last executing test programs: 4.483969913s ago: executing program 4 (id=10767): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20044000) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000006010010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r6, 0x0, 0x7}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x15, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x18, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x698a, 0x0, 0x0, 0x0, 0x65}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x64, &(0x7f00000001c0)=""/100, 0x40f00, 0x50, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x62, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000700)=[{0x1, 0x5, 0x10, 0x4}, {0x2, 0x5, 0x7, 0x2}], 0x10, 0x3}, 0x94) 3.600746152s ago: executing program 2 (id=10770): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x80) 3.570923353s ago: executing program 4 (id=10771): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@enum64={0x3, 0x3, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x20003, 0x1}, {0x2, 0x7, 0x1}, {0x5, 0x2, 0x3}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f]}}, &(0x7f00000006c0)=""/237, 0x4f, 0xed, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x2}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60c881, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10001) 3.22094738s ago: executing program 2 (id=10775): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc001e00b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000013c0)={&(0x7f0000000400)=@phonet={0x23, 0x0, 0x2, 0x6}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="d14120c11e7f7963dbc9c12929d7504b1f46ed65996a67e8ba43348b0cdf05215b6fd214c242d104b4eb544379e426bea2d0f4f885a88c6a004627007cc7c8d09182cf6eff71cd95e36187b6d05788ad0ecbdd0f0dbf04cf9facc291365842f1c23d3246e03127df286ebf21f28be9e3870ed3b81ea5d1899337d53292623313f02f653a9834325d68af95087514bf", 0x8f}], 0x1, &(0x7f0000000e80)=[{0xf0, 0x113, 0x6, "485e6f61b32c35febf2d26c64dba0283f25447584fe7602677528d2dff12643eec75d5e55804804e9553fc7565a8d2f3550fb5d950f2e0ee03ce7dbe299266bbffa3680a0fee9b1587e9bf700024a82e27531b564399d73356c697539423188b4aa98c9a944749f80989aa885c60cad3d392a51155425195b588f9a40c043670703932efd6363990f8a3b3b11632b6e5a05c4400f2d7c6144429b5b28f15e2bae3bea5d78431d3cb343d4033e11d694ad104c50f11af56a31255c2df7ff800a7dd2f34558e0edf6cf7e0d76b851c1e76d3adda1eacccb88f5d42aeeda5ab5303"}, {0x80, 0x185, 0xfff, "02ef51cb087b0238c215aa2b15126e58cb8b4387f6051ce038e89bf2ae18e6be0e3ead65585c069313c49568196e67d989521c4f5628eab5890bbbc24af16fe8364f9730007287d814b17e88ee1335b1f3b8bad102a3778d79a1735c0395962880872fe7707deb71fe"}, {0x30, 0x340d7ed615f9217b, 0x9, "09647aa13859746aa9a1064ec8a8356c1a92b90dc495cfd85735747875dd"}, {0x108, 0x111, 0x3d, "dc0b198cdb89e3a995e9f9908ca93b8a0cf871add94bba042aa1ba465e7353f8467a830e6ec2c48ef9f7d9956eee0cf9b317f1ed40d64f304a66f5fc209f5a71d70398fbe12ab7a46aaa4899fd5af02e8473db0eb6a32ab813940f791cfe7a81f001b71da9a3c0cb8012b1623d92ff3a9400828420ee77ff48ab3fd01f0f31ef264d58c6285ba22f8fdc85459e91484be1256ce6d9a28b5476f6ddc742fd7ec5b81e2199a90b0b2b823d927756e54af8634eb9acc25f394b69f7c0247c8065b47345881300e1b07883bfebe903278938945655a64d7ca27200dec5461125d3246881f7576726316ea366160e3ecd6f2af09ba1c41d"}, {0xe0, 0x119, 0x9, "38247847f29c204b2dba8fc3bc0258f4420b63f4d9fcdbad8cd7bc3d15e6cf4212be63be09016d6ed38f754b47e0f3ba9df04f032d97cb238f62cc897fa6c3315d8e689feb914dda86a0baa028ebf7d69301d0a64bacf85d6d8a0a078d9af031b643c99c90c046b90c73f753b550a1304d4c253ef8518ac12a16521677724e4155dda6564564a0e677a626db7326ae1e105c1d2e2f31ad78c1a5628a5f644a5e00da3f681ad37e4dde57ee4331baee07b83266453b901034343a30e390d9ffff5362663d0a78cadb3c84"}, {0xb0, 0x117, 0x20000, "f7e7cd59bca787dbb1406ff7a294030ba6d9a90613a25aaf2a933afef2d414a6bd4f1c242d72d2d189bfde1226eb38f41d0e9cc59ac19b035d32ffe9173001c49ec3c2ba3331371805ed8b6a8bea23c16d5899fdd6751301ab124db7889de6280bd2e974c8cec0b28a94c1ecb8f7389ab15ddc9c27625957fef9a5d6044596a3584c69a6f5b2e82f93ecb29f1b5c81d590a1f257839b9336d57a"}, {0x50, 0x3a, 0x56, "b228a49977c8d033adba1519bb22efe784657e48f46dcf93961bb4d031de9c22fb13801ff613f419105ae951e26beefc87b95479e274b54d1ebdfd366173"}, {0x98, 0x10e, 0x5, "eedf51dbb547eb932122d9399353e4ea5ef9efc924e8c4fb2b7a8181b8226504fa273c2676aade01451924fc219564886da696fb4f9fe3dbe5582def4c58208b7d1fb1e9d259b6a4c9b71b82222ccbd3ad982e69779385be3d1b6912a645712b31e274164782a61d345fa23e82e1c03238a063e05977c21d8639d4d07acfafdf040c5979"}], 0x520}, 0x40000) r4 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r10, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYBLOB="6a1e022f4e201f691d62e729e0a1d2176bba2fddade0f590cfe74ed16326cdc55990baece501a4fba2f4211f7e13fa68e61a95", @ANYRESDEC=r4, @ANYRESHEX=r10, @ANYRES16=r9, @ANYRESHEX=r2, @ANYRES8=r5, @ANYRES8=r8, @ANYRES8], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 2.894530677s ago: executing program 3 (id=10778): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc", 0x13}], 0x1}, 0x80) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x1a00, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r3) socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831771400000069bd6e002602eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff4c) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a"], 0xfe33) r5 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 2.893421507s ago: executing program 0 (id=10779): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc", 0x13}], 0x1}, 0x80) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x1a00, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r3) socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831771400000069bd6e002602eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff4c) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a"], 0xfe33) r5 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 2.820642859s ago: executing program 4 (id=10780): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.369687299s ago: executing program 4 (id=10782): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x800}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) 2.347918779s ago: executing program 3 (id=10783): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050a"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'macvlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x17, &(0x7f0000000200)=r4, 0x21) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000140)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 2.225087682s ago: executing program 0 (id=10784): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex=r3, 0x1e, 0x1, 0x1002, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@map=r4, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value, @void, @void, r5}, 0x20) 2.099435775s ago: executing program 1 (id=10785): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000023066a7bbd"], 0x50) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, &(0x7f0000000000), 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000dfffffff00183400000500"/48], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x2a, &(0x7f0000000100)=""/42, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x60000000) 1.8594118s ago: executing program 2 (id=10786): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006", 0x39}], 0x1}, 0x24004080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.661520804s ago: executing program 0 (id=10787): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, &(0x7f0000000180), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.661260524s ago: executing program 1 (id=10788): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x12, 0x0, 0x0) 1.660814704s ago: executing program 3 (id=10789): r0 = socket$kcm(0x2, 0x200000000000004, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1, 0x0, 0xfffd}, 0x40004000) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x404, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x72420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x64, 0x0, 0x1, 0x0, 0x400000000000000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x84, 0x3}, 0x8030, 0x0, 0x7ff, 0x0, 0xf8, 0x0, 0xd1, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9c, 0x4, 0x1, 0x0, 0x0, 0x0, 0x88000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x108883, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1.515643737s ago: executing program 4 (id=10790): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010"], 0x0, 0x52}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.325441211s ago: executing program 1 (id=10791): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000002000000010000000000005f00f5c8811221f571ffffff94000000000000005dad7cef389a6d8e970efd245f23cde91f13be1420c157d8b9e7cf475660a8598046f117dbb64a4b6aedd7218aedc5aba4535ae5c61be61cfcfdb96d20258c4da0dfe1da954260d5979a0b60dbf6566766995afa1e9eee2bcd1a20119f0ee283f2a7e24192e8a965e5e38dd5c8d8879e9fbec5d02db16d90272235ea35f2b5341818f438aa0d2f3b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000000080)=""/189, 0xbd}}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) 1.313458032s ago: executing program 0 (id=10792): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.203766804s ago: executing program 2 (id=10793): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000021240000002400000002000000000000000000000400000003000000000000001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1f) 1.053214467s ago: executing program 1 (id=10794): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc", 0x13}], 0x1}, 0x80) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x1a00, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r3) socketpair(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831771400000069bd6e002602eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff4c) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a"], 0xfe33) r5 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 1.030429157s ago: executing program 0 (id=10795): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000019000000620a00ff140000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000a295c243ed41531d45d8b3ebd800000095a4901e8c7f"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) socket$kcm(0x1e, 0x4, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000ffffffff6111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9d, 0xfffffffffffffffb}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4e3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) 913.48052ms ago: executing program 4 (id=10796): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000a30000e9ff00312267e167b8a3a36cd300000000002b00002d9838c150fdc50094278731c8c03dba18db4b9fc86cfc419dcd462cfd8d8d2d1edf8419e95c24be26b7310bd8e97e9bcfca512f26e2a858fe566aaaee2df76d0b98b74933e4f78d382c0a1ce16cb1808e859f388d5b90bb59718d7225b0fc1b0d923c1d71caeb7ece05f4310b5d3774853e40a397dff414080b08b516e97aac9e29d3ffb04a8b2309469096062de964f77275461019e976b1b14a227409fd15201fdcc1e829d4b34e01094a42a9353b2cd8bb9fb1233d2e5a2c068a6d6652ed91e8fa777620641edec25d2f06263477b8be3b5484916ee88919751637530e01ed55c9ffe590a00a888609514ed2ed714e45", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) r0 = socket$kcm(0xa, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbce, 0x0, @perf_config_ext={0x9, 0xb7d5}, 0x104046, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0xee, 0x34, &(0x7f0000000740)=""/52, 0x41100, 0x13, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000ac0)=[{0x2, 0x4, 0x0, 0x1}, {0x2, 0x5, 0xf, 0x2}, {0x2, 0x4, 0x2, 0x3}, {0x0, 0x3, 0xd}, {0x4, 0x4, 0x8, 0x4}, {0x1, 0x2, 0xf, 0x9}], 0x10, 0xdd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0xee, 0x34, &(0x7f0000000740)=""/52, 0x41100, 0x13, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000ac0)=[{0x2, 0x4, 0x0, 0x1}, {0x2, 0x5, 0xf, 0x2}, {0x2, 0x4, 0x2, 0x3}, {0x0, 0x3, 0xd}, {0x4, 0x4, 0x8, 0x4}, {0x1, 0x2, 0xf, 0x9}], 0x10, 0xdd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003200)={&(0x7f0000003080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x2, [@datasec={0xd, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x6, 0x80000001}], "558a"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x3}}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x4}]}}, &(0x7f0000003140)=""/188, 0x66, 0xbc, 0x1, 0x687b, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003200)={&(0x7f0000003080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x2, [@datasec={0xd, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x6, 0x80000001}], "558a"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x3}}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x4}]}}, &(0x7f0000003140)=""/188, 0x66, 0xbc, 0x1, 0x687b, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) sendmsg$kcm(r0, &(0x7f0000003040)={&(0x7f00000006c0)=@generic={0x1, "326d5f96265ad3d5f268726b46f23fbbffa0c1775484dab57313af7f2b523fb2f5194addd6324777c08ae85d06ee1c479a70c1566f0b6c104664fd1f4644a332db70b17fa7bb86a597cffe4c828615c526bd4755e9efde669938f318d7c5d525a04562ef1750a338528fcb6220d7215b0b583b889580291049835ae37c82"}, 0x80, 0x0, 0x0, &(0x7f0000003240)=ANY=[@ANYBLOB="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"], 0x11e8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) 801.224182ms ago: executing program 3 (id=10797): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 801.009962ms ago: executing program 2 (id=10798): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) 707.787585ms ago: executing program 1 (id=10799): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4512c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2c121, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x2}, 0x1b05f, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) 601.650517ms ago: executing program 0 (id=10800): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x800}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) 469.28601ms ago: executing program 3 (id=10801): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x12, 0x0, 0x0) 148.766166ms ago: executing program 2 (id=10802): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e79}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e79}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000400feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 761.83µs ago: executing program 1 (id=10803): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa30000d0ff000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000032000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 0s ago: executing program 3 (id=10804): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="a61e84db7886762bf3c7ab58", 0xc}, {&(0x7f0000000200)="3154558e", 0x4}], 0x2}, 0x44) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0\x00') (async) unlink(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) socket$kcm(0xa, 0x6, 0x0) kernel console output (not intermixed with test programs): ? clear_bhb_loop+0x60/0xb0 [ 2560.124097][ T8907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2560.130142][ T8907] RIP: 0033:0x7f4bc9f9de59 [ 2560.134629][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2560.155189][ T8907] RSP: 002b:00007f4bcaec3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2560.163780][ T8907] RAX: ffffffffffffffda RBX: 00007f4bca226090 RCX: 00007f4bc9f9de59 [ 2560.172002][ T8907] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2560.180122][ T8907] RBP: 00007f4bca033e6f R08: 0000000000000000 R09: 0000000000000000 [ 2560.188960][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2560.197083][ T8907] R13: 00007f4bca226128 R14: 00007f4bca226090 R15: 00007ffcd70f34a8 [ 2560.205135][ T8907] [ 2560.655480][ T8913] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9902'. [ 2561.614110][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9913'. [ 2562.020008][ T8951] netlink: 'syz.3.9917': attribute type 29 has an invalid length. [ 2562.145111][ T8964] device lo left promiscuous mode [ 2562.186147][ T8951] netlink: 'syz.3.9917': attribute type 29 has an invalid length. [ 2562.275642][ T8965] device lo entered promiscuous mode [ 2562.519730][ T8967] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9921'. [ 2563.010408][ T8975] netlink: 'syz.3.9925': attribute type 2 has an invalid length. [ 2563.371415][ T8989] netlink: 'syz.2.9938': attribute type 3 has an invalid length. [ 2563.417229][ T8989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9938'. [ 2564.547675][ T8998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9929'. [ 2564.603580][ T9002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9931'. [ 2564.813627][ T9002] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9931'. [ 2565.031776][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9945'. [ 2565.155543][ T9013] netlink: 'syz.2.9934': attribute type 29 has an invalid length. [ 2565.180335][ T9013] netlink: 'syz.2.9934': attribute type 29 has an invalid length. [ 2565.273897][ T9013] device lo left promiscuous mode [ 2565.353408][ T9015] device lo entered promiscuous mode [ 2565.396572][ T9019] device lo left promiscuous mode [ 2565.468755][ T9017] device lo entered promiscuous mode [ 2565.554716][ T9022] device lo left promiscuous mode [ 2565.610153][ T9027] tap0: tun_chr_ioctl cmd 2147767517 [ 2565.661438][ T9026] device lo entered promiscuous mode [ 2565.708715][ T9030] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9941'. [ 2566.088919][ T9035] netlink: 'syz.3.9943': attribute type 3 has an invalid length. [ 2566.131733][ T9035] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9943'. [ 2566.216910][ T9036] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9944'. [ 2566.444151][ T9036] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2566.459658][ T9036] CPU: 0 PID: 9036 Comm: syz.2.9944 Not tainted syzkaller #0 [ 2566.467237][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2566.477641][ T9036] Call Trace: [ 2566.481033][ T9036] [ 2566.484072][ T9036] dump_stack_lvl+0x188/0x24e [ 2566.488865][ T9036] ? show_regs_print_info+0x12/0x12 [ 2566.494177][ T9036] ? load_image+0x410/0x410 [ 2566.498849][ T9036] sysfs_warn_dup+0x8a/0xa0 [ 2566.503459][ T9036] sysfs_do_create_link_sd+0xc0/0x110 [ 2566.509055][ T9036] device_add+0x83b/0x1050 [ 2566.513637][ T9036] wiphy_register+0x1d8b/0x2aa0 [ 2566.518698][ T9036] ? cfg80211_event_work+0x40/0x40 [ 2566.523914][ T9036] ? minstrel_ht_alloc+0x894/0xa20 [ 2566.529250][ T9036] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2566.535431][ T9036] ieee80211_register_hw+0x2d48/0x39f0 [ 2566.541027][ T9036] ? ieee80211_register_hw+0xf61/0x39f0 [ 2566.546649][ T9036] ? ieee80211_register_hw+0xf61/0x39f0 [ 2566.552308][ T9036] ? ieee80211_tasklet_handler+0x20/0x20 [ 2566.558010][ T9036] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2566.564000][ T9036] ? __debug_object_init+0xed/0x440 [ 2566.569312][ T9036] ? memset+0x1e/0x40 [ 2566.573391][ T9036] ? __hrtimer_init+0x189/0x270 [ 2566.578346][ T9036] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2566.584202][ T9036] ? memcpy+0x3c/0x60 [ 2566.588303][ T9036] hwsim_new_radio_nl+0xab7/0xc90 [ 2566.593731][ T9036] genl_family_rcv_msg_doit+0x22f/0x350 [ 2566.599365][ T9036] ? end_current_label_crit_section+0x170/0x170 [ 2566.605708][ T9036] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2566.611747][ T9036] ? bpf_lsm_capable+0x5/0x10 [ 2566.616509][ T9036] ? security_capable+0x85/0xb0 [ 2566.621638][ T9036] genl_rcv_msg+0x601/0x790 [ 2566.626301][ T9036] ? genl_bind+0x360/0x360 [ 2566.630815][ T9036] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2566.637324][ T9036] netlink_rcv_skb+0x1ef/0x440 [ 2566.642360][ T9036] ? genl_bind+0x360/0x360 [ 2566.647066][ T9036] ? netlink_ack+0x1160/0x1160 [ 2566.651961][ T9036] ? down_read+0x1a8/0x2d0 [ 2566.656474][ T9036] genl_rcv+0x24/0x40 [ 2566.660559][ T9036] netlink_unicast+0x7ad/0x920 [ 2566.665450][ T9036] netlink_sendmsg+0x8ad/0xbd0 [ 2566.670459][ T9036] ? netlink_getsockopt+0x550/0x550 [ 2566.675760][ T9036] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2566.681391][ T9036] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2566.687196][ T9036] ? security_socket_sendmsg+0x7c/0xa0 [ 2566.692733][ T9036] ? netlink_getsockopt+0x550/0x550 [ 2566.698030][ T9036] ____sys_sendmsg+0x5ed/0x9a0 [ 2566.702928][ T9036] ? __sys_sendmsg_sock+0x30/0x30 [ 2566.708017][ T9036] ? __import_iovec+0x306/0x510 [ 2566.713012][ T9036] ? import_iovec+0x6f/0xa0 [ 2566.717749][ T9036] ___sys_sendmsg+0x2a2/0x360 [ 2566.722592][ T9036] ? __sys_sendmsg+0x2a0/0x2a0 [ 2566.727728][ T9036] __se_sys_sendmsg+0x1c3/0x2b0 [ 2566.732798][ T9036] ? __x64_sys_sendmsg+0x80/0x80 [ 2566.737907][ T9036] ? lockdep_hardirqs_on+0x94/0x140 [ 2566.743214][ T9036] do_syscall_64+0x4c/0xa0 [ 2566.747715][ T9036] ? clear_bhb_loop+0x60/0xb0 [ 2566.752478][ T9036] ? clear_bhb_loop+0x60/0xb0 [ 2566.757273][ T9036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2566.763266][ T9036] RIP: 0033:0x7f6b8739de59 [ 2566.767763][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2566.787444][ T9036] RSP: 002b:00007f6b88325028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2566.796137][ T9036] RAX: ffffffffffffffda RBX: 00007f6b87625fa0 RCX: 00007f6b8739de59 [ 2566.804178][ T9036] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2566.812222][ T9036] RBP: 00007f6b87433e6f R08: 0000000000000000 R09: 0000000000000000 [ 2566.820352][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2566.828397][ T9036] R13: 00007f6b87626038 R14: 00007f6b87625fa0 R15: 00007ffda6ec0f18 [ 2566.836603][ T9036] [ 2566.904012][T26361] Bluetooth: hci0: command 0x0406 tx timeout [ 2567.850312][ T9049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9948'. [ 2570.103927][ T9077] device lo left promiscuous mode [ 2570.244386][ T9078] device lo entered promiscuous mode [ 2570.343236][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9959'. [ 2570.426815][ T9087] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9958'. [ 2570.970541][ T9100] netlink: 'syz.1.9964': attribute type 3 has an invalid length. [ 2570.989007][ T9100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9964'. [ 2572.524560][ T9122] netlink: 'syz.3.9967': attribute type 7 has an invalid length. [ 2572.989433][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9973'. [ 2573.741491][ T9151] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9977'. [ 2575.083177][ T9175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9984'. [ 2575.162021][ T9180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9986'. [ 2575.211074][ T9178] netlink: 'syz.0.9995': attribute type 10 has an invalid length. [ 2575.279026][ T9178] bridge0: port 3(dummy0) entered disabled state [ 2575.287441][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 2575.311743][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 2575.453649][ T9178] bridge0: port 3(dummy0) entered blocking state [ 2575.460780][ T9178] bridge0: port 3(dummy0) entered forwarding state [ 2575.470664][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 2575.478562][ T9178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2575.486783][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 2575.494576][ T9178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2575.782081][ T9178] team0: Port device bridge0 added [ 2575.807869][ T9183] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9985'. [ 2575.924690][ T9187] device lo left promiscuous mode [ 2575.983071][ T9185] device lo entered promiscuous mode [ 2576.362802][ T9191] device lo left promiscuous mode [ 2576.580036][T31310] device syz_tun left promiscuous mode [ 2576.585674][T31310] ¥: port 1(syz_tun) entered disabled state [ 2576.622871][ T4602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2576.633586][ T4602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2576.642402][ T4602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2576.659826][ T4602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2576.668832][ T4602] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2576.676311][ T4602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2576.725929][ T9192] device lo entered promiscuous mode [ 2577.065370][T28546] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2577.314285][ T9204] netlink: 'syz.0.9992': attribute type 2 has an invalid length. [ 2577.344883][ T9204] netlink: 'syz.0.9992': attribute type 1 has an invalid length. [ 2577.371496][ T9204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9992'. [ 2577.415657][ T9204] netlink: 'syz.0.9992': attribute type 2 has an invalid length. [ 2577.436518][T28546] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2577.453598][ T9204] netlink: 'syz.0.9992': attribute type 1 has an invalid length. [ 2577.482224][ T9204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9992'. [ 2577.525154][ T9204] netlink: 'syz.0.9992': attribute type 2 has an invalid length. [ 2577.555663][ T9204] netlink: 'syz.0.9992': attribute type 1 has an invalid length. [ 2577.577478][ T9204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9992'. [ 2577.602436][ T9204] netlink: 'syz.0.9992': attribute type 2 has an invalid length. [ 2577.627587][ T9204] netlink: 'syz.0.9992': attribute type 1 has an invalid length. [ 2577.659832][T28546] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2577.667507][ T9204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9992'. [ 2577.702561][ T9204] netlink: 'syz.0.9992': attribute type 2 has an invalid length. [ 2577.731595][ T9204] netlink: 'syz.0.9992': attribute type 1 has an invalid length. [ 2577.753453][ T9204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9992'. [ 2577.877669][T28546] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2578.003533][ T9204] __nla_validate_parse: 24 callbacks suppressed [ 2578.003554][ T9204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9992'. [ 2578.051987][ T9204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9992'. [ 2578.272743][ T9195] chnl_net:caif_netlink_parms(): no params data found [ 2578.392230][T28546] device 0 left promiscuous mode [ 2578.636230][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state [ 2578.703780][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 2578.737155][ T9195] device bridge_slave_0 entered promiscuous mode [ 2578.755446][ T4602] Bluetooth: hci1: command 0x0409 tx timeout [ 2578.816425][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state [ 2578.878383][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 2578.947426][ T9195] device bridge_slave_1 entered promiscuous mode [ 2578.977718][ T9215] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9994'. [ 2579.286618][ T9195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2579.495692][ T9195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2580.077840][ T9195] team0: Port device team_slave_0 added [ 2580.108716][ T9195] team0: Port device team_slave_1 added [ 2580.284651][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2580.317195][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2580.407243][ T9195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2580.528911][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2580.535971][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2580.651105][ T9195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2580.817308][ T4602] Bluetooth: hci1: command 0x041b tx timeout [ 2581.149387][ T9195] device hsr_slave_0 entered promiscuous mode [ 2581.179023][ T9195] device hsr_slave_1 entered promiscuous mode [ 2581.912926][ T9256] device geneve0 entered promiscuous mode [ 2582.049026][ T9256] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2582.060224][ T9258] device lo left promiscuous mode [ 2582.081944][ T9265] device lo entered promiscuous mode [ 2582.128577][ T9266] device lo left promiscuous mode [ 2582.405066][ T9270] validate_nla: 53 callbacks suppressed [ 2582.405103][ T9270] netlink: 'syz.3.10004': attribute type 3 has an invalid length. [ 2582.421490][T28546] device hsr_slave_0 left promiscuous mode [ 2582.430744][T28546] device hsr_slave_1 left promiscuous mode [ 2582.440078][T28546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2582.448164][T28546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2582.477820][ T9270] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10004'. [ 2582.523109][T28546] device veth1_vlan left promiscuous mode [ 2582.535957][T28546] device veth0_vlan left promiscuous mode [ 2582.897577][ T4602] Bluetooth: hci1: command 0x040f tx timeout [ 2583.569663][T28546] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2583.624273][T28546] device team_slave_1 left promiscuous mode [ 2583.635839][T28546] team0 (unregistering): Port device team_slave_1 removed [ 2583.683149][T28546] device team_slave_0 left promiscuous mode [ 2583.691273][T28546] team0 (unregistering): Port device team_slave_0 removed [ 2583.739229][T28546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2584.130636][T28546] bond0 (unregistering): Released all slaves [ 2584.206297][ T9283] netlink: 'syz.2.10008': attribute type 10 has an invalid length. [ 2584.700436][ T9292] netlink: 'syz.3.10010': attribute type 2 has an invalid length. [ 2584.713470][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10010'. [ 2584.977202][ T4602] Bluetooth: hci1: command 0x0419 tx timeout [ 2585.093256][ T9302] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10013'. [ 2585.455946][ T9312] device lo left promiscuous mode [ 2585.538950][ T9312] device lo entered promiscuous mode [ 2585.602992][ T9315] device lo left promiscuous mode [ 2585.670477][ T9321] device lo entered promiscuous mode [ 2585.699473][ T9195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2585.736343][ T9195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2585.761544][ T9195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2585.800281][ T9195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2586.039618][ T9330] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10019'. [ 2586.132697][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2586.162913][ T9332] netlink: 'syz.1.10021': attribute type 10 has an invalid length. [ 2586.230282][ T9330] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2586.265636][ T9330] CPU: 0 PID: 9330 Comm: syz.3.10019 Not tainted syzkaller #0 [ 2586.273190][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2586.283306][ T9330] Call Trace: [ 2586.286642][ T9330] [ 2586.289618][ T9330] dump_stack_lvl+0x188/0x24e [ 2586.294368][ T9330] ? show_regs_print_info+0x12/0x12 [ 2586.299632][ T9330] ? load_image+0x410/0x410 [ 2586.304240][ T9330] sysfs_warn_dup+0x8a/0xa0 [ 2586.308816][ T9330] sysfs_do_create_link_sd+0xc0/0x110 [ 2586.314263][ T9330] device_add+0x83b/0x1050 [ 2586.318750][ T9330] wiphy_register+0x1d8b/0x2aa0 [ 2586.323683][ T9330] ? cfg80211_event_work+0x40/0x40 [ 2586.328858][ T9330] ? minstrel_ht_alloc+0x894/0xa20 [ 2586.334053][ T9330] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2586.340300][ T9330] ieee80211_register_hw+0x2d48/0x39f0 [ 2586.345845][ T9330] ? ieee80211_register_hw+0xf61/0x39f0 [ 2586.351467][ T9330] ? ieee80211_register_hw+0xf61/0x39f0 [ 2586.357088][ T9330] ? ieee80211_tasklet_handler+0x20/0x20 [ 2586.362782][ T9330] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2586.368739][ T9330] ? __debug_object_init+0xed/0x440 [ 2586.374058][ T9330] ? memset+0x1e/0x40 [ 2586.378144][ T9330] ? __hrtimer_init+0x189/0x270 [ 2586.383048][ T9330] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2586.388840][ T9330] ? memcpy+0x3c/0x60 [ 2586.392865][ T9330] hwsim_new_radio_nl+0xab7/0xc90 [ 2586.397953][ T9330] genl_family_rcv_msg_doit+0x22f/0x350 [ 2586.403539][ T9330] ? end_current_label_crit_section+0x170/0x170 [ 2586.409824][ T9330] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2586.415769][ T9330] ? bpf_lsm_capable+0x5/0x10 [ 2586.420596][ T9330] ? security_capable+0x85/0xb0 [ 2586.425505][ T9330] genl_rcv_msg+0x601/0x790 [ 2586.430057][ T9330] ? genl_bind+0x360/0x360 [ 2586.434511][ T9330] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2586.440892][ T9330] netlink_rcv_skb+0x1ef/0x440 [ 2586.445799][ T9330] ? genl_bind+0x360/0x360 [ 2586.450259][ T9330] ? netlink_ack+0x1160/0x1160 [ 2586.455101][ T9330] ? down_read+0x1a8/0x2d0 [ 2586.459578][ T9330] genl_rcv+0x24/0x40 [ 2586.463595][ T9330] netlink_unicast+0x7ad/0x920 [ 2586.468403][ T9330] netlink_sendmsg+0x8ad/0xbd0 [ 2586.473220][ T9330] ? netlink_getsockopt+0x550/0x550 [ 2586.478453][ T9330] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2586.484035][ T9330] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2586.489959][ T9330] ? security_socket_sendmsg+0x7c/0xa0 [ 2586.495453][ T9330] ? netlink_getsockopt+0x550/0x550 [ 2586.500693][ T9330] ____sys_sendmsg+0x5ed/0x9a0 [ 2586.505503][ T9330] ? __sys_sendmsg_sock+0x30/0x30 [ 2586.510560][ T9330] ? __import_iovec+0x306/0x510 [ 2586.515453][ T9330] ? import_iovec+0x6f/0xa0 [ 2586.519995][ T9330] ___sys_sendmsg+0x2a2/0x360 [ 2586.524706][ T9330] ? __sys_sendmsg+0x2a0/0x2a0 [ 2586.529650][ T9330] ? ktime_get+0x7b/0x270 [ 2586.534185][ T9330] __se_sys_sendmsg+0x1c3/0x2b0 [ 2586.539088][ T9330] ? __x64_sys_sendmsg+0x80/0x80 [ 2586.544081][ T9330] ? lockdep_hardirqs_on+0x94/0x140 [ 2586.549332][ T9330] do_syscall_64+0x4c/0xa0 [ 2586.553785][ T9330] ? clear_bhb_loop+0x60/0xb0 [ 2586.558494][ T9330] ? clear_bhb_loop+0x60/0xb0 [ 2586.563209][ T9330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2586.569135][ T9330] RIP: 0033:0x7fb82599de59 [ 2586.573578][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2586.593211][ T9330] RSP: 002b:00007fb826865028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2586.601652][ T9330] RAX: ffffffffffffffda RBX: 00007fb825c26090 RCX: 00007fb82599de59 [ 2586.609647][ T9330] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2586.617817][ T9330] RBP: 00007fb825a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2586.625818][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2586.633820][ T9330] R13: 00007fb825c26128 R14: 00007fb825c26090 R15: 00007ffcb0bf9a58 [ 2586.641833][ T9330] [ 2586.684998][ T9195] 8021q: adding VLAN 0 to HW filter on device team0 [ 2586.699036][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2586.707914][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2586.754808][ T9345] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10023'. [ 2586.784059][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2586.834524][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2586.875565][T28556] bridge0: port 1(bridge_slave_0) entered blocking state [ 2586.882881][T28556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2586.961364][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2586.970655][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2586.980232][T28556] bridge0: port 2(bridge_slave_1) entered blocking state [ 2586.987458][T28556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2586.996144][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2587.043370][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2587.059509][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2587.089454][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2587.112451][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2587.208047][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2587.216260][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2587.228663][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2587.253846][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2587.273116][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2587.328746][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2587.359029][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2587.377203][T26361] Bluetooth: hci2: command 0x0406 tx timeout [ 2587.422242][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2587.995711][ T9366] device lo left promiscuous mode [ 2588.070810][ T9372] device lo entered promiscuous mode [ 2588.304032][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2588.316894][T28556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2588.364707][ T9195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2588.505002][ T9381] netlink: 'syz.3.10032': attribute type 10 has an invalid length. [ 2588.541840][ T9381] device geneve0 entered promiscuous mode [ 2588.728301][ T9381] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2589.322718][ T9397] netlink: 'syz.0.10035': attribute type 10 has an invalid length. [ 2589.733732][ T9413] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10036'. [ 2589.785769][ T9413] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2589.831087][ T9413] CPU: 0 PID: 9413 Comm: syz.1.10036 Not tainted syzkaller #0 [ 2589.838647][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2589.848752][ T9413] Call Trace: [ 2589.852067][ T9413] [ 2589.855030][ T9413] dump_stack_lvl+0x188/0x24e [ 2589.859770][ T9413] ? show_regs_print_info+0x12/0x12 [ 2589.865030][ T9413] ? load_image+0x410/0x410 [ 2589.869603][ T9413] sysfs_warn_dup+0x8a/0xa0 [ 2589.874153][ T9413] sysfs_do_create_link_sd+0xc0/0x110 [ 2589.879565][ T9413] device_add+0x83b/0x1050 [ 2589.884020][ T9413] wiphy_register+0x1d8b/0x2aa0 [ 2589.888936][ T9413] ? cfg80211_event_work+0x40/0x40 [ 2589.894121][ T9413] ? minstrel_ht_alloc+0x894/0xa20 [ 2589.899287][ T9413] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2589.905585][ T9413] ieee80211_register_hw+0x2d48/0x39f0 [ 2589.911116][ T9413] ? ieee80211_register_hw+0xf61/0x39f0 [ 2589.916808][ T9413] ? ieee80211_register_hw+0xf61/0x39f0 [ 2589.922434][ T9413] ? ieee80211_tasklet_handler+0x20/0x20 [ 2589.928118][ T9413] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2589.934055][ T9413] ? __debug_object_init+0xed/0x440 [ 2589.939329][ T9413] ? memset+0x1e/0x40 [ 2589.943359][ T9413] ? __hrtimer_init+0x189/0x270 [ 2589.948263][ T9413] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2589.954042][ T9413] ? memcpy+0x3c/0x60 [ 2589.958116][ T9413] hwsim_new_radio_nl+0xab7/0xc90 [ 2589.963207][ T9413] genl_family_rcv_msg_doit+0x22f/0x350 [ 2589.968824][ T9413] ? end_current_label_crit_section+0x170/0x170 [ 2589.975131][ T9413] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2589.981088][ T9413] ? bpf_lsm_capable+0x5/0x10 [ 2589.985811][ T9413] ? security_capable+0x85/0xb0 [ 2589.990719][ T9413] genl_rcv_msg+0x601/0x790 [ 2589.995286][ T9413] ? genl_bind+0x360/0x360 [ 2589.999751][ T9413] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2590.006149][ T9413] netlink_rcv_skb+0x1ef/0x440 [ 2590.010968][ T9413] ? genl_bind+0x360/0x360 [ 2590.015433][ T9413] ? netlink_ack+0x1160/0x1160 [ 2590.020255][ T9413] ? down_read+0x1a8/0x2d0 [ 2590.024713][ T9413] genl_rcv+0x24/0x40 [ 2590.028742][ T9413] netlink_unicast+0x7ad/0x920 [ 2590.033649][ T9413] netlink_sendmsg+0x8ad/0xbd0 [ 2590.038548][ T9413] ? aa_sock_msg_perm+0x51/0x150 [ 2590.043534][ T9413] ? netlink_getsockopt+0x550/0x550 [ 2590.048867][ T9413] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2590.054483][ T9413] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2590.059805][ T9413] ? security_socket_sendmsg+0x7c/0xa0 [ 2590.065304][ T9413] ? netlink_getsockopt+0x550/0x550 [ 2590.070548][ T9413] ____sys_sendmsg+0x5ed/0x9a0 [ 2590.075374][ T9413] ? __sys_sendmsg_sock+0x30/0x30 [ 2590.080443][ T9413] ? __import_iovec+0x306/0x510 [ 2590.085362][ T9413] ? import_iovec+0x6f/0xa0 [ 2590.089920][ T9413] ___sys_sendmsg+0x2a2/0x360 [ 2590.094641][ T9413] ? __sys_sendmsg+0x2a0/0x2a0 [ 2590.099483][ T9413] __se_sys_sendmsg+0x1c3/0x2b0 [ 2590.104373][ T9413] ? __x64_sys_sendmsg+0x80/0x80 [ 2590.109381][ T9413] ? lockdep_hardirqs_on+0x94/0x140 [ 2590.114617][ T9413] do_syscall_64+0x4c/0xa0 [ 2590.119067][ T9413] ? clear_bhb_loop+0x60/0xb0 [ 2590.123778][ T9413] ? clear_bhb_loop+0x60/0xb0 [ 2590.128504][ T9413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2590.134431][ T9413] RIP: 0033:0x7f1fa479de59 [ 2590.138882][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2590.158711][ T9413] RSP: 002b:00007f1fa571d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2590.167248][ T9413] RAX: ffffffffffffffda RBX: 00007f1fa4a26090 RCX: 00007f1fa479de59 [ 2590.175249][ T9413] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2590.183588][ T9413] RBP: 00007f1fa4833e6f R08: 0000000000000000 R09: 0000000000000000 [ 2590.191585][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2590.199582][ T9413] R13: 00007f1fa4a26128 R14: 00007f1fa4a26090 R15: 00007fff1d6059c8 [ 2590.207689][ T9413] [ 2590.424010][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.430439][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.521744][ T9426] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10038'. [ 2590.624511][ T9195] device veth0_vlan entered promiscuous mode [ 2590.645113][ T9195] device veth1_vlan entered promiscuous mode [ 2590.695289][ T9195] device veth0_macvtap entered promiscuous mode [ 2590.705175][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2590.746321][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2590.766373][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2590.791097][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2590.806134][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2590.815178][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2590.826009][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2590.835053][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2590.845150][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2590.860050][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2590.875650][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2590.938337][ T9195] device veth1_macvtap entered promiscuous mode [ 2590.952471][ T9438] netlink: 'syz.2.10040': attribute type 10 has an invalid length. [ 2590.964613][ T9438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10040'. [ 2590.993987][ T9438] device team0 entered promiscuous mode [ 2591.045732][ T9438] device team_slave_0 entered promiscuous mode [ 2591.114619][ T9438] device team_slave_1 entered promiscuous mode [ 2591.217658][ T9438] bridge0: port 3(team0) entered blocking state [ 2591.225290][ T9438] bridge0: port 3(team0) entered disabled state [ 2591.272813][ T9438] bridge0: port 3(team0) entered blocking state [ 2591.279710][ T9438] bridge0: port 3(team0) entered forwarding state [ 2591.356199][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2591.376989][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2591.407164][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2591.427366][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2591.457353][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2591.481694][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2591.495105][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2591.507318][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2591.519837][T28548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2591.571333][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2591.584264][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2591.594983][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2591.612174][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2591.622884][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2591.642315][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2591.664946][ T9195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2591.688920][ T9195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2591.716043][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2591.754763][T28554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2591.768959][T28554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2591.782321][ T9195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2591.791934][ T9195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2591.803438][ T9195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2591.814211][ T9195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2594.243647][T28548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2594.253041][ T9465] netlink: 'syz.2.10045': attribute type 21 has an invalid length. [ 2594.262825][T28548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2594.302784][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2594.340063][T28548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2594.377909][T28548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2594.419986][T28563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2594.594061][ T9472] netlink: 'syz.2.10048': attribute type 10 has an invalid length. [ 2594.718674][ T9476] netlink: 'syz.1.10049': attribute type 21 has an invalid length. [ 2594.726721][ T9476] netlink: 'syz.1.10049': attribute type 1 has an invalid length. [ 2594.785529][ T9475] tipc: Started in network mode [ 2594.818012][ T9475] tipc: Node identity 9215a268, cluster identity 4711 [ 2594.825144][ T9475] tipc: Node number set to 2450891368 [ 2596.548345][ T9511] netlink: 'syz.0.10061': attribute type 10 has an invalid length. [ 2596.576560][ T9511] device geneve0 entered promiscuous mode [ 2596.696288][ T9511] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2597.021596][ T9522] netlink: 'syz.3.10066': attribute type 10 has an invalid length. [ 2597.053818][ T9515] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.10062'. [ 2597.157369][ T9515] netlink: zone id is out of range [ 2597.186552][ T9515] netlink: zone id is out of range [ 2597.207477][ T9515] netlink: zone id is out of range [ 2597.223730][ T9515] netlink: zone id is out of range [ 2597.302513][ T9515] netlink: zone id is out of range [ 2597.324931][ T9515] netlink: zone id is out of range [ 2597.346777][ T9515] netlink: zone id is out of range [ 2597.376797][ T9515] netlink: zone id is out of range [ 2597.391298][ T9515] netlink: zone id is out of range [ 2597.426314][ T9515] netlink: zone id is out of range [ 2598.359610][ T9551] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10073'. [ 2598.716079][ T9555] netlink: 'syz.2.10076': attribute type 3 has an invalid length. [ 2598.816807][ T9555] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10076'. [ 2599.655701][ T9570] device syzkaller0 entered promiscuous mode [ 2603.989869][ T9602] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10092'. [ 2604.001887][ T9607] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10093'. [ 2604.012082][ T9618] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10096'. [ 2604.194707][ T9622] netlink: 192 bytes leftover after parsing attributes in process `syz.0.10097'. [ 2604.735009][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10099'. [ 2604.812935][ T9632] netlink: 'syz.0.10100': attribute type 10 has an invalid length. [ 2604.837133][ T9632] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 2604.980114][ T9642] netlink: 'syz.4.10103': attribute type 2 has an invalid length. [ 2604.994740][ T9642] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10103'. [ 2605.034170][ T9644] netlink: 'syz.2.10102': attribute type 2 has an invalid length. [ 2605.051250][ T9644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10102'. [ 2605.351134][ T9647] netlink: 'syz.1.10104': attribute type 3 has an invalid length. [ 2605.374918][ T9647] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10104'. [ 2605.419839][ T9649] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10105'. [ 2605.966059][ T9668] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10111'. [ 2606.268059][ T9673] device lo left promiscuous mode [ 2606.367681][ T9678] device lo entered promiscuous mode [ 2606.888709][ T9688] netlink: 'syz.2.10116': attribute type 2 has an invalid length. [ 2607.448088][ T9701] netlink: 'syz.0.10121': attribute type 3 has an invalid length. [ 2609.225428][ T9733] __nla_validate_parse: 4 callbacks suppressed [ 2609.225466][ T9733] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10131'. [ 2609.386943][ T9736] netlink: 'syz.0.10133': attribute type 2 has an invalid length. [ 2609.426767][ T9736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10133'. [ 2609.643809][ T9746] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10136'. [ 2609.904509][ T9751] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10137'. [ 2610.295099][ T9756] netlink: 'syz.0.10138': attribute type 21 has an invalid length. [ 2610.314854][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10138'. [ 2612.336187][ T9797] netlink: 'syz.1.10152': attribute type 10 has an invalid length. [ 2612.364785][ T9797] team0: Device hsr_slave_0 failed to register rx_handler [ 2612.668970][ T9794] netlink: 'syz.1.10152': attribute type 46 has an invalid length. [ 2612.676974][ T9794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10152'. [ 2613.101241][ T9809] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10156'. [ 2613.429813][ T9824] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10161'. [ 2613.481002][ T9826] device lo entered promiscuous mode [ 2613.746860][ T9830] netlink: 'syz.2.10165': attribute type 10 has an invalid length. [ 2613.776451][ T9830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10165'. [ 2613.815154][ T9830] device dummy0 entered promiscuous mode [ 2613.866063][ T9830] bridge0: port 4(dummy0) entered blocking state [ 2613.886910][ T9830] bridge0: port 4(dummy0) entered disabled state [ 2613.939484][ T9830] bridge0: port 4(dummy0) entered blocking state [ 2613.946691][ T9830] bridge0: port 4(dummy0) entered forwarding state [ 2614.312708][ T9837] netlink: 'syz.2.10167': attribute type 2 has an invalid length. [ 2615.266859][ T9859] netlink: 'syz.0.10175': attribute type 10 has an invalid length. [ 2615.295894][ T9859] device netdevsim0 entered promiscuous mode [ 2615.721296][ T9871] netlink: 'syz.0.10178': attribute type 10 has an invalid length. [ 2615.738600][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10178'. [ 2615.785404][ T9872] netlink: 'syz.2.10180': attribute type 10 has an invalid length. [ 2615.797553][ T9872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2615.829873][ T9872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2615.906684][ T9872] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2616.647597][ T9889] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10187'. [ 2616.745538][ T9889] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2617.039395][ T9899] netlink: 'syz.2.10191': attribute type 10 has an invalid length. [ 2617.067007][ T9899] device hsr0 entered promiscuous mode [ 2617.127310][ T9899] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2617.160516][ T9899] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2617.182332][ T9899] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2617.246102][ T9899] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2617.276550][ T9896] netlink: 'syz.4.10186': attribute type 2 has an invalid length. [ 2617.303550][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10186'. [ 2617.370799][ T9908] FAULT_INJECTION: forcing a failure. [ 2617.370799][ T9908] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.421608][ T9908] CPU: 0 PID: 9908 Comm: syz.1.10194 Not tainted syzkaller #0 [ 2617.429161][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2617.439347][ T9908] Call Trace: [ 2617.442750][ T9908] [ 2617.445723][ T9908] dump_stack_lvl+0x188/0x24e [ 2617.450464][ T9908] ? show_regs_print_info+0x12/0x12 [ 2617.455713][ T9908] ? load_image+0x410/0x410 [ 2617.460269][ T9908] ? __might_sleep+0xd0/0xd0 [ 2617.464907][ T9908] ? __lock_acquire+0x7c40/0x7c40 [ 2617.469995][ T9908] ? aa_file_perm+0x3ea/0xf00 [ 2617.474728][ T9908] ? verify_lock_unused+0x140/0x140 [ 2617.479987][ T9908] should_fail_ex+0x390/0x4c0 [ 2617.484937][ T9908] should_failslab+0x5/0x20 [ 2617.489947][ T9908] slab_pre_alloc_hook+0x59/0x300 [ 2617.495052][ T9908] ? aa_path_link+0x8a0/0x8a0 [ 2617.499924][ T9908] kmem_cache_alloc_node+0x5a/0x310 [ 2617.505369][ T9908] ? __alloc_skb+0xf9/0x7d0 [ 2617.509937][ T9908] __alloc_skb+0xf9/0x7d0 [ 2617.514324][ T9908] ppp_write+0xb0/0x3e0 [ 2617.518559][ T9908] ? vfs_write+0x2c7/0x9a0 [ 2617.523054][ T9908] ? ppp_read+0x860/0x860 [ 2617.527443][ T9908] vfs_write+0x2dc/0x9a0 [ 2617.531857][ T9908] ? file_end_write+0x250/0x250 [ 2617.536872][ T9908] ? __fget_files+0x28/0x460 [ 2617.541622][ T9908] ? __fget_files+0x3fc/0x460 [ 2617.546460][ T9908] ? __fdget_pos+0x1d4/0x360 [ 2617.551111][ T9908] ? ksys_write+0x70/0x260 [ 2617.555595][ T9908] ksys_write+0x14d/0x260 [ 2617.559991][ T9908] ? __ia32_sys_read+0x80/0x80 [ 2617.564888][ T9908] ? lockdep_hardirqs_on+0x94/0x140 [ 2617.570248][ T9908] do_syscall_64+0x4c/0xa0 [ 2617.574950][ T9908] ? clear_bhb_loop+0x60/0xb0 [ 2617.579686][ T9908] ? clear_bhb_loop+0x60/0xb0 [ 2617.584516][ T9908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2617.590464][ T9908] RIP: 0033:0x7f1fa479de59 [ 2617.594938][ T9908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2617.615561][ T9908] RSP: 002b:00007f1fa573e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2617.624025][ T9908] RAX: ffffffffffffffda RBX: 00007f1fa4a25fa0 RCX: 00007f1fa479de59 [ 2617.632041][ T9908] RDX: 00000000fffffeed RSI: 0000200000000280 RDI: 0000000000000004 [ 2617.640337][ T9908] RBP: 00007f1fa573e090 R08: 0000000000000000 R09: 0000000000000000 [ 2617.648362][ T9908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2617.656369][ T9908] R13: 00007f1fa4a26038 R14: 00007f1fa4a25fa0 R15: 00007fff1d6059c8 [ 2617.664393][ T9908] [ 2617.869434][ T9915] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10196'. [ 2617.935023][ T9915] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2617.997724][ T9915] CPU: 1 PID: 9915 Comm: syz.3.10196 Not tainted syzkaller #0 [ 2618.005378][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2618.015514][ T9915] Call Trace: [ 2618.018864][ T9915] [ 2618.021992][ T9915] dump_stack_lvl+0x188/0x24e [ 2618.026772][ T9915] ? show_regs_print_info+0x12/0x12 [ 2618.032049][ T9915] ? load_image+0x410/0x410 [ 2618.037099][ T9915] sysfs_warn_dup+0x8a/0xa0 [ 2618.041687][ T9915] sysfs_do_create_link_sd+0xc0/0x110 [ 2618.047149][ T9915] device_add+0x83b/0x1050 [ 2618.051667][ T9915] wiphy_register+0x1d8b/0x2aa0 [ 2618.056647][ T9915] ? cfg80211_event_work+0x40/0x40 [ 2618.061852][ T9915] ? minstrel_ht_alloc+0x894/0xa20 [ 2618.067059][ T9915] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2618.073386][ T9915] ieee80211_register_hw+0x2d48/0x39f0 [ 2618.079055][ T9915] ? ieee80211_register_hw+0xf61/0x39f0 [ 2618.084851][ T9915] ? ieee80211_register_hw+0xf61/0x39f0 [ 2618.090494][ T9915] ? ieee80211_tasklet_handler+0x20/0x20 [ 2618.096207][ T9915] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2618.102268][ T9915] ? __debug_object_init+0xed/0x440 [ 2618.107557][ T9915] ? memset+0x1e/0x40 [ 2618.111642][ T9915] ? __hrtimer_init+0x189/0x270 [ 2618.116626][ T9915] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2618.122488][ T9915] ? memcpy+0x3c/0x60 [ 2618.126691][ T9915] hwsim_new_radio_nl+0xab7/0xc90 [ 2618.131855][ T9915] genl_family_rcv_msg_doit+0x22f/0x350 [ 2618.137679][ T9915] ? end_current_label_crit_section+0x170/0x170 [ 2618.144471][ T9915] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2618.150608][ T9915] ? bpf_lsm_capable+0x5/0x10 [ 2618.155402][ T9915] ? security_capable+0x85/0xb0 [ 2618.160462][ T9915] genl_rcv_msg+0x601/0x790 [ 2618.165074][ T9915] ? genl_bind+0x360/0x360 [ 2618.169585][ T9915] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2618.176037][ T9915] netlink_rcv_skb+0x1ef/0x440 [ 2618.181066][ T9915] ? genl_bind+0x360/0x360 [ 2618.185585][ T9915] ? netlink_ack+0x1160/0x1160 [ 2618.190461][ T9915] ? down_read+0x1a8/0x2d0 [ 2618.194959][ T9915] genl_rcv+0x24/0x40 [ 2618.199392][ T9915] netlink_unicast+0x7ad/0x920 [ 2618.204352][ T9915] netlink_sendmsg+0x8ad/0xbd0 [ 2618.209249][ T9915] ? netlink_getsockopt+0x550/0x550 [ 2618.214561][ T9915] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2618.220284][ T9915] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2618.225655][ T9915] ? security_socket_sendmsg+0x7c/0xa0 [ 2618.231298][ T9915] ? netlink_getsockopt+0x550/0x550 [ 2618.236598][ T9915] ____sys_sendmsg+0x5ed/0x9a0 [ 2618.241467][ T9915] ? __sys_sendmsg_sock+0x30/0x30 [ 2618.246579][ T9915] ? __import_iovec+0x306/0x510 [ 2618.251541][ T9915] ? import_iovec+0x6f/0xa0 [ 2618.256253][ T9915] ___sys_sendmsg+0x2a2/0x360 [ 2618.261131][ T9915] ? __sys_sendmsg+0x2a0/0x2a0 [ 2618.266179][ T9915] __se_sys_sendmsg+0x1c3/0x2b0 [ 2618.271128][ T9915] ? __x64_sys_sendmsg+0x80/0x80 [ 2618.276480][ T9915] ? lockdep_hardirqs_on+0x94/0x140 [ 2618.281775][ T9915] do_syscall_64+0x4c/0xa0 [ 2618.286374][ T9915] ? clear_bhb_loop+0x60/0xb0 [ 2618.291218][ T9915] ? clear_bhb_loop+0x60/0xb0 [ 2618.295985][ T9915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2618.302397][ T9915] RIP: 0033:0x7fb82599de59 [ 2618.306890][ T9915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2618.326832][ T9915] RSP: 002b:00007fb826886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2618.335416][ T9915] RAX: ffffffffffffffda RBX: 00007fb825c25fa0 RCX: 00007fb82599de59 [ 2618.343635][ T9915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2618.351677][ T9915] RBP: 00007fb825a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2618.359739][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2618.367776][ T9915] R13: 00007fb825c26038 R14: 00007fb825c25fa0 R15: 00007ffcb0bf9a58 [ 2618.376296][ T9915] [ 2618.773078][ T9920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10197'. [ 2618.837750][ T9928] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10199'. [ 2618.878003][ T9931] netlink: 'syz.1.10200': attribute type 28 has an invalid length. [ 2619.620533][ T9952] netlink: 'syz.1.10218': attribute type 10 has an invalid length. [ 2619.639931][ T9952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10218'. [ 2621.091496][ T9981] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10217'. [ 2622.158087][T10007] netlink: 'syz.1.10221': attribute type 2 has an invalid length. [ 2622.207291][T10007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10221'. [ 2623.593122][T10024] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10230'. [ 2623.632460][T10024] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2624.153830][T10039] syz.0.10235[10039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2624.154052][T10039] syz.0.10235[10039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2624.223218][T10038] netlink: 'syz.3.10236': attribute type 2 has an invalid length. [ 2624.250923][T10039] syz.0.10235[10039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2624.264746][T10038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10236'. [ 2624.470060][T10043] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10238'. [ 2624.626668][T10048] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10239'. [ 2625.038538][T10057] netlink: 'syz.1.10242': attribute type 2 has an invalid length. [ 2625.053241][T10057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10242'. [ 2626.582552][T10082] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10251'. [ 2626.613906][T10086] netlink: 'syz.2.10250': attribute type 2 has an invalid length. [ 2626.670897][T10086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10250'. [ 2626.755769][T10082] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2627.616171][T10105] netlink: 'syz.2.10256': attribute type 2 has an invalid length. [ 2627.630654][T10105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10256'. [ 2627.655032][T10106] netlink: 'syz.3.10257': attribute type 2 has an invalid length. [ 2627.683633][T10106] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10257'. [ 2627.712471][T10111] netlink: 'syz.1.10259': attribute type 3 has an invalid length. [ 2627.724370][T10111] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10259'. [ 2627.882085][T10113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10261'. [ 2628.329237][T10126] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10263'. [ 2628.459271][T10126] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2628.540060][T10126] CPU: 0 PID: 10126 Comm: syz.3.10263 Not tainted syzkaller #0 [ 2628.547747][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2628.557868][T10126] Call Trace: [ 2628.561197][T10126] [ 2628.564174][T10126] dump_stack_lvl+0x188/0x24e [ 2628.568950][T10126] ? show_regs_print_info+0x12/0x12 [ 2628.574227][T10126] ? load_image+0x410/0x410 [ 2628.578805][T10126] sysfs_warn_dup+0x8a/0xa0 [ 2628.583385][T10126] sysfs_do_create_link_sd+0xc0/0x110 [ 2628.588820][T10126] device_add+0x83b/0x1050 [ 2628.593300][T10126] wiphy_register+0x1d8b/0x2aa0 [ 2628.598213][T10126] ? cfg80211_event_work+0x40/0x40 [ 2628.603373][T10126] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2628.609576][T10126] ieee80211_register_hw+0x2d48/0x39f0 [ 2628.615070][T10126] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2628.621271][T10126] ? ieee80211_register_hw+0xf61/0x39f0 [ 2628.626939][T10126] ? ieee80211_register_hw+0xf61/0x39f0 [ 2628.632532][T10126] ? ieee80211_tasklet_handler+0x20/0x20 [ 2628.638203][T10126] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2628.644225][T10126] ? __debug_object_init+0xed/0x440 [ 2628.649583][T10126] ? memset+0x1e/0x40 [ 2628.653684][T10126] ? __hrtimer_init+0x189/0x270 [ 2628.658575][T10126] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2628.664526][T10126] ? memcpy+0x3c/0x60 [ 2628.668546][T10126] hwsim_new_radio_nl+0xab7/0xc90 [ 2628.673636][T10126] genl_family_rcv_msg_doit+0x22f/0x350 [ 2628.679232][T10126] ? end_current_label_crit_section+0x170/0x170 [ 2628.685602][T10126] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2628.691553][T10126] ? bpf_lsm_capable+0x5/0x10 [ 2628.696266][T10126] ? security_capable+0x85/0xb0 [ 2628.701169][T10126] genl_rcv_msg+0x601/0x790 [ 2628.705719][T10126] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2628.712003][T10126] ? genl_bind+0x360/0x360 [ 2628.716559][T10126] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2628.723032][T10126] ? lock_acquire+0x225/0x4a0 [ 2628.727780][T10126] netlink_rcv_skb+0x1ef/0x440 [ 2628.732598][T10126] ? genl_bind+0x360/0x360 [ 2628.737065][T10126] ? netlink_ack+0x1160/0x1160 [ 2628.741909][T10126] ? down_read+0x1a8/0x2d0 [ 2628.746373][T10126] genl_rcv+0x24/0x40 [ 2628.750411][T10126] netlink_unicast+0x7ad/0x920 [ 2628.755232][T10126] netlink_sendmsg+0x8ad/0xbd0 [ 2628.760098][T10126] ? netlink_getsockopt+0x550/0x550 [ 2628.765347][T10126] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2628.770974][T10126] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2628.776404][T10126] ? security_socket_sendmsg+0x7c/0xa0 [ 2628.782082][T10126] ? netlink_getsockopt+0x550/0x550 [ 2628.787354][T10126] ____sys_sendmsg+0x5ed/0x9a0 [ 2628.792172][T10126] ? __sys_sendmsg_sock+0x30/0x30 [ 2628.797234][T10126] ? __import_iovec+0x306/0x510 [ 2628.802138][T10126] ? import_iovec+0x6f/0xa0 [ 2628.806698][T10126] ___sys_sendmsg+0x2a2/0x360 [ 2628.811513][T10126] ? __sys_sendmsg+0x2a0/0x2a0 [ 2628.816572][T10126] ? ktime_get+0x7b/0x270 [ 2628.820988][T10126] __se_sys_sendmsg+0x1c3/0x2b0 [ 2628.825926][T10126] ? __x64_sys_sendmsg+0x80/0x80 [ 2628.830925][T10126] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2628.836856][T10126] do_syscall_64+0x4c/0xa0 [ 2628.841317][T10126] ? clear_bhb_loop+0x60/0xb0 [ 2628.846043][T10126] ? clear_bhb_loop+0x60/0xb0 [ 2628.850761][T10126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2628.856690][T10126] RIP: 0033:0x7fb82599de59 [ 2628.861156][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2628.880914][T10126] RSP: 002b:00007fb826844028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2628.889371][T10126] RAX: ffffffffffffffda RBX: 00007fb825c26180 RCX: 00007fb82599de59 [ 2628.897376][T10126] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2628.905465][T10126] RBP: 00007fb825a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2628.913604][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2628.921609][T10126] R13: 00007fb825c26218 R14: 00007fb825c26180 R15: 00007ffcb0bf9a58 [ 2628.929676][T10126] [ 2629.152623][T10125] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10263'. [ 2630.034180][T10153] netlink: 'syz.4.10270': attribute type 2 has an invalid length. [ 2630.070736][T10153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10270'. [ 2630.224956][T10160] netlink: 'syz.3.10272': attribute type 2 has an invalid length. [ 2630.247791][T10160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10272'. [ 2630.434326][T10162] netlink: 'syz.4.10274': attribute type 2 has an invalid length. [ 2630.702138][T10173] netlink: 'syz.0.10278': attribute type 21 has an invalid length. [ 2631.240586][T10188] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2631.266306][T10188] CPU: 0 PID: 10188 Comm: syz.3.10282 Not tainted syzkaller #0 [ 2631.273950][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2631.284168][T10188] Call Trace: [ 2631.287497][T10188] [ 2631.290480][T10188] dump_stack_lvl+0x188/0x24e [ 2631.295305][T10188] ? show_regs_print_info+0x12/0x12 [ 2631.300839][T10188] ? load_image+0x410/0x410 [ 2631.305415][T10188] sysfs_warn_dup+0x8a/0xa0 [ 2631.309982][T10188] sysfs_do_create_link_sd+0xc0/0x110 [ 2631.315418][T10188] device_add+0x83b/0x1050 [ 2631.319992][T10188] wiphy_register+0x1d8b/0x2aa0 [ 2631.324937][T10188] ? cfg80211_event_work+0x40/0x40 [ 2631.330108][T10188] ? minstrel_ht_alloc+0x894/0xa20 [ 2631.335313][T10188] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2631.341442][T10188] ieee80211_register_hw+0x2d48/0x39f0 [ 2631.347156][T10188] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2631.353383][T10188] ? ieee80211_register_hw+0xf61/0x39f0 [ 2631.359167][T10188] ? ieee80211_register_hw+0xf61/0x39f0 [ 2631.364789][T10188] ? ieee80211_tasklet_handler+0x20/0x20 [ 2631.370674][T10188] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2631.376634][T10188] ? __debug_object_init+0xed/0x440 [ 2631.381887][T10188] ? memset+0x1e/0x40 [ 2631.385903][T10188] ? __hrtimer_init+0x189/0x270 [ 2631.391135][T10188] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2631.396906][T10188] ? memcpy+0x3c/0x60 [ 2631.400928][T10188] hwsim_new_radio_nl+0xab7/0xc90 [ 2631.406004][T10188] genl_family_rcv_msg_doit+0x22f/0x350 [ 2631.411688][T10188] ? end_current_label_crit_section+0x170/0x170 [ 2631.417992][T10188] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2631.423937][T10188] ? bpf_lsm_capable+0x5/0x10 [ 2631.428648][T10188] ? security_capable+0x85/0xb0 [ 2631.433548][T10188] genl_rcv_msg+0x601/0x790 [ 2631.438112][T10188] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2631.444306][T10188] ? genl_bind+0x360/0x360 [ 2631.448756][T10188] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2631.455141][T10188] netlink_rcv_skb+0x1ef/0x440 [ 2631.460385][T10188] ? genl_bind+0x360/0x360 [ 2631.464843][T10188] ? netlink_ack+0x1160/0x1160 [ 2631.469651][T10188] ? down_read+0x1a8/0x2d0 [ 2631.474104][T10188] genl_rcv+0x24/0x40 [ 2631.478123][T10188] netlink_unicast+0x7ad/0x920 [ 2631.482939][T10188] netlink_sendmsg+0x8ad/0xbd0 [ 2631.487750][T10188] ? netlink_getsockopt+0x550/0x550 [ 2631.492986][T10188] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2631.498571][T10188] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2631.504322][T10188] ? security_socket_sendmsg+0x7c/0xa0 [ 2631.509816][T10188] ? netlink_getsockopt+0x550/0x550 [ 2631.515069][T10188] ____sys_sendmsg+0x5ed/0x9a0 [ 2631.519879][T10188] ? __import_iovec+0x17f/0x510 [ 2631.524768][T10188] ? __sys_sendmsg_sock+0x30/0x30 [ 2631.529830][T10188] ? __import_iovec+0x306/0x510 [ 2631.534728][T10188] ? import_iovec+0x6f/0xa0 [ 2631.539272][T10188] ___sys_sendmsg+0x2a2/0x360 [ 2631.543991][T10188] ? __sys_sendmsg+0x2a0/0x2a0 [ 2631.548839][T10188] __se_sys_sendmsg+0x1c3/0x2b0 [ 2631.553733][T10188] ? __x64_sys_sendmsg+0x80/0x80 [ 2631.558816][T10188] do_syscall_64+0x4c/0xa0 [ 2631.563618][T10188] ? clear_bhb_loop+0x60/0xb0 [ 2631.568339][T10188] ? clear_bhb_loop+0x60/0xb0 [ 2631.573071][T10188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2631.579875][T10188] RIP: 0033:0x7fb82599de59 [ 2631.584563][T10188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2631.604476][T10188] RSP: 002b:00007fb826844028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2631.612924][T10188] RAX: ffffffffffffffda RBX: 00007fb825c26180 RCX: 00007fb82599de59 [ 2631.620932][T10188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2631.629032][T10188] RBP: 00007fb825a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2631.637036][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2631.645156][T10188] R13: 00007fb825c26218 R14: 00007fb825c26180 R15: 00007ffcb0bf9a58 [ 2631.653412][T10188] [ 2631.827812][T10199] __nla_validate_parse: 2 callbacks suppressed [ 2631.827856][T10199] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10285'. [ 2632.001737][T10210] netlink: 'syz.2.10286': attribute type 2 has an invalid length. [ 2632.027129][T10210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10286'. [ 2632.211982][T10213] netlink: 'syz.0.10287': attribute type 2 has an invalid length. [ 2632.298297][T10213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10287'. [ 2632.354775][T10214] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10289'. [ 2632.637691][T10225] netlink: 'syz.2.10291': attribute type 2 has an invalid length. [ 2632.687160][T10225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10291'. [ 2632.746457][T10220] netlink: 'syz.1.10290': attribute type 2 has an invalid length. [ 2632.864488][T10231] netlink: 'syz.3.10293': attribute type 3 has an invalid length. [ 2632.887586][T10231] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10293'. [ 2634.526048][T10259] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10300'. [ 2635.265575][T10264] netlink: 'syz.0.10301': attribute type 10 has an invalid length. [ 2635.963703][T10272] netlink: 'syz.0.10304': attribute type 2 has an invalid length. [ 2635.994920][T10272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10304'. [ 2637.218026][T10316] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10318'. [ 2637.336045][T10316] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2637.427021][T10316] CPU: 1 PID: 10316 Comm: syz.3.10318 Not tainted syzkaller #0 [ 2637.434718][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2637.444884][T10316] Call Trace: [ 2637.448257][T10316] [ 2637.451295][T10316] dump_stack_lvl+0x188/0x24e [ 2637.456111][T10316] ? show_regs_print_info+0x12/0x12 [ 2637.461445][T10316] ? load_image+0x410/0x410 [ 2637.466146][T10316] sysfs_warn_dup+0x8a/0xa0 [ 2637.470784][T10316] sysfs_do_create_link_sd+0xc0/0x110 [ 2637.476284][T10316] device_add+0x83b/0x1050 [ 2637.480858][T10316] wiphy_register+0x1d8b/0x2aa0 [ 2637.485932][T10316] ? cfg80211_event_work+0x40/0x40 [ 2637.491158][T10316] ? minstrel_ht_alloc+0x894/0xa20 [ 2637.496464][T10316] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2637.502691][T10316] ieee80211_register_hw+0x2d48/0x39f0 [ 2637.508342][T10316] ? ieee80211_register_hw+0xf61/0x39f0 [ 2637.514019][T10316] ? ieee80211_register_hw+0xf61/0x39f0 [ 2637.519735][T10316] ? ieee80211_tasklet_handler+0x20/0x20 [ 2637.525482][T10316] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2637.531492][T10316] ? __debug_object_init+0xed/0x440 [ 2637.536883][T10316] ? memset+0x1e/0x40 [ 2637.540952][T10316] ? __hrtimer_init+0x189/0x270 [ 2637.545897][T10316] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2637.551742][T10316] ? memcpy+0x3c/0x60 [ 2637.555920][T10316] hwsim_new_radio_nl+0xab7/0xc90 [ 2637.561086][T10316] genl_family_rcv_msg_doit+0x22f/0x350 [ 2637.566817][T10316] ? end_current_label_crit_section+0x170/0x170 [ 2637.573237][T10316] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2637.579364][T10316] ? bpf_lsm_capable+0x5/0x10 [ 2637.584137][T10316] ? security_capable+0x85/0xb0 [ 2637.589099][T10316] genl_rcv_msg+0x601/0x790 [ 2637.593763][T10316] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2637.600035][T10316] ? genl_bind+0x360/0x360 [ 2637.604622][T10316] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2637.611045][T10316] ? lock_acquire+0x225/0x4a0 [ 2637.615809][T10316] netlink_rcv_skb+0x1ef/0x440 [ 2637.620749][T10316] ? genl_bind+0x360/0x360 [ 2637.625241][T10316] ? netlink_ack+0x1160/0x1160 [ 2637.630083][T10316] ? rcu_read_unlock_special+0x1/0x510 [ 2637.635616][T10316] ? down_read+0x1a8/0x2d0 [ 2637.640156][T10316] genl_rcv+0x24/0x40 [ 2637.644210][T10316] netlink_unicast+0x7ad/0x920 [ 2637.649074][T10316] netlink_sendmsg+0x8ad/0xbd0 [ 2637.653937][T10316] ? netlink_getsockopt+0x550/0x550 [ 2637.659216][T10316] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2637.664834][T10316] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2637.670251][T10316] ? security_socket_sendmsg+0x7c/0xa0 [ 2637.675978][T10316] ? netlink_getsockopt+0x550/0x550 [ 2637.681256][T10316] ____sys_sendmsg+0x5ed/0x9a0 [ 2637.686185][T10316] ? __sys_sendmsg_sock+0x30/0x30 [ 2637.691346][T10316] ? __import_iovec+0x306/0x510 [ 2637.696333][T10316] ? import_iovec+0x6f/0xa0 [ 2637.700965][T10316] ___sys_sendmsg+0x2a2/0x360 [ 2637.705737][T10316] ? __sys_sendmsg+0x2a0/0x2a0 [ 2637.710690][T10316] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2637.716582][T10316] __se_sys_sendmsg+0x1c3/0x2b0 [ 2637.721550][T10316] ? __x64_sys_sendmsg+0x80/0x80 [ 2637.726645][T10316] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2637.732613][T10316] do_syscall_64+0x4c/0xa0 [ 2637.737108][T10316] ? clear_bhb_loop+0x60/0xb0 [ 2637.741866][T10316] ? clear_bhb_loop+0x60/0xb0 [ 2637.746608][T10316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2637.752556][T10316] RIP: 0033:0x7fb82599de59 [ 2637.757022][T10316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2637.776718][T10316] RSP: 002b:00007fb826865028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2637.785937][T10316] RAX: ffffffffffffffda RBX: 00007fb825c26090 RCX: 00007fb82599de59 [ 2637.794263][T10316] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2637.802578][T10316] RBP: 00007fb825a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2637.810707][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2637.818757][T10316] R13: 00007fb825c26128 R14: 00007fb825c26090 R15: 00007ffcb0bf9a58 [ 2637.827021][T10316] [ 2638.295916][T10323] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10320'. [ 2641.173655][T10370] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10338'. [ 2641.504960][T10380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10342'. [ 2641.654830][T10380] netlink: 'syz.2.10342': attribute type 22 has an invalid length. [ 2641.681435][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10342'. [ 2641.850616][T10383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10344'. [ 2641.959889][T10386] netlink: 'syz.3.10344': attribute type 22 has an invalid length. [ 2642.021436][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10344'. [ 2644.918118][T10406] netlink: 'syz.0.10347': attribute type 2 has an invalid length. [ 2644.933525][T10406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10347'. [ 2645.329378][T10413] netlink: 'syz.1.10349': attribute type 2 has an invalid length. [ 2645.347517][T10413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10349'. [ 2648.141488][T10455] netlink: 'syz.0.10361': attribute type 2 has an invalid length. [ 2648.255781][T10455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10361'. [ 2648.452629][T10465] netlink: 'syz.4.10365': attribute type 2 has an invalid length. [ 2648.478459][T10465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10365'. [ 2648.916024][T10471] netlink: 'syz.0.10377': attribute type 2 has an invalid length. [ 2648.955762][T10471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10377'. [ 2649.130650][T10477] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10368'. [ 2650.332536][T10499] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10376'. [ 2650.473563][T10499] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2651.024173][T10512] netlink: 'syz.3.10381': attribute type 10 has an invalid length. [ 2651.059420][T10512] device hsr0 entered promiscuous mode [ 2651.098010][T10512] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2651.155967][T10512] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2651.177202][T10512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2651.195147][T10512] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2651.860433][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.866864][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.679447][T10564] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10400'. [ 2653.586725][T10582] FAULT_INJECTION: forcing a failure. [ 2653.586725][T10582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2653.658279][T10582] CPU: 1 PID: 10582 Comm: syz.3.10408 Not tainted syzkaller #0 [ 2653.666013][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2653.676122][T10582] Call Trace: [ 2653.679439][T10582] [ 2653.682410][T10582] dump_stack_lvl+0x188/0x24e [ 2653.687143][T10582] ? show_regs_print_info+0x12/0x12 [ 2653.693092][T10582] ? load_image+0x410/0x410 [ 2653.697652][T10582] ? __lock_acquire+0x7c40/0x7c40 [ 2653.702727][T10582] ? snprintf+0xe5/0x140 [ 2653.707004][T10582] should_fail_ex+0x390/0x4c0 [ 2653.711736][T10582] _copy_to_user+0x2c/0x130 [ 2653.716279][T10582] simple_read_from_buffer+0xe3/0x150 [ 2653.721697][T10582] proc_fail_nth_read+0x1a6/0x220 [ 2653.726765][T10582] ? proc_fault_inject_write+0x310/0x310 [ 2653.732468][T10582] ? fsnotify_perm+0x248/0x550 [ 2653.737267][T10582] ? proc_fault_inject_write+0x310/0x310 [ 2653.742941][T10582] vfs_read+0x2db/0x960 [ 2653.747147][T10582] ? kernel_read+0x1e0/0x1e0 [ 2653.751783][T10582] ? __fget_files+0x28/0x460 [ 2653.756419][T10582] ? __fget_files+0x3fc/0x460 [ 2653.761158][T10582] ? __fdget_pos+0x2ae/0x360 [ 2653.765797][T10582] ? ksys_read+0x70/0x260 [ 2653.770196][T10582] ksys_read+0x14d/0x260 [ 2653.774522][T10582] ? vfs_write+0x9a0/0x9a0 [ 2653.778990][T10582] ? lockdep_hardirqs_on+0x94/0x140 [ 2653.784230][T10582] do_syscall_64+0x4c/0xa0 [ 2653.788693][T10582] ? clear_bhb_loop+0x60/0xb0 [ 2653.793404][T10582] ? clear_bhb_loop+0x60/0xb0 [ 2653.798213][T10582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2653.804139][T10582] RIP: 0033:0x7fb82595e68e [ 2653.808582][T10582] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2653.828338][T10582] RSP: 002b:00007fb826885fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2653.836836][T10582] RAX: ffffffffffffffda RBX: 00007fb8268866c0 RCX: 00007fb82595e68e [ 2653.844841][T10582] RDX: 000000000000000f RSI: 00007fb8268860a0 RDI: 0000000000000005 [ 2653.852893][T10582] RBP: 00007fb826886090 R08: 0000000000000000 R09: 0000000000000000 [ 2653.860912][T10582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2653.868930][T10582] R13: 00007fb825c26038 R14: 00007fb825c25fa0 R15: 00007ffcb0bf9a58 [ 2653.876955][T10582] [ 2654.224821][T10586] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10409'. [ 2654.251421][T10589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10411'. [ 2654.334928][T10586] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2654.407146][T10586] CPU: 1 PID: 10586 Comm: syz.4.10409 Not tainted syzkaller #0 [ 2654.415012][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2654.426289][T10586] Call Trace: [ 2654.429747][T10586] [ 2654.432737][T10586] dump_stack_lvl+0x188/0x24e [ 2654.437509][T10586] ? show_regs_print_info+0x12/0x12 [ 2654.442793][T10586] ? load_image+0x410/0x410 [ 2654.447486][T10586] sysfs_warn_dup+0x8a/0xa0 [ 2654.452077][T10586] sysfs_do_create_link_sd+0xc0/0x110 [ 2654.457540][T10586] device_add+0x83b/0x1050 [ 2654.462054][T10586] wiphy_register+0x1d8b/0x2aa0 [ 2654.467028][T10586] ? cfg80211_event_work+0x40/0x40 [ 2654.472228][T10586] ? minstrel_ht_alloc+0x894/0xa20 [ 2654.477442][T10586] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2654.484374][T10586] ieee80211_register_hw+0x2d48/0x39f0 [ 2654.489939][T10586] ? ieee80211_register_hw+0xf61/0x39f0 [ 2654.495557][T10586] ? ieee80211_register_hw+0xf61/0x39f0 [ 2654.501191][T10586] ? ieee80211_tasklet_handler+0x20/0x20 [ 2654.507030][T10586] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2654.513001][T10586] ? __debug_object_init+0xed/0x440 [ 2654.518330][T10586] ? memset+0x1e/0x40 [ 2654.522383][T10586] ? __hrtimer_init+0x189/0x270 [ 2654.527357][T10586] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2654.533180][T10586] ? memcpy+0x3c/0x60 [ 2654.537284][T10586] hwsim_new_radio_nl+0xab7/0xc90 [ 2654.542419][T10586] genl_family_rcv_msg_doit+0x22f/0x350 [ 2654.548051][T10586] ? end_current_label_crit_section+0x170/0x170 [ 2654.554390][T10586] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2654.561427][T10586] ? bpf_lsm_capable+0x5/0x10 [ 2654.566180][T10586] ? security_capable+0x85/0xb0 [ 2654.571133][T10586] genl_rcv_msg+0x601/0x790 [ 2654.575830][T10586] ? genl_bind+0x360/0x360 [ 2654.580329][T10586] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2654.586783][T10586] netlink_rcv_skb+0x1ef/0x440 [ 2654.591635][T10586] ? genl_bind+0x360/0x360 [ 2654.596139][T10586] ? netlink_ack+0x1160/0x1160 [ 2654.601012][T10586] ? down_read+0x1a8/0x2d0 [ 2654.605510][T10586] genl_rcv+0x24/0x40 [ 2654.609569][T10586] netlink_unicast+0x7ad/0x920 [ 2654.614440][T10586] netlink_sendmsg+0x8ad/0xbd0 [ 2654.619304][T10586] ? netlink_getsockopt+0x550/0x550 [ 2654.624597][T10586] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2654.630229][T10586] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2654.635590][T10586] ? security_socket_sendmsg+0x7c/0xa0 [ 2654.641125][T10586] ? netlink_getsockopt+0x550/0x550 [ 2654.646420][T10586] ____sys_sendmsg+0x5ed/0x9a0 [ 2654.651287][T10586] ? __sys_sendmsg_sock+0x30/0x30 [ 2654.656399][T10586] ? __import_iovec+0x306/0x510 [ 2654.661347][T10586] ? import_iovec+0x6f/0xa0 [ 2654.665950][T10586] ___sys_sendmsg+0x2a2/0x360 [ 2654.670712][T10586] ? __sys_sendmsg+0x2a0/0x2a0 [ 2654.675841][T10586] __se_sys_sendmsg+0x1c3/0x2b0 [ 2654.680778][T10586] ? __x64_sys_sendmsg+0x80/0x80 [ 2654.685913][T10586] ? lockdep_hardirqs_on+0x94/0x140 [ 2654.691192][T10586] do_syscall_64+0x4c/0xa0 [ 2654.695681][T10586] ? clear_bhb_loop+0x60/0xb0 [ 2654.700427][T10586] ? clear_bhb_loop+0x60/0xb0 [ 2654.705189][T10586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2654.711155][T10586] RIP: 0033:0x7f7fd5f9de59 [ 2654.715649][T10586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2654.735431][T10586] RSP: 002b:00007f7fd6eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2654.743924][T10586] RAX: ffffffffffffffda RBX: 00007f7fd6225fa0 RCX: 00007f7fd5f9de59 [ 2654.751962][T10586] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2654.759997][T10586] RBP: 00007f7fd6033e6f R08: 0000000000000000 R09: 0000000000000000 [ 2654.768118][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2654.776162][T10586] R13: 00007f7fd6226038 R14: 00007f7fd6225fa0 R15: 00007ffdec926408 [ 2654.784236][T10586] [ 2655.664627][T10615] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10420'. [ 2656.747516][T10634] netlink: 'syz.4.10428': attribute type 1 has an invalid length. [ 2656.773371][T10635] FAULT_INJECTION: forcing a failure. [ 2656.773371][T10635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2656.806926][T10634] netlink: 'syz.4.10428': attribute type 1 has an invalid length. [ 2656.841275][T10634] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.10428'. [ 2656.908232][T10635] CPU: 1 PID: 10635 Comm: syz.2.10427 Not tainted syzkaller #0 [ 2656.915862][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2656.925948][T10635] Call Trace: [ 2656.929284][T10635] [ 2656.932290][T10635] dump_stack_lvl+0x188/0x24e [ 2656.937032][T10635] ? show_regs_print_info+0x12/0x12 [ 2656.942304][T10635] ? load_image+0x410/0x410 [ 2656.946876][T10635] ? __lock_acquire+0x7c40/0x7c40 [ 2656.951986][T10635] ? rcu_is_watching+0x11/0xa0 [ 2656.956807][T10635] should_fail_ex+0x390/0x4c0 [ 2656.961629][T10635] prepare_alloc_pages+0x1e1/0x5b0 [ 2656.966814][T10635] __alloc_pages+0x130/0x4f0 [ 2656.971467][T10635] ? __kasan_kmalloc_large+0x8b/0xd0 [ 2656.976812][T10635] ? zone_statistics+0x170/0x170 [ 2656.981805][T10635] ? alloc_skb_with_frags+0xa7/0x710 [ 2656.987135][T10635] ? trace_kmalloc+0x22/0xa0 [ 2656.991781][T10635] ? alloc_pages+0x4dd/0x740 [ 2656.996463][T10635] alloc_skb_with_frags+0x20b/0x710 [ 2657.001721][T10635] sock_alloc_send_pskb+0x87f/0x9a0 [ 2657.006990][T10635] ? sock_kzfree_s+0x50/0x50 [ 2657.011640][T10635] ? __lock_acquire+0x1465/0x7c40 [ 2657.016772][T10635] ? dev_get_by_index+0x1e/0x2d0 [ 2657.021770][T10635] ? dev_get_by_index+0x1e/0x2d0 [ 2657.026806][T10635] packet_sendmsg+0x327d/0x4de0 [ 2657.031722][T10635] ? aa_sk_perm+0x950/0x950 [ 2657.036467][T10635] ? __might_sleep+0xd0/0xd0 [ 2657.041545][T10635] ? irqentry_enter+0x33/0x50 [ 2657.046265][T10635] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2657.052296][T10635] ? aa_sk_perm+0x81f/0x950 [ 2657.056828][T10635] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2657.063010][T10635] ? aa_af_perm+0x340/0x340 [ 2657.067543][T10635] ? packet_getsockopt+0x980/0x980 [ 2657.072705][T10635] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2657.078279][T10635] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2657.083583][T10635] ? security_socket_sendmsg+0x7c/0xa0 [ 2657.089073][T10635] ? packet_getsockopt+0x980/0x980 [ 2657.094228][T10635] ____sys_sendmsg+0x5ed/0x9a0 [ 2657.099174][T10635] ? __sys_sendmsg_sock+0x30/0x30 [ 2657.104226][T10635] ? __import_iovec+0x306/0x510 [ 2657.109115][T10635] ? import_iovec+0x6f/0xa0 [ 2657.113652][T10635] ___sys_sendmsg+0x2a2/0x360 [ 2657.118386][T10635] ? __sys_sendmsg+0x2a0/0x2a0 [ 2657.123301][T10635] ? ktime_get+0x7b/0x270 [ 2657.127676][T10635] __se_sys_sendmsg+0x1c3/0x2b0 [ 2657.132559][T10635] ? __x64_sys_sendmsg+0x80/0x80 [ 2657.137591][T10635] ? lockdep_hardirqs_on+0x94/0x140 [ 2657.143008][T10635] do_syscall_64+0x4c/0xa0 [ 2657.147457][T10635] ? clear_bhb_loop+0x60/0xb0 [ 2657.152162][T10635] ? clear_bhb_loop+0x60/0xb0 [ 2657.156884][T10635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2657.162808][T10635] RIP: 0033:0x7f6b8739de59 [ 2657.167252][T10635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2657.187063][T10635] RSP: 002b:00007f6b88325028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2657.195509][T10635] RAX: ffffffffffffffda RBX: 00007f6b87625fa0 RCX: 00007f6b8739de59 [ 2657.203504][T10635] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2657.211506][T10635] RBP: 00007f6b88325090 R08: 0000000000000000 R09: 0000000000000000 [ 2657.219495][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2657.227572][T10635] R13: 00007f6b87626038 R14: 00007f6b87625fa0 R15: 00007ffda6ec0f18 [ 2657.235666][T10635] [ 2657.441018][T10630] delete_channel: no stack [ 2658.553586][T10664] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10438'. [ 2659.420823][T10670] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10440'. [ 2659.445674][T10664] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2659.456048][T10664] CPU: 0 PID: 10664 Comm: syz.4.10438 Not tainted syzkaller #0 [ 2659.463869][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2659.474078][T10664] Call Trace: [ 2659.477425][T10664] [ 2659.480413][T10664] dump_stack_lvl+0x188/0x24e [ 2659.485272][T10664] ? show_regs_print_info+0x12/0x12 [ 2659.490665][T10664] ? load_image+0x410/0x410 [ 2659.495269][T10664] sysfs_warn_dup+0x8a/0xa0 [ 2659.499851][T10664] sysfs_do_create_link_sd+0xc0/0x110 [ 2659.505330][T10664] device_add+0x83b/0x1050 [ 2659.509837][T10664] wiphy_register+0x1d8b/0x2aa0 [ 2659.514799][T10664] ? cfg80211_event_work+0x40/0x40 [ 2659.520067][T10664] ? minstrel_ht_alloc+0x894/0xa20 [ 2659.525279][T10664] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2659.531482][T10664] ieee80211_register_hw+0x2d48/0x39f0 [ 2659.537225][T10664] ? ieee80211_register_hw+0xf61/0x39f0 [ 2659.542853][T10664] ? ieee80211_register_hw+0xf61/0x39f0 [ 2659.548510][T10664] ? ieee80211_tasklet_handler+0x20/0x20 [ 2659.554238][T10664] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2659.560474][T10664] ? __debug_object_init+0xed/0x440 [ 2659.566059][T10664] ? memset+0x1e/0x40 [ 2659.570197][T10664] ? __hrtimer_init+0x189/0x270 [ 2659.575388][T10664] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2659.581216][T10664] ? memcpy+0x3c/0x60 [ 2659.585273][T10664] hwsim_new_radio_nl+0xab7/0xc90 [ 2659.590400][T10664] genl_family_rcv_msg_doit+0x22f/0x350 [ 2659.596296][T10664] ? end_current_label_crit_section+0x170/0x170 [ 2659.602705][T10664] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2659.608772][T10664] ? bpf_lsm_capable+0x5/0x10 [ 2659.613515][T10664] ? security_capable+0x85/0xb0 [ 2659.618465][T10664] genl_rcv_msg+0x601/0x790 [ 2659.623071][T10664] ? genl_bind+0x360/0x360 [ 2659.627558][T10664] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2659.633995][T10664] netlink_rcv_skb+0x1ef/0x440 [ 2659.638841][T10664] ? genl_bind+0x360/0x360 [ 2659.643348][T10664] ? netlink_ack+0x1160/0x1160 [ 2659.648218][T10664] ? down_read+0x1a8/0x2d0 [ 2659.652711][T10664] genl_rcv+0x24/0x40 [ 2659.656771][T10664] netlink_unicast+0x7ad/0x920 [ 2659.661635][T10664] netlink_sendmsg+0x8ad/0xbd0 [ 2659.666497][T10664] ? netlink_getsockopt+0x550/0x550 [ 2659.671871][T10664] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2659.677502][T10664] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2659.682945][T10664] ? security_socket_sendmsg+0x7c/0xa0 [ 2659.688486][T10664] ? netlink_getsockopt+0x550/0x550 [ 2659.693769][T10664] ____sys_sendmsg+0x5ed/0x9a0 [ 2659.698635][T10664] ? __sys_sendmsg_sock+0x30/0x30 [ 2659.703728][T10664] ? __import_iovec+0x306/0x510 [ 2659.708688][T10664] ? import_iovec+0x6f/0xa0 [ 2659.713297][T10664] ___sys_sendmsg+0x2a2/0x360 [ 2659.718082][T10664] ? __sys_sendmsg+0x2a0/0x2a0 [ 2659.723076][T10664] __se_sys_sendmsg+0x1c3/0x2b0 [ 2659.728014][T10664] ? __x64_sys_sendmsg+0x80/0x80 [ 2659.733113][T10664] ? lockdep_hardirqs_on+0x94/0x140 [ 2659.738405][T10664] do_syscall_64+0x4c/0xa0 [ 2659.742914][T10664] ? clear_bhb_loop+0x60/0xb0 [ 2659.747677][T10664] ? clear_bhb_loop+0x60/0xb0 [ 2659.752437][T10664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2659.758593][T10664] RIP: 0033:0x7f7fd5f9de59 [ 2659.763090][T10664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2659.783048][T10664] RSP: 002b:00007f7fd6eb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2659.791563][T10664] RAX: ffffffffffffffda RBX: 00007f7fd6225fa0 RCX: 00007f7fd5f9de59 [ 2659.799612][T10664] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000005 [ 2659.807836][T10664] RBP: 00007f7fd6033e6f R08: 0000000000000000 R09: 0000000000000000 [ 2659.815891][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2659.823938][T10664] R13: 00007f7fd6226038 R14: 00007f7fd6225fa0 R15: 00007ffdec926408 [ 2659.832022][T10664] [ 2659.895067][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10441'. [ 2660.564065][T10696] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10449'. [ 2660.835194][T10702] netlink: 'syz.3.10451': attribute type 153 has an invalid length. [ 2660.987434][T10702] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.10451'. [ 2661.515074][T10720] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10456'. [ 2661.528922][T10726] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10453'. [ 2661.570864][T10726] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2661.593310][T10726] CPU: 1 PID: 10726 Comm: syz.2.10453 Not tainted syzkaller #0 [ 2661.600965][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2661.611167][T10726] Call Trace: [ 2661.614501][T10726] [ 2661.617493][T10726] dump_stack_lvl+0x188/0x24e [ 2661.622325][T10726] ? show_regs_print_info+0x12/0x12 [ 2661.627621][T10726] ? load_image+0x410/0x410 [ 2661.632295][T10726] sysfs_warn_dup+0x8a/0xa0 [ 2661.636863][T10726] sysfs_do_create_link_sd+0xc0/0x110 [ 2661.642397][T10726] device_add+0x83b/0x1050 [ 2661.646967][T10726] wiphy_register+0x1d8b/0x2aa0 [ 2661.651994][T10726] ? cfg80211_event_work+0x40/0x40 [ 2661.657166][T10726] ? minstrel_ht_alloc+0x894/0xa20 [ 2661.662433][T10726] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2661.668563][T10726] ieee80211_register_hw+0x2d48/0x39f0 [ 2661.674105][T10726] ? ieee80211_register_hw+0xf61/0x39f0 [ 2661.679725][T10726] ? ieee80211_register_hw+0xf61/0x39f0 [ 2661.685445][T10726] ? ieee80211_tasklet_handler+0x20/0x20 [ 2661.691147][T10726] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2661.697100][T10726] ? __debug_object_init+0xed/0x440 [ 2661.702631][T10726] ? memset+0x1e/0x40 [ 2661.706670][T10726] ? __hrtimer_init+0x189/0x270 [ 2661.711598][T10726] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2661.717501][T10726] ? memcpy+0x3c/0x60 [ 2661.721545][T10726] hwsim_new_radio_nl+0xab7/0xc90 [ 2661.726654][T10726] genl_family_rcv_msg_doit+0x22f/0x350 [ 2661.732270][T10726] ? end_current_label_crit_section+0x170/0x170 [ 2661.738783][T10726] ? trace_call_bpf+0xbf/0x6b0 [ 2661.743655][T10726] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2661.749623][T10726] ? bpf_lsm_capable+0x5/0x10 [ 2661.754352][T10726] ? security_capable+0x85/0xb0 [ 2661.759296][T10726] genl_rcv_msg+0x601/0x790 [ 2661.763877][T10726] ? genl_bind+0x360/0x360 [ 2661.768362][T10726] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2661.774781][T10726] netlink_rcv_skb+0x1ef/0x440 [ 2661.779696][T10726] ? genl_bind+0x360/0x360 [ 2661.784241][T10726] ? netlink_ack+0x1160/0x1160 [ 2661.789083][T10726] ? down_read+0x1a8/0x2d0 [ 2661.793574][T10726] genl_rcv+0x24/0x40 [ 2661.797615][T10726] netlink_unicast+0x7ad/0x920 [ 2661.802450][T10726] netlink_sendmsg+0x8ad/0xbd0 [ 2661.807285][T10726] ? netlink_getsockopt+0x550/0x550 [ 2661.812555][T10726] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2661.818165][T10726] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2661.823498][T10726] ? security_socket_sendmsg+0x7c/0xa0 [ 2661.829291][T10726] ? netlink_getsockopt+0x550/0x550 [ 2661.834874][T10726] ____sys_sendmsg+0x5ed/0x9a0 [ 2661.839721][T10726] ? __sys_sendmsg_sock+0x30/0x30 [ 2661.844806][T10726] ? __import_iovec+0x306/0x510 [ 2661.849777][T10726] ? import_iovec+0x6f/0xa0 [ 2661.854351][T10726] ___sys_sendmsg+0x2a2/0x360 [ 2661.859100][T10726] ? __sys_sendmsg+0x2a0/0x2a0 [ 2661.864149][T10726] __se_sys_sendmsg+0x1c3/0x2b0 [ 2661.869060][T10726] ? __x64_sys_sendmsg+0x80/0x80 [ 2661.874079][T10726] ? lockdep_hardirqs_on+0x94/0x140 [ 2661.879580][T10726] do_syscall_64+0x4c/0xa0 [ 2661.884023][T10726] ? clear_bhb_loop+0x60/0xb0 [ 2661.888745][T10726] ? clear_bhb_loop+0x60/0xb0 [ 2661.893485][T10726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2661.899437][T10726] RIP: 0033:0x7f6b8739de59 [ 2661.903904][T10726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2661.923557][T10726] RSP: 002b:00007f6b882c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2661.932289][T10726] RAX: ffffffffffffffda RBX: 00007f6b87626270 RCX: 00007f6b8739de59 [ 2661.940308][T10726] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2661.948329][T10726] RBP: 00007f6b87433e6f R08: 0000000000000000 R09: 0000000000000000 [ 2661.956341][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2661.964448][T10726] R13: 00007f6b87626308 R14: 00007f6b87626270 R15: 00007ffda6ec0f18 [ 2661.972497][T10726] [ 2662.093433][T10728] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10453'. [ 2662.540792][T10740] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10460'. [ 2662.692637][T10740] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2662.761047][T10740] CPU: 0 PID: 10740 Comm: syz.3.10460 Not tainted syzkaller #0 [ 2662.768708][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2662.778831][T10740] Call Trace: [ 2662.782193][T10740] [ 2662.785188][T10740] dump_stack_lvl+0x188/0x24e [ 2662.789949][T10740] ? show_regs_print_info+0x12/0x12 [ 2662.795225][T10740] ? load_image+0x410/0x410 [ 2662.799818][T10740] sysfs_warn_dup+0x8a/0xa0 [ 2662.804398][T10740] sysfs_do_create_link_sd+0xc0/0x110 [ 2662.809849][T10740] device_add+0x83b/0x1050 [ 2662.814386][T10740] wiphy_register+0x1d8b/0x2aa0 [ 2662.819434][T10740] ? cfg80211_event_work+0x40/0x40 [ 2662.824624][T10740] ? minstrel_ht_alloc+0x894/0xa20 [ 2662.829825][T10740] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2662.835957][T10740] ieee80211_register_hw+0x2d48/0x39f0 [ 2662.841474][T10740] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2662.847705][T10740] ? ieee80211_register_hw+0xf61/0x39f0 [ 2662.853293][T10740] ? ieee80211_register_hw+0xf61/0x39f0 [ 2662.858897][T10740] ? ieee80211_tasklet_handler+0x20/0x20 [ 2662.864578][T10740] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2662.870515][T10740] ? __debug_object_init+0xed/0x440 [ 2662.875796][T10740] ? memset+0x1e/0x40 [ 2662.879851][T10740] ? __hrtimer_init+0x189/0x270 [ 2662.884737][T10740] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2662.890502][T10740] ? memcpy+0x3c/0x60 [ 2662.894551][T10740] hwsim_new_radio_nl+0xab7/0xc90 [ 2662.899642][T10740] genl_family_rcv_msg_doit+0x22f/0x350 [ 2662.905228][T10740] ? end_current_label_crit_section+0x170/0x170 [ 2662.911512][T10740] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2662.917538][T10740] ? bpf_lsm_capable+0x5/0x10 [ 2662.922252][T10740] ? security_capable+0x85/0xb0 [ 2662.927527][T10740] genl_rcv_msg+0x601/0x790 [ 2662.932076][T10740] ? genl_bind+0x360/0x360 [ 2662.936609][T10740] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2662.942987][T10740] netlink_rcv_skb+0x1ef/0x440 [ 2662.947793][T10740] ? genl_bind+0x360/0x360 [ 2662.952270][T10740] ? netlink_ack+0x1160/0x1160 [ 2662.957113][T10740] ? down_read+0x1a8/0x2d0 [ 2662.961559][T10740] genl_rcv+0x24/0x40 [ 2662.965612][T10740] netlink_unicast+0x7ad/0x920 [ 2662.970505][T10740] netlink_sendmsg+0x8ad/0xbd0 [ 2662.975314][T10740] ? lockdep_hardirqs_on+0x94/0x140 [ 2662.980539][T10740] ? netlink_getsockopt+0x550/0x550 [ 2662.985780][T10740] ? netlink_getsockopt+0x550/0x550 [ 2662.991017][T10740] ____sys_sendmsg+0x5ed/0x9a0 [ 2662.995824][T10740] ? __sys_sendmsg_sock+0x30/0x30 [ 2663.000889][T10740] ? ___sys_sendmsg+0x287/0x360 [ 2663.005773][T10740] ___sys_sendmsg+0x2a2/0x360 [ 2663.010586][T10740] ? __sys_sendmsg+0x2a0/0x2a0 [ 2663.015521][T10740] ? ktime_get+0x7b/0x270 [ 2663.020038][T10740] __se_sys_sendmsg+0x1c3/0x2b0 [ 2663.024977][T10740] ? __x64_sys_sendmsg+0x80/0x80 [ 2663.030005][T10740] ? lockdep_hardirqs_on+0x94/0x140 [ 2663.035254][T10740] do_syscall_64+0x4c/0xa0 [ 2663.039719][T10740] ? clear_bhb_loop+0x60/0xb0 [ 2663.044436][T10740] ? clear_bhb_loop+0x60/0xb0 [ 2663.049157][T10740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2663.055119][T10740] RIP: 0033:0x7fb82599de59 [ 2663.059581][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2663.079245][T10740] RSP: 002b:00007fb826865028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2663.087813][T10740] RAX: ffffffffffffffda RBX: 00007fb825c26090 RCX: 00007fb82599de59 [ 2663.095816][T10740] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2663.103810][T10740] RBP: 00007fb825a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2663.111809][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2663.119811][T10740] R13: 00007fb825c26128 R14: 00007fb825c26090 R15: 00007ffcb0bf9a58 [ 2663.127835][T10740] [ 2663.298339][T10751] netlink: 'syz.0.10463': attribute type 30 has an invalid length. [ 2663.344946][T10751] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10463'. [ 2664.853669][T10791] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10475'. [ 2664.951350][T10791] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2664.990817][T10791] CPU: 1 PID: 10791 Comm: syz.0.10475 Not tainted syzkaller #0 [ 2664.998457][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2665.008565][T10791] Call Trace: [ 2665.011891][T10791] [ 2665.014869][T10791] dump_stack_lvl+0x188/0x24e [ 2665.019696][T10791] ? show_regs_print_info+0x12/0x12 [ 2665.025043][T10791] ? load_image+0x410/0x410 [ 2665.029623][T10791] sysfs_warn_dup+0x8a/0xa0 [ 2665.034199][T10791] sysfs_do_create_link_sd+0xc0/0x110 [ 2665.039626][T10791] device_add+0x83b/0x1050 [ 2665.044105][T10791] wiphy_register+0x1d8b/0x2aa0 [ 2665.049025][T10791] ? cfg80211_event_work+0x40/0x40 [ 2665.054196][T10791] ? minstrel_ht_alloc+0x894/0xa20 [ 2665.059375][T10791] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2665.065509][T10791] ieee80211_register_hw+0x2d48/0x39f0 [ 2665.071058][T10791] ? ieee80211_register_hw+0xf61/0x39f0 [ 2665.076757][T10791] ? ieee80211_register_hw+0xf61/0x39f0 [ 2665.082378][T10791] ? ieee80211_tasklet_handler+0x20/0x20 [ 2665.088080][T10791] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2665.094121][T10791] ? __debug_object_init+0xed/0x440 [ 2665.099393][T10791] ? memset+0x1e/0x40 [ 2665.103442][T10791] ? __hrtimer_init+0x189/0x270 [ 2665.108471][T10791] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2665.114445][T10791] ? memcpy+0x3c/0x60 [ 2665.118489][T10791] hwsim_new_radio_nl+0xab7/0xc90 [ 2665.123689][T10791] genl_family_rcv_msg_doit+0x22f/0x350 [ 2665.129318][T10791] ? end_current_label_crit_section+0x170/0x170 [ 2665.135644][T10791] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2665.141620][T10791] ? bpf_lsm_capable+0x5/0x10 [ 2665.146357][T10791] ? security_capable+0x85/0xb0 [ 2665.151281][T10791] genl_rcv_msg+0x601/0x790 [ 2665.155856][T10791] ? genl_bind+0x360/0x360 [ 2665.160330][T10791] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2665.166921][T10791] netlink_rcv_skb+0x1ef/0x440 [ 2665.171759][T10791] ? genl_bind+0x360/0x360 [ 2665.176257][T10791] ? netlink_ack+0x1160/0x1160 [ 2665.181094][T10791] ? down_read+0x1a8/0x2d0 [ 2665.185560][T10791] genl_rcv+0x24/0x40 [ 2665.189649][T10791] netlink_unicast+0x7ad/0x920 [ 2665.194607][T10791] netlink_sendmsg+0x8ad/0xbd0 [ 2665.199493][T10791] ? netlink_getsockopt+0x550/0x550 [ 2665.204764][T10791] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2665.210376][T10791] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2665.215709][T10791] ? security_socket_sendmsg+0x7c/0xa0 [ 2665.221226][T10791] ? netlink_getsockopt+0x550/0x550 [ 2665.226488][T10791] ____sys_sendmsg+0x5ed/0x9a0 [ 2665.231320][T10791] ? __sys_sendmsg_sock+0x30/0x30 [ 2665.236406][T10791] ? __import_iovec+0x306/0x510 [ 2665.241338][T10791] ? import_iovec+0x6f/0xa0 [ 2665.245901][T10791] ___sys_sendmsg+0x2a2/0x360 [ 2665.250646][T10791] ? __sys_sendmsg+0x2a0/0x2a0 [ 2665.255529][T10791] __se_sys_sendmsg+0x1c3/0x2b0 [ 2665.260450][T10791] ? perf_trace_preemptirq_template+0x268/0x320 [ 2665.266794][T10791] ? __x64_sys_sendmsg+0x80/0x80 [ 2665.271817][T10791] ? lockdep_hardirqs_on+0x94/0x140 [ 2665.277076][T10791] do_syscall_64+0x4c/0xa0 [ 2665.281563][T10791] ? clear_bhb_loop+0x60/0xb0 [ 2665.286303][T10791] ? clear_bhb_loop+0x60/0xb0 [ 2665.291050][T10791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2665.297008][T10791] RIP: 0033:0x7f4bc9f9de59 [ 2665.301474][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2665.321129][T10791] RSP: 002b:00007f4bcaec3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2665.329604][T10791] RAX: ffffffffffffffda RBX: 00007f4bca226090 RCX: 00007f4bc9f9de59 [ 2665.337645][T10791] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2665.345845][T10791] RBP: 00007f4bca033e6f R08: 0000000000000000 R09: 0000000000000000 [ 2665.353866][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2665.361891][T10791] R13: 00007f4bca226128 R14: 00007f4bca226090 R15: 00007ffcd70f34a8 [ 2665.369943][T10791] [ 2665.434211][T10799] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10475'. [ 2665.496853][T10790] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10474'. [ 2665.584012][T10782] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10474'. [ 2665.624242][T10790] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2665.642962][T10790] CPU: 0 PID: 10790 Comm: syz.1.10474 Not tainted syzkaller #0 [ 2665.650611][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2665.660729][T10790] Call Trace: [ 2665.664053][T10790] [ 2665.667111][T10790] dump_stack_lvl+0x188/0x24e [ 2665.671860][T10790] ? show_regs_print_info+0x12/0x12 [ 2665.677124][T10790] ? load_image+0x410/0x410 [ 2665.681715][T10790] sysfs_warn_dup+0x8a/0xa0 [ 2665.686374][T10790] sysfs_do_create_link_sd+0xc0/0x110 [ 2665.691817][T10790] device_add+0x83b/0x1050 [ 2665.696309][T10790] wiphy_register+0x1d8b/0x2aa0 [ 2665.701261][T10790] ? cfg80211_event_work+0x40/0x40 [ 2665.706444][T10790] ? minstrel_ht_alloc+0x894/0xa20 [ 2665.711671][T10790] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2665.717891][T10790] ieee80211_register_hw+0x2d48/0x39f0 [ 2665.723447][T10790] ? ieee80211_register_hw+0xf61/0x39f0 [ 2665.729098][T10790] ? ieee80211_register_hw+0xf61/0x39f0 [ 2665.734892][T10790] ? ieee80211_tasklet_handler+0x20/0x20 [ 2665.740592][T10790] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2665.746534][T10790] ? __debug_object_init+0xed/0x440 [ 2665.751798][T10790] ? memset+0x1e/0x40 [ 2665.755833][T10790] ? __hrtimer_init+0x189/0x270 [ 2665.760742][T10790] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2665.766526][T10790] ? memcpy+0x3c/0x60 [ 2665.770620][T10790] hwsim_new_radio_nl+0xab7/0xc90 [ 2665.775729][T10790] genl_family_rcv_msg_doit+0x22f/0x350 [ 2665.781352][T10790] ? end_current_label_crit_section+0x170/0x170 [ 2665.787751][T10790] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2665.793769][T10790] ? bpf_lsm_capable+0x5/0x10 [ 2665.798506][T10790] ? security_capable+0x85/0xb0 [ 2665.803433][T10790] genl_rcv_msg+0x601/0x790 [ 2665.808047][T10790] ? lock_chain_count+0x20/0x20 [ 2665.812972][T10790] ? genl_bind+0x360/0x360 [ 2665.817448][T10790] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2665.823857][T10790] netlink_rcv_skb+0x1ef/0x440 [ 2665.828689][T10790] ? genl_bind+0x360/0x360 [ 2665.833255][T10790] ? netlink_ack+0x1160/0x1160 [ 2665.838086][T10790] ? down_read+0x1a8/0x2d0 [ 2665.842555][T10790] genl_rcv+0x24/0x40 [ 2665.846714][T10790] netlink_unicast+0x7ad/0x920 [ 2665.851646][T10790] netlink_sendmsg+0x8ad/0xbd0 [ 2665.856482][T10790] ? netlink_getsockopt+0x550/0x550 [ 2665.861747][T10790] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2665.867353][T10790] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2665.872694][T10790] ? security_socket_sendmsg+0x7c/0xa0 [ 2665.878208][T10790] ? netlink_getsockopt+0x550/0x550 [ 2665.883468][T10790] ____sys_sendmsg+0x5ed/0x9a0 [ 2665.888392][T10790] ? __sys_sendmsg_sock+0x30/0x30 [ 2665.893473][T10790] ? __import_iovec+0x306/0x510 [ 2665.898396][T10790] ? import_iovec+0x6f/0xa0 [ 2665.902960][T10790] ___sys_sendmsg+0x2a2/0x360 [ 2665.907703][T10790] ? __sys_sendmsg+0x2a0/0x2a0 [ 2665.912613][T10790] __se_sys_sendmsg+0x1c3/0x2b0 [ 2665.917561][T10790] ? __x64_sys_sendmsg+0x80/0x80 [ 2665.922685][T10790] ? lockdep_hardirqs_on+0x94/0x140 [ 2665.927945][T10790] do_syscall_64+0x4c/0xa0 [ 2665.932505][T10790] ? clear_bhb_loop+0x60/0xb0 [ 2665.937248][T10790] ? clear_bhb_loop+0x60/0xb0 [ 2665.941988][T10790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2665.947933][T10790] RIP: 0033:0x7f1fa479de59 [ 2665.952410][T10790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2665.972155][T10790] RSP: 002b:00007f1fa56db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2665.980984][T10790] RAX: ffffffffffffffda RBX: 00007f1fa4a26270 RCX: 00007f1fa479de59 [ 2665.989201][T10790] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2665.997226][T10790] RBP: 00007f1fa4833e6f R08: 0000000000000000 R09: 0000000000000000 [ 2666.005257][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2666.013288][T10790] R13: 00007f1fa4a26308 R14: 00007f1fa4a26270 R15: 00007fff1d6059c8 [ 2666.021337][T10790] [ 2666.541054][T10813] tc_dump_action: action bad kind [ 2666.885032][T10828] FAULT_INJECTION: forcing a failure. [ 2666.885032][T10828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2666.937243][T10828] CPU: 0 PID: 10828 Comm: syz.1.10482 Not tainted syzkaller #0 [ 2666.944874][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2666.954977][T10828] Call Trace: [ 2666.958372][T10828] [ 2666.961340][T10828] dump_stack_lvl+0x188/0x24e [ 2666.966082][T10828] ? show_regs_print_info+0x12/0x12 [ 2666.971475][T10828] ? load_image+0x410/0x410 [ 2666.976022][T10828] ? __lock_acquire+0x7c40/0x7c40 [ 2666.981116][T10828] ? ima_match_policy+0x211c/0x21b0 [ 2666.986360][T10828] should_fail_ex+0x390/0x4c0 [ 2666.991069][T10828] prepare_alloc_pages+0x1e1/0x5b0 [ 2666.996213][T10828] __alloc_pages+0x130/0x4f0 [ 2667.000853][T10828] ? zone_statistics+0x170/0x170 [ 2667.005842][T10828] ? register_lock_class+0xc0/0x870 [ 2667.011080][T10828] ? verify_lock_unused+0x140/0x140 [ 2667.016325][T10828] __folio_alloc+0xe/0x30 [ 2667.020694][T10828] vma_alloc_folio+0x499/0x900 [ 2667.025586][T10828] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 2667.031432][T10828] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 2667.037314][T10828] ? shmem_replace_folio+0xdc0/0xdc0 [ 2667.042754][T10828] ? xas_load+0x119/0x140 [ 2667.047122][T10828] ? __filemap_get_folio+0x10f/0xde0 [ 2667.052448][T10828] ? __filemap_get_folio+0xb43/0xde0 [ 2667.057762][T10828] ? __filemap_get_folio+0x10f/0xde0 [ 2667.063084][T10828] ? page_cache_prev_miss+0x380/0x380 [ 2667.068502][T10828] shmem_get_folio_gfp+0x1439/0x35e0 [ 2667.073840][T10828] shmem_write_begin+0xee/0x3f0 [ 2667.078819][T10828] generic_perform_write+0x2fa/0x5c0 [ 2667.084150][T10828] ? generic_file_direct_write+0x330/0x330 [ 2667.090087][T10828] ? __file_remove_privs+0x5f0/0x5f0 [ 2667.095397][T10828] ? rwsem_write_trylock+0x135/0x1c0 [ 2667.101144][T10828] ? clear_nonspinnable+0x60/0x60 [ 2667.106198][T10828] ? generic_write_checks_count+0x363/0x440 [ 2667.112131][T10828] __generic_file_write_iter+0x148/0x2a0 [ 2667.117805][T10828] generic_file_write_iter+0xab/0x2e0 [ 2667.123212][T10828] vfs_write+0x482/0x9a0 [ 2667.127491][T10828] ? file_end_write+0x250/0x250 [ 2667.132375][T10828] ? __fget_files+0x3fc/0x460 [ 2667.137093][T10828] ? __fdget_pos+0x2ae/0x360 [ 2667.141724][T10828] ? ksys_write+0x70/0x260 [ 2667.146176][T10828] ksys_write+0x14d/0x260 [ 2667.150807][T10828] ? __ia32_sys_read+0x80/0x80 [ 2667.155610][T10828] ? lockdep_hardirqs_on+0x94/0x140 [ 2667.160831][T10828] do_syscall_64+0x4c/0xa0 [ 2667.165278][T10828] ? clear_bhb_loop+0x60/0xb0 [ 2667.169988][T10828] ? clear_bhb_loop+0x60/0xb0 [ 2667.174757][T10828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2667.180680][T10828] RIP: 0033:0x7f1fa479de59 [ 2667.185119][T10828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2667.204759][T10828] RSP: 002b:00007f1fa573e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2667.213208][T10828] RAX: ffffffffffffffda RBX: 00007f1fa4a25fa0 RCX: 00007f1fa479de59 [ 2667.221219][T10828] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 2667.229214][T10828] RBP: 00007f1fa573e090 R08: 0000000000000000 R09: 0000000000000000 [ 2667.237380][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2667.245381][T10828] R13: 00007f1fa4a26038 R14: 00007f1fa4a25fa0 R15: 00007fff1d6059c8 [ 2667.253397][T10828] [ 2667.391315][T10832] device lo entered promiscuous mode [ 2667.506943][T10835] netlink: 'syz.3.10485': attribute type 30 has an invalid length. [ 2667.561635][T10835] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10485'. [ 2667.861841][T10841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10487'. [ 2667.939120][T10841] netlink: 'syz.4.10487': attribute type 2 has an invalid length. [ 2667.995085][T10841] netlink: 'syz.4.10487': attribute type 1 has an invalid length. [ 2668.023076][T10841] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.10487'. [ 2668.066306][T10842] netlink: 'syz.4.10487': attribute type 6 has an invalid length. [ 2668.539466][T10848] device syzkaller0 entered promiscuous mode [ 2671.663627][T10854] netlink: 'syz.3.10490': attribute type 10 has an invalid length. [ 2673.235369][T10888] netlink: 'syz.3.10500': attribute type 30 has an invalid length. [ 2673.292284][T10888] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10500'. [ 2674.139098][T10904] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10507'. [ 2674.227523][T10904] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10507'. [ 2674.283557][T10907] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10507'. [ 2674.361735][T10910] netlink: 'syz.2.10519': attribute type 30 has an invalid length. [ 2674.387314][T10908] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10507'. [ 2674.516405][T10910] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10519'. [ 2677.225665][T10962] netlink: 'syz.4.10523': attribute type 30 has an invalid length. [ 2677.244769][T10964] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10523'. [ 2677.295009][T10968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10526'. [ 2677.443152][T10968] netlink: 'syz.1.10526': attribute type 22 has an invalid length. [ 2677.467776][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10526'. [ 2677.581828][T10972] netlink: 'syz.0.10524': attribute type 10 has an invalid length. [ 2677.652378][T10972] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 2677.839926][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10528'. [ 2678.127697][T10979] netlink: 'syz.1.10528': attribute type 22 has an invalid length. [ 2679.080912][T10994] netlink: 'syz.4.10533': attribute type 30 has an invalid length. [ 2679.103217][T10995] __nla_validate_parse: 1 callbacks suppressed [ 2679.103238][T10995] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10533'. [ 2679.819083][T11006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10538'. [ 2679.885750][T11009] netlink: 'syz.2.10538': attribute type 10 has an invalid length. [ 2679.930687][T11009] device lo left promiscuous mode [ 2679.976154][T11009] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2680.686746][T11015] netlink: 'syz.4.10540': attribute type 7 has an invalid length. [ 2680.960952][T11024] netlink: 'syz.1.10543': attribute type 30 has an invalid length. [ 2681.049033][T11024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10543'. [ 2683.508772][T11066] netlink: 'syz.2.10556': attribute type 33 has an invalid length. [ 2683.543712][T11067] net_ratelimit: 339 callbacks suppressed [ 2683.543776][T11067] sock: sock_set_timeout: `syz.0.10557' (pid 11067) tries to set negative timeout [ 2683.587518][T11066] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10556'. [ 2683.638519][T11066] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2683.665264][T11068] sock: sock_set_timeout: `syz.0.10557' (pid 11068) tries to set negative timeout [ 2684.722472][T11091] netlink: 'syz.0.10563': attribute type 2 has an invalid length. [ 2684.798029][T11091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10563'. [ 2685.398722][T11110] netlink: 'syz.1.10571': attribute type 29 has an invalid length. [ 2685.443057][T11110] netlink: 'syz.1.10571': attribute type 29 has an invalid length. [ 2685.473174][T11113] netlink: 'syz.1.10571': attribute type 29 has an invalid length. [ 2685.696494][T11118] netlink: 'syz.3.10572': attribute type 30 has an invalid length. [ 2685.775865][T11118] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10572'. [ 2686.429414][T11123] device syzkaller0 entered promiscuous mode [ 2690.647250][T11138] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10579'. [ 2690.661112][T11140] netlink: 'syz.2.10580': attribute type 2 has an invalid length. [ 2690.680113][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10580'. [ 2691.151719][T11178] netlink: 'syz.0.10591': attribute type 33 has an invalid length. [ 2691.191651][T11178] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10591'. [ 2691.221299][T11178] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2691.996288][T11199] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10598'. [ 2692.122964][T11199] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2692.188961][T11199] CPU: 0 PID: 11199 Comm: syz.1.10598 Not tainted syzkaller #0 [ 2692.196691][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2692.206811][T11199] Call Trace: [ 2692.210137][T11199] [ 2692.213120][T11199] dump_stack_lvl+0x188/0x24e [ 2692.217867][T11199] ? show_regs_print_info+0x12/0x12 [ 2692.223124][T11199] ? load_image+0x410/0x410 [ 2692.227701][T11199] sysfs_warn_dup+0x8a/0xa0 [ 2692.232351][T11199] sysfs_do_create_link_sd+0xc0/0x110 [ 2692.237783][T11199] device_add+0x83b/0x1050 [ 2692.242266][T11199] wiphy_register+0x1d8b/0x2aa0 [ 2692.247199][T11199] ? cfg80211_event_work+0x40/0x40 [ 2692.252370][T11199] ? minstrel_ht_alloc+0x894/0xa20 [ 2692.257580][T11199] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2692.263723][T11199] ieee80211_register_hw+0x2d48/0x39f0 [ 2692.269310][T11199] ? ieee80211_register_hw+0xf61/0x39f0 [ 2692.274930][T11199] ? ieee80211_register_hw+0xf61/0x39f0 [ 2692.280557][T11199] ? ieee80211_tasklet_handler+0x20/0x20 [ 2692.286519][T11199] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2692.292479][T11199] ? __debug_object_init+0xed/0x440 [ 2692.297750][T11199] ? memset+0x1e/0x40 [ 2692.301783][T11199] ? __hrtimer_init+0x189/0x270 [ 2692.306727][T11199] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2692.312528][T11199] ? memcpy+0x3c/0x60 [ 2692.316574][T11199] hwsim_new_radio_nl+0xab7/0xc90 [ 2692.321675][T11199] genl_family_rcv_msg_doit+0x22f/0x350 [ 2692.327381][T11199] ? end_current_label_crit_section+0x170/0x170 [ 2692.333698][T11199] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2692.339675][T11199] ? bpf_lsm_capable+0x5/0x10 [ 2692.344412][T11199] ? security_capable+0x85/0xb0 [ 2692.349342][T11199] genl_rcv_msg+0x601/0x790 [ 2692.353906][T11199] ? lock_chain_count+0x20/0x20 [ 2692.358824][T11199] ? genl_bind+0x360/0x360 [ 2692.363328][T11199] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2692.369776][T11199] netlink_rcv_skb+0x1ef/0x440 [ 2692.374621][T11199] ? genl_bind+0x360/0x360 [ 2692.379123][T11199] ? netlink_ack+0x1160/0x1160 [ 2692.383970][T11199] ? down_read+0x1a8/0x2d0 [ 2692.388488][T11199] genl_rcv+0x24/0x40 [ 2692.392539][T11199] netlink_unicast+0x7ad/0x920 [ 2692.397379][T11199] netlink_sendmsg+0x8ad/0xbd0 [ 2692.402240][T11199] ? netlink_getsockopt+0x550/0x550 [ 2692.407508][T11199] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2692.413474][T11199] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2692.418905][T11199] ? security_socket_sendmsg+0x7c/0xa0 [ 2692.424438][T11199] ? netlink_getsockopt+0x550/0x550 [ 2692.429707][T11199] ____sys_sendmsg+0x5ed/0x9a0 [ 2692.434895][T11199] ? __sys_sendmsg_sock+0x30/0x30 [ 2692.440076][T11199] ? __import_iovec+0x306/0x510 [ 2692.445041][T11199] ? import_iovec+0x6f/0xa0 [ 2692.449627][T11199] ___sys_sendmsg+0x2a2/0x360 [ 2692.454551][T11199] ? __sys_sendmsg+0x2a0/0x2a0 [ 2692.459450][T11199] __se_sys_sendmsg+0x1c3/0x2b0 [ 2692.464374][T11199] ? __x64_sys_sendmsg+0x80/0x80 [ 2692.469401][T11199] ? lockdep_hardirqs_on+0x94/0x140 [ 2692.474681][T11199] do_syscall_64+0x4c/0xa0 [ 2692.479169][T11199] ? clear_bhb_loop+0x60/0xb0 [ 2692.483927][T11199] ? clear_bhb_loop+0x60/0xb0 [ 2692.488699][T11199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2692.494688][T11199] RIP: 0033:0x7f1fa479de59 [ 2692.499179][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2692.519066][T11199] RSP: 002b:00007f1fa56db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2692.527719][T11199] RAX: ffffffffffffffda RBX: 00007f1fa4a26270 RCX: 00007f1fa479de59 [ 2692.535974][T11199] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2692.544138][T11199] RBP: 00007f1fa4833e6f R08: 0000000000000000 R09: 0000000000000000 [ 2692.552184][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2692.560214][T11199] R13: 00007f1fa4a26308 R14: 00007f1fa4a26270 R15: 00007fff1d6059c8 [ 2692.568273][T11199] [ 2692.693959][T11215] netlink: 'syz.3.10599': attribute type 2 has an invalid length. [ 2692.705554][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10599'. [ 2692.768711][T11199] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10598'. [ 2692.996141][T11225] netlink: 'syz.2.10604': attribute type 30 has an invalid length. [ 2693.082049][T11225] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10604'. [ 2693.225471][T11234] netlink: 'syz.3.10607': attribute type 10 has an invalid length. [ 2693.757402][T11244] netlink: 'syz.3.10609': attribute type 30 has an invalid length. [ 2693.844441][T11244] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10609'. [ 2694.785830][T11263] netlink: 'syz.4.10613': attribute type 2 has an invalid length. [ 2694.807171][T11263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10613'. [ 2695.119812][T11276] netlink: 'syz.3.10616': attribute type 10 has an invalid length. [ 2696.171952][T11300] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10623'. [ 2696.254127][T11306] netlink: 'syz.3.10624': attribute type 2 has an invalid length. [ 2696.282127][T11306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10624'. [ 2696.308977][T11300] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2696.316973][T11300] CPU: 0 PID: 11300 Comm: syz.1.10623 Not tainted syzkaller #0 [ 2696.324575][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2696.334860][T11300] Call Trace: [ 2696.338320][T11300] [ 2696.341378][T11300] dump_stack_lvl+0x188/0x24e [ 2696.346108][T11300] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2696.352341][T11300] ? show_regs_print_info+0x12/0x12 [ 2696.357616][T11300] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2696.363839][T11300] sysfs_warn_dup+0x8a/0xa0 [ 2696.368397][T11300] sysfs_do_create_link_sd+0xc0/0x110 [ 2696.373831][T11300] device_add+0x83b/0x1050 [ 2696.378293][T11300] wiphy_register+0x1d8b/0x2aa0 [ 2696.383218][T11300] ? cfg80211_event_work+0x40/0x40 [ 2696.388378][T11300] ? minstrel_ht_alloc+0x894/0xa20 [ 2696.393549][T11300] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2696.399658][T11300] ieee80211_register_hw+0x2d48/0x39f0 [ 2696.405170][T11300] ? ieee80211_register_hw+0xf61/0x39f0 [ 2696.410750][T11300] ? ieee80211_register_hw+0xf61/0x39f0 [ 2696.416336][T11300] ? ieee80211_tasklet_handler+0x20/0x20 [ 2696.422094][T11300] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2696.428197][T11300] ? __debug_object_init+0xed/0x440 [ 2696.433447][T11300] ? memset+0x1e/0x40 [ 2696.437460][T11300] ? __hrtimer_init+0x189/0x270 [ 2696.442341][T11300] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2696.448108][T11300] ? memcpy+0x3c/0x60 [ 2696.452126][T11300] hwsim_new_radio_nl+0xab7/0xc90 [ 2696.457232][T11300] genl_family_rcv_msg_doit+0x22f/0x350 [ 2696.462811][T11300] ? end_current_label_crit_section+0x170/0x170 [ 2696.469096][T11300] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2696.475035][T11300] ? bpf_lsm_capable+0x5/0x10 [ 2696.479751][T11300] ? security_capable+0x85/0xb0 [ 2696.484649][T11300] genl_rcv_msg+0x601/0x790 [ 2696.489207][T11300] ? genl_bind+0x360/0x360 [ 2696.493662][T11300] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2696.500032][T11300] netlink_rcv_skb+0x1ef/0x440 [ 2696.504845][T11300] ? genl_bind+0x360/0x360 [ 2696.509305][T11300] ? netlink_ack+0x1160/0x1160 [ 2696.514108][T11300] ? down_read+0x1a8/0x2d0 [ 2696.518564][T11300] genl_rcv+0x24/0x40 [ 2696.522587][T11300] netlink_unicast+0x7ad/0x920 [ 2696.527411][T11300] netlink_sendmsg+0x8ad/0xbd0 [ 2696.532241][T11300] ? netlink_getsockopt+0x550/0x550 [ 2696.537495][T11300] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2696.543087][T11300] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2696.548406][T11300] ? security_socket_sendmsg+0x7c/0xa0 [ 2696.553896][T11300] ? netlink_getsockopt+0x550/0x550 [ 2696.559129][T11300] ____sys_sendmsg+0x5ed/0x9a0 [ 2696.564041][T11300] ? __sys_sendmsg_sock+0x30/0x30 [ 2696.569119][T11300] ? __import_iovec+0x306/0x510 [ 2696.574013][T11300] ? import_iovec+0x6f/0xa0 [ 2696.578555][T11300] ___sys_sendmsg+0x2a2/0x360 [ 2696.583278][T11300] ? __sys_sendmsg+0x2a0/0x2a0 [ 2696.588100][T11300] ? ktime_get+0x7b/0x270 [ 2696.592489][T11300] __se_sys_sendmsg+0x1c3/0x2b0 [ 2696.597380][T11300] ? __x64_sys_sendmsg+0x80/0x80 [ 2696.602367][T11300] ? lockdep_hardirqs_on+0x94/0x140 [ 2696.607593][T11300] do_syscall_64+0x4c/0xa0 [ 2696.612043][T11300] ? clear_bhb_loop+0x60/0xb0 [ 2696.616750][T11300] ? clear_bhb_loop+0x60/0xb0 [ 2696.621463][T11300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2696.627594][T11300] RIP: 0033:0x7f1fa479de59 [ 2696.632122][T11300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2696.652193][T11300] RSP: 002b:00007f1fa571d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2696.660647][T11300] RAX: ffffffffffffffda RBX: 00007f1fa4a26090 RCX: 00007f1fa479de59 [ 2696.668645][T11300] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2696.676657][T11300] RBP: 00007f1fa4833e6f R08: 0000000000000000 R09: 0000000000000000 [ 2696.684848][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2696.692842][T11300] R13: 00007f1fa4a26128 R14: 00007f1fa4a26090 R15: 00007fff1d6059c8 [ 2696.700870][T11300] [ 2696.804533][T11310] netlink: 'syz.2.10627': attribute type 30 has an invalid length. [ 2696.864359][T11310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10627'. [ 2697.200968][T11295] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10623'. [ 2698.801942][T11352] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10639'. [ 2699.161060][T11358] netlink: 'syz.2.10640': attribute type 2 has an invalid length. [ 2699.188573][T11358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10640'. [ 2699.761197][T11383] netlink: 'syz.1.10650': attribute type 30 has an invalid length. [ 2699.799415][T11383] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10650'. [ 2700.017147][ T4602] Bluetooth: hci1: command 0x0406 tx timeout [ 2700.785952][T11408] netlink: 'syz.4.10659': attribute type 10 has an invalid length. [ 2705.062389][T11451] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10674'. [ 2705.108359][T11453] netlink: 'syz.3.10672': attribute type 30 has an invalid length. [ 2705.183924][T11453] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10672'. [ 2705.920398][T11446] netlink: 'syz.1.10671': attribute type 10 has an invalid length. [ 2706.117687][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10671'. [ 2706.145935][T11446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2706.476147][T11479] netlink: 'syz.4.10680': attribute type 10 has an invalid length. [ 2706.513406][T11479] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 2707.296630][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10688'. [ 2707.359285][T11501] FAULT_INJECTION: forcing a failure. [ 2707.359285][T11501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2707.412346][T11501] CPU: 1 PID: 11501 Comm: syz.3.10688 Not tainted syzkaller #0 [ 2707.419972][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2707.430057][T11501] Call Trace: [ 2707.433377][T11501] [ 2707.436401][T11501] dump_stack_lvl+0x188/0x24e [ 2707.441118][T11501] ? show_regs_print_info+0x12/0x12 [ 2707.446609][T11501] ? load_image+0x410/0x410 [ 2707.451144][T11501] ? __lock_acquire+0x7c40/0x7c40 [ 2707.456209][T11501] ? snprintf+0xe5/0x140 [ 2707.460516][T11501] should_fail_ex+0x390/0x4c0 [ 2707.465233][T11501] _copy_to_user+0x2c/0x130 [ 2707.469789][T11501] simple_read_from_buffer+0xe3/0x150 [ 2707.475196][T11501] proc_fail_nth_read+0x1a6/0x220 [ 2707.480247][T11501] ? proc_fault_inject_write+0x310/0x310 [ 2707.485914][T11501] ? fsnotify_perm+0x248/0x550 [ 2707.490706][T11501] ? proc_fault_inject_write+0x310/0x310 [ 2707.496378][T11501] vfs_read+0x2db/0x960 [ 2707.500572][T11501] ? kernel_read+0x1e0/0x1e0 [ 2707.505212][T11501] ? __fget_files+0x28/0x460 [ 2707.510010][T11501] ? __fget_files+0x3fc/0x460 [ 2707.514727][T11501] ? __fdget_pos+0x2ae/0x360 [ 2707.519812][T11501] ? ksys_read+0x70/0x260 [ 2707.524284][T11501] ksys_read+0x14d/0x260 [ 2707.528570][T11501] ? vfs_write+0x9a0/0x9a0 [ 2707.533367][T11501] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2707.539290][T11501] do_syscall_64+0x4c/0xa0 [ 2707.543843][T11501] ? clear_bhb_loop+0x60/0xb0 [ 2707.548901][T11501] ? clear_bhb_loop+0x60/0xb0 [ 2707.553615][T11501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2707.559545][T11501] RIP: 0033:0x7fb82595e68e [ 2707.563986][T11501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2707.583618][T11501] RSP: 002b:00007fb826885fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2707.592056][T11501] RAX: ffffffffffffffda RBX: 00007fb8268866c0 RCX: 00007fb82595e68e [ 2707.600069][T11501] RDX: 000000000000000f RSI: 00007fb8268860a0 RDI: 000000000000000b [ 2707.608162][T11501] RBP: 00007fb826886090 R08: 0000000000000000 R09: 0000000000000000 [ 2707.616157][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2707.624331][T11501] R13: 00007fb825c26038 R14: 00007fb825c25fa0 R15: 00007ffcb0bf9a58 [ 2707.632339][T11501] [ 2707.656846][T11507] netlink: 'syz.4.10691': attribute type 10 has an invalid length. [ 2707.677499][T11507] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10691'. [ 2708.852636][T11515] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10693'. [ 2709.139532][T11538] netlink: 'syz.1.10698': attribute type 30 has an invalid length. [ 2709.285810][T11538] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10698'. [ 2709.996572][T11557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10704'. [ 2710.051656][T11557] device caif0 entered promiscuous mode [ 2710.213286][T11557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2713.149816][T11627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10729'. [ 2713.309823][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.316241][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.876090][T11676] netlink: 'syz.0.10744': attribute type 30 has an invalid length. [ 2714.936926][T11676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10744'. [ 2716.305586][T11701] netlink: 'syz.4.10751': attribute type 2 has an invalid length. [ 2716.334311][T11701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10751'. [ 2716.676267][T11710] netlink: 'syz.3.10756': attribute type 10 has an invalid length. [ 2716.727735][T11710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10756'. [ 2716.794904][T11710] device team0 entered promiscuous mode [ 2716.842799][T11710] device team_slave_0 entered promiscuous mode [ 2716.869405][T11710] device team_slave_1 entered promiscuous mode [ 2716.876556][T11710] bridge0: port 4(team0) entered blocking state [ 2716.932090][T11710] bridge0: port 4(team0) entered disabled state [ 2716.956341][T11710] bridge0: port 4(team0) entered blocking state [ 2716.962813][T11710] bridge0: port 4(team0) entered forwarding state [ 2717.000747][T11714] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.10754'. [ 2717.709154][T11728] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10761'. [ 2717.769348][T11730] device veth1_macvtap left promiscuous mode [ 2717.832065][T11731] device veth1_macvtap entered promiscuous mode [ 2717.907260][T11731] device macsec0 entered promiscuous mode [ 2718.377901][T11746] netlink: 'syz.0.10764': attribute type 2 has an invalid length. [ 2718.479396][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10764'. [ 2719.353019][T11759] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10772'. [ 2719.550362][T11766] netlink: 'syz.2.10775': attribute type 30 has an invalid length. [ 2719.591097][T11769] netlink: 'syz.0.10774': attribute type 33 has an invalid length. [ 2719.624478][T11769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10774'. [ 2719.653484][T11766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10775'. [ 2719.828136][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10777'. [ 2720.081531][T11777] netlink: 'syz.3.10778': attribute type 2 has an invalid length. [ 2720.117271][T11777] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10778'. [ 2720.226754][T11783] netlink: 'syz.0.10779': attribute type 2 has an invalid length. [ 2720.277096][T11783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10779'. [ 2720.456905][T11789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10783'. [ 2720.484462][T11789] netlink: 'syz.3.10783': attribute type 21 has an invalid length. [ 2720.494434][T11789] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.10783'. [ 2720.994732][T11800] netlink: 'syz.2.10786': attribute type 3 has an invalid length. [ 2721.085708][T11800] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10786'. [ 2721.426052][T11814] netlink: 'syz.4.10790': attribute type 33 has an invalid length. [ 2721.858207][T11828] netlink: 'syz.1.10794': attribute type 2 has an invalid length. [ 2722.086637][T11836] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2722.419956][T11833] device syzkaller0 entered promiscuous mode [ 2722.854844][T11855] ------------[ cut here ]------------ [ 2722.860834][T11855] WARNING: CPU: 0 PID: 11855 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 2722.870732][T11855] Modules linked in: [ 2722.874773][T11855] CPU: 0 PID: 11855 Comm: syz.3.10804 Not tainted syzkaller #0 [ 2722.882460][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2722.892644][T11855] RIP: 0010:perf_pending_task+0x353/0x480 [ 2722.898747][T11855] Code: e8 62 87 da ff 84 db 75 10 e8 f9 84 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e9 84 da ff e8 bc e6 58 ff eb e9 e8 dd 84 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 2722.918831][T11855] RSP: 0018:ffffc900050f78e8 EFLAGS: 00010293 [ 2722.924965][T11855] RAX: ffffffff81a79cc3 RBX: ffff88807c9a1c58 RCX: ffff888026dd9e00 [ 2722.933197][T11855] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2722.941335][T11855] RBP: ffff88807c9a1a20 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 2722.949621][T11855] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff888026dd9e00 [ 2722.957737][T11855] R13: ffff88805888f960 R14: 0000000000000000 R15: 1ffff1100f934344 [ 2722.965782][T11855] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2722.974859][T11855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2722.981638][T11855] CR2: 0000000000000000 CR3: 000000005d73f000 CR4: 00000000003506f0 [ 2722.989714][T11855] DR0: 0000000000000004 DR1: 0000200000000300 DR2: 0000000000000000 [ 2722.997847][T11855] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2723.005890][T11855] Call Trace: [ 2723.009373][T11855] [ 2723.012365][T11855] task_work_run+0x1d0/0x260 [ 2723.017144][T11855] ? task_work_cancel+0x220/0x220 [ 2723.022407][T11855] ? do_raw_spin_unlock+0x11d/0x230 [ 2723.027694][T11855] do_exit+0x9d5/0x2570 [ 2723.031922][T11855] ? cgroup_freezing+0x1c/0x340 [ 2723.036921][T11855] ? put_task_struct+0x80/0x80 [ 2723.041853][T11855] ? ct_nmi_exit+0x145/0x1c0 [ 2723.046506][T11855] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2723.052613][T11855] ? lock_chain_count+0x20/0x20 [ 2723.057635][T11855] do_group_exit+0x229/0x2e0 [ 2723.062328][T11855] ? lockdep_hardirqs_on+0x94/0x140 [ 2723.067661][T11855] get_signal+0x1259/0x1340 [ 2723.072723][T11855] arch_do_signal_or_restart+0xc4/0x1310 [ 2723.078755][T11855] ? do_futex+0x2e2/0x320 [ 2723.083231][T11855] ? get_sigframe_size+0x10/0x10 [ 2723.088314][T11855] ? exit_to_user_mode_loop+0x3b/0x110 [ 2723.093850][T11855] exit_to_user_mode_loop+0x70/0x110 [ 2723.099305][T11855] exit_to_user_mode_prepare+0xee/0x180 [ 2723.104917][T11855] syscall_exit_to_user_mode+0x16/0x40 [ 2723.110517][T11855] do_syscall_64+0x58/0xa0 [ 2723.114994][T11855] ? clear_bhb_loop+0x60/0xb0 [ 2723.119807][T11855] ? clear_bhb_loop+0x60/0xb0 [ 2723.124557][T11855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2723.130660][T11855] RIP: 0033:0x7fb82599de59 [ 2723.135574][T11855] Code: Unable to access opcode bytes at 0x7fb82599de2f. [ 2723.142925][T11855] RSP: 002b:00007fb8268650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2723.151447][T11855] RAX: 0000000000000001 RBX: 00007fb825c26098 RCX: 00007fb82599de59 [ 2723.159548][T11855] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb825c2609c [ 2723.167618][T11855] RBP: 00007fb825c26090 R08: 002f91a10fde1a7e R09: 0000000000000000 [ 2723.175644][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2723.183729][T11855] R13: 00007fb825c26128 R14: 00007ffcb0bf9970 R15: 00007ffcb0bf9a58 [ 2723.191840][T11855] [ 2723.194925][T11855] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2723.202232][T11855] CPU: 0 PID: 11855 Comm: syz.3.10804 Not tainted syzkaller #0 [ 2723.209804][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2723.219883][T11855] Call Trace: [ 2723.223193][T11855] [ 2723.226146][T11855] dump_stack_lvl+0x188/0x24e [ 2723.230861][T11855] ? memcpy+0x3c/0x60 [ 2723.234864][T11855] ? show_regs_print_info+0x12/0x12 [ 2723.240178][T11855] ? load_image+0x410/0x410 [ 2723.244714][T11855] panic+0x2d3/0x710 [ 2723.248632][T11855] ? bpf_jit_dump+0xd0/0xd0 [ 2723.253169][T11855] __warn+0x2f8/0x4f0 [ 2723.257173][T11855] ? perf_pending_task+0x353/0x480 [ 2723.262328][T11855] ? perf_pending_task+0x353/0x480 [ 2723.267553][T11855] report_bug+0x2ba/0x4f0 [ 2723.271994][T11855] ? perf_pending_task+0x353/0x480 [ 2723.277141][T11855] handle_bug+0x3a/0x70 [ 2723.281330][T11855] exc_invalid_op+0x16/0x40 [ 2723.285864][T11855] asm_exc_invalid_op+0x16/0x20 [ 2723.290740][T11855] RIP: 0010:perf_pending_task+0x353/0x480 [ 2723.296496][T11855] Code: e8 62 87 da ff 84 db 75 10 e8 f9 84 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e9 84 da ff e8 bc e6 58 ff eb e9 e8 dd 84 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 2723.316217][T11855] RSP: 0018:ffffc900050f78e8 EFLAGS: 00010293 [ 2723.322314][T11855] RAX: ffffffff81a79cc3 RBX: ffff88807c9a1c58 RCX: ffff888026dd9e00 [ 2723.330313][T11855] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2723.338302][T11855] RBP: ffff88807c9a1a20 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 2723.346377][T11855] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff888026dd9e00 [ 2723.354372][T11855] R13: ffff88805888f960 R14: 0000000000000000 R15: 1ffff1100f934344 [ 2723.362372][T11855] ? perf_pending_task+0x353/0x480 [ 2723.367520][T11855] ? perf_pending_task+0x353/0x480 [ 2723.372657][T11855] task_work_run+0x1d0/0x260 [ 2723.377279][T11855] ? task_work_cancel+0x220/0x220 [ 2723.382331][T11855] ? do_raw_spin_unlock+0x11d/0x230 [ 2723.387557][T11855] do_exit+0x9d5/0x2570 [ 2723.391936][T11855] ? cgroup_freezing+0x1c/0x340 [ 2723.396827][T11855] ? put_task_struct+0x80/0x80 [ 2723.401637][T11855] ? ct_nmi_exit+0x145/0x1c0 [ 2723.406256][T11855] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2723.412270][T11855] ? lock_chain_count+0x20/0x20 [ 2723.417157][T11855] do_group_exit+0x229/0x2e0 [ 2723.421778][T11855] ? lockdep_hardirqs_on+0x94/0x140 [ 2723.427001][T11855] get_signal+0x1259/0x1340 [ 2723.431562][T11855] arch_do_signal_or_restart+0xc4/0x1310 [ 2723.437241][T11855] ? do_futex+0x2e2/0x320 [ 2723.441680][T11855] ? get_sigframe_size+0x10/0x10 [ 2723.446750][T11855] ? exit_to_user_mode_loop+0x3b/0x110 [ 2723.452250][T11855] exit_to_user_mode_loop+0x70/0x110 [ 2723.457572][T11855] exit_to_user_mode_prepare+0xee/0x180 [ 2723.463154][T11855] syscall_exit_to_user_mode+0x16/0x40 [ 2723.468635][T11855] do_syscall_64+0x58/0xa0 [ 2723.473079][T11855] ? clear_bhb_loop+0x60/0xb0 [ 2723.477787][T11855] ? clear_bhb_loop+0x60/0xb0 [ 2723.482495][T11855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2723.488417][T11855] RIP: 0033:0x7fb82599de59 [ 2723.492854][T11855] Code: Unable to access opcode bytes at 0x7fb82599de2f. [ 2723.499885][T11855] RSP: 002b:00007fb8268650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2723.508408][T11855] RAX: 0000000000000001 RBX: 00007fb825c26098 RCX: 00007fb82599de59 [ 2723.516414][T11855] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb825c2609c [ 2723.524603][T11855] RBP: 00007fb825c26090 R08: 002f91a10fde1a7e R09: 0000000000000000 [ 2723.532711][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2723.540892][T11855] R13: 00007fb825c26128 R14: 00007ffcb0bf9970 R15: 00007ffcb0bf9a58 [ 2723.549076][T11855] [ 2723.552705][T11855] Kernel Offset: disabled [ 2723.557072][T11855] Rebooting in 86400 seconds..