071][T17580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  949.119064][T17580] RBP: 00007f1ec0c10d69 R08: 0000000000000000 R09: 0000000000000000
[  949.127054][T17580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  949.135140][T17580] R13: 0000000000000000 R14: 00007f1ec0db5fa0 R15: 00007ffdf1148798
[  949.143164][T17580]  </TASK>
[  949.419018][T17592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4165'.
[  949.807221][   T56] wlan1: Trigger new scan to find an IBSS to join
[  949.813984][ T4376] wlan1: Trigger new scan to find an IBSS to join
[  949.874516][ T4364] wlan1: Creating new IBSS network, BSSID d2:d6:d2:e0:ac:7f
[  950.337031][T17592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4165'.
[  950.356222][T17595] netlink: 'syz.4.4166': attribute type 20 has an invalid length.
[  950.519463][T17598] FAULT_INJECTION: forcing a failure.
[  950.519463][T17598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  950.580516][T17598] CPU: 1 PID: 17598 Comm: syz.0.4167 Not tainted 6.1.147-syzkaller #0
[  950.588767][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  950.598866][T17598] Call Trace:
[  950.602179][T17598]  <TASK>
[  950.605139][T17598]  dump_stack_lvl+0x168/0x22e
[  950.609858][T17598]  ? show_regs_print_info+0x12/0x12
[  950.615091][T17598]  ? load_image+0x3b0/0x3b0
[  950.619648][T17598]  ? __lock_acquire+0x7c50/0x7c50
[  950.624726][T17598]  ? verify_lock_unused+0x140/0x140
[  950.629977][T17598]  should_fail_ex+0x399/0x4d0
[  950.634704][T17598]  _copy_from_user+0x2c/0x170
[  950.639422][T17598]  ___sys_sendmsg+0x155/0x290
[  950.644135][T17598]  ? __sys_sendmsg+0x270/0x270
[  950.648955][T17598]  ? ktime_get_real_ts64+0x420/0x420
[  950.654294][T17598]  ? __fdget+0x17c/0x200
[  950.658584][T17598]  __se_sys_sendmsg+0x19e/0x270
[  950.663474][T17598]  ? perf_trace_preemptirq_template+0x287/0x330
[  950.669849][T17598]  ? __x64_sys_sendmsg+0x80/0x80
[  950.674846][T17598]  ? lockdep_hardirqs_on+0x94/0x140
[  950.680093][T17598]  do_syscall_64+0x4c/0xa0
[  950.684544][T17598]  ? clear_bhb_loop+0x60/0xb0
[  950.689257][T17598]  ? clear_bhb_loop+0x60/0xb0
[  950.693965][T17598]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  950.699907][T17598] RIP: 0033:0x7f1ec0b8e9a9
[  950.704451][T17598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  950.724107][T17598] RSP: 002b:00007f1ec1a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  950.732571][T17598] RAX: ffffffffffffffda RBX: 00007f1ec0db5fa0 RCX: 00007f1ec0b8e9a9
[  950.740575][T17598] RDX: 0000000004000091 RSI: 0000200000000280 RDI: 0000000000000008
[  950.748584][T17598] RBP: 00007f1ec1a27090 R08: 0000000000000000 R09: 0000000000000000
[  950.756592][T17598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  950.764607][T17598] R13: 0000000000000000 R14: 00007f1ec0db5fa0 R15: 00007ffdf1148798
[  950.772718][T17598]  </TASK>
[  951.293278][T17612] IPv6: Can't replace route, no match found
[  951.399235][T17611] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  951.485882][T17614] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.4173'.
[  951.745447][T17614] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  951.769226][T17614] CPU: 1 PID: 17614 Comm: syz.6.4173 Not tainted 6.1.147-syzkaller #0
[  951.777481][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  951.787565][T17614] Call Trace:
[  951.790870][T17614]  <TASK>
[  951.793826][T17614]  dump_stack_lvl+0x168/0x22e
[  951.798537][T17614]  ? show_regs_print_info+0x12/0x12
[  951.803766][T17614]  ? load_image+0x3b0/0x3b0
[  951.808325][T17614]  sysfs_warn_dup+0x8a/0xa0
[  951.812861][T17614]  sysfs_do_create_link_sd+0xc0/0x110
[  951.818268][T17614]  device_add+0x7ed/0xfb0
[  951.822644][T17614]  wiphy_register+0x1e68/0x2bd0
[  951.827555][T17614]  ? cfg80211_event_work+0x40/0x40
[  951.832692][T17614]  ? minstrel_ht_alloc+0x894/0xa20
[  951.837834][T17614]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  951.843937][T17614]  ieee80211_register_hw+0x2c29/0x38c0
[  951.849475][T17614]  ? ieee80211_register_hw+0xeb1/0x38c0
[  951.855073][T17614]  ? ieee80211_register_hw+0xeb1/0x38c0
[  951.860669][T17614]  ? ieee80211_tasklet_handler+0x20/0x20
[  951.866355][T17614]  ? memset+0x1e/0x40
[  951.870378][T17614]  ? __hrtimer_init+0x186/0x270
[  951.875263][T17614]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  951.881055][T17614]  hwsim_new_radio_nl+0xafa/0xce0
[  951.886157][T17614]  genl_family_rcv_msg_doit+0x22e/0x320
[  951.891735][T17614]  ? end_current_label_crit_section+0x170/0x170
[  951.898018][T17614]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  951.903958][T17614]  ? bpf_lsm_capable+0x5/0x10
[  951.908664][T17614]  ? security_capable+0x85/0xb0
[  951.913551][T17614]  genl_rcv_msg+0x5f2/0x780
[  951.918134][T17614]  ? genl_bind+0x350/0x350
[  951.922597][T17614]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  951.929007][T17614]  netlink_rcv_skb+0x1de/0x420
[  951.933815][T17614]  ? genl_bind+0x350/0x350
[  951.938296][T17614]  ? netlink_ack+0x1100/0x1100
[  951.943108][T17614]  ? down_read+0x1a8/0x2d0
[  951.947559][T17614]  genl_rcv+0x24/0x40
[  951.951573][T17614]  netlink_unicast+0x74d/0x8d0
[  951.956381][T17614]  netlink_sendmsg+0x89e/0xbc0
[  951.961200][T17614]  ? netlink_getsockopt+0x540/0x540
[  951.966438][T17614]  ? aa_sock_msg_perm+0x94/0x150
[  951.971502][T17614]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  951.976816][T17614]  ? security_socket_sendmsg+0x7c/0xa0
[  951.982308][T17614]  ? netlink_getsockopt+0x540/0x540
[  951.987532][T17614]  ____sys_sendmsg+0x59b/0x970
[  951.992340][T17614]  ? __sys_sendmsg_sock+0x30/0x30
[  951.997391][T17614]  ? __import_iovec+0x315/0x500
[  952.002288][T17614]  ? import_iovec+0x6f/0xa0
[  952.006827][T17614]  ___sys_sendmsg+0x21c/0x290
[  952.011537][T17614]  ? __sys_sendmsg+0x270/0x270
[  952.016415][T17614]  ? __fdget+0x17c/0x200
[  952.020693][T17614]  __se_sys_sendmsg+0x19e/0x270
[  952.025582][T17614]  ? __x64_sys_sendmsg+0x80/0x80
[  952.030576][T17614]  ? lockdep_hardirqs_on+0x94/0x140
[  952.035812][T17614]  do_syscall_64+0x4c/0xa0
[  952.040373][T17614]  ? clear_bhb_loop+0x60/0xb0
[  952.045073][T17614]  ? clear_bhb_loop+0x60/0xb0
[  952.049774][T17614]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  952.055700][T17614] RIP: 0033:0x7f8dafb8e9a9
[  952.060144][T17614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  952.079774][T17614] RSP: 002b:00007f8db09a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  952.088212][T17614] RAX: ffffffffffffffda RBX: 00007f8dafdb5fa0 RCX: 00007f8dafb8e9a9
[  952.096206][T17614] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  952.104201][T17614] RBP: 00007f8dafc10d69 R08: 0000000000000000 R09: 0000000000000000
[  952.112197][T17614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  952.120189][T17614] R13: 0000000000000000 R14: 00007f8dafdb5fa0 R15: 00007ffc47f14028
[  952.128228][T17614]  </TASK>
[  952.136641][T16871] wlan1: Trigger new scan to find an IBSS to join
[  952.140554][ T4376] wlan1: Trigger new scan to find an IBSS to join
[  952.512457][T17620] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4175'.
[  953.207720][ T4349] wlan1: Creating new IBSS network, BSSID a2:34:7b:3b:b6:dc
[  953.350142][T17617] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4174'.
[  953.542974][T17617] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  953.568920][T17617] CPU: 1 PID: 17617 Comm: syz.4.4174 Not tainted 6.1.147-syzkaller #0
[  953.577157][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  953.587251][T17617] Call Trace:
[  953.590544][T17617]  <TASK>
[  953.593488][T17617]  dump_stack_lvl+0x168/0x22e
[  953.598189][T17617]  ? show_regs_print_info+0x12/0x12
[  953.603405][T17617]  ? load_image+0x3b0/0x3b0
[  953.607938][T17617]  sysfs_warn_dup+0x8a/0xa0
[  953.612462][T17617]  sysfs_do_create_link_sd+0xc0/0x110
[  953.617863][T17617]  device_add+0x7ed/0xfb0
[  953.622218][T17617]  wiphy_register+0x1e68/0x2bd0
[  953.627128][T17617]  ? cfg80211_event_work+0x40/0x40
[  953.632267][T17617]  ? minstrel_ht_alloc+0x894/0xa20
[  953.637398][T17617]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  953.643488][T17617]  ieee80211_register_hw+0x2c29/0x38c0
[  953.648982][T17617]  ? ieee80211_register_hw+0xeb1/0x38c0
[  953.654541][T17617]  ? ieee80211_register_hw+0xeb1/0x38c0
[  953.660112][T17617]  ? ieee80211_tasklet_handler+0x20/0x20
[  953.665765][T17617]  ? memset+0x1e/0x40
[  953.669771][T17617]  ? __hrtimer_init+0x186/0x270
[  953.674642][T17617]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  953.680400][T17617]  hwsim_new_radio_nl+0xafa/0xce0
[  953.685480][T17617]  genl_family_rcv_msg_doit+0x22e/0x320
[  953.691049][T17617]  ? end_current_label_crit_section+0x170/0x170
[  953.697321][T17617]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  953.703243][T17617]  ? bpf_lsm_capable+0x5/0x10
[  953.707968][T17617]  ? security_capable+0x85/0xb0
[  953.712859][T17617]  genl_rcv_msg+0x5f2/0x780
[  953.717401][T17617]  ? genl_bind+0x350/0x350
[  953.721846][T17617]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  953.728231][T17617]  netlink_rcv_skb+0x1de/0x420
[  953.733019][T17617]  ? genl_bind+0x350/0x350
[  953.737470][T17617]  ? netlink_ack+0x1100/0x1100
[  953.742262][T17617]  ? down_read+0x1a8/0x2d0
[  953.746698][T17617]  genl_rcv+0x24/0x40
[  953.750702][T17617]  netlink_unicast+0x74d/0x8d0
[  953.755496][T17617]  netlink_sendmsg+0x89e/0xbc0
[  953.760284][T17617]  ? netlink_getsockopt+0x540/0x540
[  953.765501][T17617]  ? aa_sock_msg_perm+0x94/0x150
[  953.770467][T17617]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  953.775763][T17617]  ? security_socket_sendmsg+0x7c/0xa0
[  953.781249][T17617]  ? netlink_getsockopt+0x540/0x540
[  953.786466][T17617]  ____sys_sendmsg+0x59b/0x970
[  953.791254][T17617]  ? __sys_sendmsg_sock+0x30/0x30
[  953.796297][T17617]  ? __import_iovec+0x315/0x500
[  953.801187][T17617]  ? import_iovec+0x6f/0xa0
[  953.805715][T17617]  ___sys_sendmsg+0x21c/0x290
[  953.810416][T17617]  ? __sys_sendmsg+0x270/0x270
[  953.815233][T17617]  ? __fdget+0x17c/0x200
[  953.819514][T17617]  __se_sys_sendmsg+0x19e/0x270
[  953.824383][T17617]  ? __x64_sys_sendmsg+0x80/0x80
[  953.829354][T17617]  ? lockdep_hardirqs_on+0x94/0x140
[  953.834572][T17617]  do_syscall_64+0x4c/0xa0
[  953.838999][T17617]  ? clear_bhb_loop+0x60/0xb0
[  953.843688][T17617]  ? clear_bhb_loop+0x60/0xb0
[  953.848379][T17617]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  953.854294][T17617] RIP: 0033:0x7fdde918e9a9
[  953.858987][T17617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  953.878609][T17617] RSP: 002b:00007fddea048038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  953.887135][T17617] RAX: ffffffffffffffda RBX: 00007fdde93b6080 RCX: 00007fdde918e9a9
[  953.895215][T17617] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  953.903221][T17617] RBP: 00007fdde9210d69 R08: 0000000000000000 R09: 0000000000000000
[  953.911219][T17617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  953.919219][T17617] R13: 0000000000000000 R14: 00007fdde93b6080 R15: 00007ffe4f41a878
[  953.927219][T17617]  </TASK>
[  953.945429][ T4364] wlan1: Trigger new scan to find an IBSS to join
[  954.633970][T17633] IPv6: Can't replace route, no match found
[  954.669734][T17633] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  954.974352][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4179'.
[  955.041411][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4179'.
[  955.107647][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4179'.
[  955.169204][T17640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4179'.
[  956.762106][ T4376] wlan1: Trigger new scan to find an IBSS to join
[  956.768956][ T4659] wlan1: Trigger new scan to find an IBSS to join
[  956.795352][T17663] IPv6: Can't replace route, no match found
[  956.839599][T17665] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4186'.
[  956.865272][T17666] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  957.270411][T17677] IPv6: Can't replace route, no match found
[  957.417230][T17674] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  957.464503][T17679] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4190'.
[  957.531397][T17679] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  957.569064][T17679] CPU: 1 PID: 17679 Comm: syz.3.4190 Not tainted 6.1.147-syzkaller #0
[  957.577333][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  957.587440][T17679] Call Trace:
[  957.590756][T17679]  <TASK>
[  957.593716][T17679]  dump_stack_lvl+0x168/0x22e
[  957.598436][T17679]  ? show_regs_print_info+0x12/0x12
[  957.603663][T17679]  ? load_image+0x3b0/0x3b0
[  957.608217][T17679]  sysfs_warn_dup+0x8a/0xa0
[  957.612760][T17679]  sysfs_do_create_link_sd+0xc0/0x110
[  957.618162][T17679]  device_add+0x7ed/0xfb0
[  957.622543][T17679]  wiphy_register+0x1e68/0x2bd0
[  957.627448][T17679]  ? cfg80211_event_work+0x40/0x40
[  957.632588][T17679]  ? minstrel_ht_alloc+0x894/0xa20
[  957.637734][T17679]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  957.643848][T17679]  ieee80211_register_hw+0x2c29/0x38c0
[  957.649350][T17679]  ? ieee80211_register_hw+0xeb1/0x38c0
[  957.654922][T17679]  ? ieee80211_register_hw+0xeb1/0x38c0
[  957.660512][T17679]  ? ieee80211_tasklet_handler+0x20/0x20
[  957.666195][T17679]  ? memset+0x1e/0x40
[  957.670211][T17679]  ? __hrtimer_init+0x186/0x270
[  957.675161][T17679]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  957.680963][T17679]  hwsim_new_radio_nl+0xafa/0xce0
[  957.686079][T17679]  genl_family_rcv_msg_doit+0x22e/0x320
[  957.691700][T17679]  ? end_current_label_crit_section+0x170/0x170
[  957.698005][T17679]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  957.703957][T17679]  ? bpf_lsm_capable+0x5/0x10
[  957.708667][T17679]  ? security_capable+0x85/0xb0
[  957.713563][T17679]  genl_rcv_msg+0x5f2/0x780
[  957.718151][T17679]  ? genl_bind+0x350/0x350
[  957.722597][T17679]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  957.728995][T17679]  netlink_rcv_skb+0x1de/0x420
[  957.733790][T17679]  ? genl_bind+0x350/0x350
[  957.738237][T17679]  ? netlink_ack+0x1100/0x1100
[  957.743043][T17679]  ? down_read+0x1a8/0x2d0
[  957.747494][T17679]  genl_rcv+0x24/0x40
[  957.751510][T17679]  netlink_unicast+0x74d/0x8d0
[  957.756318][T17679]  netlink_sendmsg+0x89e/0xbc0
[  957.761126][T17679]  ? netlink_getsockopt+0x540/0x540
[  957.766356][T17679]  ? aa_sock_msg_perm+0x94/0x150
[  957.771330][T17679]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  957.776669][T17679]  ? security_socket_sendmsg+0x7c/0xa0
[  957.782169][T17679]  ? netlink_getsockopt+0x540/0x540
[  957.787398][T17679]  ____sys_sendmsg+0x59b/0x970
[  957.792205][T17679]  ? __sys_sendmsg_sock+0x30/0x30
[  957.797253][T17679]  ? __import_iovec+0x315/0x500
[  957.802150][T17679]  ? import_iovec+0x6f/0xa0
[  957.806695][T17679]  ___sys_sendmsg+0x21c/0x290
[  957.811416][T17679]  ? __sys_sendmsg+0x270/0x270
[  957.816296][T17679]  ? __fdget+0x17c/0x200
[  957.820576][T17679]  __se_sys_sendmsg+0x19e/0x270
[  957.825457][T17679]  ? ct_nmi_exit+0x145/0x1c0
[  957.830082][T17679]  ? __x64_sys_sendmsg+0x80/0x80
[  957.835078][T17679]  ? lockdep_hardirqs_on+0x94/0x140
[  957.840313][T17679]  do_syscall_64+0x4c/0xa0
[  957.844773][T17679]  ? clear_bhb_loop+0x60/0xb0
[  957.849502][T17679]  ? clear_bhb_loop+0x60/0xb0
[  957.854209][T17679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  957.860166][T17679] RIP: 0033:0x7f54eb98e9a9
[  957.864642][T17679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  957.884349][T17679] RSP: 002b:00007f54ec77f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  957.892796][T17679] RAX: ffffffffffffffda RBX: 00007f54ebbb5fa0 RCX: 00007f54eb98e9a9
[  957.900905][T17679] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  957.908910][T17679] RBP: 00007f54eba10d69 R08: 0000000000000000 R09: 0000000000000000
[  957.916901][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  957.924919][T17679] R13: 0000000000000000 R14: 00007f54ebbb5fa0 R15: 00007ffe44824cf8
[  957.932970][T17679]  </TASK>
[  957.950018][T17686] FAULT_INJECTION: forcing a failure.
[  957.950018][T17686] name failslab, interval 1, probability 0, space 0, times 0
[  957.978190][T17686] CPU: 0 PID: 17686 Comm: syz.0.4191 Not tainted 6.1.147-syzkaller #0
[  957.986450][T17686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  957.996560][T17686] Call Trace:
[  957.999873][T17686]  <TASK>
[  958.002841][T17686]  dump_stack_lvl+0x168/0x22e
[  958.007574][T17686]  ? show_regs_print_info+0x12/0x12
[  958.012819][T17686]  ? load_image+0x3b0/0x3b0
[  958.017377][T17686]  ? __might_sleep+0xd0/0xd0
[  958.022023][T17686]  ? __lock_acquire+0x7c50/0x7c50
[  958.027110][T17686]  should_fail_ex+0x399/0x4d0
[  958.031856][T17686]  should_failslab+0x5/0x20
[  958.036407][T17686]  slab_pre_alloc_hook+0x59/0x310
[  958.041489][T17686]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  958.047261][T17686]  __kmem_cache_alloc_node+0x4f/0x260
[  958.052695][T17686]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  958.058463][T17686]  __kmalloc+0xa0/0x240
[  958.062705][T17686]  tomoyo_realpath_from_path+0xdf/0x5d0
[  958.068325][T17686]  tomoyo_path_number_perm+0x1e3/0x600
[  958.073834][T17686]  ? tomoyo_path_number_perm+0x1b6/0x600
[  958.079524][T17686]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  958.085035][T17686]  ? ksys_write+0x1bd/0x240
[  958.089592][T17686]  ? common_file_perm+0x171/0x1c0
[  958.094740][T17686]  ? __fget_files+0x28/0x4d0
[  958.099404][T17686]  security_file_ioctl+0x6c/0xa0
[  958.104401][T17686]  __se_sys_ioctl+0x48/0x170
[  958.109051][T17686]  do_syscall_64+0x4c/0xa0
[  958.113509][T17686]  ? clear_bhb_loop+0x60/0xb0
[  958.118232][T17686]  ? clear_bhb_loop+0x60/0xb0
[  958.122957][T17686]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  958.128902][T17686] RIP: 0033:0x7f1ec0b8e9a9
[  958.133358][T17686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  958.153098][T17686] RSP: 002b:00007f1ec1a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  958.161571][T17686] RAX: ffffffffffffffda RBX: 00007f1ec0db5fa0 RCX: 00007f1ec0b8e9a9
[  958.169588][T17686] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004
[  958.177600][T17686] RBP: 00007f1ec1a27090 R08: 0000000000000000 R09: 0000000000000000
[  958.185625][T17686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  958.193662][T17686] R13: 0000000000000000 R14: 00007f1ec0db5fa0 R15: 00007ffdf1148798
[  958.201728][T17686]  </TASK>
[  958.239112][T17686] ERROR: Out of memory at tomoyo_realpath_from_path.
[  958.470539][T17696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4192'.
[  958.478979][T17694] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4196'.
[  958.500562][T17694] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  958.508493][T17694] CPU: 0 PID: 17694 Comm: syz.0.4196 Not tainted 6.1.147-syzkaller #0
[  958.516687][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  958.526785][T17694] Call Trace:
[  958.530104][T17694]  <TASK>
[  958.533066][T17694]  dump_stack_lvl+0x168/0x22e
[  958.537786][T17694]  ? show_regs_print_info+0x12/0x12
[  958.543020][T17694]  ? load_image+0x3b0/0x3b0
[  958.547585][T17694]  sysfs_warn_dup+0x8a/0xa0
[  958.552128][T17694]  sysfs_do_create_link_sd+0xc0/0x110
[  958.557567][T17694]  device_add+0x7ed/0xfb0
[  958.561943][T17694]  wiphy_register+0x1e68/0x2bd0
[  958.566864][T17694]  ? cfg80211_event_work+0x40/0x40
[  958.572038][T17694]  ? minstrel_ht_alloc+0x894/0xa20
[  958.577195][T17694]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  958.583321][T17694]  ieee80211_register_hw+0x2c29/0x38c0
[  958.588828][T17694]  ? ieee80211_register_hw+0xeb1/0x38c0
[  958.594407][T17694]  ? ieee80211_register_hw+0xeb1/0x38c0
[  958.599992][T17694]  ? ieee80211_tasklet_handler+0x20/0x20
[  958.605668][T17694]  ? memset+0x1e/0x40
[  958.609704][T17694]  ? __hrtimer_init+0x186/0x270
[  958.614598][T17694]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  958.620385][T17694]  hwsim_new_radio_nl+0xafa/0xce0
[  958.625475][T17694]  genl_family_rcv_msg_doit+0x22e/0x320
[  958.631061][T17694]  ? end_current_label_crit_section+0x170/0x170
[  958.637350][T17694]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  958.643290][T17694]  ? bpf_lsm_capable+0x5/0x10
[  958.648001][T17694]  ? security_capable+0x85/0xb0
[  958.652893][T17694]  genl_rcv_msg+0x5f2/0x780
[  958.657447][T17694]  ? genl_bind+0x350/0x350
[  958.661894][T17694]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  958.668284][T17694]  netlink_rcv_skb+0x1de/0x420
[  958.673087][T17694]  ? genl_bind+0x350/0x350
[  958.677545][T17694]  ? netlink_ack+0x1100/0x1100
[  958.683067][T17694]  ? down_read+0x1a8/0x2d0
[  958.687528][T17694]  genl_rcv+0x24/0x40
[  958.691554][T17694]  netlink_unicast+0x74d/0x8d0
[  958.696367][T17694]  netlink_sendmsg+0x89e/0xbc0
[  958.701229][T17694]  ? netlink_getsockopt+0x540/0x540
[  958.706486][T17694]  ? aa_sock_msg_perm+0x94/0x150
[  958.711479][T17694]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  958.716804][T17694]  ? security_socket_sendmsg+0x7c/0xa0
[  958.722308][T17694]  ? netlink_getsockopt+0x540/0x540
[  958.727548][T17694]  ____sys_sendmsg+0x59b/0x970
[  958.732365][T17694]  ? __sys_sendmsg_sock+0x30/0x30
[  958.737429][T17694]  ? __import_iovec+0x315/0x500
[  958.742336][T17694]  ? import_iovec+0x6f/0xa0
[  958.746886][T17694]  ___sys_sendmsg+0x21c/0x290
[  958.751602][T17694]  ? __sys_sendmsg+0x270/0x270
[  958.756449][T17694]  ? __fdget+0x17c/0x200
[  958.760746][T17694]  __se_sys_sendmsg+0x19e/0x270
[  958.765638][T17694]  ? __se_sys_futex+0x14a/0x440
[  958.770541][T17694]  ? __x64_sys_sendmsg+0x80/0x80
[  958.775530][T17694]  ? lockdep_hardirqs_on+0x94/0x140
[  958.780770][T17694]  do_syscall_64+0x4c/0xa0
[  958.785216][T17694]  ? clear_bhb_loop+0x60/0xb0
[  958.790361][T17694]  ? clear_bhb_loop+0x60/0xb0
[  958.795076][T17694]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  958.801039][T17694] RIP: 0033:0x7f1ec0b8e9a9
[  958.805485][T17694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  958.825129][T17694] RSP: 002b:00007f1ec1a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  958.833694][T17694] RAX: ffffffffffffffda RBX: 00007f1ec0db5fa0 RCX: 00007f1ec0b8e9a9
[  958.841714][T17694] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  958.849729][T17694] RBP: 00007f1ec0c10d69 R08: 0000000000000000 R09: 0000000000000000
[  958.857730][T17694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  958.865732][T17694] R13: 0000000000000000 R14: 00007f1ec0db5fa0 R15: 00007ffdf1148798
[  958.873759][T17694]  </TASK>
[  958.886345][ T4364] wlan1: Trigger new scan to find an IBSS to join
[  958.895118][T17696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4192'.
[  958.910074][ T4659] wlan1: Trigger new scan to find an IBSS to join
[  958.942711][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4192'.
[  958.974088][T17699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4192'.
[  959.286564][T17709] IPv6: Can't replace route, no match found
[  959.329667][T17709] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  959.892951][T17729] IPv6: Can't replace route, no match found
[  959.943158][T17729] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  960.087659][T17732] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4209'.
[  960.149696][T17732] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  960.164426][T17732] CPU: 0 PID: 17732 Comm: syz.3.4209 Not tainted 6.1.147-syzkaller #0
[  960.172672][T17732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  960.182784][T17732] Call Trace:
[  960.186099][T17732]  <TASK>
[  960.189068][T17732]  dump_stack_lvl+0x168/0x22e
[  960.194243][T17732]  ? show_regs_print_info+0x12/0x12
[  960.199493][T17732]  ? load_image+0x3b0/0x3b0
[  960.204067][T17732]  sysfs_warn_dup+0x8a/0xa0
[  960.208615][T17732]  sysfs_do_create_link_sd+0xc0/0x110
[  960.214482][T17732]  device_add+0x7ed/0xfb0
[  960.218881][T17732]  wiphy_register+0x1e68/0x2bd0
[  960.223837][T17732]  ? cfg80211_event_work+0x40/0x40
[  960.229020][T17732]  ? minstrel_ht_alloc+0x894/0xa20
[  960.234204][T17732]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  960.240342][T17732]  ieee80211_register_hw+0x2c29/0x38c0
[  960.245859][T17732]  ? ieee80211_register_hw+0xeb1/0x38c0
[  960.251449][T17732]  ? ieee80211_register_hw+0xeb1/0x38c0
[  960.257053][T17732]  ? ieee80211_tasklet_handler+0x20/0x20
[  960.262747][T17732]  ? memset+0x1e/0x40
[  960.266781][T17732]  ? __hrtimer_init+0x186/0x270
[  960.271682][T17732]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  960.277475][T17732]  hwsim_new_radio_nl+0xafa/0xce0
[  960.282578][T17732]  genl_family_rcv_msg_doit+0x22e/0x320
[  960.288180][T17732]  ? end_current_label_crit_section+0x170/0x170
[  960.294482][T17732]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  960.300462][T17732]  ? bpf_lsm_capable+0x5/0x10
[  960.305196][T17732]  ? security_capable+0x85/0xb0
[  960.310102][T17732]  genl_rcv_msg+0x5f2/0x780
[  960.314662][T17732]  ? genl_bind+0x350/0x350
[  960.319124][T17732]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  960.325532][T17732]  netlink_rcv_skb+0x1de/0x420
[  960.330345][T17732]  ? genl_bind+0x350/0x350
[  960.334815][T17732]  ? netlink_ack+0x1100/0x1100
[  960.339615][T17732]  ? down_read+0x1a8/0x2d0
[  960.344066][T17732]  genl_rcv+0x24/0x40
[  960.348070][T17732]  netlink_unicast+0x74d/0x8d0
[  960.352867][T17732]  netlink_sendmsg+0x89e/0xbc0
[  960.357665][T17732]  ? netlink_getsockopt+0x540/0x540
[  960.362896][T17732]  ? aa_sock_msg_perm+0x94/0x150
[  960.367868][T17732]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  960.373174][T17732]  ? security_socket_sendmsg+0x7c/0xa0
[  960.378659][T17732]  ? netlink_getsockopt+0x540/0x540
[  960.383879][T17732]  ____sys_sendmsg+0x59b/0x970
[  960.388670][T17732]  ? __sys_sendmsg_sock+0x30/0x30
[  960.393717][T17732]  ? __import_iovec+0x315/0x500
[  960.398600][T17732]  ? import_iovec+0x6f/0xa0
[  960.403132][T17732]  ___sys_sendmsg+0x21c/0x290
[  960.407836][T17732]  ? __sys_sendmsg+0x270/0x270
[  960.412657][T17732]  ? __fdget+0x17c/0x200
[  960.416923][T17732]  __se_sys_sendmsg+0x19e/0x270
[  960.421796][T17732]  ? ct_nmi_exit+0x145/0x1c0
[  960.426412][T17732]  ? __x64_sys_sendmsg+0x80/0x80
[  960.431383][T17732]  ? lockdep_hardirqs_on+0x94/0x140
[  960.436602][T17732]  do_syscall_64+0x4c/0xa0
[  960.441030][T17732]  ? clear_bhb_loop+0x60/0xb0
[  960.445720][T17732]  ? clear_bhb_loop+0x60/0xb0
[  960.450413][T17732]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  960.456336][T17732] RIP: 0033:0x7f54eb98e9a9
[  960.460767][T17732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  960.480389][T17732] RSP: 002b:00007f54ec77f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  960.488821][T17732] RAX: ffffffffffffffda RBX: 00007f54ebbb5fa0 RCX: 00007f54eb98e9a9
[  960.496811][T17732] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  960.504798][T17732] RBP: 00007f54eba10d69 R08: 0000000000000000 R09: 0000000000000000
[  960.512782][T17732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  960.520767][T17732] R13: 0000000000000000 R14: 00007f54ebbb5fa0 R15: 00007ffe44824cf8
[  960.528766][T17732]  </TASK>
[  960.864368][T17740] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4208'.
[  960.880467][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4212'.
[  960.928711][T17740] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  960.947197][T17740] CPU: 0 PID: 17740 Comm: syz.5.4208 Not tainted 6.1.147-syzkaller #0
[  960.955444][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  960.965551][T17740] Call Trace:
[  960.968900][T17740]  <TASK>
[  960.971850][T17740]  dump_stack_lvl+0x168/0x22e
[  960.976565][T17740]  ? show_regs_print_info+0x12/0x12
[  960.981789][T17740]  ? load_image+0x3b0/0x3b0
[  960.986333][T17740]  sysfs_warn_dup+0x8a/0xa0
[  960.990863][T17740]  sysfs_do_create_link_sd+0xc0/0x110
[  960.996273][T17740]  device_add+0x7ed/0xfb0
[  961.000640][T17740]  wiphy_register+0x1e68/0x2bd0
[  961.005530][T17740]  ? cfg80211_event_work+0x40/0x40
[  961.010655][T17740]  ? minstrel_ht_alloc+0x894/0xa20
[  961.015800][T17740]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  961.021891][T17740]  ieee80211_register_hw+0x2c29/0x38c0
[  961.027373][T17740]  ? ieee80211_register_hw+0xeb1/0x38c0
[  961.032936][T17740]  ? ieee80211_register_hw+0xeb1/0x38c0
[  961.038505][T17740]  ? ieee80211_tasklet_handler+0x20/0x20
[  961.044162][T17740]  ? memset+0x1e/0x40
[  961.048170][T17740]  ? __hrtimer_init+0x186/0x270
[  961.053041][T17740]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  961.058802][T17740]  hwsim_new_radio_nl+0xafa/0xce0
[  961.063862][T17740]  genl_family_rcv_msg_doit+0x22e/0x320
[  961.069429][T17740]  ? end_current_label_crit_section+0x170/0x170
[  961.075703][T17740]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  961.081627][T17740]  ? bpf_lsm_capable+0x5/0x10
[  961.086330][T17740]  ? security_capable+0x85/0xb0
[  961.091221][T17740]  genl_rcv_msg+0x5f2/0x780
[  961.095763][T17740]  ? genl_bind+0x350/0x350
[  961.100221][T17740]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  961.106590][T17740]  netlink_rcv_skb+0x1de/0x420
[  961.111380][T17740]  ? genl_bind+0x350/0x350
[  961.115818][T17740]  ? netlink_ack+0x1100/0x1100
[  961.120611][T17740]  ? down_read+0x1a8/0x2d0
[  961.125053][T17740]  genl_rcv+0x24/0x40
[  961.129059][T17740]  netlink_unicast+0x74d/0x8d0
[  961.133849][T17740]  netlink_sendmsg+0x89e/0xbc0
[  961.138643][T17740]  ? netlink_getsockopt+0x540/0x540
[  961.143868][T17740]  ? aa_sock_msg_perm+0x94/0x150
[  961.148831][T17740]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  961.154162][T17740]  ? security_socket_sendmsg+0x7c/0xa0
[  961.159655][T17740]  ? netlink_getsockopt+0x540/0x540
[  961.164871][T17740]  ____sys_sendmsg+0x59b/0x970
[  961.169667][T17740]  ? __sys_sendmsg_sock+0x30/0x30
[  961.174713][T17740]  ? __import_iovec+0x315/0x500
[  961.179598][T17740]  ? import_iovec+0x6f/0xa0
[  961.184142][T17740]  ___sys_sendmsg+0x21c/0x290
[  961.188836][T17740]  ? __sys_sendmsg+0x270/0x270
[  961.193670][T17740]  ? __fdget+0x17c/0x200
[  961.197967][T17740]  __se_sys_sendmsg+0x19e/0x270
[  961.202841][T17740]  ? ct_nmi_exit+0x145/0x1c0
[  961.207458][T17740]  ? __x64_sys_sendmsg+0x80/0x80
[  961.212431][T17740]  ? lockdep_hardirqs_on+0x94/0x140
[  961.217661][T17740]  do_syscall_64+0x4c/0xa0
[  961.222094][T17740]  ? clear_bhb_loop+0x60/0xb0
[  961.226786][T17740]  ? clear_bhb_loop+0x60/0xb0
[  961.231482][T17740]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  961.237401][T17740] RIP: 0033:0x7f5eabb8e9a9
[  961.241833][T17740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  961.261483][T17740] RSP: 002b:00007f5eab9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  961.269916][T17740] RAX: ffffffffffffffda RBX: 00007f5eabdb6160 RCX: 00007f5eabb8e9a9
[  961.277900][T17740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  961.285884][T17740] RBP: 00007f5eabc10d69 R08: 0000000000000000 R09: 0000000000000000
[  961.293885][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  961.301878][T17740] R13: 0000000000000000 R14: 00007f5eabdb6160 R15: 00007ffdaac14108
[  961.309881][T17740]  </TASK>
[  961.532445][T17737] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  961.594037][T17737] CPU: 0 PID: 17737 Comm: syz.5.4208 Not tainted 6.1.147-syzkaller #0
[  961.602283][T17737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  961.612400][T17737] Call Trace:
[  961.615720][T17737]  <TASK>
[  961.618691][T17737]  dump_stack_lvl+0x168/0x22e
[  961.623437][T17737]  ? show_regs_print_info+0x12/0x12
[  961.628687][T17737]  ? load_image+0x3b0/0x3b0
[  961.633271][T17737]  sysfs_warn_dup+0x8a/0xa0
[  961.637833][T17737]  sysfs_do_create_link_sd+0xc0/0x110
[  961.643265][T17737]  device_add+0x7ed/0xfb0
[  961.647666][T17737]  wiphy_register+0x1e68/0x2bd0
[  961.652602][T17737]  ? cfg80211_event_work+0x40/0x40
[  961.657763][T17737]  ? minstrel_ht_alloc+0x894/0xa20
[  961.662905][T17737]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  961.668998][T17737]  ieee80211_register_hw+0x2c29/0x38c0
[  961.674488][T17737]  ? ieee80211_register_hw+0xeb1/0x38c0
[  961.680049][T17737]  ? ieee80211_register_hw+0xeb1/0x38c0
[  961.685619][T17737]  ? ieee80211_tasklet_handler+0x20/0x20
[  961.691283][T17737]  ? memset+0x1e/0x40
[  961.695298][T17737]  ? __hrtimer_init+0x186/0x270
[  961.700171][T17737]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  961.705957][T17737]  hwsim_new_radio_nl+0xafa/0xce0
[  961.711055][T17737]  genl_family_rcv_msg_doit+0x22e/0x320
[  961.716663][T17737]  ? end_current_label_crit_section+0x170/0x170
[  961.722936][T17737]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  961.728861][T17737]  ? bpf_lsm_capable+0x5/0x10
[  961.733559][T17737]  ? security_capable+0x85/0xb0
[  961.738434][T17737]  genl_rcv_msg+0x5f2/0x780
[  961.742969][T17737]  ? genl_bind+0x350/0x350
[  961.747402][T17737]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  961.753780][T17737]  netlink_rcv_skb+0x1de/0x420
[  961.758567][T17737]  ? genl_bind+0x350/0x350
[  961.763007][T17737]  ? netlink_ack+0x1100/0x1100
[  961.767801][T17737]  ? down_read+0x1a8/0x2d0
[  961.772241][T17737]  genl_rcv+0x24/0x40
[  961.776248][T17737]  netlink_unicast+0x74d/0x8d0
[  961.781043][T17737]  netlink_sendmsg+0x89e/0xbc0
[  961.786354][T17737]  ? netlink_getsockopt+0x540/0x540
[  961.791573][T17737]  ? aa_sock_msg_perm+0x94/0x150
[  961.796621][T17737]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  961.801924][T17737]  ? security_socket_sendmsg+0x7c/0xa0
[  961.807414][T17737]  ? netlink_getsockopt+0x540/0x540
[  961.812636][T17737]  ____sys_sendmsg+0x59b/0x970
[  961.817434][T17737]  ? __sys_sendmsg_sock+0x30/0x30
[  961.822472][T17737]  ? __import_iovec+0x315/0x500
[  961.827351][T17737]  ? import_iovec+0x6f/0xa0
[  961.831888][T17737]  ___sys_sendmsg+0x21c/0x290
[  961.836588][T17737]  ? __sys_sendmsg+0x270/0x270
[  961.841420][T17737]  ? __fdget+0x17c/0x200
[  961.845694][T17737]  __se_sys_sendmsg+0x19e/0x270
[  961.850567][T17737]  ? __x64_sys_sendmsg+0x80/0x80
[  961.855540][T17737]  ? lockdep_hardirqs_on+0x94/0x140
[  961.860763][T17737]  do_syscall_64+0x4c/0xa0
[  961.865194][T17737]  ? clear_bhb_loop+0x60/0xb0
[  961.869977][T17737]  ? clear_bhb_loop+0x60/0xb0
[  961.874680][T17737]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  961.880732][T17737] RIP: 0033:0x7f5eabb8e9a9
[  961.885178][T17737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  961.904820][T17737] RSP: 002b:00007f5eab9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  961.913265][T17737] RAX: ffffffffffffffda RBX: 00007f5eabdb6080 RCX: 00007f5eabb8e9a9
[  961.921251][T17737] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  961.929234][T17737] RBP: 00007f5eabc10d69 R08: 0000000000000000 R09: 0000000000000000
[  961.937222][T17737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  961.945238][T17737] R13: 0000000000000001 R14: 00007f5eabdb6080 R15: 00007ffdaac14108
[  961.953244][T17737]  </TASK>
[  961.975684][T17761] __nla_validate_parse: 4 callbacks suppressed
[  961.975700][T17761] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4218'.
[  962.016039][T17758] FAULT_INJECTION: forcing a failure.
[  962.016039][T17758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  962.104323][T17758] CPU: 1 PID: 17758 Comm: syz.3.4216 Not tainted 6.1.147-syzkaller #0
[  962.112567][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  962.122671][T17758] Call Trace:
[  962.125989][T17758]  <TASK>
[  962.128955][T17758]  dump_stack_lvl+0x168/0x22e
[  962.133679][T17758]  ? show_regs_print_info+0x12/0x12
[  962.138922][T17758]  ? load_image+0x3b0/0x3b0
[  962.143480][T17758]  ? __lock_acquire+0x7c50/0x7c50
[  962.148556][T17758]  should_fail_ex+0x399/0x4d0
[  962.153289][T17758]  _copy_from_user+0x2c/0x170
[  962.158019][T17758]  __sys_bpf+0x265/0x6d0
[  962.162316][T17758]  ? bpf_link_show_fdinfo+0x340/0x340
[  962.167759][T17758]  ? lock_chain_count+0x20/0x20
[  962.172675][T17758]  __x64_sys_bpf+0x78/0x90
[  962.177169][T17758]  do_syscall_64+0x4c/0xa0
[  962.181630][T17758]  ? clear_bhb_loop+0x60/0xb0
[  962.186351][T17758]  ? clear_bhb_loop+0x60/0xb0
[  962.191105][T17758]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  962.197051][T17758] RIP: 0033:0x7f54eb98e9a9
[  962.201513][T17758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  962.221164][T17758] RSP: 002b:00007f54ec77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  962.229624][T17758] RAX: ffffffffffffffda RBX: 00007f54ebbb5fa0 RCX: 00007f54eb98e9a9
[  962.237637][T17758] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  962.245649][T17758] RBP: 00007f54ec77f090 R08: 0000000000000000 R09: 0000000000000000
[  962.253661][T17758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  962.261676][T17758] R13: 0000000000000000 R14: 00007f54ebbb5fa0 R15: 00007ffe44824cf8
[  962.269718][T17758]  </TASK>
[  962.538849][T17771] netlink: 'syz.0.4221': attribute type 39 has an invalid length.
[  962.760550][ T4376] wlan1: Trigger new scan to find an IBSS to join
[  962.767276][   T56] wlan1: Trigger new scan to find an IBSS to join
[  962.826346][T17779] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4224'.
[  962.846151][ T4376] wlan1: Creating new IBSS network, BSSID aa:8a:13:06:f2:92
[  962.887261][T17784] FAULT_INJECTION: forcing a failure.
[  962.887261][T17784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  962.971804][T17784] CPU: 1 PID: 17784 Comm: syz.6.4225 Not tainted 6.1.147-syzkaller #0
[  962.980053][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  962.990151][T17784] Call Trace:
[  962.993462][T17784]  <TASK>
[  962.996424][T17784]  dump_stack_lvl+0x168/0x22e
[  963.001146][T17784]  ? show_regs_print_info+0x12/0x12
[  963.006398][T17784]  ? load_image+0x3b0/0x3b0
[  963.010956][T17784]  ? __lock_acquire+0x7c50/0x7c50
[  963.016067][T17784]  should_fail_ex+0x399/0x4d0
[  963.020803][T17784]  _copy_from_user+0x2c/0x170
[  963.025532][T17784]  __sys_bpf+0x265/0x6d0
[  963.029825][T17784]  ? bpf_link_show_fdinfo+0x340/0x340
[  963.035273][T17784]  ? lock_chain_count+0x20/0x20
[  963.040181][T17784]  __x64_sys_bpf+0x78/0x90
[  963.044649][T17784]  do_syscall_64+0x4c/0xa0
[  963.049105][T17784]  ? clear_bhb_loop+0x60/0xb0
[  963.053823][T17784]  ? clear_bhb_loop+0x60/0xb0
[  963.058545][T17784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  963.064488][T17784] RIP: 0033:0x7f8dafb8e9a9
[  963.068944][T17784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  963.088602][T17784] RSP: 002b:00007f8db09a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  963.097051][T17784] RAX: ffffffffffffffda RBX: 00007f8dafdb5fa0 RCX: 00007f8dafb8e9a9
[  963.105053][T17784] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011
[  963.113050][T17784] RBP: 00007f8db09a0090 R08: 0000000000000000 R09: 0000000000000000
[  963.121059][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  963.129056][T17784] R13: 0000000000000000 R14: 00007f8dafdb5fa0 R15: 00007ffc47f14028
[  963.137162][T17784]  </TASK>
[  963.236796][T17792] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4226'.
[  963.279822][T17792] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  963.313268][T17792] CPU: 0 PID: 17792 Comm: syz.0.4226 Not tainted 6.1.147-syzkaller #0
[  963.321524][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  963.331641][T17792] Call Trace:
[  963.334958][T17792]  <TASK>
[  963.337939][T17792]  dump_stack_lvl+0x168/0x22e
[  963.342689][T17792]  ? show_regs_print_info+0x12/0x12
[  963.347944][T17792]  ? load_image+0x3b0/0x3b0
[  963.352535][T17792]  sysfs_warn_dup+0x8a/0xa0
[  963.357101][T17792]  sysfs_do_create_link_sd+0xc0/0x110
[  963.362532][T17792]  device_add+0x7ed/0xfb0
[  963.366931][T17792]  wiphy_register+0x1e68/0x2bd0
[  963.371874][T17792]  ? cfg80211_event_work+0x40/0x40
[  963.377038][T17792]  ? minstrel_ht_alloc+0x894/0xa20
[  963.382196][T17792]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  963.388304][T17792]  ieee80211_register_hw+0x2c29/0x38c0
[  963.393906][T17792]  ? ieee80211_register_hw+0xeb1/0x38c0
[  963.399498][T17792]  ? ieee80211_register_hw+0xeb1/0x38c0
[  963.405109][T17792]  ? ieee80211_tasklet_handler+0x20/0x20
[  963.410816][T17792]  ? memset+0x1e/0x40
[  963.414862][T17792]  ? __hrtimer_init+0x186/0x270
[  963.419777][T17792]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  963.425581][T17792]  hwsim_new_radio_nl+0xafa/0xce0
[  963.430677][T17792]  genl_family_rcv_msg_doit+0x22e/0x320
[  963.436281][T17792]  ? end_current_label_crit_section+0x170/0x170
[  963.442589][T17792]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  963.448556][T17792]  ? bpf_lsm_capable+0x5/0x10
[  963.453285][T17792]  ? security_capable+0x85/0xb0
[  963.458197][T17792]  genl_rcv_msg+0x5f2/0x780
[  963.462773][T17792]  ? genl_bind+0x350/0x350
[  963.467236][T17792]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  963.473646][T17792]  netlink_rcv_skb+0x1de/0x420
[  963.478467][T17792]  ? genl_bind+0x350/0x350
[  963.482937][T17792]  ? netlink_ack+0x1100/0x1100
[  963.487781][T17792]  ? down_read+0x1a8/0x2d0
[  963.492257][T17792]  genl_rcv+0x24/0x40
[  963.496294][T17792]  netlink_unicast+0x74d/0x8d0
[  963.501118][T17792]  netlink_sendmsg+0x89e/0xbc0
[  963.505951][T17792]  ? netlink_getsockopt+0x540/0x540
[  963.511213][T17792]  ? aa_sock_msg_perm+0x94/0x150
[  963.516214][T17792]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  963.521548][T17792]  ? security_socket_sendmsg+0x7c/0xa0
[  963.527062][T17792]  ? netlink_getsockopt+0x540/0x540
[  963.532308][T17792]  ____sys_sendmsg+0x59b/0x970
[  963.537110][T17792]  ? __sys_sendmsg_sock+0x30/0x30
[  963.542163][T17792]  ? __import_iovec+0x315/0x500
[  963.547056][T17792]  ? import_iovec+0x6f/0xa0
[  963.551938][T17792]  ___sys_sendmsg+0x21c/0x290
[  963.556645][T17792]  ? __sys_sendmsg+0x270/0x270
[  963.561477][T17792]  ? __fdget+0x17c/0x200
[  963.565747][T17792]  __se_sys_sendmsg+0x19e/0x270
[  963.570622][T17792]  ? __se_sys_futex+0x14a/0x440
[  963.575501][T17792]  ? __x64_sys_sendmsg+0x80/0x80
[  963.580481][T17792]  ? lockdep_hardirqs_on+0x94/0x140
[  963.585708][T17792]  do_syscall_64+0x4c/0xa0
[  963.590143][T17792]  ? clear_bhb_loop+0x60/0xb0
[  963.594837][T17792]  ? clear_bhb_loop+0x60/0xb0
[  963.599532][T17792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  963.605450][T17792] RIP: 0033:0x7f1ec0b8e9a9
[  963.609882][T17792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  963.629512][T17792] RSP: 002b:00007f1ec1a06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  963.637946][T17792] RAX: ffffffffffffffda RBX: 00007f1ec0db6080 RCX: 00007f1ec0b8e9a9
[  963.645942][T17792] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  963.653930][T17792] RBP: 00007f1ec0c10d69 R08: 0000000000000000 R09: 0000000000000000
[  963.661913][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  963.669902][T17792] R13: 0000000000000000 R14: 00007f1ec0db6080 R15: 00007ffdf1148798
[  963.677905][T17792]  </TASK>
[  963.929957][T17797] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.4227'.
[  963.967709][T17797] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  964.009999][T17797] CPU: 0 PID: 17797 Comm: syz.6.4227 Not tainted 6.1.147-syzkaller #0
[  964.018241][T17797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  964.028329][T17797] Call Trace:
[  964.031626][T17797]  <TASK>
[  964.034572][T17797]  dump_stack_lvl+0x168/0x22e
[  964.039274][T17797]  ? show_regs_print_info+0x12/0x12
[  964.044494][T17797]  ? load_image+0x3b0/0x3b0
[  964.049026][T17797]  sysfs_warn_dup+0x8a/0xa0
[  964.053545][T17797]  sysfs_do_create_link_sd+0xc0/0x110
[  964.058939][T17797]  device_add+0x7ed/0xfb0
[  964.063290][T17797]  wiphy_register+0x1e68/0x2bd0
[  964.068166][T17797]  ? cfg80211_event_work+0x40/0x40
[  964.073293][T17797]  ? minstrel_ht_alloc+0x894/0xa20
[  964.078426][T17797]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  964.084518][T17797]  ieee80211_register_hw+0x2c29/0x38c0
[  964.090022][T17797]  ? ieee80211_register_hw+0xeb1/0x38c0
[  964.095599][T17797]  ? ieee80211_register_hw+0xeb1/0x38c0
[  964.101163][T17797]  ? ieee80211_tasklet_handler+0x20/0x20
[  964.106821][T17797]  ? memset+0x1e/0x40
[  964.110825][T17797]  ? __hrtimer_init+0x186/0x270
[  964.115693][T17797]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  964.121449][T17797]  hwsim_new_radio_nl+0xafa/0xce0
[  964.126504][T17797]  genl_family_rcv_msg_doit+0x22e/0x320
[  964.132066][T17797]  ? end_current_label_crit_section+0x170/0x170
[  964.138333][T17797]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  964.144254][T17797]  ? bpf_lsm_capable+0x5/0x10
[  964.148993][T17797]  ? security_capable+0x85/0xb0
[  964.153859][T17797]  genl_rcv_msg+0x5f2/0x780
[  964.158385][T17797]  ? genl_bind+0x350/0x350
[  964.162817][T17797]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  964.169180][T17797]  netlink_rcv_skb+0x1de/0x420
[  964.173988][T17797]  ? genl_bind+0x350/0x350
[  964.178426][T17797]  ? netlink_ack+0x1100/0x1100
[  964.183209][T17797]  ? down_read+0x1a8/0x2d0
[  964.187642][T17797]  genl_rcv+0x24/0x40
[  964.191641][T17797]  netlink_unicast+0x74d/0x8d0
[  964.196432][T17797]  netlink_sendmsg+0x89e/0xbc0
[  964.201224][T17797]  ? netlink_getsockopt+0x540/0x540
[  964.206441][T17797]  ? aa_sock_msg_perm+0x94/0x150
[  964.211409][T17797]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  964.216706][T17797]  ? security_socket_sendmsg+0x7c/0xa0
[  964.222198][T17797]  ? netlink_getsockopt+0x540/0x540
[  964.227410][T17797]  ____sys_sendmsg+0x59b/0x970
[  964.232202][T17797]  ? __sys_sendmsg_sock+0x30/0x30
[  964.237238][T17797]  ? __import_iovec+0x315/0x500
[  964.242113][T17797]  ? import_iovec+0x6f/0xa0
[  964.246639][T17797]  ___sys_sendmsg+0x21c/0x290
[  964.251331][T17797]  ? __sys_sendmsg+0x270/0x270
[  964.256146][T17797]  ? __fdget+0x17c/0x200
[  964.260413][T17797]  __se_sys_sendmsg+0x19e/0x270
[  964.265276][T17797]  ? ct_nmi_exit+0x145/0x1c0
[  964.269973][T17797]  ? __x64_sys_sendmsg+0x80/0x80
[  964.274950][T17797]  ? lockdep_hardirqs_on+0x94/0x140
[  964.280170][T17797]  do_syscall_64+0x4c/0xa0
[  964.284599][T17797]  ? clear_bhb_loop+0x60/0xb0
[  964.289288][T17797]  ? clear_bhb_loop+0x60/0xb0
[  964.293983][T17797]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  964.299898][T17797] RIP: 0033:0x7f8dafb8e9a9
[  964.304330][T17797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  964.324036][T17797] RSP: 002b:00007f8db09a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  964.332467][T17797] RAX: ffffffffffffffda RBX: 00007f8dafdb5fa0 RCX: 00007f8dafb8e9a9
[  964.340454][T17797] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  964.348435][T17797] RBP: 00007f8dafc10d69 R08: 0000000000000000 R09: 0000000000000000
[  964.356676][T17797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  964.364656][T17797] R13: 0000000000000000 R14: 00007f8dafdb5fa0 R15: 00007ffc47f14028
[  964.372665][T17797]  </TASK>
Stopping sshd: [  964.573407][T17804] IPv6: Can't replace route, no match found
[  964.595328][T17799] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4228'.
[  964.606114][T17802] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  964.648509][T17799] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  964.723440][T17799] CPU: 0 PID: 17799 Comm: syz.5.4228 Not tainted 6.1.147-syzkaller #0
[  964.731691][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  964.741797][T17799] Call Trace:
[  964.745122][T17799]  <TASK>
[  964.748096][T17799]  dump_stack_lvl+0x168/0x22e
[  964.753092][T17799]  ? show_regs_print_info+0x12/0x12
[  964.758346][T17799]  ? load_image+0x3b0/0x3b0
[  964.762927][T17799]  sysfs_warn_dup+0x8a/0xa0
[  964.767491][T17799]  sysfs_do_create_link_sd+0xc0/0x110
[  964.772925][T17799]  device_add+0x7ed/0xfb0
[  964.777323][T17799]  wiphy_register+0x1e68/0x2bd0
[  964.782254][T17799]  ? cfg80211_event_work+0x40/0x40
[  964.787421][T17799]  ? minstrel_ht_alloc+0x894/0xa20
[  964.792597][T17799]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  964.798727][T17799]  ieee80211_register_hw+0x2c29/0x38c0
[  964.804248][T17799]  ? ieee80211_register_hw+0xeb1/0x38c0
[  964.809844][T17799]  ? ieee80211_register_hw+0xeb1/0x38c0
[  964.815463][T17799]  ? ieee80211_tasklet_handler+0x20/0x20
[  964.821161][T17799]  ? memset+0x1e/0x40
[  964.825204][T17799]  ? __hrtimer_init+0x186/0x270
[  964.830108][T17799]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  964.835921][T17799]  hwsim_new_radio_nl+0xafa/0xce0
[  964.841029][T17799]  genl_family_rcv_msg_doit+0x22e/0x320
[  964.846640][T17799]  ? end_current_label_crit_section+0x170/0x170
[  964.853044][T17799]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  964.859101][T17799]  ? bpf_lsm_capable+0x5/0x10
[  964.863833][T17799]  ? security_capable+0x85/0xb0
[  964.868750][T17799]  genl_rcv_msg+0x5f2/0x780
[  964.873325][T17799]  ? genl_bind+0x350/0x350
[  964.877792][T17799]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  964.884723][T17799]  netlink_rcv_skb+0x1de/0x420
[  964.889544][T17799]  ? genl_bind+0x350/0x350
[  964.894021][T17799]  ? netlink_ack+0x1100/0x1100
[  964.898855][T17799]  ? down_read+0x1a8/0x2d0
[  964.903334][T17799]  genl_rcv+0x24/0x40
[  964.907381][T17799]  netlink_unicast+0x74d/0x8d0
[  964.912227][T17799]  netlink_sendmsg+0x89e/0xbc0
[  964.917056][T17799]  ? netlink_getsockopt+0x540/0x540
[  964.922322][T17799]  ? aa_sock_msg_perm+0x94/0x150
[  964.927327][T17799]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  964.932675][T17799]  ? security_socket_sendmsg+0x7c/0xa0
[  964.938208][T17799]  ? netlink_getsockopt+0x540/0x540
[  964.943470][T17799]  ____sys_sendmsg+0x59b/0x970
[  964.948311][T17799]  ? __sys_sendmsg_sock+0x30/0x30
[  964.953397][T17799]  ? __import_iovec+0x315/0x500
[  964.958316][T17799]  ? import_iovec+0x6f/0xa0
[  964.962891][T17799]  ___sys_sendmsg+0x21c/0x290
[  964.967621][T17799]  ? __sys_sendmsg+0x270/0x270
[  964.972485][T17799]  ? __fdget+0x17c/0x200
[  964.976785][T17799]  __se_sys_sendmsg+0x19e/0x270
[  964.981728][T17799]  ? ct_nmi_exit+0x145/0x1c0
[  964.986370][T17799]  ? __x64_sys_sendmsg+0x80/0x80
[  964.991376][T17799]  ? lockdep_hardirqs_on+0x94/0x140
[  964.996636][T17799]  do_syscall_64+0x4c/0xa0
[  965.001107][T17799]  ? clear_bhb_loop+0x60/0xb0
[  965.005831][T17799]  ? clear_bhb_loop+0x60/0xb0
[  965.010568][T17799]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.016515][T17799] RIP: 0033:0x7f5eabb8e9a9
[  965.020978][T17799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  965.040641][T17799] RSP: 002b:00007f5eac91e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  965.049120][T17799] RAX: ffffffffffffffda RBX: 00007f5eabdb5fa0 RCX: 00007f5eabb8e9a9
[  965.057505][T17799] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  965.065538][T17799] RBP: 00007f5eabc10d69 R08: 0000000000000000 R09: 0000000000000000
[  965.073571][T17799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  965.081688][T17799] R13: 0000000000000000 R14: 00007f5eabdb5fa0 R15: 00007ffdaac14108
[  965.089744][T17799]  </TASK>
stopped /usr/sbin/sshd (pid 4028)
OK
[  965.111948][ T4659] wlan1: Trigger new scan to find an IBSS to join
[  965.150375][ T4349] wlan1: Creating new IBSS network, BSSID 16:a1:05:c7:a2:17
Stopping crond: [  965.374621][T17818] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4233'.
[  965.410954][T17808] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4229'.
[  965.462830][T17808] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  965.501729][T17808] CPU: 1 PID: 17808 Comm: syz.0.4229 Not tainted 6.1.147-syzkaller #0
[  965.510065][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  965.520168][T17808] Call Trace:
[  965.523482][T17808]  <TASK>
[  965.526456][T17808]  dump_stack_lvl+0x168/0x22e
[  965.531190][T17808]  ? show_regs_print_info+0x12/0x12
[  965.536439][T17808]  ? load_image+0x3b0/0x3b0
[  965.541007][T17808]  sysfs_warn_dup+0x8a/0xa0
[  965.545572][T17808]  sysfs_do_create_link_sd+0xc0/0x110
[  965.550993][T17808]  device_add+0x7ed/0xfb0
[  965.555367][T17808]  wiphy_register+0x1e68/0x2bd0
[  965.560255][T17808]  ? cfg80211_event_work+0x40/0x40
[  965.565400][T17808]  ? minstrel_ht_alloc+0x894/0xa20
[  965.570535][T17808]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  965.576627][T17808]  ieee80211_register_hw+0x2c29/0x38c0
[  965.582113][T17808]  ? ieee80211_register_hw+0xeb1/0x38c0
[  965.587674][T17808]  ? ieee80211_register_hw+0xeb1/0x38c0
[  965.593248][T17808]  ? ieee80211_tasklet_handler+0x20/0x20
[  965.598918][T17808]  ? memset+0x1e/0x40
[  965.602933][T17808]  ? __hrtimer_init+0x186/0x270
[  965.607801][T17808]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  965.613570][T17808]  hwsim_new_radio_nl+0xafa/0xce0
[  965.618630][T17808]  genl_family_rcv_msg_doit+0x22e/0x320
[  965.624201][T17808]  ? end_current_label_crit_section+0x170/0x170
[  965.630469][T17808]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  965.636391][T17808]  ? bpf_lsm_capable+0x5/0x10
[  965.641089][T17808]  ? security_capable+0x85/0xb0
[  965.645959][T17808]  genl_rcv_msg+0x5f2/0x780
[  965.650496][T17808]  ? genl_bind+0x350/0x350
[  965.654930][T17808]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  965.661299][T17808]  netlink_rcv_skb+0x1de/0x420
[  965.666080][T17808]  ? genl_bind+0x350/0x350
[  965.670514][T17808]  ? netlink_ack+0x1100/0x1100
[  965.675334][T17808]  ? down_read+0x1a8/0x2d0
[  965.679781][T17808]  genl_rcv+0x24/0x40
[  965.683798][T17808]  netlink_unicast+0x74d/0x8d0
[  965.688616][T17808]  netlink_sendmsg+0x89e/0xbc0
[  965.693411][T17808]  ? netlink_getsockopt+0x540/0x540
[  965.698632][T17808]  ? aa_sock_msg_perm+0x94/0x150
[  965.703595][T17808]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  965.708894][T17808]  ? security_socket_sendmsg+0x7c/0xa0
[  965.714394][T17808]  ? netlink_getsockopt+0x540/0x540
[  965.719607][T17808]  ____sys_sendmsg+0x59b/0x970
[  965.724428][T17808]  ? __sys_sendmsg_sock+0x30/0x30
[  965.729556][T17808]  ? __import_iovec+0x315/0x500
[  965.734439][T17808]  ? import_iovec+0x6f/0xa0
[  965.738969][T17808]  ___sys_sendmsg+0x21c/0x290
[  965.743679][T17808]  ? __sys_sendmsg+0x270/0x270
[  965.748499][T17808]  ? __fdget+0x17c/0x200
[  965.752764][T17808]  __se_sys_sendmsg+0x19e/0x270
[  965.757631][T17808]  ? ct_nmi_exit+0x145/0x1c0
[  965.762245][T17808]  ? __x64_sys_sendmsg+0x80/0x80
[  965.767215][T17808]  ? lockdep_hardirqs_on+0x94/0x140
[  965.772436][T17808]  do_syscall_64+0x4c/0xa0
[  965.776864][T17808]  ? clear_bhb_loop+0x60/0xb0
[  965.781555][T17808]  ? clear_bhb_loop+0x60/0xb0
[  965.786249][T17808]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.792166][T17808] RIP: 0033:0x7f1ec0b8e9a9
[  965.796624][T17808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  965.816250][T17808] RSP: 002b:00007f1ec1a06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  965.824678][T17808] RAX: ffffffffffffffda RBX: 00007f1ec0db6080 RCX: 00007f1ec0b8e9a9
[  965.832661][T17808] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  965.840647][T17808] RBP: 00007f1ec0c10d69 R08: 0000000000000000 R09: 0000000000000000
[  965.848630][T17808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  965.856643][T17808] R13: 0000000000000000 R14: 00007f1ec0db6080 R15: 00007ffdf1148798
[  965.864668][T17808]  </TASK>
stopped /usr/sbin/crond (pid 4014)
OK
[  966.035170][T17825] FAULT_INJECTION: forcing a failure.
[  966.035170][T17825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  966.057738][T17825] CPU: 0 PID: 17825 Comm: syz.4.4235 Not tainted 6.1.147-syzkaller #0
[  966.066050][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  966.076124][T17825] Call Trace:
[  966.079414][T17825]  <TASK>
[  966.082356][T17825]  dump_stack_lvl+0x168/0x22e
[  966.087053][T17825]  ? show_regs_print_info+0x12/0x12
[  966.092264][T17825]  ? load_image+0x3b0/0x3b0
[  966.096793][T17825]  ? __lock_acquire+0x7c50/0x7c50
[  966.101842][T17825]  should_fail_ex+0x399/0x4d0
[  966.106547][T17825]  _copy_from_user+0x2c/0x170
[  966.111242][T17825]  __sys_bpf+0x265/0x6d0
[  966.115504][T17825]  ? bpf_link_show_fdinfo+0x340/0x340
[  966.120903][T17825]  ? lock_chain_count+0x20/0x20
[  966.125773][T17825]  __x64_sys_bpf+0x78/0x90
[  966.130209][T17825]  do_syscall_64+0x4c/0xa0
[  966.134637][T17825]  ? clear_bhb_loop+0x60/0xb0
[  966.139324][T17825]  ? clear_bhb_loop+0x60/0xb0
[  966.144012][T17825]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  966.149927][T17825] RIP: 0033:0x7fdde918e9a9
[  966.154356][T17825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  966.173977][T17825] RSP: 002b:00007fddea069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  966.182405][T17825] RAX: ffffffffffffffda RBX: 00007fdde93b5fa0 RCX: 00007fdde918e9a9
[  966.190388][T17825] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005
[  966.198368][T17825] RBP: 00007fddea069090 R08: 0000000000000000 R09: 0000000000000000
[  966.206348][T17825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  966.214333][T17825] R13: 0000000000000000 R14: 00007fdde93b5fa0 R15: 00007ffe4f41a878
[  966.222324][T17825]  </TASK>
[  966.228783][T17828] IPv6: Can't replace route, no match found
[  966.239181][T17828] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  966.272619][T17824] IPv6: Can't replace route, no match found
[  966.288335][T17824] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  966.473546][T17830] device team_slave_0 left promiscuous mode
[  966.625297][T17830] team0: Port device team_slave_0 removed
[  966.643532][T17830] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  966.665444][T17840] FAULT_INJECTION: forcing a failure.
[  966.665444][T17840] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  966.710757][T17840] CPU: 1 PID: 17840 Comm: syz.5.4239 Not tainted 6.1.147-syzkaller #0
[  966.719005][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  966.729104][T17840] Call Trace:
[  966.732417][T17840]  <TASK>
[  966.735377][T17840]  dump_stack_lvl+0x168/0x22e
[  966.740102][T17840]  ? show_regs_print_info+0x12/0x12
[  966.745336][T17840]  ? load_image+0x3b0/0x3b0
[  966.749907][T17840]  ? __lock_acquire+0x7c50/0x7c50
[  966.755417][T17840]  ? verify_lock_unused+0x140/0x140
[  966.760667][T17840]  should_fail_ex+0x399/0x4d0
[  966.765398][T17840]  _copy_from_user+0x2c/0x170
[  966.770133][T17840]  ___sys_sendmsg+0x155/0x290
[  966.774861][T17840]  ? __sys_sendmsg+0x270/0x270
[  966.779686][T17840]  ? __lock_acquire+0x7c50/0x7c50
[  966.784780][T17840]  ? __fdget+0x17c/0x200
[  966.789152][T17840]  __se_sys_sendmsg+0x19e/0x270
[  966.794046][T17840]  ? __x64_sys_sendmsg+0x80/0x80
[  966.799035][T17840]  ? lockdep_hardirqs_on+0x94/0x140
[  966.804280][T17840]  do_syscall_64+0x4c/0xa0
[  966.808727][T17840]  ? clear_bhb_loop+0x60/0xb0
[  966.813435][T17840]  ? clear_bhb_loop+0x60/0xb0
[  966.818143][T17840]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  966.824079][T17840] RIP: 0033:0x7f5eabb8e9a9
[  966.828526][T17840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  966.848164][T17840] RSP: 002b:00007f5eac91e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
Stopping dhcpcd.[  966.856622][T17840] RAX: ffffffffffffffda RBX: 00007f5eabdb5fa0 RCX: 00007f5eabb8e9a9
..[  966.866107][T17840] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006
[  966.874262][T17840] RBP: 00007f5eac91e090 R08: 0000000000000000 R09: 0000000000000000
[  966.882275][T17840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001

[  966.890287][T17840] R13: 0000000000000000 R14: 00007f5eabdb5fa0 R15: 00007ffdaac14108
[  966.898517][T17840]  </TASK>
[  966.911084][T17833] netlink: 'syz.6.4237': attribute type 20 has an invalid length.
no /sbin/dhcpcd found; none killed
[  967.172566][T17847] netlink: 'syz.0.4241': attribute type 2 has an invalid length.
[  967.194202][T17847] netlink: 'syz.0.4241': attribute type 1 has an invalid length.
[  967.214946][T17847] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4241'.
[  967.511876][T17856] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4245'.
[  967.555097][T17856] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
Stopping network[  967.581498][T17856] CPU: 0 PID: 17856 Comm: syz.4.4245 Not tainted 6.1.147-syzkaller #0
[  967.590089][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  967.600201][T17856] Call Trace:
[  967.603526][T17856]  <TASK>
[  967.606501][T17856]  dump_stack_lvl+0x168/0x22e
[  967.611248][T17856]  ? show_regs_print_info+0x12/0x12
[  967.616498][T17856]  ? load_image+0x3b0/0x3b0
[  967.621077][T17856]  sysfs_warn_dup+0x8a/0xa0
[  967.625634][T17856]  sysfs_do_create_link_sd+0xc0/0x110
[  967.631062][T17856]  device_add+0x7ed/0xfb0
[  967.635455][T17856]  wiphy_register+0x1e68/0x2bd0
[  967.640453][T17856]  ? cfg80211_event_work+0x40/0x40
[  967.645615][T17856]  ? minstrel_ht_alloc+0x894/0xa20
[  967.650792][T17856]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  967.656941][T17856]  ieee80211_register_hw+0x2c29/0x38c0
[  967.662555][T17856]  ? ieee80211_register_hw+0xeb1/0x38c0
[  967.668154][T17856]  ? ieee80211_register_hw+0xeb1/0x38c0
[  967.673764][T17856]  ? ieee80211_tasklet_handler+0x20/0x20
[  967.679460][T17856]  ? memset+0x1e/0x40
[  967.683503][T17856]  ? __hrtimer_init+0x186/0x270
[  967.688409][T17856]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  967.694208][T17856]  hwsim_new_radio_nl+0xafa/0xce0
[  967.699315][T17856]  genl_family_rcv_msg_doit+0x22e/0x320
[  967.704928][T17856]  ? end_current_label_crit_section+0x170/0x170
[  967.711241][T17856]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  967.717199][T17856]  ? bpf_lsm_capable+0x5/0x10
[  967.721936][T17856]  ? security_capable+0x85/0xb0
[  967.726855][T17856]  genl_rcv_msg+0x5f2/0x780
[  967.731403][T17856]  ? genl_bind+0x350/0x350
[  967.735855][T17856]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  967.742231][T17856]  netlink_rcv_skb+0x1de/0x420
[  967.747024][T17856]  ? genl_bind+0x350/0x350
[  967.751470][T17856]  ? netlink_ack+0x1100/0x1100
[  967.756261][T17856]  ? down_read+0x1a8/0x2d0
[  967.760699][T17856]  genl_rcv+0x24/0x40
[  967.764702][T17856]  netlink_unicast+0x74d/0x8d0
[  967.769514][T17856]  netlink_sendmsg+0x89e/0xbc0
[  967.774329][T17856]  ? netlink_getsockopt+0x540/0x540
[  967.779574][T17856]  ? aa_sock_msg_perm+0x94/0x150
[  967.784561][T17856]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  967.789881][T17856]  ? security_socket_sendmsg+0x7c/0xa0
[  967.795376][T17856]  ? netlink_getsockopt+0x540/0x540
[  967.800597][T17856]  ____sys_sendmsg+0x59b/0x970
[  967.805411][T17856]  ? __sys_sendmsg_sock+0x30/0x30
[  967.810512][T17856]  ? __import_iovec+0x315/0x500
[  967.815417][T17856]  ? import_iovec+0x6f/0xa0
[  967.819960][T17856]  ___sys_sendmsg+0x21c/0x290
[  967.824680][T17856]  ? __sys_sendmsg+0x270/0x270
[  967.829504][T17856]  ? __fdget+0x17c/0x200
[  967.833775][T17856]  __se_sys_sendmsg+0x19e/0x270
[  967.838669][T17856]  ? __x64_sys_sendmsg+0x80/0x80
[  967.843646][T17856]  ? lockdep_hardirqs_on+0x94/0x140
[  967.848901][T17856]  do_syscall_64+0x4c/0xa0
[  967.853617][T17856]  ? clear_bhb_loop+0x60/0xb0
[  967.858336][T17856]  ? clear_bhb_loop+0x60/0xb0
[  967.863042][T17856]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  967.868971][T17856] RIP: 0033:0x7fdde918e9a9
[  967.873402][T17856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  967.893029][T17856] RSP: 002b:00007fddea069038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  967.901551][T17856] RAX: ffffffffffffffda RBX: 00007fdde93b5fa0 RCX: 00007fdde918e9a9
[  967.909542][T17856] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  967.917529][T17856] RBP: 00007fdde9210d69 R08: 0000000000000000 R09: 0000000000000000
[  967.925518][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  967.933509][T17856] R13: 0000000000000000 R14: 00007fdde93b5fa0 R15: 00007ffe4f41a878
[  967.941538][T17856]  </TASK>
: [  968.035483][T17865] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4248'.
[  968.076141][T17865] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  968.104663][T17865] CPU: 0 PID: 17865 Comm: syz.5.4248 Not tainted 6.1.147-syzkaller #0
[  968.112905][T17865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  968.123005][T17865] Call Trace:
[  968.126322][T17865]  <TASK>
[  968.129298][T17865]  dump_stack_lvl+0x168/0x22e
[  968.134041][T17865]  ? show_regs_print_info+0x12/0x12
[  968.139388][T17865]  ? load_image+0x3b0/0x3b0
[  968.143959][T17865]  sysfs_warn_dup+0x8a/0xa0
[  968.148528][T17865]  sysfs_do_create_link_sd+0xc0/0x110
[  968.153953][T17865]  device_add+0x7ed/0xfb0
[  968.158341][T17865]  wiphy_register+0x1e68/0x2bd0
[  968.163266][T17865]  ? cfg80211_event_work+0x40/0x40
[  968.168423][T17865]  ? minstrel_ht_alloc+0x894/0xa20
[  968.173585][T17865]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  968.179709][T17865]  ieee80211_register_hw+0x2c29/0x38c0
[  968.185223][T17865]  ? ieee80211_register_hw+0xeb1/0x38c0
[  968.190813][T17865]  ? ieee80211_register_hw+0xeb1/0x38c0
[  968.196416][T17865]  ? ieee80211_tasklet_handler+0x20/0x20
[  968.202104][T17865]  ? memset+0x1e/0x40
[  968.206136][T17865]  ? __hrtimer_init+0x186/0x270
[  968.211032][T17865]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  968.216835][T17865]  hwsim_new_radio_nl+0xafa/0xce0
[  968.221933][T17865]  genl_family_rcv_msg_doit+0x22e/0x320
[  968.227539][T17865]  ? end_current_label_crit_section+0x170/0x170
[  968.233981][T17865]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  968.239946][T17865]  ? bpf_lsm_capable+0x5/0x10
[  968.244674][T17865]  ? security_capable+0x85/0xb0
[  968.249684][T17865]  genl_rcv_msg+0x5f2/0x780
[  968.254257][T17865]  ? genl_bind+0x350/0x350
[  968.258742][T17865]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  968.265153][T17865]  netlink_rcv_skb+0x1de/0x420
[  968.269978][T17865]  ? genl_bind+0x350/0x350
[  968.274463][T17865]  ? netlink_ack+0x1100/0x1100
[  968.279301][T17865]  ? down_read+0x1a8/0x2d0
[  968.283776][T17865]  genl_rcv+0x24/0x40
[  968.287812][T17865]  netlink_unicast+0x74d/0x8d0
[  968.292637][T17865]  netlink_sendmsg+0x89e/0xbc0
[  968.297457][T17865]  ? netlink_getsockopt+0x540/0x540
[  968.302702][T17865]  ? aa_sock_msg_perm+0x94/0x150
[  968.307692][T17865]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  968.313019][T17865]  ? security_socket_sendmsg+0x7c/0xa0
[  968.318531][T17865]  ? netlink_getsockopt+0x540/0x540
[  968.323798][T17865]  ____sys_sendmsg+0x59b/0x970
[  968.328631][T17865]  ? __sys_sendmsg_sock+0x30/0x30
[  968.333703][T17865]  ? __import_iovec+0x315/0x500
[  968.338627][T17865]  ? import_iovec+0x6f/0xa0
[  968.343193][T17865]  ___sys_sendmsg+0x21c/0x290
[  968.347927][T17865]  ? __sys_sendmsg+0x270/0x270
[  968.352792][T17865]  ? __fdget+0x17c/0x200
[  968.357178][T17865]  __se_sys_sendmsg+0x19e/0x270
[  968.362088][T17865]  ? __x64_sys_sendmsg+0x80/0x80
[  968.367094][T17865]  ? lockdep_hardirqs_on+0x94/0x140
[  968.372346][T17865]  do_syscall_64+0x4c/0xa0
[  968.376803][T17865]  ? clear_bhb_loop+0x60/0xb0
[  968.381612][T17865]  ? clear_bhb_loop+0x60/0xb0
[  968.386337][T17865]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  968.392292][T17865] RIP: 0033:0x7f5eabb8e9a9
[  968.396749][T17865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  968.416406][T17865] RSP: 002b:00007f5eab9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  968.424878][T17865] RAX: ffffffffffffffda RBX: 00007f5eabdb6080 RCX: 00007f5eabb8e9a9
[  968.432901][T17865] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  968.440919][T17865] RBP: 00007f5eabc10d69 R08: 0000000000000000 R09: 0000000000000000
[  968.448941][T17865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  968.457044][T17865] R13: 0000000000000000 R14: 00007f5eabdb6080 R15: 00007ffdaac14108
[  968.465087][T17865]  </TASK>
[  968.844158][ T4376] wlan1: Trigger new scan to find an IBSS to join
[  968.973997][T17879] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4251'.
[  969.102702][T17872] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4249'.
[  969.201340][T17879] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  969.259059][T17879] CPU: 1 PID: 17879 Comm: syz.3.4251 Not tainted 6.1.147-syzkaller #0
[  969.267311][T17879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  969.277418][T17879] Call Trace:
[  969.280741][T17879]  <TASK>
[  969.283722][T17879]  dump_stack_lvl+0x168/0x22e
[  969.288451][T17879]  ? show_regs_print_info+0x12/0x12
[  969.293705][T17879]  ? load_image+0x3b0/0x3b0
[  969.298283][T17879]  sysfs_warn_dup+0x8a/0xa0
[  969.302841][T17879]  sysfs_do_create_link_sd+0xc0/0x110
[  969.308259][T17879]  device_add+0x7ed/0xfb0
[  969.312653][T17879]  wiphy_register+0x1e68/0x2bd0
[  969.317585][T17879]  ? cfg80211_event_work+0x40/0x40
[  969.322748][T17879]  ? minstrel_ht_alloc+0x894/0xa20
[  969.327919][T17879]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  969.334058][T17879]  ieee80211_register_hw+0x2c29/0x38c0
[  969.339595][T17879]  ? ieee80211_register_hw+0xeb1/0x38c0
[  969.345197][T17879]  ? ieee80211_register_hw+0xeb1/0x38c0
[  969.350775][T17879]  ? ieee80211_tasklet_handler+0x20/0x20
[  969.356438][T17879]  ? memset+0x1e/0x40
[  969.360447][T17879]  ? __hrtimer_init+0x186/0x270
[  969.365329][T17879]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  969.371092][T17879]  hwsim_new_radio_nl+0xafa/0xce0
[  969.376161][T17879]  genl_family_rcv_msg_doit+0x22e/0x320
[  969.381734][T17879]  ? end_current_label_crit_section+0x170/0x170
[  969.388005][T17879]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  969.393930][T17879]  ? bpf_lsm_capable+0x5/0x10
[  969.398625][T17879]  ? security_capable+0x85/0xb0
[  969.403502][T17879]  genl_rcv_msg+0x5f2/0x780
[  969.408044][T17879]  ? genl_bind+0x350/0x350
[  969.412481][T17879]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  969.418850][T17879]  netlink_rcv_skb+0x1de/0x420
[  969.423650][T17879]  ? genl_bind+0x350/0x350
[  969.428098][T17879]  ? netlink_ack+0x1100/0x1100
[  969.432886][T17879]  ? down_read+0x1a8/0x2d0
[  969.437325][T17879]  genl_rcv+0x24/0x40
[  969.441323][T17879]  netlink_unicast+0x74d/0x8d0
[  969.446119][T17879]  netlink_sendmsg+0x89e/0xbc0
[  969.450932][T17879]  ? netlink_getsockopt+0x540/0x540
[  969.456182][T17879]  ? aa_sock_msg_perm+0x94/0x150
[  969.461167][T17879]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  969.466471][T17879]  ? security_socket_sendmsg+0x7c/0xa0
[  969.471959][T17879]  ? netlink_getsockopt+0x540/0x540
[  969.477186][T17879]  ____sys_sendmsg+0x59b/0x970
[  969.481997][T17879]  ? __sys_sendmsg_sock+0x30/0x30
[  969.487036][T17879]  ? __import_iovec+0x315/0x500
[  969.491947][T17879]  ? import_iovec+0x6f/0xa0
[  969.496479][T17879]  ___sys_sendmsg+0x21c/0x290
[  969.501181][T17879]  ? __sys_sendmsg+0x270/0x270
[  969.506007][T17879]  ? __fdget+0x17c/0x200
[  969.510275][T17879]  __se_sys_sendmsg+0x19e/0x270
[  969.515152][T17879]  ? __x64_sys_sendmsg+0x80/0x80
[  969.520127][T17879]  ? lockdep_hardirqs_on+0x94/0x140
[  969.525353][T17879]  do_syscall_64+0x4c/0xa0
[  969.529784][T17879]  ? clear_bhb_loop+0x60/0xb0
[  969.534476][T17879]  ? clear_bhb_loop+0x60/0xb0
[  969.539173][T17879]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  969.545095][T17879] RIP: 0033:0x7f54eb98e9a9
[  969.549526][T17879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  969.569152][T17879] RSP: 002b:00007f54ec75e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  969.577598][T17879] RAX: ffffffffffffffda RBX: 00007f54ebbb6080 RCX: 00007f54eb98e9a9
[  969.585608][T17879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  969.593690][T17879] RBP: 00007f54eba10d69 R08: 0000000000000000 R09: 0000000000000000
[  969.601686][T17879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  969.609680][T17879] R13: 0000000000000000 R14: 00007f54ebbb6080 R15: 00007ffe44824cf8
[  969.617692][T17879]  </TASK>
[  969.800129][T17890] netlink: 'syz.4.4254': attribute type 16 has an invalid length.
[  969.894303][T17890] netlink: 'syz.4.4254': attribute type 3 has an invalid length.
[  969.940909][T17890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4254'.
[  969.989280][T17889] netlink: 'syz.5.4253': attribute type 20 has an invalid length.
[  970.582483][T17909] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4260'.
[  970.693731][T17909] netlink: 'syz.4.4260': attribute type 21 has an invalid length.
OK
[  970.927957][T17920] FAULT_INJECTION: forcing a failure.
[  970.927957][T17920] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  970.979303][T17920] CPU: 1 PID: 17920 Comm: syz.3.4257 Not tainted 6.1.147-syzkaller #0
[  970.987540][T17920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  970.997638][T17920] Call Trace:
[  971.000943][T17920]  <TASK>
[  971.003884][T17920]  dump_stack_lvl+0x168/0x22e
[  971.008585][T17920]  ? show_regs_print_info+0x12/0x12
[  971.013811][T17920]  ? load_image+0x3b0/0x3b0
[  971.018338][T17920]  ? __lock_acquire+0x7c50/0x7c50
[  971.023378][T17920]  ? snprintf+0xd7/0x120
[  971.027639][T17920]  should_fail_ex+0x399/0x4d0
[  971.032341][T17920]  _copy_to_user+0x2c/0x130
[  971.036855][T17920]  simple_read_from_buffer+0xe3/0x150
[  971.042256][T17920]  proc_fail_nth_read+0x19a/0x210
[  971.047290][T17920]  ? proc_fault_inject_write+0x2f0/0x2f0
[  971.052948][T17920]  ? fsnotify_perm+0x248/0x550
[  971.057722][T17920]  ? proc_fault_inject_write+0x2f0/0x2f0
[  971.063366][T17920]  vfs_read+0x2c0/0x920
[  971.067542][T17920]  ? kernel_read+0x1e0/0x1e0
[  971.072148][T17920]  ? __fget_files+0x28/0x4d0
[  971.076754][T17920]  ? __fget_files+0x44a/0x4d0
[  971.081461][T17920]  ? __fdget_pos+0x2ae/0x360
[  971.086066][T17920]  ? ksys_read+0x71/0x240
[  971.090442][T17920]  ksys_read+0x143/0x240
[  971.094704][T17920]  ? vfs_write+0x960/0x960
[  971.099139][T17920]  ? lockdep_hardirqs_on+0x94/0x140
[  971.104368][T17920]  do_syscall_64+0x4c/0xa0
[  971.108801][T17920]  ? clear_bhb_loop+0x60/0xb0
[  971.113490][T17920]  ? clear_bhb_loop+0x60/0xb0
[  971.118184][T17920]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  971.124098][T17920] RIP: 0033:0x7f54eb98d3bc
[  971.128548][T17920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  971.148169][T17920] RSP: 002b:00007f54ec75e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  971.156597][T17920] RAX: ffffffffffffffda RBX: 00007f54ebbb6080 RCX: 00007f54eb98d3bc
[  971.164583][T17920] RDX: 000000000000000f RSI: 00007f54ec75e0a0 RDI: 0000000000000006
[  971.172564][T17920] RBP: 00007f54ec75e090 R08: 0000000000000000 R09: 0000000000000000
[  971.180554][T17920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.188532][T17920] R13: 0000000000000001 R14: 00007f54ebbb6080 R15: 00007ffe44824cf8
[  971.196528][T17920]  </TASK>
[  971.409869][T17927] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.4264'.
Stopping iptables: [  971.441753][T17927] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  971.463185][T17927] CPU: 1 PID: 17927 Comm: syz.6.4264 Not tainted 6.1.147-syzkaller #0
[  971.471437][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  971.481537][T17927] Call Trace:
[  971.484854][T17927]  <TASK>
[  971.487819][T17927]  dump_stack_lvl+0x168/0x22e
[  971.492237][T17930] FAULT_INJECTION: forcing a failure.
[  971.492237][T17930] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  971.492540][T17927]  ? show_regs_print_info+0x12/0x12
[  971.492572][T17927]  ? load_image+0x3b0/0x3b0
[  971.492618][T17927]  sysfs_warn_dup+0x8a/0xa0
[  971.492646][T17927]  sysfs_do_create_link_sd+0xc0/0x110
[  971.492677][T17927]  device_add+0x7ed/0xfb0
[  971.492712][T17927]  wiphy_register+0x1e68/0x2bd0
[  971.492757][T17927]  ? cfg80211_event_work+0x40/0x40
[  971.492782][T17927]  ? minstrel_ht_alloc+0x894/0xa20
[  971.492813][T17927]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  971.492849][T17927]  ieee80211_register_hw+0x2c29/0x38c0
[  971.492904][T17927]  ? ieee80211_register_hw+0xeb1/0x38c0
[  971.492928][T17927]  ? ieee80211_register_hw+0xeb1/0x38c0
[  971.492960][T17927]  ? ieee80211_tasklet_handler+0x20/0x20
[  971.573431][T17927]  ? memset+0x1e/0x40
[  971.577468][T17927]  ? __hrtimer_init+0x186/0x270
[  971.582366][T17927]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  971.588168][T17927]  hwsim_new_radio_nl+0xafa/0xce0
[  971.593265][T17927]  genl_family_rcv_msg_doit+0x22e/0x320
[  971.598867][T17927]  ? end_current_label_crit_section+0x170/0x170
[  971.605173][T17927]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  971.611132][T17927]  ? bpf_lsm_capable+0x5/0x10
[  971.615858][T17927]  ? security_capable+0x85/0xb0
[  971.620759][T17927]  genl_rcv_msg+0x5f2/0x780
[  971.625344][T17927]  ? genl_bind+0x350/0x350
[  971.629819][T17927]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  971.636225][T17927]  netlink_rcv_skb+0x1de/0x420
[  971.641049][T17927]  ? genl_bind+0x350/0x350
[  971.645517][T17927]  ? netlink_ack+0x1100/0x1100
[  971.650434][T17927]  ? down_read+0x1a8/0x2d0
[  971.655003][T17927]  genl_rcv+0x24/0x40
[  971.659036][T17927]  netlink_unicast+0x74d/0x8d0
[  971.663861][T17927]  netlink_sendmsg+0x89e/0xbc0
[  971.668685][T17927]  ? netlink_getsockopt+0x540/0x540
[  971.673941][T17927]  ? aa_sock_msg_perm+0x94/0x150
[  971.678929][T17927]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  971.684256][T17927]  ? security_socket_sendmsg+0x7c/0xa0
[  971.689772][T17927]  ? netlink_getsockopt+0x540/0x540
[  971.695021][T17927]  ____sys_sendmsg+0x59b/0x970
OK[  971.699851][T17927]  ? __sys_sendmsg_sock+0x30/0x30
[  971.705019][T17927]  ? __import_iovec+0x315/0x500
[  971.709931][T17927]  ? import_iovec+0x6f/0xa0
[  971.714491][T17927]  ___sys_sendmsg+0x21c/0x290
[  971.719208][T17927]  ? __sys_sendmsg+0x270/0x270
[  971.724062][T17927]  ? __fdget+0x17c/0x200
[  971.728363][T17927]  __se_sys_sendmsg+0x19e/0x270
[  971.733269][T17927]  ? __x64_sys_sendmsg+0x80/0x80

[  971.738275][T17927]  ? lockdep_hardirqs_on+0x94/0x140
[  971.743622][T17927]  do_syscall_64+0x4c/0xa0
[  971.748080][T17927]  ? clear_bhb_loop+0x60/0xb0
[  971.752802][T17927]  ? clear_bhb_loop+0x60/0xb0
[  971.757526][T17927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  971.763473][T17927] RIP: 0033:0x7f8dafb8e9a9
[  971.767931][T17927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  971.787657][T17927] RSP: 002b:00007f8db097f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  971.796122][T17927] RAX: ffffffffffffffda RBX: 00007f8dafdb6080 RCX: 00007f8dafb8e9a9
[  971.804145][T17927] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  971.812160][T17927] RBP: 00007f8dafc10d69 R08: 0000000000000000 R09: 0000000000000000
[  971.820175][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  971.828180][T17927] R13: 0000000000000000 R14: 00007f8dafdb6080 R15: 00007ffc47f14028
[  971.836209][T17927]  </TASK>
[  971.840001][ T4659] wlan1: Trigger new scan to find an IBSS to join
[  971.868990][T17930] CPU: 1 PID: 17930 Comm: syz.5.4262 Not tainted 6.1.147-syzkaller #0
[  971.877238][T17930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  971.887334][T17930] Call Trace:
[  971.890655][T17930]  <TASK>
[  971.893625][T17930]  dump_stack_lvl+0x168/0x22e
[  971.898359][T17930]  ? show_regs_print_info+0x12/0x12
[  971.903604][T17930]  ? load_image+0x3b0/0x3b0
[  971.908161][T17930]  ? __lock_acquire+0x7c50/0x7c50
[  971.913266][T17930]  ? snprintf+0xd7/0x120
[  971.917561][T17930]  should_fail_ex+0x399/0x4d0
[  971.922302][T17930]  _copy_to_user+0x2c/0x130
[  971.926857][T17930]  simple_read_from_buffer+0xe3/0x150
[  971.932302][T17930]  proc_fail_nth_read+0x19a/0x210
[  971.937383][T17930]  ? proc_fault_inject_write+0x2f0/0x2f0
[  971.943078][T17930]  ? fsnotify_perm+0x248/0x550
[  971.947894][T17930]  ? proc_fault_inject_write+0x2f0/0x2f0
[  971.953590][T17930]  vfs_read+0x2c0/0x920
[  971.957804][T17930]  ? kernel_read+0x1e0/0x1e0
[  971.962453][T17930]  ? __fget_files+0x28/0x4d0
[  971.967096][T17930]  ? __fget_files+0x44a/0x4d0
[  971.971835][T17930]  ? __fdget_pos+0x2ae/0x360
[  971.976474][T17930]  ? ksys_read+0x71/0x240
[  971.980853][T17930]  ksys_read+0x143/0x240
[  971.985143][T17930]  ? vfs_write+0x960/0x960
[  971.989611][T17930]  ? lockdep_hardirqs_on+0x94/0x140
[  971.994863][T17930]  do_syscall_64+0x4c/0xa0
[  971.999326][T17930]  ? clear_bhb_loop+0x60/0xb0
[  972.004044][T17930]  ? clear_bhb_loop+0x60/0xb0
[  972.008764][T17930]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.014710][T17930] RIP: 0033:0x7f5eabb8d3bc
[  972.019163][T17930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  972.038811][T17930] RSP: 002b:00007f5eab9ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  972.047269][T17930] RAX: ffffffffffffffda RBX: 00007f5eabdb6080 RCX: 00007f5eabb8d3bc
[  972.055285][T17930] RDX: 000000000000000f RSI: 00007f5eab9ff0a0 RDI: 0000000000000007
[  972.063302][T17930] RBP: 00007f5eab9ff090 R08: 0000000000000000 R09: 0000000000000000
Stopping system [  972.071332][T17930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  972.080703][T17930] R13: 0000000000000000 R14: 00007f5eabdb6080 R15: 00007ffdaac14108
message bus: [  972.088750][T17930]  </TASK>
[  972.278754][T17937] device team_slave_0 left promiscuous mode
[  972.398526][T17939] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4268'.
[  972.435643][T17937] team0: Port device team_slave_0 removed
[  972.448171][T17937] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  972.483319][T17939] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  972.509111][T17939] CPU: 1 PID: 17939 Comm: syz.4.4268 Not tainted 6.1.147-syzkaller #0
[  972.517367][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  972.527479][T17939] Call Trace:
[  972.530815][T17939]  <TASK>
[  972.533801][T17939]  dump_stack_lvl+0x168/0x22e
[  972.538534][T17939]  ? show_regs_print_info+0x12/0x12
[  972.543789][T17939]  ? load_image+0x3b0/0x3b0
[  972.548391][T17939]  sysfs_warn_dup+0x8a/0xa0
[  972.552956][T17939]  sysfs_do_create_link_sd+0xc0/0x110
[  972.558399][T17939]  device_add+0x7ed/0xfb0
[  972.562816][T17939]  wiphy_register+0x1e68/0x2bd0
[  972.567745][T17939]  ? cfg80211_event_work+0x40/0x40
[  972.572887][T17939]  ? minstrel_ht_alloc+0x894/0xa20
[  972.578036][T17939]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  972.584151][T17939]  ieee80211_register_hw+0x2c29/0x38c0
[  972.589659][T17939]  ? ieee80211_register_hw+0xeb1/0x38c0
[  972.595231][T17939]  ? ieee80211_register_hw+0xeb1/0x38c0
[  972.600904][T17939]  ? ieee80211_tasklet_handler+0x20/0x20
[  972.606578][T17939]  ? memset+0x1e/0x40
[  972.610595][T17939]  ? __hrtimer_init+0x186/0x270
[  972.615481][T17939]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  972.621273][T17939]  hwsim_new_radio_nl+0xafa/0xce0
[  972.626356][T17939]  genl_family_rcv_msg_doit+0x22e/0x320
[  972.631932][T17939]  ? end_current_label_crit_section+0x170/0x170
[  972.638214][T17939]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  972.644184][T17939]  ? bpf_lsm_capable+0x5/0x10
[  972.648892][T17939]  ? security_capable+0x85/0xb0
[  972.653784][T17939]  genl_rcv_msg+0x5f2/0x780
[  972.658335][T17939]  ? genl_bind+0x350/0x350
[  972.662785][T17939]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  972.669175][T17939]  netlink_rcv_skb+0x1de/0x420
[  972.673986][T17939]  ? genl_bind+0x350/0x350
[  972.678439][T17939]  ? netlink_ack+0x1100/0x1100
[  972.683260][T17939]  ? down_read+0x1a8/0x2d0
[  972.687713][T17939]  genl_rcv+0x24/0x40
[  972.691725][T17939]  netlink_unicast+0x74d/0x8d0
[  972.696531][T17939]  netlink_sendmsg+0x89e/0xbc0
[  972.701335][T17939]  ? netlink_getsockopt+0x540/0x540
[  972.706565][T17939]  ? aa_sock_msg_perm+0x94/0x150
[  972.711549][T17939]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  972.716880][T17939]  ? security_socket_sendmsg+0x7c/0xa0
[  972.722390][T17939]  ? netlink_getsockopt+0x540/0x540
[  972.727636][T17939]  ____sys_sendmsg+0x59b/0x970
[  972.732460][T17939]  ? __sys_sendmsg_sock+0x30/0x30
[  972.737514][T17939]  ? __import_iovec+0x315/0x500
[  972.742414][T17939]  ? import_iovec+0x6f/0xa0
[  972.746966][T17939]  ___sys_sendmsg+0x21c/0x290
[  972.751685][T17939]  ? __sys_sendmsg+0x270/0x270
[  972.756565][T17939]  ? __fdget+0x17c/0x200
[  972.760848][T17939]  __se_sys_sendmsg+0x19e/0x270
[  972.765731][T17939]  ? __x64_sys_sendmsg+0x80/0x80
[  972.770726][T17939]  ? lockdep_hardirqs_on+0x94/0x140
[  972.775972][T17939]  do_syscall_64+0x4c/0xa0
[  972.780436][T17939]  ? clear_bhb_loop+0x60/0xb0
[  972.785180][T17939]  ? clear_bhb_loop+0x60/0xb0
[  972.789917][T17939]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.795871][T17939] RIP: 0033:0x7fdde918e9a9
[  972.800340][T17939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  972.819990][T17939] RSP: 002b:00007fddea069038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  972.828443][T17939] RAX: ffffffffffffffda RBX: 00007fdde93b5fa0 RCX: 00007fdde918e9a9
[  972.836446][T17939] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  972.844454][T17939] RBP: 00007fdde9210d69 R08: 0000000000000000 R09: 0000000000000000
[  972.852453][T17939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  972.860451][T17939] R13: 0000000000000000 R14: 00007fdde93b5fa0 R15: 00007ffe4f41a878
[  972.868480][T17939]  </TASK>
[  973.063692][T17943] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4269'.
done
[  973.328365][T17949] netlink: 'syz.6.4270': attribute type 20 has an invalid length.
[  973.797783][T17960] FAULT_INJECTION: forcing a failure.
[  973.797783][T17960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  973.885557][T17960] CPU: 0 PID: 17960 Comm: syz.0.4273 Not tainted 6.1.147-syzkaller #0
[  973.893800][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  973.903890][T17960] Call Trace:
[  973.907204][T17960]  <TASK>
[  973.910164][T17960]  dump_stack_lvl+0x168/0x22e
[  973.914881][T17960]  ? show_regs_print_info+0x12/0x12
[  973.920118][T17960]  ? load_image+0x3b0/0x3b0
[  973.924664][T17960]  ? __lock_acquire+0x7c50/0x7c50
[  973.929737][T17960]  should_fail_ex+0x399/0x4d0
[  973.934463][T17960]  _copy_from_user+0x2c/0x170
[  973.939181][T17960]  __sys_bpf+0x265/0x6d0
[  973.943464][T17960]  ? bpf_link_show_fdinfo+0x340/0x340
[  973.948902][T17960]  ? lock_chain_count+0x20/0x20
[  973.953822][T17960]  __x64_sys_bpf+0x78/0x90
[  973.958287][T17960]  do_syscall_64+0x4c/0xa0
[  973.962736][T17960]  ? clear_bhb_loop+0x60/0xb0
[  973.967473][T17960]  ? clear_bhb_loop+0x60/0xb0
[  973.972209][T17960]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  973.978175][T17960] RIP: 0033:0x7f1ec0b8e9a9
[  973.982633][T17960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  974.002289][T17960] RSP: 002b:00007f1ec1a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  974.010756][T17960] RAX: ffffffffffffffda RBX: 00007f1ec0db5fa0 RCX: 00007f1ec0b8e9a9
[  974.018772][T17960] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000012
[  974.026781][T17960] RBP: 00007f1ec1a27090 R08: 0000000000000000 R09: 0000000000000000
[  974.034794][T17960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  974.042807][T17960] R13: 0000000000000001 R14: 00007f1ec0db5fa0 R15: 00007ffdf1148798
[  974.050832][T17960]  </TASK>
[  974.843724][   T56] wlan1: Trigger new scan to find an IBSS to join
[  975.930443][ T4376] wlan1: Creating new IBSS network, BSSID 12:44:a8:4a:2f:cc
[  976.390322][T17994] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.4281'.
[  976.627831][T17999] device team_slave_0 left promiscuous mode
[  976.923433][T17999] team0: Port device team_slave_0 removed
[  976.946381][T17999] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
Stopping klogd: [  977.013869][T18002] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4284'.
[  977.393050][T18024] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4290'.
[  977.475568][T18024] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  977.529075][T18024] CPU: 1 PID: 18024 Comm: syz.3.4290 Not tainted 6.1.147-syzkaller #0
[  977.537424][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  977.547528][T18024] Call Trace:
[  977.550880][T18024]  <TASK>
[  977.553869][T18024]  dump_stack_lvl+0x168/0x22e
[  977.558618][T18024]  ? show_regs_print_info+0x12/0x12
[  977.563881][T18024]  ? load_image+0x3b0/0x3b0
[  977.568483][T18024]  sysfs_warn_dup+0x8a/0xa0
[  977.573042][T18024]  sysfs_do_create_link_sd+0xc0/0x110
[  977.578472][T18024]  device_add+0x7ed/0xfb0
[  977.582897][T18024]  wiphy_register+0x1e68/0x2bd0
[  977.587854][T18024]  ? cfg80211_event_work+0x40/0x40
[  977.593021][T18024]  ? minstrel_ht_alloc+0x894/0xa20
[  977.598216][T18024]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  977.604353][T18024]  ieee80211_register_hw+0x2c29/0x38c0
[  977.609891][T18024]  ? ieee80211_register_hw+0xeb1/0x38c0
[  977.615484][T18024]  ? ieee80211_register_hw+0xeb1/0x38c0
[  977.621124][T18024]  ? ieee80211_tasklet_handler+0x20/0x20
[  977.626866][T18024]  ? memset+0x1e/0x40
[  977.630921][T18024]  ? __hrtimer_init+0x186/0x270
[  977.635843][T18024]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  977.641766][T18024]  hwsim_new_radio_nl+0xafa/0xce0
[  977.646913][T18024]  genl_family_rcv_msg_doit+0x22e/0x320
[  977.652531][T18024]  ? end_current_label_crit_section+0x170/0x170
[  977.658853][T18024]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  977.664841][T18024]  ? bpf_lsm_capable+0x5/0x10
[  977.669582][T18024]  ? security_capable+0x85/0xb0
[  977.674504][T18024]  genl_rcv_msg+0x5f2/0x780
[  977.679094][T18024]  ? genl_bind+0x350/0x350
[  977.683559][T18024]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  977.690000][T18024]  netlink_rcv_skb+0x1de/0x420
[  977.694829][T18024]  ? genl_bind+0x350/0x350
[  977.699316][T18024]  ? netlink_ack+0x1100/0x1100
[  977.704178][T18024]  ? down_read+0x1a8/0x2d0
[  977.708678][T18024]  genl_rcv+0x24/0x40
[  977.712729][T18024]  netlink_unicast+0x74d/0x8d0
[  977.717602][T18024]  netlink_sendmsg+0x89e/0xbc0
[  977.722469][T18024]  ? netlink_getsockopt+0x540/0x540
[  977.727767][T18024]  ? aa_sock_msg_perm+0x94/0x150
[  977.732780][T18024]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  977.738122][T18024]  ? security_socket_sendmsg+0x7c/0xa0
[  977.743660][T18024]  ? netlink_getsockopt+0x540/0x540
[  977.748928][T18024]  ____sys_sendmsg+0x59b/0x970
[  977.753798][T18024]  ? __sys_sendmsg_sock+0x30/0x30
[  977.758888][T18024]  ? __import_iovec+0x315/0x500
[  977.763832][T18024]  ? import_iovec+0x6f/0xa0
[  977.768420][T18024]  ___sys_sendmsg+0x21c/0x290
[  977.773169][T18024]  ? __sys_sendmsg+0x270/0x270
[  977.778098][T18024]  ? __fdget+0x17c/0x200
[  977.782426][T18024]  __se_sys_sendmsg+0x19e/0x270
[  977.787339][T18024]  ? __x64_sys_sendmsg+0x80/0x80
[  977.792371][T18024]  ? lockdep_hardirqs_on+0x94/0x140
[  977.797757][T18024]  do_syscall_64+0x4c/0xa0
[  977.802225][T18024]  ? clear_bhb_loop+0x60/0xb0
[  977.806947][T18024]  ? clear_bhb_loop+0x60/0xb0
[  977.811683][T18024]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  977.817635][T18024] RIP: 0033:0x7f54eb98e9a9
[  977.822105][T18024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  977.841781][T18024] RSP: 002b:00007f54ec77f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
OK[  977.850271][T18024] RAX: ffffffffffffffda RBX: 00007f54ebbb5fa0 RCX: 00007f54eb98e9a9
[  977.858402][T18024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  977.866405][T18024] RBP: 00007f54eba10d69 R08: 0000000000000000 R09: 0000000000000000
[  977.874417][T18024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.882423][T18024] R13: 0000000000000000 R14: 00007f54ebbb5fa0 R15: 00007ffe44824cf8
[  977.890455][T18024]  </TASK>

[  978.270218][T18029] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4289'.
[  978.327984][T18029] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  978.396752][T18029] CPU: 1 PID: 18029 Comm: syz.0.4289 Not tainted 6.1.147-syzkaller #0
[  978.405090][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  978.415193][T18029] Call Trace:
[  978.418491][T18029]  <TASK>
[  978.421439][T18029]  dump_stack_lvl+0x168/0x22e
[  978.426143][T18029]  ? show_regs_print_info+0x12/0x12
[  978.431381][T18029]  ? load_image+0x3b0/0x3b0
[  978.435926][T18029]  sysfs_warn_dup+0x8a/0xa0
[  978.440456][T18029]  sysfs_do_create_link_sd+0xc0/0x110
[  978.445855][T18029]  device_add+0x7ed/0xfb0
[  978.450218][T18029]  wiphy_register+0x1e68/0x2bd0
[  978.455108][T18029]  ? cfg80211_event_work+0x40/0x40
[  978.460237][T18029]  ? minstrel_ht_alloc+0x894/0xa20
[  978.465373][T18029]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  978.471471][T18029]  ieee80211_register_hw+0x2c29/0x38c0
[  978.476967][T18029]  ? ieee80211_register_hw+0xeb1/0x38c0
[  978.482536][T18029]  ? ieee80211_register_hw+0xeb1/0x38c0
[  978.488109][T18029]  ? ieee80211_tasklet_handler+0x20/0x20
[  978.493773][T18029]  ? memset+0x1e/0x40
[  978.497788][T18029]  ? __hrtimer_init+0x186/0x270
[  978.502665][T18029]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  978.508432][T18029]  hwsim_new_radio_nl+0xafa/0xce0
[  978.513497][T18029]  genl_family_rcv_msg_doit+0x22e/0x320
[  978.519067][T18029]  ? end_current_label_crit_section+0x170/0x170
[  978.525359][T18029]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  978.531285][T18029]  ? bpf_lsm_capable+0x5/0x10
[  978.535982][T18029]  ? security_capable+0x85/0xb0
[  978.540856][T18029]  genl_rcv_msg+0x5f2/0x780
[  978.545393][T18029]  ? genl_bind+0x350/0x350
[  978.549832][T18029]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  978.556208][T18029]  netlink_rcv_skb+0x1de/0x420
[  978.561002][T18029]  ? genl_bind+0x350/0x350
[  978.565440][T18029]  ? netlink_ack+0x1100/0x1100
[  978.570234][T18029]  ? down_read+0x1a8/0x2d0
[  978.574672][T18029]  genl_rcv+0x24/0x40
[  978.578678][T18029]  netlink_unicast+0x74d/0x8d0
[  978.583476][T18029]  netlink_sendmsg+0x89e/0xbc0
[  978.588269][T18029]  ? netlink_getsockopt+0x540/0x540
[  978.593497][T18029]  ? aa_sock_msg_perm+0x94/0x150
[  978.598464][T18029]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  978.603764][T18029]  ? security_socket_sendmsg+0x7c/0xa0
[  978.609247][T18029]  ? netlink_getsockopt+0x540/0x540
[  978.614466][T18029]  ____sys_sendmsg+0x59b/0x970
[  978.619264][T18029]  ? __sys_sendmsg_sock+0x30/0x30
[  978.624320][T18029]  ? __import_iovec+0x315/0x500
[  978.629206][T18029]  ? import_iovec+0x6f/0xa0
[  978.633742][T18029]  ___sys_sendmsg+0x21c/0x290
[  978.638530][T18029]  ? __sys_sendmsg+0x270/0x270
[  978.643360][T18029]  ? __fdget+0x17c/0x200
[  978.647643][T18029]  __se_sys_sendmsg+0x19e/0x270
[  978.652530][T18029]  ? __x64_sys_sendmsg+0x80/0x80
[  978.657514][T18029]  ? lockdep_hardirqs_on+0x94/0x140
[  978.662744][T18029]  do_syscall_64+0x4c/0xa0
[  978.667197][T18029]  ? clear_bhb_loop+0x60/0xb0
[  978.671917][T18029]  ? clear_bhb_loop+0x60/0xb0
[  978.676645][T18029]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  978.682596][T18029] RIP: 0033:0x7f1ec0b8e9a9
[  978.687035][T18029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  978.706685][T18029] RSP: 002b:00007f1ec1a06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  978.715132][T18029] RAX: ffffffffffffffda RBX: 00007f1ec0db6080 RCX: 00007f1ec0b8e9a9
[  978.723120][T18029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  978.731105][T18029] RBP: 00007f1ec0c10d69 R08: 0000000000000000 R09: 0000000000000000
[  978.739087][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  978.747070][T18029] R13: 0000000000000000 R14: 00007f1ec0db6080 R15: 00007ffdf1148798
[  978.755168][T18029]  </TASK>
Stopping acpid: [  979.254940][T18048] netlink: 'syz.0.4295': attribute type 16 has an invalid length.
[  979.274129][T18048] netlink: 'syz.0.4295': attribute type 3 has an invalid length.
[  979.293796][T18048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4295'.
[  979.531603][T18053] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.4297'.
[  979.598839][T18053] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  979.628497][T18056] netlink: 13951 bytes leftover after parsing attributes in process `syz.5.4298'.
[  979.779324][T18053] CPU: 0 PID: 18053 Comm: syz.6.4297 Not tainted 6.1.147-syzkaller #0
[  979.787579][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  979.797694][T18053] Call Trace:
[  979.801024][T18053]  <TASK>
[  979.804009][T18053]  dump_stack_lvl+0x168/0x22e
[  979.808755][T18053]  ? show_regs_print_info+0x12/0x12
[  979.814019][T18053]  ? load_image+0x3b0/0x3b0
[  979.818632][T18053]  sysfs_warn_dup+0x8a/0xa0
[  979.823205][T18053]  sysfs_do_create_link_sd+0xc0/0x110
[  979.828652][T18053]  device_add+0x7ed/0xfb0
[  979.833069][T18053]  wiphy_register+0x1e68/0x2bd0
[  979.838026][T18053]  ? cfg80211_event_work+0x40/0x40
[  979.843205][T18053]  ? minstrel_ht_alloc+0x894/0xa20
[  979.848398][T18053]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  979.854545][T18053]  ieee80211_register_hw+0x2c29/0x38c0
[  979.860112][T18053]  ? ieee80211_register_hw+0xeb1/0x38c0
[  979.865728][T18053]  ? ieee80211_register_hw+0xeb1/0x38c0
[  979.871351][T18053]  ? ieee80211_tasklet_handler+0x20/0x20
[  979.877073][T18053]  ? memset+0x1e/0x40
[  979.881138][T18053]  ? __hrtimer_init+0x186/0x270
[  979.886093][T18053]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  979.891928][T18053]  hwsim_new_radio_nl+0xafa/0xce0
[  979.897178][T18053]  genl_family_rcv_msg_doit+0x22e/0x320
[  979.902813][T18053]  ? end_current_label_crit_section+0x170/0x170
[  979.909225][T18053]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  979.915210][T18053]  ? bpf_lsm_capable+0x5/0x10
[  979.919949][T18053]  ? security_capable+0x85/0xb0
[  979.924879][T18053]  genl_rcv_msg+0x5f2/0x780
[  979.929453][T18053]  ? genl_bind+0x350/0x350
[  979.933921][T18053]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  979.940336][T18053]  netlink_rcv_skb+0x1de/0x420
[  979.945144][T18053]  ? genl_bind+0x350/0x350
[  979.949637][T18053]  ? netlink_ack+0x1100/0x1100
[  979.954464][T18053]  ? down_read+0x1a8/0x2d0
[  979.958940][T18053]  genl_rcv+0x24/0x40
[  979.962982][T18053]  netlink_unicast+0x74d/0x8d0
[  979.967951][T18053]  netlink_sendmsg+0x89e/0xbc0
[  979.972802][T18053]  ? netlink_getsockopt+0x540/0x540
[  979.978046][T18053]  ? aa_sock_msg_perm+0x94/0x150
[  979.983032][T18053]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  979.988367][T18053]  ? security_socket_sendmsg+0x7c/0xa0
[  979.993880][T18053]  ? netlink_getsockopt+0x540/0x540
[  979.999114][T18053]  ____sys_sendmsg+0x59b/0x970
[  980.003925][T18053]  ? __sys_sendmsg_sock+0x30/0x30
[  980.008974][T18053]  ? __import_iovec+0x315/0x500
[  980.013872][T18053]  ? import_iovec+0x6f/0xa0
[  980.018414][T18053]  ___sys_sendmsg+0x21c/0x290
[  980.023130][T18053]  ? __sys_sendmsg+0x270/0x270
[  980.027995][T18053]  ? __fdget+0x17c/0x200
[  980.032270][T18053]  __se_sys_sendmsg+0x19e/0x270
[  980.037145][T18053]  ? perf_trace_preemptirq_template+0x287/0x330
[  980.043411][T18053]  ? __x64_sys_sendmsg+0x80/0x80
[  980.048403][T18053]  ? lockdep_hardirqs_on+0x94/0x140
[  980.053637][T18053]  do_syscall_64+0x4c/0xa0
[  980.058079][T18053]  ? clear_bhb_loop+0x60/0xb0
[  980.062776][T18053]  ? clear_bhb_loop+0x60/0xb0
[  980.067479][T18053]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.073410][T18053] RIP: 0033:0x7f8dafb8e9a9
[  980.077866][T18053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.097518][T18053] RSP: 002b:00007f8db09a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  980.106057][T18053] RAX: ffffffffffffffda RBX: 00007f8dafdb5fa0 RCX: 00007f8dafb8e9a9
[  980.114161][T18053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  980.122176][T18053] RBP: 00007f8dafc10d69 R08: 0000000000000000 R09: 0000000000000000
[  980.130178][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  980.138456][T18053] R13: 0000000000000000 R14: 00007f8dafdb5fa0 R15: 00007ffc47f14028
[  980.146490][T18053]  </TASK>
OK
[  980.198345][T18057] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4296'.
[  980.295767][T18057] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  980.354573][T18066] FAULT_INJECTION: forcing a failure.
[  980.354573][T18066] name failslab, interval 1, probability 0, space 0, times 0
[  980.368140][T18057] CPU: 0 PID: 18057 Comm: syz.4.4296 Not tainted 6.1.147-syzkaller #0
[  980.376352][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  980.386447][T18057] Call Trace:
[  980.389762][T18057]  <TASK>
[  980.392729][T18057]  dump_stack_lvl+0x168/0x22e
[  980.397452][T18057]  ? show_regs_print_info+0x12/0x12
[  980.402680][T18057]  ? load_image+0x3b0/0x3b0
[  980.407228][T18057]  sysfs_warn_dup+0x8a/0xa0
[  980.411812][T18057]  sysfs_do_create_link_sd+0xc0/0x110
[  980.417233][T18057]  device_add+0x7ed/0xfb0
[  980.421617][T18057]  wiphy_register+0x1e68/0x2bd0
[  980.426537][T18057]  ? cfg80211_event_work+0x40/0x40
[  980.431700][T18057]  ? minstrel_ht_alloc+0x894/0xa20
[  980.436865][T18057]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  980.442987][T18057]  ieee80211_register_hw+0x2c29/0x38c0
[  980.448508][T18057]  ? ieee80211_register_hw+0xeb1/0x38c0
[  980.454094][T18057]  ? ieee80211_register_hw+0xeb1/0x38c0
[  980.459691][T18057]  ? ieee80211_tasklet_handler+0x20/0x20
[  980.465392][T18057]  ? memset+0x1e/0x40
[  980.469431][T18057]  ? __hrtimer_init+0x186/0x270
[  980.474341][T18057]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  980.480147][T18057]  hwsim_new_radio_nl+0xafa/0xce0
[  980.485257][T18057]  genl_family_rcv_msg_doit+0x22e/0x320
[  980.490859][T18057]  ? end_current_label_crit_section+0x170/0x170
[  980.497167][T18057]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  980.503134][T18057]  ? bpf_lsm_capable+0x5/0x10
[  980.507856][T18057]  ? security_capable+0x85/0xb0
[  980.512769][T18057]  genl_rcv_msg+0x5f2/0x780
[  980.517349][T18057]  ? genl_bind+0x350/0x350
[  980.521822][T18057]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  980.528238][T18057]  netlink_rcv_skb+0x1de/0x420
[  980.533061][T18057]  ? genl_bind+0x350/0x350
[  980.537532][T18057]  ? netlink_ack+0x1100/0x1100
[  980.542360][T18057]  ? down_read+0x1a8/0x2d0
[  980.546827][T18057]  genl_rcv+0x24/0x40
[  980.550864][T18057]  netlink_unicast+0x74d/0x8d0
[  980.555691][T18057]  netlink_sendmsg+0x89e/0xbc0
[  980.560537][T18057]  ? netlink_getsockopt+0x540/0x540
[  980.565810][T18057]  ? aa_sock_msg_perm+0x94/0x150
[  980.572222][T18057]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  980.577632][T18057]  ? security_socket_sendmsg+0x7c/0xa0
[  980.583153][T18057]  ? netlink_getsockopt+0x540/0x540
[  980.588403][T18057]  ____sys_sendmsg+0x59b/0x970
[  980.593231][T18057]  ? __sys_sendmsg_sock+0x30/0x30
[  980.598303][T18057]  ? __import_iovec+0x315/0x500
[  980.603228][T18057]  ? import_iovec+0x6f/0xa0
[  980.607791][T18057]  ___sys_sendmsg+0x21c/0x290
[  980.612528][T18057]  ? __sys_sendmsg+0x270/0x270
[  980.617389][T18057]  ? __fdget+0x17c/0x200
[  980.621681][T18057]  __se_sys_sendmsg+0x19e/0x270
[  980.626586][T18057]  ? __se_sys_futex+0x14a/0x440
[  980.631492][T18057]  ? __x64_sys_sendmsg+0x80/0x80
[  980.636595][T18057]  ? lockdep_hardirqs_on+0x94/0x140
[  980.641860][T18057]  do_syscall_64+0x4c/0xa0
[  980.646350][T18057]  ? clear_bhb_loop+0x60/0xb0
[  980.651077][T18057]  ? clear_bhb_loop+0x60/0xb0
[  980.655877][T18057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.661810][T18057] RIP: 0033:0x7fdde918e9a9
[  980.666253][T18057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.685906][T18057] RSP: 002b:00007fddea048038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  980.694353][T18057] RAX: ffffffffffffffda RBX: 00007fdde93b6080 RCX: 00007fdde918e9a9
[  980.702350][T18057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  980.710343][T18057] RBP: 00007fdde9210d69 R08: 0000000000000000 R09: 0000000000000000
[  980.718367][T18057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  980.726395][T18057] R13: 0000000000000000 R14: 00007fdde93b6080 R15: 00007ffe4f41a878
[  980.734419][T18057]  </TASK>
Stopping syslogd: [  980.757589][T18066] CPU: 0 PID: 18066 Comm: syz.3.4300 Not tainted 6.1.147-syzkaller #0
[  980.765832][T18066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  980.775927][T18066] Call Trace:
[  980.779242][T18066]  <TASK>
[  980.782216][T18066]  dump_stack_lvl+0x168/0x22e
[  980.786953][T18066]  ? show_regs_print_info+0x12/0x12
[  980.792196][T18066]  ? load_image+0x3b0/0x3b0
[  980.796750][T18066]  ? __might_sleep+0xd0/0xd0
[  980.801393][T18066]  ? __lock_acquire+0x7c50/0x7c50
[  980.806460][T18066]  ? aa_file_perm+0x3ef/0xec0
[  980.811197][T18066]  should_fail_ex+0x399/0x4d0
[  980.815925][T18066]  should_failslab+0x5/0x20
[  980.820491][T18066]  slab_pre_alloc_hook+0x59/0x310
[  980.825560][T18066]  ? kernfs_fop_write_iter+0x155/0x4c0
[  980.831072][T18066]  __kmem_cache_alloc_node+0x4f/0x260
[  980.836498][T18066]  ? kernfs_fop_write_iter+0x155/0x4c0
[  980.842013][T18066]  __kmalloc+0xa0/0x240
[  980.846229][T18066]  kernfs_fop_write_iter+0x155/0x4c0
[  980.851579][T18066]  vfs_write+0x44c/0x960
[  980.855889][T18066]  ? file_end_write+0x250/0x250
[  980.860809][T18066]  ? __fget_files+0x44a/0x4d0
[  980.865547][T18066]  ? __fdget_pos+0x2ae/0x360
[  980.870187][T18066]  ? ksys_write+0x71/0x240
[  980.874668][T18066]  ksys_write+0x143/0x240
[  980.879055][T18066]  ? __ia32_sys_read+0x80/0x80
[  980.883881][T18066]  ? lockdep_hardirqs_on+0x94/0x140
[  980.889139][T18066]  do_syscall_64+0x4c/0xa0
[  980.893600][T18066]  ? clear_bhb_loop+0x60/0xb0
[  980.898313][T18066]  ? clear_bhb_loop+0x60/0xb0
[  980.903040][T18066]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  980.909000][T18066] RIP: 0033:0x7f54eb98e9a9
[  980.913468][T18066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.933115][T18066] RSP: 002b:00007f54ec77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  980.941554][T18066] RAX: ffffffffffffffda RBX: 00007f54ebbb5fa0 RCX: 00007f54eb98e9a9
[  980.949558][T18066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  980.957548][T18066] RBP: 00007f54ec77f090 R08: 0000000000000000 R09: 0000000000000000
[  980.965537][T18066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  980.973525][T18066] R13: 0000000000000000 R14: 00007f54ebbb5fa0 R15: 00007ffe44824cf8
[  980.981532][T18066]  </TASK>
stopped /sbin/syslogd (pid 3620)
OK
[  981.183632][T18074] IPv6: Can't replace route, no match found
[  981.194502][T18074] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  981.245959][T18076] IPv6: Can't replace route, no match found
[  981.271871][T18076] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  981.350007][T18078] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4304'.
[  981.941988][T18100] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4319'.
umount: can't remount debugfs read-only
[  982.135243][T18104] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4310'.
[  982.175781][T18104] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  982.199881][T18104] CPU: 0 PID: 18104 Comm: syz.5.4310 Not tainted 6.1.147-syzkaller #0
[  982.208231][T18104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  982.218346][T18104] Call Trace:
[  982.221817][T18104]  <TASK>
[  982.224790][T18104]  dump_stack_lvl+0x168/0x22e
[  982.229539][T18104]  ? show_regs_print_info+0x12/0x12
[  982.234801][T18104]  ? load_image+0x3b0/0x3b0
[  982.239412][T18104]  sysfs_warn_dup+0x8a/0xa0
[  982.244080][T18104]  sysfs_do_create_link_sd+0xc0/0x110
[  982.249525][T18104]  device_add+0x7ed/0xfb0
[  982.253944][T18104]  wiphy_register+0x1e68/0x2bd0
[  982.258896][T18104]  ? cfg80211_event_work+0x40/0x40
[  982.264063][T18104]  ? minstrel_ht_alloc+0x894/0xa20
[  982.269248][T18104]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  982.275400][T18104]  ieee80211_register_hw+0x2c29/0x38c0
[  982.280958][T18104]  ? ieee80211_register_hw+0xeb1/0x38c0
[  982.286582][T18104]  ? ieee80211_register_hw+0xeb1/0x38c0
[  982.292193][T18104]  ? ieee80211_tasklet_handler+0x20/0x20
[  982.297914][T18104]  ? memset+0x1e/0x40
[  982.301965][T18104]  ? __hrtimer_init+0x186/0x270
[  982.306880][T18104]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  982.312690][T18104]  hwsim_new_radio_nl+0xafa/0xce0
[  982.317776][T18104]  genl_family_rcv_msg_doit+0x22e/0x320
[  982.323355][T18104]  ? end_current_label_crit_section+0x170/0x170
[  982.329643][T18104]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  982.335592][T18104]  ? bpf_lsm_capable+0x5/0x10
[  982.340299][T18104]  ? security_capable+0x85/0xb0
[  982.345196][T18104]  genl_rcv_msg+0x5f2/0x780
[  982.349749][T18104]  ? genl_bind+0x350/0x350
[  982.354191][T18104]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  982.360587][T18104]  netlink_rcv_skb+0x1de/0x420
[  982.365392][T18104]  ? genl_bind+0x350/0x350
[  982.369845][T18104]  ? netlink_ack+0x1100/0x1100
[  982.374660][T18104]  ? down_read+0x1a8/0x2d0
[  982.379114][T18104]  genl_rcv+0x24/0x40
[  982.383123][T18104]  netlink_unicast+0x74d/0x8d0
[  982.387928][T18104]  netlink_sendmsg+0x89e/0xbc0
[  982.392733][T18104]  ? netlink_getsockopt+0x540/0x540
[  982.397961][T18104]  ? aa_sock_msg_perm+0x94/0x150
[  982.402932][T18104]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  982.408235][T18104]  ? security_socket_sendmsg+0x7c/0xa0
[  982.413724][T18104]  ? netlink_getsockopt+0x540/0x540
[  982.418956][T18104]  ____sys_sendmsg+0x59b/0x970
[  982.423770][T18104]  ? __sys_sendmsg_sock+0x30/0x30
[  982.428816][T18104]  ? __import_iovec+0x315/0x500
[  982.433719][T18104]  ? import_iovec+0x6f/0xa0
[  982.438260][T18104]  ___sys_sendmsg+0x21c/0x290
[  982.442971][T18104]  ? __sys_sendmsg+0x270/0x270
[  982.447803][T18104]  ? release_firmware_map_entry+0x18a/0x18a
[  982.453754][T18104]  ? __fdget+0x17c/0x200
[  982.458032][T18104]  __se_sys_sendmsg+0x19e/0x270
[  982.462912][T18104]  ? __x64_sys_sendmsg+0x80/0x80
[  982.467903][T18104]  ? lockdep_hardirqs_on+0x94/0x140
[  982.473140][T18104]  do_syscall_64+0x4c/0xa0
[  982.477577][T18104]  ? clear_bhb_loop+0x60/0xb0
[  982.482274][T18104]  ? clear_bhb_loop+0x60/0xb0
[  982.486982][T18104]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  982.492913][T18104] RIP: 0033:0x7f5eabb8e9a9
[  982.497353][T18104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  982.516989][T18104] RSP: 002b:00007f5eac91e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  982.525429][T18104] RAX: ffffffffffffffda RBX: 00007f5eabdb5fa0 RCX: 00007f5eabb8e9a9
[  982.533430][T18104] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  982.541422][T18104] RBP: 00007f5eabc10d69 R08: 0000000000000000 R09: 0000000000000000
[  982.549414][T18104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  982.557407][T18104] R13: 0000000000000000 R14: 00007f5eabdb5fa0 R15: 00007ffdaac14108
[  982.565430][T18104]  </TASK>
[  983.018264][T18113] netlink: 'syz.6.4312': attribute type 16 has an invalid length.
[  983.035180][T18113] netlink: 'syz.6.4312': attribute type 3 has an invalid length.
[  983.047689][T18113] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4312'.
[  983.291356][T18118] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.4313'.
[  983.478593][T18120] FAULT_INJECTION: forcing a failure.
[  983.478593][T18120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  983.479888][T18120] 
[  983.479896][T18120] ======================================================
[  983.479903][T18120] WARNING: possible circular locking dependency detected
[  983.479937][T18120] 6.1.147-syzkaller #0 Not tainted
[  983.479947][T18120] ------------------------------------------------------
[  983.479953][T18120] syz.4.4314/18120 is trying to acquire lock:
[  983.479963][T18120] ffffffff8cb1efc0 (console_owner){-.-.}-{0:0}, at: console_emit_next_record+0x82d/0xc90
[  983.480022][T18120] 
[  983.480022][T18120] but task is already holding lock:
[  983.480027][T18120] ffff8880b8f3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  983.480069][T18120] 
[  983.480069][T18120] which lock already depends on the new lock.
[  983.480069][T18120] 
[  983.480075][T18120] 
[  983.480075][T18120] the existing dependency chain (in reverse order) is:
[  983.480081][T18120] 
[  983.480081][T18120] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  983.480104][T18120]        _raw_spin_lock_nested+0x2e/0x40
[  983.480132][T18120]        raw_spin_rq_lock_nested+0x26/0x140
[  983.480152][T18120]        task_fork_fair+0x5c/0x350
[  983.480175][T18120]        sched_cgroup_fork+0x32c/0x3c0
[  983.480197][T18120]        copy_process+0x24b8/0x4020
[  983.480214][T18120]        kernel_clone+0x225/0x8b0
[  983.480230][T18120]        user_mode_thread+0xda/0x130
[  983.480247][T18120]        rest_init+0x23/0x300
[  983.480270][T18120]        start_kernel+0x0/0x539
[  983.480304][T18120]        start_kernel+0x490/0x539
[  983.480330][T18120]        secondary_startup_64_no_verify+0xcf/0xdb
[  983.480354][T18120] 
[  983.480354][T18120] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  983.480377][T18120]        _raw_spin_lock_irqsave+0xa4/0xf0
[  983.480402][T18120]        try_to_wake_up+0x5c/0x1080
[  983.480423][T18120]        __wake_up_common+0x2a4/0x4e0
[  983.480447][T18120]        __wake_up+0x10e/0x190
[  983.480469][T18120]        tty_port_default_wakeup+0x9e/0xf0
[  983.480497][T18120]        serial8250_tx_chars+0x629/0x830
[  983.480514][T18120]        serial8250_handle_irq+0x516/0x6d0
[  983.480533][T18120]        serial8250_default_handle_irq+0xb4/0x1a0
[  983.480554][T18120]        serial8250_interrupt+0x9b/0x1c0
[  983.480583][T18120]        __handle_irq_event_percpu+0x298/0xa30
[  983.480601][T18120]        handle_irq_event+0x87/0x1e0
[  983.480617][T18120]        handle_edge_irq+0x243/0xb20
[  983.480639][T18120]        __common_interrupt+0xd7/0x1e0
[  983.480664][T18120]        common_interrupt+0xb0/0xd0
[  983.480683][T18120]        asm_common_interrupt+0x22/0x40
[  983.480711][T18120]        __sanitizer_cov_trace_pc+0x2c/0x60
[  983.480730][T18120]        mt_validate+0x1c75/0x4c90
[  983.480757][T18120]        validate_mm_mt+0xcd/0x420
[  983.480779][T18120]        validate_mm+0xcc/0x2b0
[  983.480799][T18120]        __vma_adjust+0x17bf/0x1c50
[  983.480818][T18120]        __split_vma+0x3a7/0x500
[  983.480838][T18120]        do_mas_align_munmap+0x351/0x1220
[  983.480860][T18120]        do_mas_munmap+0x240/0x2b0
[  983.480878][T18120]        mmap_region+0x713/0x1d30
[  983.480894][T18120]        do_mmap+0x894/0xf30
[  983.480909][T18120]        vm_mmap_pgoff+0x1b2/0x2b0
[  983.480929][T18120]        ksys_mmap_pgoff+0x516/0x6f0
[  983.480945][T18120]        do_syscall_64+0x4c/0xa0
[  983.480958][T18120]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  983.480980][T18120] 
[  983.480980][T18120] -> #2 (&tty->write_wait){-.-.}-{2:2}:
[  983.480998][T18120]        _raw_spin_lock_irqsave+0xa4/0xf0
[  983.481018][T18120]        __wake_up+0xf4/0x190
[  983.481035][T18120]        tty_port_default_wakeup+0x9e/0xf0
[  983.481056][T18120]        serial8250_tx_chars+0x629/0x830
[  983.481070][T18120]        serial8250_handle_irq+0x516/0x6d0
[  983.481083][T18120]        serial8250_default_handle_irq+0xb4/0x1a0
[  983.481099][T18120]        serial8250_interrupt+0x9b/0x1c0
[  983.481121][T18120]        __handle_irq_event_percpu+0x298/0xa30
[  983.481134][T18120]        handle_irq_event+0x87/0x1e0
[  983.481147][T18120]        handle_edge_irq+0x243/0xb20
[  983.481164][T18120]        __common_interrupt+0xd7/0x1e0
[  983.481183][T18120]        common_interrupt+0xb0/0xd0
[  983.481198][T18120]        asm_common_interrupt+0x22/0x40
[  983.481220][T18120]        _raw_spin_unlock_irqrestore+0xa5/0x100
[  983.481239][T18120]        uart_write+0x68a/0x910
[  983.481258][T18120]        n_tty_write+0xd1a/0x11c0
[  983.481275][T18120]        file_tty_write+0x4dd/0x860
[  983.481293][T18120]        vfs_write+0x44c/0x960
[  983.481312][T18120]        ksys_write+0x143/0x240
[  983.481330][T18120]        do_syscall_64+0x4c/0xa0
[  983.481343][T18120]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  983.481365][T18120] 
[  983.481365][T18120] -> #1 (&port_lock_key){-.-.}-{2:2}:
[  983.481383][T18120]        _raw_spin_lock_irqsave+0xa4/0xf0
[  983.481402][T18120]        serial8250_console_write+0x169/0x17a0
[  983.481417][T18120]        console_emit_next_record+0x947/0xc90
[  983.481439][T18120]        console_unlock+0x223/0x630
[  983.481457][T18120]        vprintk_emit+0x489/0x680
[  983.481475][T18120]        _printk+0xcc/0x110
[  983.481493][T18120]        register_console+0x6c6/0x9c0
[  983.481513][T18120]        univ8250_console_init+0x41/0x43
[  983.481530][T18120]        console_init+0x1bc/0x78e
[  983.481551][T18120]        start_kernel+0x303/0x539
[  983.481572][T18120]        secondary_startup_64_no_verify+0xcf/0xdb
[  983.481591][T18120] 
[  983.481591][T18120] -> #0 (console_owner){-.-.}-{0:0}:
[  983.481608][T18120]        __lock_acquire+0x2cf8/0x7c50
[  983.481644][T18120]        lock_acquire+0x1b4/0x490
[  983.481662][T18120]        console_emit_next_record+0x84c/0xc90
[  983.481684][T18120]        console_unlock+0x223/0x630
[  983.481702][T18120]        vprintk_emit+0x489/0x680
[  983.481721][T18120]        _printk+0xcc/0x110
[  983.481739][T18120]        should_fail_ex+0x37a/0x4d0
[  983.481760][T18120]        strncpy_from_user+0x32/0x350
[  983.481777][T18120]        strncpy_from_user_nofault+0x6d/0x140
[  983.481791][T18120]        bpf_probe_read_compat_str+0xdd/0x170
[  983.481811][T18120]        bpf_prog_c1796171ffc7efef+0x35/0x37
[  983.481826][T18120]        bpf_trace_run4+0x1f5/0x420
[  983.481847][T18120]        __traceiter_sched_switch+0x8f/0xc0
[  983.481869][T18120]        __schedule+0x1d18/0x40b0
[  983.481883][T18120]        preempt_schedule_irq+0xb1/0x150
[  983.481898][T18120]        irqentry_exit+0x63/0x70
[  983.481916][T18120]        asm_sysvec_apic_timer_interrupt+0x16/0x20
[  983.481930][T18120]        lock_release+0x593/0x910
[  983.481948][T18120]        file_end_write+0x96/0x250
[  983.481968][T18120]        vfs_write+0x56f/0x960
[  983.481987][T18120]        ksys_write+0x143/0x240
[  983.482005][T18120]        do_syscall_64+0x4c/0xa0
[  983.482019][T18120]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  983.482042][T18120] 
[  983.482042][T18120] other info that might help us debug this:
[  983.482042][T18120] 
[  983.482047][T18120] Chain exists of:
[  983.482047][T18120]   console_owner --> &p->pi_lock --> &rq->__lock
[  983.482047][T18120] 
[  983.482067][T18120]  Possible unsafe locking scenario:
[  983.482067][T18120] 
[  983.482071][T18120]        CPU0                    CPU1
[  983.482075][T18120]        ----                    ----
[  983.482079][T18120]   lock(&rq->__lock);
[  983.482087][T18120]                                lock(&p->pi_lock);
[  983.482096][T18120]                                lock(&rq->__lock);
[  983.482106][T18120]   lock(console_owner);
[  983.482114][T18120] 
[  983.482114][T18120]  *** DEADLOCK ***
[  983.482114][T18120] 
[  983.482117][T18120] 4 locks held by syz.4.4314/18120:
[  983.482126][T18120]  #0: ffff888061f32d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[  983.482167][T18120]  #1: ffff8880b8f3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  983.482203][T18120]  #2: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xf9/0x420
[  983.482244][T18120]  #3: ffffffff8cb1f0a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcc/0x110
[  983.482287][T18120] 
[  983.482287][T18120] stack backtrace:
[  983.482293][T18120] CPU: 1 PID: 18120 Comm: syz.4.4314 Not tainted 6.1.147-syzkaller #0
[  983.482308][T18120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  983.482318][T18120] Call Trace:
[  983.482323][T18120]  <TASK>
[  983.482329][T18120]  dump_stack_lvl+0x168/0x22e
[  983.482346][T18120]  ? load_image+0x3b0/0x3b0
[  983.482367][T18120]  ? show_regs_print_info+0x12/0x12
[  983.482388][T18120]  ? print_circular_bug+0x12b/0x1a0
[  983.482412][T18120]  check_noncircular+0x274/0x310
[  983.482436][T18120]  ? add_chain_block+0x940/0x940
[  983.482457][T18120]  ? lockdep_lock+0xdc/0x1e0
[  983.482479][T18120]  ? add_lock_to_list+0x191/0x280
[  983.482501][T18120]  ? _find_first_zero_bit+0xcf/0x100
[  983.482527][T18120]  __lock_acquire+0x2cf8/0x7c50
[  983.482563][T18120]  ? verify_lock_unused+0x140/0x140
[  983.482596][T18120]  lock_acquire+0x1b4/0x490
[  983.482615][T18120]  ? console_emit_next_record+0x82d/0xc90
[  983.482643][T18120]  ? __lock_acquire+0x7c50/0x7c50
[  983.482662][T18120]  ? do_raw_spin_lock+0x11d/0x280
[  983.482686][T18120]  ? read_lock_is_recursive+0x10/0x10
[  983.482707][T18120]  ? __rwlock_init+0x140/0x140
[  983.482733][T18120]  ? do_raw_spin_unlock+0x11d/0x230
[  983.482761][T18120]  ? console_emit_next_record+0x82d/0xc90
[  983.482783][T18120]  console_emit_next_record+0x84c/0xc90
[  983.482805][T18120]  ? console_emit_next_record+0x82d/0xc90
[  983.482830][T18120]  ? __lock_acquire+0x7c50/0x7c50
[  983.482850][T18120]  ? info_print_prefix+0x300/0x300
[  983.482872][T18120]  ? do_raw_spin_unlock+0x11d/0x230
[  983.482896][T18120]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  983.482917][T18120]  ? _raw_spin_unlock+0x40/0x40
[  983.482943][T18120]  ? __down_trylock_console_sem+0x184/0x1e0
[  983.482964][T18120]  ? _printk+0xcc/0x110
[  983.482982][T18120]  ? _printk+0xcc/0x110
[  983.483000][T18120]  ? console_trylock+0x160/0x160
[  983.483022][T18120]  console_unlock+0x223/0x630
[  983.483043][T18120]  ? _printk+0xcc/0x110
[  983.483062][T18120]  vprintk_emit+0x489/0x680
[  983.483083][T18120]  ? printk_sprint+0x460/0x460
[  983.483105][T18120]  ? mark_lock+0x94/0x320
[  983.483124][T18120]  ? verify_lock_unused+0x140/0x140
[  983.483145][T18120]  _printk+0xcc/0x110
[  983.483166][T18120]  ? load_image+0x3b0/0x3b0
[  983.483187][T18120]  ? perf_trace_lock_acquire+0xf7/0x3c0
[  983.483205][T18120]  should_fail_ex+0x37a/0x4d0
[  983.483228][T18120]  strncpy_from_user+0x32/0x350
[  983.483249][T18120]  strncpy_from_user_nofault+0x6d/0x140
[  983.483264][T18120]  bpf_probe_read_compat_str+0xdd/0x170
[  983.483291][T18120]  bpf_prog_c1796171ffc7efef+0x35/0x37
[  983.483306][T18120]  bpf_trace_run4+0x1f5/0x420
[  983.483327][T18120]  ? bpf_trace_run4+0xf9/0x420
[  983.483349][T18120]  ? bpf_trace_run3+0x400/0x400
[  983.483371][T18120]  ? task_psi_group+0x50/0x1a0
[  983.483394][T18120]  ? tracing_record_taskinfo_sched_switch+0x79/0x360
[  983.483412][T18120]  ? __bpf_trace_sched_wakeup_template+0x10/0x10
[  983.483427][T18120]  __traceiter_sched_switch+0x8f/0xc0
[  983.483451][T18120]  __schedule+0x1d18/0x40b0
[  983.483474][T18120]  ? release_firmware_map_entry+0x18a/0x18a
[  983.483490][T18120]  ? lock_chain_count+0x20/0x20
[  983.483510][T18120]  ? preempt_schedule_irq+0xa6/0x150
[  983.483527][T18120]  preempt_schedule_irq+0xb1/0x150
[  983.483542][T18120]  ? preempt_schedule_notrace+0x110/0x110
[  983.483558][T18120]  ? rcu_is_watching+0x11/0xa0
[  983.483581][T18120]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  983.483602][T18120]  irqentry_exit+0x63/0x70
[  983.483619][T18120]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  983.483633][T18120] RIP: 0010:lock_release+0x593/0x910
[  983.483654][T18120] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00
[  983.483666][T18120] RSP: 0018:ffffc900036b7bc0 EFLAGS: 00000206
[  983.483677][T18120] RAX: 0000000000000001 RBX: 7010221ccade3139 RCX: 95e438fb7a02a300
[  983.483688][T18120] RDX: 0000000000000001 RSI: ffffffff8a8c15e0 RDI: ffffffff8adef320
[  983.483698][T18120] RBP: ffffc900036b7cc8 R08: dffffc0000000000 R09: fffffbfff1c3e976
[  983.483710][T18120] R10: fffffbfff1c3e976 R11: 1ffffffff1c3e975 R12: ffff88802c23c688
[  983.483721][T18120] R13: dffffc0000000000 R14: ffff88802c23c650 R15: 1ffff920006d6f84
[  983.483742][T18120]  ? vfs_write+0x56f/0x960
[  983.483763][T18120]  ? __lock_acquire+0x7c50/0x7c50
[  983.483783][T18120]  ? proc_fail_nth_write+0x17a/0x1f0
[  983.483797][T18120]  ? proc_fail_nth_read+0x210/0x210
[  983.483813][T18120]  file_end_write+0x96/0x250
[  983.483834][T18120]  vfs_write+0x56f/0x960
[  983.483855][T18120]  ? file_end_write+0x250/0x250
[  983.483876][T18120]  ? __fget_files+0x28/0x4d0
[  983.483895][T18120]  ? __fget_files+0x44a/0x4d0
[  983.483917][T18120]  ? __fdget_pos+0x2ae/0x360
[  983.483935][T18120]  ? ksys_write+0x71/0x240
[  983.483956][T18120]  ksys_write+0x143/0x240
[  983.483976][T18120]  ? __ia32_sys_read+0x80/0x80
[  983.483998][T18120]  ? syscall_enter_from_user_mode+0x2a/0x80
[  983.484019][T18120]  do_syscall_64+0x4c/0xa0
[  983.484032][T18120]  ? clear_bhb_loop+0x60/0xb0
[  983.484045][T18120]  ? clear_bhb_loop+0x60/0xb0
[  983.484059][T18120]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  983.484082][T18120] RIP: 0033:0x7fdde918d45f
[  983.484093][T18120] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  983.484105][T18120] RSP: 002b:00007fddea069030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  983.484118][T18120] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fdde918d45f
[  983.484128][T18120] RDX: 0000000000000001 RSI: 00007fddea069090 RDI: 0000000000000004
[  983.484136][T18120] RBP: 00007fddea069090 R08: 0000000000000000 R09: 00007fddea068df7
[  983.484146][T18120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  983.484154][T18120] R13: 0000000000000000 R14: 00007fdde93b5fa0 R15: 00007ffe4f41a878
[  983.484171][T18120]  </TASK>
[  984.811409][T18120] CPU: 1 PID: 18120 Comm: syz.4.4314 Not tainted 6.1.147-syzkaller #0
[  984.819559][T18120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  984.829610][T18120] Call Trace:
[  984.832890][T18120]  <TASK>
[  984.835844][T18120]  dump_stack_lvl+0x168/0x22e
[  984.840526][T18120]  ? show_regs_print_info+0x12/0x12
[  984.845725][T18120]  ? load_image+0x3b0/0x3b0
[  984.850232][T18120]  ? perf_trace_lock_acquire+0xf7/0x3c0
[  984.855781][T18120]  should_fail_ex+0x399/0x4d0
[  984.860469][T18120]  strncpy_from_user+0x32/0x350
[  984.865326][T18120]  strncpy_from_user_nofault+0x6d/0x140
[  984.870875][T18120]  bpf_probe_read_compat_str+0xdd/0x170
[  984.876447][T18120]  bpf_prog_c1796171ffc7efef+0x35/0x37
[  984.881951][T18120]  bpf_trace_run4+0x1f5/0x420
[  984.886649][T18120]  ? bpf_trace_run4+0xf9/0x420
[  984.891427][T18120]  ? bpf_trace_run3+0x400/0x400
[  984.896289][T18120]  ? task_psi_group+0x50/0x1a0
[  984.901068][T18120]  ? tracing_record_taskinfo_sched_switch+0x79/0x360
[  984.907750][T18120]  ? __bpf_trace_sched_wakeup_template+0x10/0x10
[  984.914079][T18120]  __traceiter_sched_switch+0x8f/0xc0
[  984.919460][T18120]  __schedule+0x1d18/0x40b0
[  984.923981][T18120]  ? release_firmware_map_entry+0x18a/0x18a
[  984.929875][T18120]  ? lock_chain_count+0x20/0x20
[  984.934728][T18120]  ? preempt_schedule_irq+0xa6/0x150
[  984.940031][T18120]  preempt_schedule_irq+0xb1/0x150
[  984.945168][T18120]  ? preempt_schedule_notrace+0x110/0x110
[  984.950907][T18120]  ? rcu_is_watching+0x11/0xa0
[  984.955679][T18120]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  984.961493][T18120]  irqentry_exit+0x63/0x70
[  984.965912][T18120]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  984.971891][T18120] RIP: 0010:lock_release+0x593/0x910
[  984.977180][T18120] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00
[  984.996795][T18120] RSP: 0018:ffffc900036b7bc0 EFLAGS: 00000206
[  985.002861][T18120] RAX: 0000000000000001 RBX: 7010221ccade3139 RCX: 95e438fb7a02a300
[  985.010831][T18120] RDX: 0000000000000001 RSI: ffffffff8a8c15e0 RDI: ffffffff8adef320
[  985.018800][T18120] RBP: ffffc900036b7cc8 R08: dffffc0000000000 R09: fffffbfff1c3e976
[  985.026768][T18120] R10: fffffbfff1c3e976 R11: 1ffffffff1c3e975 R12: ffff88802c23c688
[  985.034737][T18120] R13: dffffc0000000000 R14: ffff88802c23c650 R15: 1ffff920006d6f84
[  985.042719][T18120]  ? vfs_write+0x56f/0x960
[  985.047141][T18120]  ? __lock_acquire+0x7c50/0x7c50
[  985.052171][T18120]  ? proc_fail_nth_write+0x17a/0x1f0
[  985.057457][T18120]  ? proc_fail_nth_read+0x210/0x210
[  985.062657][T18120]  file_end_write+0x96/0x250
[  985.067257][T18120]  vfs_write+0x56f/0x960
[  985.071507][T18120]  ? file_end_write+0x250/0x250
[  985.076362][T18120]  ? __fget_files+0x28/0x4d0
[  985.080958][T18120]  ? __fget_files+0x44a/0x4d0
[  985.085655][T18120]  ? __fdget_pos+0x2ae/0x360
[  985.090247][T18120]  ? ksys_write+0x71/0x240
[  985.094671][T18120]  ksys_write+0x143/0x240
[  985.099003][T18120]  ? __ia32_sys_read+0x80/0x80
[  985.103769][T18120]  ? syscall_enter_from_user_mode+0x2a/0x80
[  985.109667][T18120]  do_syscall_64+0x4c/0xa0
[  985.114081][T18120]  ? clear_bhb_loop+0x60/0xb0
[  985.118754][T18120]  ? clear_bhb_loop+0x60/0xb0
[  985.123432][T18120]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.129335][T18120] RIP: 0033:0x7fdde918d45f
[  985.133752][T18120] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  985.153355][T18120] RSP: 002b:00007fddea069030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  985.161766][T18120] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fdde918d45f
[  985.169755][T18120] RDX: 0000000000000001 RSI: 00007fddea069090 RDI: 0000000000000004
[  985.177723][T18120] RBP: 00007fddea069090 R08: 0000000000000000 R09: 00007fddea068df7
[  985.185690][T18120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  985.193683][T18120] R13: 0000000000000000 R14: 00007fdde93b5fa0 R15: 00007ffe4f41a878
[  985.201681][T18120]  </TASK>
[  985.233663][ T4349] wlan1: Trigger new scan to find an IBSS to join
[  985.441086][T18126] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.4316'.
[  985.526963][T18126] ieee80211 !!!: Selected rate control algorithm 'minstrel_ht'
[  985.568437][T18126] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  985.616758][T18126] CPU: 1 PID: 18126 Comm: syz.6.4316 Not tainted 6.1.147-syzkaller #0
[  985.625008][T18126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  985.635120][T18126] Call Trace:
[  985.638439][T18126]  <TASK>
[  985.641434][T18126]  dump_stack_lvl+0x168/0x22e
[  985.646177][T18126]  ? show_regs_print_info+0x12/0x12
[  985.651520][T18126]  ? load_image+0x3b0/0x3b0
[  985.656114][T18126]  sysfs_warn_dup+0x8a/0xa0
[  985.660672][T18126]  sysfs_do_create_link_sd+0xc0/0x110
[  985.666106][T18126]  device_add+0x7ed/0xfb0
[  985.670502][T18126]  wiphy_register+0x1e68/0x2bd0
[  985.675434][T18126]  ? cfg80211_event_work+0x40/0x40
[  985.680597][T18126]  ? minstrel_ht_alloc+0x894/0xa20
[  985.685765][T18126]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  985.691890][T18126]  ieee80211_register_hw+0x2c29/0x38c0
[  985.697414][T18126]  ? ieee80211_register_hw+0xeb1/0x38c0
[  985.703024][T18126]  ? ieee80211_register_hw+0xeb1/0x38c0
[  985.708771][T18126]  ? ieee80211_tasklet_handler+0x20/0x20
[  985.714478][T18126]  ? memset+0x1e/0x40
[  985.718519][T18126]  ? __hrtimer_init+0x186/0x270
[  985.723425][T18126]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  985.729237][T18126]  hwsim_new_radio_nl+0xafa/0xce0
[  985.734351][T18126]  genl_family_rcv_msg_doit+0x22e/0x320
[  985.739952][T18126]  ? end_current_label_crit_section+0x170/0x170
[  985.746258][T18126]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  985.752221][T18126]  ? bpf_lsm_capable+0x5/0x10
[  985.756945][T18126]  ? security_capable+0x85/0xb0
[  985.761852][T18126]  genl_rcv_msg+0x5f2/0x780
[  985.766465][T18126]  ? genl_bind+0x350/0x350
[  985.770932][T18126]  ? __kasan_kmalloc_large+0x8b/0xd0
[  985.776265][T18126]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  985.782666][T18126]  ? rcu_is_watching+0x11/0xa0
[  985.787487][T18126]  ? lock_acquire+0xe8/0x490
[  985.792135][T18126]  netlink_rcv_skb+0x1de/0x420
[  985.796954][T18126]  ? genl_bind+0x350/0x350
[  985.801427][T18126]  ? netlink_ack+0x1100/0x1100
[  985.806262][T18126]  ? down_read+0x1a8/0x2d0
[  985.810736][T18126]  genl_rcv+0x24/0x40
[  985.814770][T18126]  netlink_unicast+0x74d/0x8d0
[  985.819600][T18126]  netlink_sendmsg+0x89e/0xbc0
[  985.824427][T18126]  ? netlink_getsockopt+0x540/0x540
[  985.829685][T18126]  ? aa_sock_msg_perm+0x94/0x150
[  985.834693][T18126]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  985.840018][T18126]  ? security_socket_sendmsg+0x7c/0xa0
[  985.845530][T18126]  ? netlink_getsockopt+0x540/0x540
[  985.850773][T18126]  ____sys_sendmsg+0x59b/0x970
[  985.855605][T18126]  ? __sys_sendmsg_sock+0x30/0x30
[  985.860681][T18126]  ? __import_iovec+0x315/0x500
[  985.865607][T18126]  ? import_iovec+0x6f/0xa0
[  985.870262][T18126]  ___sys_sendmsg+0x21c/0x290
[  985.875009][T18126]  ? __sys_sendmsg+0x270/0x270
[  985.879829][T18126]  ? lock_release+0xd4/0x910
[  985.884471][T18126]  ? perf_trace_lock_acquire+0x329/0x3c0
[  985.890208][T18126]  ? __fdget+0x17c/0x200
[  985.894517][T18126]  __se_sys_sendmsg+0x19e/0x270
[  985.899432][T18126]  ? __se_sys_futex+0x14a/0x440
[  985.904350][T18126]  ? __x64_sys_sendmsg+0x80/0x80
[  985.909363][T18126]  ? rcu_is_watching+0x11/0xa0
[  985.914219][T18126]  do_syscall_64+0x4c/0xa0
[  985.918686][T18126]  ? clear_bhb_loop+0x60/0xb0
[  985.923403][T18126]  ? clear_bhb_loop+0x60/0xb0
[  985.928131][T18126]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  985.934087][T18126] RIP: 0033:0x7f8dafb8e9a9
[  985.938547][T18126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  985.958204][T18126] RSP: 002b:00007f8db09a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  985.966676][T18126] RAX: ffffffffffffffda RBX: 00007f8dafdb5fa0 RCX: 00007f8dafb8e9a9
[  985.974701][T18126] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  985.982726][T18126] RBP: 00007f8dafc10d69 R08: 0000000000000000 R09: 0000000000000000
[  985.990742][T18126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  985.998759][T18126] R13: 0000000000000000 R14: 00007f8dafdb5fa0 R15: 00007ffc47f14028
[  986.006827][T18126]  </TASK>
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
Connection to 10.128.0.73 closed by remote host.
[  986.795550][   T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  986.853356][   T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.048762][   T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.092375][   T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
Sent SIGKILL to all processes
Requesting system poweroff
[  987.806362][T16871] wlan1: Trigger new scan to find an IBSS to join
[  987.851364][   T56] device hsr_slave_0 left promiscuous mode
[  987.857564][   T56] device hsr_slave_1 left promiscuous mode
[  987.864122][   T56] device bridge_slave_1 left promiscuous mode
[  987.870403][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.878388][   T56] device bridge_slave_0 left promiscuous mode
[  987.884882][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.894581][   T56] device veth1_vlan left promiscuous mode
[  987.900454][   T56] device veth0_vlan left promiscuous mode
[  988.065997][   T56] team0 (unregistering): Port device team_slave_1 removed
[  988.090990][   T56] team0 (unregistering): Port device team_slave_0 removed
[  988.114548][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  988.140944][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  988.188912][   T56] bond0 (unregistering): Released all slaves
[  988.330545][T18127] kvm: exiting hardware virtualization
[  988.340323][T18127] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  988.352710][T18127] ACPI: PM: Preparing to enter system sleep state S5
[  988.359907][T18127] reboot: Power down
serialport: VM disconnected.