last executing test programs: 50.36620623s ago: executing program 2 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) recvmsg(r4, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 50.182728999s ago: executing program 1 (id=967): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab070004000523"], 0xfe33) 50.023285955s ago: executing program 1 (id=968): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.kill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0xc, 0x4, 0x0, 0x40, 0x10}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="185000ffffffff00000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000940)="c6", 0x1}], 0x1}, 0x4040004) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@cred={{0x1c}}], 0x20}, 0x40000020) 49.239157294s ago: executing program 2 (id=969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) recvmsg(r4, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 48.575006891s ago: executing program 3 (id=971): bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xc8}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xcbf9, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) 48.498720279s ago: executing program 3 (id=972): r0 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005a00", @ANYRES64], 0xfe33) 48.241420255s ago: executing program 1 (id=974): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000001040), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x10) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_clone(0x4008000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fb, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xffeb}], 0x1}, 0x0) 48.219923357s ago: executing program 3 (id=975): r0 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005a00", @ANYRES64], 0xfe33) (fail_nth: 1) 47.790315501s ago: executing program 1 (id=976): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.kill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0xc, 0x4, 0x0, 0x40, 0x10}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="185000ffffffff00000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@cred={{0x1c}}], 0x20}, 0x40000020) 47.789972781s ago: executing program 2 (id=977): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab070004000523"], 0xfe33) 47.682688271s ago: executing program 0 (id=978): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x27) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x49c269f8, @local}, 0x80, 0x0}, 0x240000c1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f0000000280)=@raw=[@alu={0x7, 0x0, 0x2, 0xb, 0x6, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbd}, @ldst={0x1, 0x0, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}], &(0x7f00000002c0)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r5, r1, 0xffffffffffffffff, r1, r5, r5, r1, r5], &(0x7f00000007c0)=[{0x4, 0x1, 0x6, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000001c0)='bcache_alloc_fail\x00', r7, 0x0, 0xf85}, 0x18) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x55) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000dc00000000000511000000000000000000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018"], 0x0, 0x96}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r9}, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300000000000000) 47.258235325s ago: executing program 2 (id=979): socketpair(0x2, 0x800, 0x8080, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x391, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x2}, 0x100904, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1}, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000007140)={&(0x7f0000002ac0)=@in6={0xa, 0x4e24, 0x40000, @local, 0x4}, 0x80, 0x0}, 0x4000845) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000880)="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", 0xff0}, {&(0x7f0000001b80)="ce6e51c3e5ea4384f47cdfb7adc5f364d01d7437147868719475ff0246e60bcf90bbaa340381cffbf92e88fc60e03c7b8059770f47b66221dcf23864b69604beeffcea6f335effe9f57e7d3c395930df85210c4b075f0b6539ae702333bf548981afe07628b8c6b3b588a80c0d3968191c4dfe1a04aad648309efbdff4e1c2db49a230765fa0", 0x86}, {&(0x7f0000001880)="5c9050aa52db47886c63b54a81d0dc9108eaa5619ca52609ca7dea0890cda7d340e76421c08ce023a33c35203bb23dc06da34334ce25d45232e84f27bb54214d4dd0ac2755fb17027c096ea064d80b8a7b53b431f46895325b88428df0f4705f88921a378485b47e35d04878f97811fd22c94632145f6ae00b806abf4508371496b2f8d6ab978ef5b5bed0c5d6e835d4e7fc9530120933613f40f2bab09649a938ecfad988b5a3ed2db480", 0xab}, {&(0x7f0000001940)="c616827bf58039480302c3c5552fd8ebdc530008e59ea1b0186bc10b377a8abf8633eec84fe77c116f1d325637101918f1226a6500452403a623aa28bb6aeae66130afba140c30e2d65926333e7f24894388815347018759a0d4f9ba92a055f89f581c12c5", 0x65}, {&(0x7f0000001a40)}], 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYBLOB="be9e5bb227de28a44ddf2cd0a16a992636271dcbc41ccf4575b1e5e1acdf45e9444b2bbbf6da18e233e2b7670c56349792b4e95a760dc049fc4ff43ae7e9d0280d86df", @ANYBLOB="000000001400000800a04921c0f08469000000010000000143da02cb9c21339f7f6be952305e38e474d80c6e4fa9b1f2454e4caad2a6e284b3dda351222f63f9fb5f9aab6f9ca466a1093f539c4fd356470b36ff6f4c91030ffaeb0d2b68ac341f117c75287965acfaf60d29a395a44850ef78a377", @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES8, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2c0000000000000001000000f542125edf994292d57823ce63372f1a", @ANYRES32=r4, @ANYRES64=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0xb0, 0x4c041}, 0x8081) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x13, &(0x7f00000019c0)=ANY=[@ANYBLOB="18480000fcffffff0000000000000000949b01000800000085100000fbffffff18110000", @ANYRES32=r5, @ANYBLOB="00000008000900ffffff7b8af8ff0000f8ffffffb703000008000000b704000002000000850000008200000018390000010000000000000e66000000000000000000000000000000000000100000000000000000", @ANYRES32, @ANYBLOB="000000000000000085200000030000001d62f8ff00000000"], &(0x7f0000000800)='GPL\x00', 0x1, 0xe4, &(0x7f0000001a80)=""/228, 0x41000, 0x50, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000001e40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001e80)={0x3, 0xe, 0x5, 0x7e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=[r2, r5], &(0x7f0000001f00), 0x10, 0x663}, 0x94) r9 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000002c0)={r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000002240)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002000)="4b58782e6a10cb640739c7cc315069ed9160e6d5f27944c7422890b8cdd306c40edbf865a8744c06b1bfb9cc953ddb5e065c7d56fe186f1b501dc784bdb1a3e3dcf33e52e6ce4c877893caab137d5758975530d30e41b1084da524f4395dd12dcab240a487661a6738fd1447a11dcdc7b33a072b46d5f2562650e1055c880b0e20af3967cebb9b9d191cc27596d66c51885b625aec24d56b6cc17109098a0f9148a6142d3e", 0xa5}, {&(0x7f0000000840)="d6afe376608977c8be039db5bf968869a647e147438d83ef238f4e838c80c19556a755595bcf8f3e8230fe4b8041e2", 0x2f}, {&(0x7f00000020c0)="b1d38a365026346570eec8237a726a6cb61fe34c96e62face27e5432b583aebedabfb85ae268ea670d5dd8a6af377b190dafdb030be3d4007eb3d397e50849ea533603a3f7f9135f4da59449067b73a2ea29fda580fe70623d5bb98051cd539ce9ddcaadcbc378688cee3302fd3be470662171b2f3b641bc8d80e4bc467056dbcbfac6869a04b88479cdcf908455a8adc89d357a0a61412f41d90cacc9731c8a842266972a232eea4ae80b71dcb30f21db6a0ff27e36792795a487884d00205cc5f0c36589133e3715b149f0e5eb3682dcf6724b780b5eb72ac1c4c16c4fcbe42e849cd172fc1ff185ee29791e24d0df8523d337c89511c3ed", 0xf9}, {&(0x7f0000001c40)="c8172042d136eae20f36518e6d513855dc3bdeea315dd93fe06772b18adedb791686d254ca5f7c71bcc85362100a0d22a6f802ced12080d9e93890d9c2f89b69ae65d52399f97bc27e0687063b6ffb12ec46b0b91a5f6af34810e6ccef0ce823e02df5452b32455dca297c27f43be0fe9ef43c402d5cd53cc6d902", 0x7b}, {&(0x7f0000001e00)="fb7cb26be70616676bda", 0xa}], 0x5, &(0x7f0000001f00)=[@rights={{0x20, 0x1, 0x1, [r7, r1, 0xffffffffffffffff, r0]}}], 0x20, 0x44}, 0x2000c800) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x200, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000d62c005401000000000000005aa7b755cbdbeb0300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3db00f6b8267e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f01000e97", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) 46.484503003s ago: executing program 0 (id=980): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 46.1087768s ago: executing program 2 (id=981): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.kill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0xc, 0x4, 0x0, 0x40, 0x10}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r4, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 46.00666623s ago: executing program 3 (id=982): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000022474"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x100090a0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0xff, 0x0, 0x9, 0xa40bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x104002, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x80000000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x4, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) 45.960735555s ago: executing program 1 (id=983): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.kill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0xc, 0x4, 0x0, 0x40, 0x10}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="185000ffffffff00000000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000940)="c6", 0x1}], 0x1}, 0x4040004) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@cred={{0x1c}}], 0x20}, 0x40000020) 45.900102912s ago: executing program 0 (id=984): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) recvmsg(r4, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 45.731229119s ago: executing program 3 (id=985): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000001040), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x10) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_clone(0x4008000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fb, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xffeb}], 0x1}, 0x0) 45.414016321s ago: executing program 3 (id=986): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0cc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x100002, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x40047440, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4a, 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) close(0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 45.22175883s ago: executing program 0 (id=987): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa21"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) (fail_nth: 8) 44.638830839s ago: executing program 0 (id=988): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1}, 0x884) close(r2) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@struct={0x8, 0x0, 0x0, 0x4, 0x0, 0xffff8001}, @func={0x19, 0x0, 0x0, 0xc, 0x4}, @enum={0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf}, {0x7, 0x1}, {0x10, 0x2}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x61, 0x61]}}, 0x0, 0x67, 0x0, 0x1, 0x10001}, 0x28) 44.52277351s ago: executing program 2 (id=989): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:'], 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) write$cgroup_devices(r2, 0x0, 0x97ff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000069000000186700000800000000000020ff7f000085100000020000"], 0x0, 0x276, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/time_for_children\x00') sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 44.188071505s ago: executing program 0 (id=990): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000540)='\xd5(#\xbc\xa8j\xd4\x06\xee^\x14\xf7O\xd4\x7f\xbb\xeb\xde\xbcS\x10R\xd2\x8a\x90%\x8e\xafV\aL\xf7\xfb\xeagJ\x8b\x1a\x0f\x86\xa9\b`\xd4\xb7\xa2\xec0\xdc\xb4\x9e\xbf:\x87\x88\x0f:,#\xfc\xd1Tk2mD\xdf\x10\xdc\x05\xb2\xe7d@\b\xc7\x19c\xea2\x1d\x88\xd9\xb5\xe9Z\xe4\xc1U\xc9\xb5e\x12\xb7\xa5`\x8a\x8d\xb4\xb9V\xeb\x14%W\xa4%\x17T\x84\xde\x00@W\x16\x93G\xa4\xb9\xa6\xc2\xf3\x9a0s\xe8c\xd6MV\xb57\xdf:#\xae\x80\xce\xaf\xef&2k\xb0\xb9I\x1e2\r\'c\xcf~\xa0\xa4?\x1f\xfb-\x87\xf1K\r\'\x8dR\x06AH\xbeLs\xcd}\xa5\x85\xf2\x9f\x04\x00\xfc.Z\xc9\xbf#\x8c\x05\b') recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004e3ffff01"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x3, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000340)={0x4, 0x80, 0x3, 0x8, 0x6, 0xb, 0x0, 0xce, 0x32000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xf, 0x2, @perf_config_ext={0x43, 0x3}, 0x803, 0x8, 0xc, 0x0, 0x2, 0x3, 0xcf24, 0x0, 0x3, 0x0, 0x7}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20720, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x0, 0xa, 0xb, 0x1, 0x50, 0xfffffffffffffff5}], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x1d, &(0x7f0000000080)=""/29, 0x41100, 0x8, '\x00', r7, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xc, 0x4, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x4, 0x5, 0xe, 0x7}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000300)={0xffffffffffffffff, r8}) gettid() r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$sock(r9, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4800) 43.691280205s ago: executing program 1 (id=991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc0000ff0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x22, 0x1, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x80000001, 0xf46b}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b"], 0xfe33) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x18}, 0x18) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=r3, 0xffffffffffffffff, 0x2d, 0x1c, r0, @void, @value=r4, @void, @void, r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xead3086ce9776e24}, 0x0, 0x4, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x14, &(0x7f0000000000)=r8, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000009c0)={r10, 0x0, 0x20, 0x0, &(0x7f0000000780)="77242bb40de4a6fc8da0f70f47a5bef8b43f0c818a28f9e0e727f3cc7f623017", 0x0, 0x800, 0x0, 0x55, 0x0, &(0x7f0000000940)="e705bfbb7ac97771447081d43ef9b6c2d30160d7351d6f4acacea9ab992bbd82bcce890d77ea6e11af2e17aef99c8a521d4daa4d303258b6c2e75f9dcbccd2a7ae8d74046f1545bc8d6ba2de900c0593a5edc3eed9", 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$inet(r12, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@local}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)}, 0x40012100) 17.806527911s ago: executing program 32 (id=986): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0cc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x100002, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x40047440, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4a, 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0071d21600f008f1b700660700000000000000000000000200000000278f135d4fb62b97caa7fa237877954cc620c5d7b2af0b24cee65e88e025bb80a94760317ca0876c9c996feacf6aa0880e4da0ff32fd44f9ef0153ae8cb64be691353a2685e04d77a9c3c437221fd67e3fdd404522dac545afaae433c658ad3c0900ca36b6dd83574e8bdbcefb85665c4efb8ee4f7f1dba9b928c07e703c052ef9baa9c59e0444dd6ec83cf42e91ed40acf77d8050c3accfb5749a0dc8b0f8a60908a44ad06101a7ea257c6985d6f87d1bbb6bbca13aa33f22884cd07d41cd033c86f9fd3730355d334d05c09c453bd99b9ffd31f9ed06ffe4ef7a7f56771faa8fee90ce88c8e700493b91ec68a2b053e56592febd1b276178222621e7fabaa58b21136ee6ecf4a20733dd78e35c1dfcfafaf21bc8d68aa76083f601bccc789e554045761beac7f2a341b4b02e7a4dbcd087d13ba6e58aeba0ed32556f0713eb1558bc39d1dc9b0f35910ab3a3451674746fe15ea60286737f1ff81db3d7b4c1afa081a618544bdaaeb6bc6a57dccd5a63401032ee163094793946c0277fefc8098913b891de5260ade02a51b4f7d19ff51d25faa38a94d185860b803b64e340998be984ed"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) close(0xffffffffffffffff) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 0s ago: executing program 33 (id=990): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000540)='\xd5(#\xbc\xa8j\xd4\x06\xee^\x14\xf7O\xd4\x7f\xbb\xeb\xde\xbcS\x10R\xd2\x8a\x90%\x8e\xafV\aL\xf7\xfb\xeagJ\x8b\x1a\x0f\x86\xa9\b`\xd4\xb7\xa2\xec0\xdc\xb4\x9e\xbf:\x87\x88\x0f:,#\xfc\xd1Tk2mD\xdf\x10\xdc\x05\xb2\xe7d@\b\xc7\x19c\xea2\x1d\x88\xd9\xb5\xe9Z\xe4\xc1U\xc9\xb5e\x12\xb7\xa5`\x8a\x8d\xb4\xb9V\xeb\x14%W\xa4%\x17T\x84\xde\x00@W\x16\x93G\xa4\xb9\xa6\xc2\xf3\x9a0s\xe8c\xd6MV\xb57\xdf:#\xae\x80\xce\xaf\xef&2k\xb0\xb9I\x1e2\r\'c\xcf~\xa0\xa4?\x1f\xfb-\x87\xf1K\r\'\x8dR\x06AH\xbeLs\xcd}\xa5\x85\xf2\x9f\x04\x00\xfc.Z\xc9\xbf#\x8c\x05\b') recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004e3ffff01"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x3, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000340)={0x4, 0x80, 0x3, 0x8, 0x6, 0xb, 0x0, 0xce, 0x32000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xf, 0x2, @perf_config_ext={0x43, 0x3}, 0x803, 0x8, 0xc, 0x0, 0x2, 0x3, 0xcf24, 0x0, 0x3, 0x0, 0x7}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20720, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x1, &(0x7f0000000000)=@raw=[@alu={0x4, 0x0, 0xa, 0xb, 0x1, 0x50, 0xfffffffffffffff5}], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x1d, &(0x7f0000000080)=""/29, 0x41100, 0x8, '\x00', r7, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xc, 0x4, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x4, 0x5, 0xe, 0x7}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000300)={0xffffffffffffffff, r8}) gettid() r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$sock(r9, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4800) kernel console output (not intermixed with test programs): __asan_memset+0x22/0x40 [ 268.656534][ T8356] ? __hrtimer_init+0x186/0x270 [ 268.661412][ T8356] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 268.667189][ T8356] ? mac80211_hwsim_free+0x220/0x220 [ 268.672504][ T8356] ? rcu_is_watching+0x15/0xb0 [ 268.677299][ T8356] ? kstrndup+0xbd/0x140 [ 268.681666][ T8356] hwsim_new_radio_nl+0xd78/0x19d0 [ 268.686809][ T8356] ? __nla_validate+0x50/0x50 [ 268.691532][ T8356] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 268.697900][ T8356] ? __nla_parse+0x40/0x50 [ 268.702366][ T8356] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 268.708748][ T8356] genl_family_rcv_msg_doit+0x209/0x2f0 [ 268.714352][ T8356] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 268.720295][ T8356] ? bpf_lsm_capable+0x9/0x10 [ 268.725006][ T8356] ? security_capable+0x89/0xb0 [ 268.729905][ T8356] genl_rcv_msg+0x60b/0x790 [ 268.734633][ T8356] ? genl_bind+0x360/0x360 [ 268.739118][ T8356] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 268.745474][ T8356] ? perf_trace_lock+0x2ed/0x380 [ 268.750493][ T8356] netlink_rcv_skb+0x216/0x480 [ 268.755295][ T8356] ? genl_bind+0x360/0x360 [ 268.759751][ T8356] ? netlink_ack+0x1110/0x1110 [ 268.764565][ T8356] ? __lock_acquire+0x7c80/0x7c80 [ 268.769626][ T8356] ? down_read+0x1ac/0x2e0 [ 268.774085][ T8356] genl_rcv+0x28/0x40 [ 268.778100][ T8356] netlink_unicast+0x751/0x8d0 [ 268.782910][ T8356] netlink_sendmsg+0x8c1/0xbe0 [ 268.787724][ T8356] ? netlink_getsockopt+0x580/0x580 [ 268.792983][ T8356] ? aa_sock_msg_perm+0x94/0x150 [ 268.797953][ T8356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 268.803281][ T8356] ? security_socket_sendmsg+0x80/0xa0 [ 268.808773][ T8356] ? netlink_getsockopt+0x580/0x580 [ 268.814008][ T8356] ____sys_sendmsg+0x5bf/0x950 [ 268.818821][ T8356] ? __asan_memset+0x22/0x40 [ 268.823466][ T8356] ? __sys_sendmsg_sock+0x30/0x30 [ 268.828532][ T8356] ? __import_iovec+0x5f2/0x860 [ 268.833439][ T8356] ? import_iovec+0x73/0xa0 [ 268.837990][ T8356] ___sys_sendmsg+0x220/0x290 [ 268.842713][ T8356] ? __sys_sendmsg+0x270/0x270 [ 268.847565][ T8356] __se_sys_sendmsg+0x1a5/0x270 [ 268.852464][ T8356] ? perf_trace_preemptirq_template+0x281/0x340 [ 268.858774][ T8356] ? __x64_sys_sendmsg+0x80/0x80 [ 268.863876][ T8356] ? lockdep_hardirqs_on+0x98/0x150 [ 268.869132][ T8356] do_syscall_64+0x55/0xb0 [ 268.873587][ T8356] ? clear_bhb_loop+0x40/0x90 [ 268.878294][ T8356] ? clear_bhb_loop+0x40/0x90 [ 268.883035][ T8356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.889014][ T8356] RIP: 0033:0x7f1aa518f6c9 [ 268.893466][ T8356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.913122][ T8356] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.921568][ T8356] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 268.929659][ T8356] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 268.937673][ T8356] RBP: 00007f1aa5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.945668][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.953690][ T8356] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 268.961714][ T8356] [ 269.223097][ T8377] FAULT_INJECTION: forcing a failure. [ 269.223097][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 269.275518][ T8379] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 269.276577][ T8377] CPU: 1 PID: 8377 Comm: syz.0.867 Not tainted syzkaller #0 [ 269.290779][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.300888][ T8377] Call Trace: [ 269.304222][ T8377] [ 269.307200][ T8377] dump_stack_lvl+0x16c/0x230 [ 269.310657][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.868'. [ 269.311924][ T8377] ? show_regs_print_info+0x20/0x20 [ 269.311964][ T8377] ? load_image+0x3b0/0x3b0 [ 269.312006][ T8377] should_fail_ex+0x39d/0x4d0 [ 269.312045][ T8377] should_failslab+0x9/0x20 [ 269.312076][ T8377] slab_pre_alloc_hook+0x59/0x310 [ 269.345125][ T8377] kmem_cache_alloc+0x5a/0x2e0 [ 269.349953][ T8377] ? skb_clone+0x1eb/0x370 [ 269.354442][ T8377] skb_clone+0x1eb/0x370 [ 269.358805][ T8377] __netlink_deliver_tap+0x41c/0x830 [ 269.364189][ T8377] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.369453][ T8377] netlink_deliver_tap+0x19c/0x1b0 [ 269.374631][ T8377] netlink_dump+0x8df/0xde0 [ 269.379214][ T8377] ? netlink_lookup+0x200/0x200 [ 269.384140][ T8377] ? netlink_autobind+0x300/0x300 [ 269.389233][ T8377] ? netlink_lookup+0x30/0x200 [ 269.394060][ T8377] ? netlink_lookup+0x30/0x200 [ 269.398918][ T8377] __netlink_dump_start+0x5f1/0x810 [ 269.404196][ T8377] unix_diag_handler_dump+0x19a/0x8f0 [ 269.409674][ T8377] ? sock_diag_lock_handler+0x19/0x280 [ 269.415229][ T8377] ? __lock_acquire+0x7c80/0x7c80 [ 269.420322][ T8377] ? __unix_recvmsg+0xb0/0xb0 [ 269.425059][ T8377] ? unix_diag_handler_dump+0x8f0/0x8f0 [ 269.430767][ T8377] ? sock_diag_lock_handler+0x19/0x280 [ 269.436292][ T8377] ? sock_diag_lock_handler+0x19/0x280 [ 269.441818][ T8377] ? __unix_recvmsg+0xb0/0xb0 [ 269.446570][ T8377] sock_diag_rcv_msg+0x3d8/0x600 [ 269.451576][ T8377] netlink_rcv_skb+0x216/0x480 [ 269.456405][ T8377] ? sock_diag_bind+0xb0/0xb0 [ 269.461151][ T8377] ? netlink_ack+0x1110/0x1110 [ 269.466000][ T8377] ? sock_diag_rcv+0x1b/0x40 [ 269.470644][ T8377] ? sock_diag_rcv+0xd/0x40 [ 269.475228][ T8377] ? __mutex_lock+0xc/0xcc0 [ 269.479803][ T8377] sock_diag_rcv+0x2a/0x40 [ 269.484276][ T8377] netlink_unicast+0x751/0x8d0 [ 269.489108][ T8377] netlink_sendmsg+0x8c1/0xbe0 [ 269.493922][ T8377] ? lockdep_hardirqs_on+0x98/0x150 [ 269.499182][ T8377] ? netlink_getsockopt+0x580/0x580 [ 269.504444][ T8377] ? security_socket_sendmsg+0x37/0xa0 [ 269.509955][ T8377] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 269.515441][ T8377] ? security_socket_sendmsg+0x80/0xa0 [ 269.520956][ T8377] ? netlink_getsockopt+0x580/0x580 [ 269.526258][ T8377] ____sys_sendmsg+0x5bf/0x950 [ 269.531095][ T8377] ? __asan_memset+0x22/0x40 [ 269.535743][ T8377] ? __sys_sendmsg_sock+0x30/0x30 [ 269.540825][ T8377] ? __import_iovec+0x5f2/0x860 [ 269.545747][ T8377] ? import_iovec+0x73/0xa0 [ 269.550314][ T8377] ___sys_sendmsg+0x220/0x290 [ 269.555138][ T8377] ? __sys_sendmsg+0x270/0x270 [ 269.560023][ T8377] __se_sys_sendmsg+0x1a5/0x270 [ 269.564936][ T8377] ? __x64_sys_sendmsg+0x80/0x80 [ 269.569948][ T8377] ? syscall_enter_from_user_mode+0x2e/0x80 [ 269.575892][ T8377] do_syscall_64+0x55/0xb0 [ 269.580621][ T8377] ? clear_bhb_loop+0x40/0x90 [ 269.585347][ T8377] ? clear_bhb_loop+0x40/0x90 [ 269.590081][ T8377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.596032][ T8377] RIP: 0033:0x7f11dd58f6c9 [ 269.600508][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.620172][ T8377] RSP: 002b:00007f11de38f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.628645][ T8377] RAX: ffffffffffffffda RBX: 00007f11dd7e5fa0 RCX: 00007f11dd58f6c9 [ 269.636676][ T8377] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 269.644701][ T8377] RBP: 00007f11de38f090 R08: 0000000000000000 R09: 0000000000000000 [ 269.652726][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.660844][ T8377] R13: 00007f11dd7e6038 R14: 00007f11dd7e5fa0 R15: 00007ffdf9d463f8 [ 269.668899][ T8377] [ 269.794103][ T8379] team0: Port device dummy0 removed [ 269.822164][ T8379] bridge0: port 4(dummy0) entered blocking state [ 269.897215][ T8379] bridge0: port 4(dummy0) entered disabled state [ 270.165684][ T8392] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 270.188143][ T8392] CPU: 1 PID: 8392 Comm: syz.2.871 Not tainted syzkaller #0 [ 270.195521][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.205629][ T8392] Call Trace: [ 270.208942][ T8392] [ 270.211903][ T8392] dump_stack_lvl+0x16c/0x230 [ 270.216626][ T8392] ? show_regs_print_info+0x20/0x20 [ 270.221857][ T8392] ? load_image+0x3b0/0x3b0 [ 270.226420][ T8392] sysfs_warn_dup+0x8e/0xa0 [ 270.230968][ T8392] sysfs_do_create_link_sd+0xc0/0x110 [ 270.236407][ T8392] device_add_class_symlinks+0x1cf/0x240 [ 270.242108][ T8392] device_add+0x507/0xc20 [ 270.246485][ T8392] wiphy_register+0x1e74/0x2c00 [ 270.251422][ T8392] ? cfg80211_event_work+0x40/0x40 [ 270.256565][ T8392] ? minstrel_ht_alloc+0x88a/0x990 [ 270.261712][ T8392] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 270.267807][ T8392] ieee80211_register_hw+0x2de8/0x3b10 [ 270.273318][ T8392] ? ieee80211_register_hw+0xf11/0x3b10 [ 270.278899][ T8392] ? ieee80211_tasklet_handler+0x20/0x20 [ 270.284562][ T8392] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 270.290485][ T8392] ? __debug_object_init+0xe8/0x430 [ 270.295718][ T8392] ? __asan_memset+0x22/0x40 [ 270.300348][ T8392] ? __hrtimer_init+0x186/0x270 [ 270.305311][ T8392] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 270.311079][ T8392] ? mac80211_hwsim_free+0x220/0x220 [ 270.316386][ T8392] ? rcu_is_watching+0x15/0xb0 [ 270.321180][ T8392] ? kstrndup+0xbd/0x140 [ 270.325463][ T8392] hwsim_new_radio_nl+0xd78/0x19d0 [ 270.330781][ T8392] ? __nla_validate+0x50/0x50 [ 270.335501][ T8392] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 270.341879][ T8392] ? __nla_parse+0x40/0x50 [ 270.346328][ T8392] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 270.352723][ T8392] genl_family_rcv_msg_doit+0x209/0x2f0 [ 270.358318][ T8392] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 270.364339][ T8392] ? bpf_lsm_capable+0x9/0x10 [ 270.369051][ T8392] ? security_capable+0x89/0xb0 [ 270.373937][ T8392] genl_rcv_msg+0x60b/0x790 [ 270.378484][ T8392] ? genl_bind+0x360/0x360 [ 270.382937][ T8392] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 270.389296][ T8392] ? ref_tracker_free+0x634/0x7d0 [ 270.394392][ T8392] netlink_rcv_skb+0x216/0x480 [ 270.399194][ T8392] ? genl_bind+0x360/0x360 [ 270.403643][ T8392] ? netlink_ack+0x1110/0x1110 [ 270.408474][ T8392] ? __lock_acquire+0x7c80/0x7c80 [ 270.413546][ T8392] ? down_read+0x1ac/0x2e0 [ 270.418028][ T8392] genl_rcv+0x28/0x40 [ 270.422041][ T8392] netlink_unicast+0x751/0x8d0 [ 270.426848][ T8392] netlink_sendmsg+0x8c1/0xbe0 [ 270.431649][ T8392] ? netlink_getsockopt+0x580/0x580 [ 270.436885][ T8392] ? aa_sock_msg_perm+0x94/0x150 [ 270.441867][ T8392] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 270.447184][ T8392] ? security_socket_sendmsg+0x80/0xa0 [ 270.452681][ T8392] ? netlink_getsockopt+0x580/0x580 [ 270.457909][ T8392] ____sys_sendmsg+0x5bf/0x950 [ 270.462768][ T8392] ? __asan_memset+0x22/0x40 [ 270.467387][ T8392] ? __sys_sendmsg_sock+0x30/0x30 [ 270.472445][ T8392] ? __import_iovec+0x5f2/0x860 [ 270.477345][ T8392] ? import_iovec+0x73/0xa0 [ 270.481968][ T8392] ___sys_sendmsg+0x220/0x290 [ 270.486679][ T8392] ? __sys_sendmsg+0x270/0x270 [ 270.491524][ T8392] __se_sys_sendmsg+0x1a5/0x270 [ 270.496409][ T8392] ? perf_trace_preemptirq_template+0x281/0x340 [ 270.502684][ T8392] ? __x64_sys_sendmsg+0x80/0x80 [ 270.507693][ T8392] ? lockdep_hardirqs_on+0x98/0x150 [ 270.512915][ T8392] do_syscall_64+0x55/0xb0 [ 270.517359][ T8392] ? clear_bhb_loop+0x40/0x90 [ 270.522063][ T8392] ? clear_bhb_loop+0x40/0x90 [ 270.526774][ T8392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.532703][ T8392] RIP: 0033:0x7f023458f6c9 [ 270.537404][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.557040][ T8392] RSP: 002b:00007f0235466038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.565488][ T8392] RAX: ffffffffffffffda RBX: 00007f02347e5fa0 RCX: 00007f023458f6c9 [ 270.573492][ T8392] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 270.581487][ T8392] RBP: 00007f0234611f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.589593][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.597613][ T8392] R13: 00007f02347e6038 R14: 00007f02347e5fa0 R15: 00007ffd42a6f9c8 [ 270.605888][ T8392] [ 270.648329][ T8392] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 270.664123][ T8392] dummy0: left allmulticast mode [ 270.669543][ T8392] dummy0: left promiscuous mode [ 270.773176][ T8392] bridge0: port 4(dummy0) entered disabled state [ 270.774785][ T8393] __nla_validate_parse: 1 callbacks suppressed [ 270.775518][ T8393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'. [ 270.825649][ T8392] dummy0: entered promiscuous mode [ 270.831354][ T8392] dummy0: entered allmulticast mode [ 270.837528][ T8392] team0: Port device dummy0 added [ 270.855846][ T8393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'. [ 270.875737][ T8397] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 270.921415][ T8397] .`: (slave dummy0): Releasing backup interface [ 270.931781][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.872'. [ 270.976680][ T8397] dummy0: entered promiscuous mode [ 270.991350][ T8397] dummy0: entered allmulticast mode [ 271.011596][ T8397] team0: Port device dummy0 added [ 271.025044][ T8392] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'. [ 271.096517][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.872'. [ 271.111728][ T8401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.872'. [ 271.136951][ T8402] netlink: 'syz.0.874': attribute type 2 has an invalid length. [ 271.166675][ T8402] netlink: 'syz.0.874': attribute type 8 has an invalid length. [ 271.198814][ T8402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.874'. [ 271.305386][ T8404] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.875'. [ 271.327679][ T8406] netlink: 'syz.3.876': attribute type 25 has an invalid length. [ 271.344334][ T8404] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 271.370023][ T8404] CPU: 1 PID: 8404 Comm: syz.2.875 Not tainted syzkaller #0 [ 271.377427][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.387579][ T8404] Call Trace: [ 271.390931][ T8404] [ 271.393915][ T8404] dump_stack_lvl+0x16c/0x230 [ 271.398667][ T8404] ? show_regs_print_info+0x20/0x20 [ 271.403955][ T8404] ? load_image+0x3b0/0x3b0 [ 271.408567][ T8404] sysfs_warn_dup+0x8e/0xa0 [ 271.413166][ T8404] sysfs_do_create_link_sd+0xc0/0x110 [ 271.418665][ T8404] device_add_class_symlinks+0x1cf/0x240 [ 271.424402][ T8404] device_add+0x507/0xc20 [ 271.428907][ T8404] wiphy_register+0x1e74/0x2c00 [ 271.433897][ T8404] ? cfg80211_event_work+0x40/0x40 [ 271.439096][ T8404] ? minstrel_ht_alloc+0x88a/0x990 [ 271.444301][ T8404] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 271.450483][ T8404] ieee80211_register_hw+0x2de8/0x3b10 [ 271.456047][ T8404] ? ieee80211_register_hw+0xf11/0x3b10 [ 271.461752][ T8404] ? ieee80211_tasklet_handler+0x20/0x20 [ 271.467431][ T8404] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 271.473371][ T8404] ? __debug_object_init+0xe8/0x430 [ 271.478638][ T8404] ? __asan_memset+0x22/0x40 [ 271.483285][ T8404] ? __hrtimer_init+0x186/0x270 [ 271.488187][ T8404] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 271.494074][ T8404] ? mac80211_hwsim_free+0x220/0x220 [ 271.499392][ T8404] ? rcu_is_watching+0x15/0xb0 [ 271.504196][ T8404] ? kstrndup+0xbd/0x140 [ 271.508491][ T8404] hwsim_new_radio_nl+0xd78/0x19d0 [ 271.513648][ T8404] ? __nla_validate+0x50/0x50 [ 271.518408][ T8404] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 271.524811][ T8404] ? __nla_parse+0x40/0x50 [ 271.529299][ T8404] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 271.535709][ T8404] genl_family_rcv_msg_doit+0x209/0x2f0 [ 271.541320][ T8404] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 271.547276][ T8404] ? bpf_lsm_capable+0x9/0x10 [ 271.551999][ T8404] ? security_capable+0x89/0xb0 [ 271.556905][ T8404] genl_rcv_msg+0x60b/0x790 [ 271.561471][ T8404] ? genl_bind+0x360/0x360 [ 271.565930][ T8404] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 271.572304][ T8404] ? perf_trace_lock+0x2ed/0x380 [ 271.577312][ T8404] netlink_rcv_skb+0x216/0x480 [ 271.582127][ T8404] ? genl_bind+0x360/0x360 [ 271.586626][ T8404] ? netlink_ack+0x1110/0x1110 [ 271.591465][ T8404] ? __lock_acquire+0x7c80/0x7c80 [ 271.596542][ T8404] ? down_read+0x1ac/0x2e0 [ 271.601009][ T8404] genl_rcv+0x28/0x40 [ 271.605037][ T8404] netlink_unicast+0x751/0x8d0 [ 271.609863][ T8404] netlink_sendmsg+0x8c1/0xbe0 [ 271.615213][ T8404] ? netlink_getsockopt+0x580/0x580 [ 271.620554][ T8404] ? aa_sock_msg_perm+0x94/0x150 [ 271.625536][ T8404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.630946][ T8404] ? security_socket_sendmsg+0x80/0xa0 [ 271.636449][ T8404] ? netlink_getsockopt+0x580/0x580 [ 271.641693][ T8404] ____sys_sendmsg+0x5bf/0x950 [ 271.646515][ T8404] ? __asan_memset+0x22/0x40 [ 271.651150][ T8404] ? __sys_sendmsg_sock+0x30/0x30 [ 271.656229][ T8404] ? __import_iovec+0x5f2/0x860 [ 271.661235][ T8404] ? import_iovec+0x73/0xa0 [ 271.665798][ T8404] ___sys_sendmsg+0x220/0x290 [ 271.670539][ T8404] ? __sys_sendmsg+0x270/0x270 [ 271.675446][ T8404] __se_sys_sendmsg+0x1a5/0x270 [ 271.680350][ T8404] ? __x64_sys_sendmsg+0x80/0x80 [ 271.685393][ T8404] ? lockdep_hardirqs_on+0x98/0x150 [ 271.690665][ T8404] do_syscall_64+0x55/0xb0 [ 271.695126][ T8404] ? clear_bhb_loop+0x40/0x90 [ 271.699847][ T8404] ? clear_bhb_loop+0x40/0x90 [ 271.704564][ T8404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.710505][ T8404] RIP: 0033:0x7f023458f6c9 [ 271.714962][ T8404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.734627][ T8404] RSP: 002b:00007f0235466038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.743384][ T8404] RAX: ffffffffffffffda RBX: 00007f02347e5fa0 RCX: 00007f023458f6c9 [ 271.751486][ T8404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 271.759709][ T8404] RBP: 00007f0234611f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.767716][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.775750][ T8404] R13: 00007f02347e6038 R14: 00007f02347e5fa0 R15: 00007ffd42a6f9c8 [ 271.783790][ T8404] [ 272.249054][ T8404] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 272.404901][ T8416] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 272.451669][ T8416] dummy0: left promiscuous mode [ 272.489669][ T8416] dummy0: left allmulticast mode [ 272.560466][ T8416] team0: Port device dummy0 removed [ 272.588248][ T8416] .`: (slave dummy0): Enslaving as an active interface with an up link [ 272.698815][ T8423] netlink: 'syz.1.880': attribute type 10 has an invalid length. [ 272.739056][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.880'. [ 272.786074][ T8423] dummy0: entered promiscuous mode [ 272.806325][ T8423] dummy0: entered allmulticast mode [ 273.022881][ T8423] team0: Port device dummy0 removed [ 273.032700][ T8423] bridge0: port 3(dummy0) entered blocking state [ 273.044481][ T8423] bridge0: port 3(dummy0) entered disabled state [ 273.160276][ T8428] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.891'. [ 273.196262][ T8428] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 273.220333][ T8428] CPU: 1 PID: 8428 Comm: syz.2.891 Not tainted syzkaller #0 [ 273.227742][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.237861][ T8428] Call Trace: [ 273.241209][ T8428] [ 273.244213][ T8428] dump_stack_lvl+0x16c/0x230 [ 273.249016][ T8428] ? show_regs_print_info+0x20/0x20 [ 273.254399][ T8428] ? load_image+0x3b0/0x3b0 [ 273.259006][ T8428] sysfs_warn_dup+0x8e/0xa0 [ 273.263602][ T8428] sysfs_do_create_link_sd+0xc0/0x110 [ 273.269064][ T8428] device_add_class_symlinks+0x1cf/0x240 [ 273.274834][ T8428] device_add+0x507/0xc20 [ 273.279255][ T8428] wiphy_register+0x1e74/0x2c00 [ 273.284238][ T8428] ? cfg80211_event_work+0x40/0x40 [ 273.289435][ T8428] ? minstrel_ht_alloc+0x88a/0x990 [ 273.294623][ T8428] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 273.300756][ T8428] ieee80211_register_hw+0x2de8/0x3b10 [ 273.306411][ T8428] ? ieee80211_register_hw+0xf11/0x3b10 [ 273.312045][ T8428] ? ieee80211_tasklet_handler+0x20/0x20 [ 273.317751][ T8428] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 273.323811][ T8428] ? __debug_object_init+0xe8/0x430 [ 273.329092][ T8428] ? __asan_memset+0x22/0x40 [ 273.333744][ T8428] ? __hrtimer_init+0x186/0x270 [ 273.338661][ T8428] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 273.344519][ T8428] ? mac80211_hwsim_free+0x220/0x220 [ 273.349891][ T8428] ? rcu_is_watching+0x15/0xb0 [ 273.354728][ T8428] ? kstrndup+0xbd/0x140 [ 273.359066][ T8428] hwsim_new_radio_nl+0xd78/0x19d0 [ 273.364278][ T8428] ? __nla_validate+0x50/0x50 [ 273.369073][ T8428] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 273.375501][ T8428] ? __nla_parse+0x40/0x50 [ 273.380012][ T8428] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 273.386447][ T8428] genl_family_rcv_msg_doit+0x209/0x2f0 [ 273.392090][ T8428] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 273.398083][ T8428] ? bpf_lsm_capable+0x9/0x10 [ 273.402830][ T8428] ? security_capable+0x89/0xb0 [ 273.407738][ T8428] genl_rcv_msg+0x60b/0x790 [ 273.412312][ T8428] ? genl_bind+0x360/0x360 [ 273.416772][ T8428] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 273.423147][ T8428] ? perf_trace_lock+0x2ed/0x380 [ 273.428147][ T8428] netlink_rcv_skb+0x216/0x480 [ 273.432956][ T8428] ? genl_bind+0x360/0x360 [ 273.437444][ T8428] ? netlink_ack+0x1110/0x1110 [ 273.442322][ T8428] ? __lock_acquire+0x7c80/0x7c80 [ 273.447403][ T8428] ? down_read+0x1ac/0x2e0 [ 273.451873][ T8428] genl_rcv+0x28/0x40 [ 273.455899][ T8428] netlink_unicast+0x751/0x8d0 [ 273.460763][ T8428] netlink_sendmsg+0x8c1/0xbe0 [ 273.465604][ T8428] ? netlink_getsockopt+0x580/0x580 [ 273.470873][ T8428] ? aa_sock_msg_perm+0x94/0x150 [ 273.475866][ T8428] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.481203][ T8428] ? security_socket_sendmsg+0x80/0xa0 [ 273.486730][ T8428] ? netlink_getsockopt+0x580/0x580 [ 273.491981][ T8428] ____sys_sendmsg+0x5bf/0x950 [ 273.496804][ T8428] ? __asan_memset+0x22/0x40 [ 273.501438][ T8428] ? __sys_sendmsg_sock+0x30/0x30 [ 273.506504][ T8428] ? __import_iovec+0x5f2/0x860 [ 273.511413][ T8428] ? import_iovec+0x73/0xa0 [ 273.515969][ T8428] ___sys_sendmsg+0x220/0x290 [ 273.520699][ T8428] ? __sys_sendmsg+0x270/0x270 [ 273.525597][ T8428] __se_sys_sendmsg+0x1a5/0x270 [ 273.530491][ T8428] ? perf_trace_preemptirq_template+0x281/0x340 [ 273.536778][ T8428] ? __x64_sys_sendmsg+0x80/0x80 [ 273.541788][ T8428] ? lockdep_hardirqs_on+0x98/0x150 [ 273.547026][ T8428] do_syscall_64+0x55/0xb0 [ 273.551479][ T8428] ? clear_bhb_loop+0x40/0x90 [ 273.556189][ T8428] ? clear_bhb_loop+0x40/0x90 [ 273.560908][ T8428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.566858][ T8428] RIP: 0033:0x7f023458f6c9 [ 273.571307][ T8428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.590958][ T8428] RSP: 002b:00007f0235466038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.599418][ T8428] RAX: ffffffffffffffda RBX: 00007f02347e5fa0 RCX: 00007f023458f6c9 [ 273.607423][ T8428] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 273.615432][ T8428] RBP: 00007f0234611f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.623438][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.631439][ T8428] R13: 00007f02347e6038 R14: 00007f02347e5fa0 R15: 00007ffd42a6f9c8 [ 273.639476][ T8428] [ 273.765675][ T8433] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 273.849951][ T8433] CPU: 1 PID: 8433 Comm: syz.3.884 Not tainted syzkaller #0 [ 273.857344][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.867553][ T8433] Call Trace: [ 273.870885][ T8433] [ 273.873854][ T8433] dump_stack_lvl+0x16c/0x230 [ 273.878589][ T8433] ? show_regs_print_info+0x20/0x20 [ 273.883872][ T8433] ? load_image+0x3b0/0x3b0 [ 273.888459][ T8433] sysfs_warn_dup+0x8e/0xa0 [ 273.893007][ T8433] sysfs_do_create_link_sd+0xc0/0x110 [ 273.898420][ T8433] device_add_class_symlinks+0x1cf/0x240 [ 273.904100][ T8433] device_add+0x507/0xc20 [ 273.908473][ T8433] wiphy_register+0x1e74/0x2c00 [ 273.913395][ T8433] ? cfg80211_event_work+0x40/0x40 [ 273.918551][ T8433] ? minstrel_ht_alloc+0x88a/0x990 [ 273.923795][ T8433] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 273.930078][ T8433] ieee80211_register_hw+0x2de8/0x3b10 [ 273.935618][ T8433] ? ieee80211_register_hw+0xf11/0x3b10 [ 273.941209][ T8433] ? ieee80211_tasklet_handler+0x20/0x20 [ 273.946877][ T8433] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 273.952824][ T8433] ? __debug_object_init+0xe8/0x430 [ 273.958098][ T8433] ? __asan_memset+0x22/0x40 [ 273.962744][ T8433] ? __hrtimer_init+0x186/0x270 [ 273.967637][ T8433] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 273.973602][ T8433] ? mac80211_hwsim_free+0x220/0x220 [ 273.978926][ T8433] ? rcu_is_watching+0x15/0xb0 [ 273.983730][ T8433] ? kstrndup+0xbd/0x140 [ 273.988011][ T8433] hwsim_new_radio_nl+0xd78/0x19d0 [ 273.993155][ T8433] ? __nla_validate+0x50/0x50 [ 273.997882][ T8433] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 274.004253][ T8433] ? __nla_parse+0x40/0x50 [ 274.008712][ T8433] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 274.015090][ T8433] genl_family_rcv_msg_doit+0x209/0x2f0 [ 274.020710][ T8433] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 274.026661][ T8433] ? bpf_lsm_capable+0x9/0x10 [ 274.031456][ T8433] ? security_capable+0x89/0xb0 [ 274.036433][ T8433] genl_rcv_msg+0x60b/0x790 [ 274.040979][ T8433] ? genl_bind+0x360/0x360 [ 274.045429][ T8433] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 274.051815][ T8433] ? perf_trace_lock+0xf7/0x380 [ 274.056715][ T8433] netlink_rcv_skb+0x216/0x480 [ 274.061517][ T8433] ? genl_bind+0x360/0x360 [ 274.065969][ T8433] ? netlink_ack+0x1110/0x1110 [ 274.070799][ T8433] ? __lock_acquire+0x7c80/0x7c80 [ 274.075872][ T8433] ? down_read+0x1ac/0x2e0 [ 274.080409][ T8433] genl_rcv+0x28/0x40 [ 274.084463][ T8433] netlink_unicast+0x751/0x8d0 [ 274.089272][ T8433] netlink_sendmsg+0x8c1/0xbe0 [ 274.094084][ T8433] ? netlink_getsockopt+0x580/0x580 [ 274.099320][ T8433] ? aa_sock_msg_perm+0x94/0x150 [ 274.104296][ T8433] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.109608][ T8433] ? security_socket_sendmsg+0x80/0xa0 [ 274.115115][ T8433] ? netlink_getsockopt+0x580/0x580 [ 274.120373][ T8433] ____sys_sendmsg+0x5bf/0x950 [ 274.125239][ T8433] ? __asan_memset+0x22/0x40 [ 274.130040][ T8433] ? __sys_sendmsg_sock+0x30/0x30 [ 274.135103][ T8433] ? __import_iovec+0x5f2/0x860 [ 274.140003][ T8433] ? import_iovec+0x73/0xa0 [ 274.144544][ T8433] ___sys_sendmsg+0x220/0x290 [ 274.149258][ T8433] ? __sys_sendmsg+0x270/0x270 [ 274.154084][ T8433] ? debug_mutex_init+0x38/0x70 [ 274.158992][ T8433] __se_sys_sendmsg+0x1a5/0x270 [ 274.163882][ T8433] ? __x64_sys_sendmsg+0x80/0x80 [ 274.168880][ T8433] ? lockdep_hardirqs_on+0x98/0x150 [ 274.174109][ T8433] do_syscall_64+0x55/0xb0 [ 274.178557][ T8433] ? clear_bhb_loop+0x40/0x90 [ 274.183307][ T8433] ? clear_bhb_loop+0x40/0x90 [ 274.188037][ T8433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.193966][ T8433] RIP: 0033:0x7f1aa518f6c9 [ 274.198847][ T8433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.218499][ T8433] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.226973][ T8433] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 274.234983][ T8433] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 274.242982][ T8433] RBP: 00007f1aa5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.250983][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.258980][ T8433] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 274.266995][ T8433] [ 274.365926][ T8436] netlink: 'syz.1.885': attribute type 10 has an invalid length. [ 274.377620][ T8436] dummy0: left allmulticast mode [ 274.384565][ T8436] dummy0: left promiscuous mode [ 274.391171][ T8436] bridge0: port 3(dummy0) entered disabled state [ 274.436731][ T8436] team0: Port device dummy0 added [ 274.513332][ T8435] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 274.674133][ T8428] .`: (slave dummy0): Releasing backup interface [ 274.694849][ T8428] dummy0: entered promiscuous mode [ 274.701427][ T8428] dummy0: entered allmulticast mode [ 274.707814][ T8428] team0: Port device dummy0 added [ 274.790886][ T8443] dummy0: left promiscuous mode [ 274.802804][ T8443] dummy0: left allmulticast mode [ 274.820836][ T8443] team0: Port device dummy0 removed [ 274.844051][ T8443] .`: (slave dummy0): Enslaving as an active interface with an up link [ 274.910710][ T8446] team0: Port device dummy0 removed [ 274.929626][ T8446] bridge0: port 3(dummy0) entered blocking state [ 274.944234][ T8446] bridge0: port 3(dummy0) entered disabled state [ 278.187002][ T8465] validate_nla: 6 callbacks suppressed [ 278.187058][ T8465] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 278.228103][ T8465] __nla_validate_parse: 7 callbacks suppressed [ 278.228159][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.894'. [ 278.324534][ T8465] team0: Port device dummy0 removed [ 278.371456][ T8465] bridge0: port 4(dummy0) entered blocking state [ 278.382606][ T8465] bridge0: port 4(dummy0) entered disabled state [ 278.608230][ T8476] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.898'. [ 278.657670][ T8478] netlink: 'syz.2.899': attribute type 2 has an invalid length. [ 278.700259][ T8478] netlink: 'syz.2.899': attribute type 8 has an invalid length. [ 278.708160][ T8478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.899'. [ 278.734024][ T8476] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 278.776742][ T8476] CPU: 1 PID: 8476 Comm: syz.3.898 Not tainted syzkaller #0 [ 278.784142][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.794446][ T8476] Call Trace: [ 278.797777][ T8476] [ 278.800802][ T8476] dump_stack_lvl+0x16c/0x230 [ 278.805561][ T8476] ? show_regs_print_info+0x20/0x20 [ 278.810840][ T8476] ? load_image+0x3b0/0x3b0 [ 278.815442][ T8476] sysfs_warn_dup+0x8e/0xa0 [ 278.820023][ T8476] sysfs_do_create_link_sd+0xc0/0x110 [ 278.825507][ T8476] device_add_class_symlinks+0x1cf/0x240 [ 278.831235][ T8476] device_add+0x507/0xc20 [ 278.835651][ T8476] wiphy_register+0x1e74/0x2c00 [ 278.840639][ T8476] ? cfg80211_event_work+0x40/0x40 [ 278.845824][ T8476] ? minstrel_ht_alloc+0x88a/0x990 [ 278.851023][ T8476] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 278.857264][ T8476] ieee80211_register_hw+0x2de8/0x3b10 [ 278.862840][ T8476] ? ieee80211_register_hw+0xf11/0x3b10 [ 278.868471][ T8476] ? ieee80211_tasklet_handler+0x20/0x20 [ 278.874256][ T8476] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 278.880224][ T8476] ? __debug_object_init+0xe8/0x430 [ 278.885510][ T8476] ? __asan_memset+0x22/0x40 [ 278.890257][ T8476] ? __hrtimer_init+0x186/0x270 [ 278.895179][ T8476] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 278.901015][ T8476] ? mac80211_hwsim_free+0x220/0x220 [ 278.906362][ T8476] ? rcu_is_watching+0x15/0xb0 [ 278.911191][ T8476] ? kstrndup+0xbd/0x140 [ 278.915549][ T8476] hwsim_new_radio_nl+0xd78/0x19d0 [ 278.920781][ T8476] ? __nla_validate+0x50/0x50 [ 278.925586][ T8476] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 278.932026][ T8476] ? __nla_parse+0x40/0x50 [ 278.936545][ T8476] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 278.942975][ T8476] genl_family_rcv_msg_doit+0x209/0x2f0 [ 278.948615][ T8476] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 278.954606][ T8476] ? bpf_lsm_capable+0x9/0x10 [ 278.959357][ T8476] ? security_capable+0x89/0xb0 [ 278.964287][ T8476] genl_rcv_msg+0x60b/0x790 [ 278.968885][ T8476] ? genl_bind+0x360/0x360 [ 278.973365][ T8476] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 278.979979][ T8476] ? perf_trace_lock+0x2ed/0x380 [ 278.985026][ T8476] netlink_rcv_skb+0x216/0x480 [ 278.989874][ T8476] ? genl_bind+0x360/0x360 [ 278.994383][ T8476] ? netlink_ack+0x1110/0x1110 [ 278.999256][ T8476] ? __lock_acquire+0x7c80/0x7c80 [ 279.004371][ T8476] ? down_read+0x1ac/0x2e0 [ 279.008857][ T8476] genl_rcv+0x28/0x40 [ 279.012907][ T8476] netlink_unicast+0x751/0x8d0 [ 279.017796][ T8476] netlink_sendmsg+0x8c1/0xbe0 [ 279.022657][ T8476] ? netlink_getsockopt+0x580/0x580 [ 279.027953][ T8476] ? aa_sock_msg_perm+0x94/0x150 [ 279.033234][ T8476] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 279.038607][ T8476] ? security_socket_sendmsg+0x80/0xa0 [ 279.044138][ T8476] ? netlink_getsockopt+0x580/0x580 [ 279.049405][ T8476] ____sys_sendmsg+0x5bf/0x950 [ 279.054256][ T8476] ? __asan_memset+0x22/0x40 [ 279.058914][ T8476] ? __sys_sendmsg_sock+0x30/0x30 [ 279.064003][ T8476] ? __import_iovec+0x5f2/0x860 [ 279.069131][ T8476] ? import_iovec+0x73/0xa0 [ 279.073743][ T8476] ___sys_sendmsg+0x220/0x290 [ 279.078504][ T8476] ? __sys_sendmsg+0x270/0x270 [ 279.083480][ T8476] __se_sys_sendmsg+0x1a5/0x270 [ 279.088954][ T8476] ? __x64_sys_sendmsg+0x80/0x80 [ 279.094013][ T8476] ? lockdep_hardirqs_on+0x98/0x150 [ 279.099295][ T8476] do_syscall_64+0x55/0xb0 [ 279.103780][ T8476] ? clear_bhb_loop+0x40/0x90 [ 279.108520][ T8476] ? clear_bhb_loop+0x40/0x90 [ 279.113263][ T8476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.119216][ T8476] RIP: 0033:0x7f1aa518f6c9 [ 279.123737][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.143402][ T8476] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.151875][ T8476] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 279.159898][ T8476] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 279.167934][ T8476] RBP: 00007f1aa5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 279.175958][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.183984][ T8476] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 279.192224][ T8476] [ 279.343177][ T8481] netlink: 'syz.2.901': attribute type 25 has an invalid length. [ 279.357649][ T8479] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 279.439057][ T8479] dummy0: left allmulticast mode [ 279.456899][ T8479] dummy0: left promiscuous mode [ 279.470840][ T8479] bridge0: port 4(dummy0) entered disabled state [ 279.697643][ T8479] dummy0: entered promiscuous mode [ 279.713174][ T8479] dummy0: entered allmulticast mode [ 279.719567][ T8479] team0: Port device dummy0 added [ 279.737786][ T8485] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 279.778340][ T8485] dummy0: left promiscuous mode [ 279.784164][ T8485] dummy0: left allmulticast mode [ 279.791729][ T8485] team0: Port device dummy0 removed [ 279.805513][ T8485] .`: (slave dummy0): Enslaving as an active interface with an up link [ 280.377424][ T8508] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.911'. [ 280.425905][ T8506] netlink: 'syz.1.908': attribute type 10 has an invalid length. [ 280.462259][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.908'. [ 280.477870][ T8506] dummy0: entered promiscuous mode [ 280.504851][ T8506] dummy0: entered allmulticast mode [ 280.650364][ T8506] team0: Port device dummy0 removed [ 280.672421][ T8506] bridge0: port 3(dummy0) entered blocking state [ 280.694921][ T8506] bridge0: port 3(dummy0) entered disabled state [ 280.762386][ T8508] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 280.790293][ T8508] CPU: 1 PID: 8508 Comm: syz.3.911 Not tainted syzkaller #0 [ 280.797700][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.807831][ T8508] Call Trace: [ 280.811177][ T8508] [ 280.814162][ T8508] dump_stack_lvl+0x16c/0x230 [ 280.819277][ T8508] ? show_regs_print_info+0x20/0x20 [ 280.824557][ T8508] ? load_image+0x3b0/0x3b0 [ 280.829226][ T8508] sysfs_warn_dup+0x8e/0xa0 [ 280.833823][ T8508] sysfs_do_create_link_sd+0xc0/0x110 [ 280.839279][ T8508] device_add_class_symlinks+0x1cf/0x240 [ 280.845014][ T8508] device_add+0x507/0xc20 [ 280.849424][ T8508] wiphy_register+0x1e74/0x2c00 [ 280.854357][ T8508] ? cfg80211_event_work+0x40/0x40 [ 280.859534][ T8508] ? minstrel_ht_alloc+0x88a/0x990 [ 280.864746][ T8508] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 280.870869][ T8508] ieee80211_register_hw+0x2de8/0x3b10 [ 280.876405][ T8508] ? ieee80211_register_hw+0xf11/0x3b10 [ 280.882009][ T8508] ? ieee80211_tasklet_handler+0x20/0x20 [ 280.887682][ T8508] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 280.893621][ T8508] ? __debug_object_init+0xe8/0x430 [ 280.898881][ T8508] ? __asan_memset+0x22/0x40 [ 280.903515][ T8508] ? __hrtimer_init+0x186/0x270 [ 280.908497][ T8508] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 280.914303][ T8508] ? mac80211_hwsim_free+0x220/0x220 [ 280.919634][ T8508] ? rcu_is_watching+0x15/0xb0 [ 280.924435][ T8508] ? kstrndup+0xbd/0x140 [ 280.928732][ T8508] hwsim_new_radio_nl+0xd78/0x19d0 [ 280.933885][ T8508] ? __nla_validate+0x50/0x50 [ 280.938642][ T8508] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 280.945226][ T8508] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 280.951549][ T8508] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 280.957851][ T8508] ? perf_trace_kmalloc+0x40/0x140 [ 280.963018][ T8508] ? __nla_parse+0x40/0x50 [ 280.967528][ T8508] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 280.973924][ T8508] genl_family_rcv_msg_doit+0x209/0x2f0 [ 280.979581][ T8508] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 280.985550][ T8508] ? bpf_lsm_capable+0x9/0x10 [ 280.990279][ T8508] ? security_capable+0x89/0xb0 [ 280.995192][ T8508] genl_rcv_msg+0x60b/0x790 [ 280.999752][ T8508] ? genl_bind+0x360/0x360 [ 281.004216][ T8508] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 281.010592][ T8508] ? perf_trace_lock+0x2ed/0x380 [ 281.015600][ T8508] netlink_rcv_skb+0x216/0x480 [ 281.020415][ T8508] ? genl_bind+0x360/0x360 [ 281.024885][ T8508] ? netlink_ack+0x1110/0x1110 [ 281.029803][ T8508] ? __lock_acquire+0x7c80/0x7c80 [ 281.034881][ T8508] ? down_read+0x1ac/0x2e0 [ 281.039353][ T8508] genl_rcv+0x28/0x40 [ 281.043383][ T8508] netlink_unicast+0x751/0x8d0 [ 281.048207][ T8508] netlink_sendmsg+0x8c1/0xbe0 [ 281.053035][ T8508] ? netlink_getsockopt+0x580/0x580 [ 281.058296][ T8508] ? aa_sock_msg_perm+0x94/0x150 [ 281.063570][ T8508] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 281.068939][ T8508] ? security_socket_sendmsg+0x80/0xa0 [ 281.074437][ T8508] ? netlink_getsockopt+0x580/0x580 [ 281.079679][ T8508] ____sys_sendmsg+0x5bf/0x950 [ 281.084513][ T8508] ? __asan_memset+0x22/0x40 [ 281.089144][ T8508] ? __sys_sendmsg_sock+0x30/0x30 [ 281.094213][ T8508] ? __import_iovec+0x5f2/0x860 [ 281.099124][ T8508] ? import_iovec+0x73/0xa0 [ 281.103675][ T8508] ___sys_sendmsg+0x220/0x290 [ 281.108400][ T8508] ? __sys_sendmsg+0x270/0x270 [ 281.113301][ T8508] __se_sys_sendmsg+0x1a5/0x270 [ 281.118234][ T8508] ? __x64_sys_sendmsg+0x80/0x80 [ 281.123267][ T8508] ? lockdep_hardirqs_on+0x98/0x150 [ 281.128526][ T8508] do_syscall_64+0x55/0xb0 [ 281.132988][ T8508] ? clear_bhb_loop+0x40/0x90 [ 281.137697][ T8508] ? clear_bhb_loop+0x40/0x90 [ 281.142414][ T8508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.148356][ T8508] RIP: 0033:0x7f1aa518f6c9 [ 281.152807][ T8508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.172481][ T8508] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.180967][ T8508] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 281.188977][ T8508] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 281.196980][ T8508] RBP: 00007f1aa5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 281.204990][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.212990][ T8508] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 281.221032][ T8508] [ 281.350549][ T8511] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 281.431668][ T8511] .`: (slave dummy0): Releasing backup interface [ 281.679515][ T8511] dummy0: entered promiscuous mode [ 281.695554][ T8511] dummy0: entered allmulticast mode [ 281.733320][ T8511] team0: Port device dummy0 added [ 281.770747][ T8513] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 281.817935][ T8513] dummy0: left promiscuous mode [ 281.827219][ T8513] dummy0: left allmulticast mode [ 281.839857][ T8513] team0: Port device dummy0 removed [ 281.854830][ T8513] .`: (slave dummy0): Enslaving as an active interface with an up link [ 281.888870][ T8521] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.915'. [ 281.956209][ T8521] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 282.018115][ T8521] CPU: 1 PID: 8521 Comm: syz.2.915 Not tainted syzkaller #0 [ 282.025975][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.036101][ T8521] Call Trace: [ 282.039441][ T8521] [ 282.042429][ T8521] dump_stack_lvl+0x16c/0x230 [ 282.047201][ T8521] ? show_regs_print_info+0x20/0x20 [ 282.052495][ T8521] ? load_image+0x3b0/0x3b0 [ 282.057117][ T8521] sysfs_warn_dup+0x8e/0xa0 [ 282.061710][ T8521] sysfs_do_create_link_sd+0xc0/0x110 [ 282.067173][ T8521] device_add_class_symlinks+0x1cf/0x240 [ 282.072908][ T8521] device_add+0x507/0xc20 [ 282.077344][ T8521] wiphy_register+0x1e74/0x2c00 [ 282.082327][ T8521] ? cfg80211_event_work+0x40/0x40 [ 282.087512][ T8521] ? minstrel_ht_alloc+0x88a/0x990 [ 282.092705][ T8521] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 282.098853][ T8521] ieee80211_register_hw+0x2de8/0x3b10 [ 282.104400][ T8521] ? ieee80211_register_hw+0xf11/0x3b10 [ 282.110013][ T8521] ? ieee80211_tasklet_handler+0x20/0x20 [ 282.115813][ T8521] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 282.121783][ T8521] ? __debug_object_init+0xe8/0x430 [ 282.127051][ T8521] ? __asan_memset+0x22/0x40 [ 282.131703][ T8521] ? __hrtimer_init+0x186/0x270 [ 282.136604][ T8521] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 282.142408][ T8521] ? mac80211_hwsim_free+0x220/0x220 [ 282.147736][ T8521] ? rcu_is_watching+0x15/0xb0 [ 282.152550][ T8521] ? kstrndup+0xbd/0x140 [ 282.156848][ T8521] hwsim_new_radio_nl+0xd78/0x19d0 [ 282.162007][ T8521] ? __nla_validate+0x50/0x50 [ 282.166773][ T8521] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 282.173210][ T8521] ? __nla_parse+0x40/0x50 [ 282.177686][ T8521] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 282.184122][ T8521] genl_family_rcv_msg_doit+0x209/0x2f0 [ 282.189738][ T8521] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 282.195695][ T8521] ? bpf_lsm_capable+0x9/0x10 [ 282.200416][ T8521] ? security_capable+0x89/0xb0 [ 282.205326][ T8521] genl_rcv_msg+0x60b/0x790 [ 282.209886][ T8521] ? genl_bind+0x360/0x360 [ 282.214425][ T8521] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 282.220792][ T8521] ? perf_trace_lock+0x2ed/0x380 [ 282.225797][ T8521] netlink_rcv_skb+0x216/0x480 [ 282.230609][ T8521] ? genl_bind+0x360/0x360 [ 282.235077][ T8521] ? netlink_ack+0x1110/0x1110 [ 282.239905][ T8521] ? __lock_acquire+0x7c80/0x7c80 [ 282.245071][ T8521] ? down_read+0x1ac/0x2e0 [ 282.249539][ T8521] genl_rcv+0x28/0x40 [ 282.253563][ T8521] netlink_unicast+0x751/0x8d0 [ 282.258387][ T8521] netlink_sendmsg+0x8c1/0xbe0 [ 282.263219][ T8521] ? netlink_getsockopt+0x580/0x580 [ 282.268494][ T8521] ? aa_sock_msg_perm+0x94/0x150 [ 282.273495][ T8521] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 282.278831][ T8521] ? security_socket_sendmsg+0x80/0xa0 [ 282.284392][ T8521] ? netlink_getsockopt+0x580/0x580 [ 282.289654][ T8521] ____sys_sendmsg+0x5bf/0x950 [ 282.294484][ T8521] ? __asan_memset+0x22/0x40 [ 282.299115][ T8521] ? __sys_sendmsg_sock+0x30/0x30 [ 282.304353][ T8521] ? __import_iovec+0x5f2/0x860 [ 282.309700][ T8521] ? import_iovec+0x73/0xa0 [ 282.314273][ T8521] ___sys_sendmsg+0x220/0x290 [ 282.319004][ T8521] ? __sys_sendmsg+0x270/0x270 [ 282.323923][ T8521] __se_sys_sendmsg+0x1a5/0x270 [ 282.328834][ T8521] ? __x64_sys_sendmsg+0x80/0x80 [ 282.333855][ T8521] ? lockdep_hardirqs_on+0x98/0x150 [ 282.339097][ T8521] do_syscall_64+0x55/0xb0 [ 282.343552][ T8521] ? clear_bhb_loop+0x40/0x90 [ 282.348260][ T8521] ? clear_bhb_loop+0x40/0x90 [ 282.352975][ T8521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.358908][ T8521] RIP: 0033:0x7f023458f6c9 [ 282.363362][ T8521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.383099][ T8521] RSP: 002b:00007f0235466038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.391553][ T8521] RAX: ffffffffffffffda RBX: 00007f02347e5fa0 RCX: 00007f023458f6c9 [ 282.399657][ T8521] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 282.407665][ T8521] RBP: 00007f0234611f91 R08: 0000000000000000 R09: 0000000000000000 [ 282.416919][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.424936][ T8521] R13: 00007f02347e6038 R14: 00007f02347e5fa0 R15: 00007ffd42a6f9c8 [ 282.432978][ T8521] [ 282.451785][ T8522] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 282.524656][ T8522] .`: (slave dummy0): Releasing backup interface [ 282.539800][ T8522] dummy0: entered promiscuous mode [ 282.545451][ T8522] dummy0: entered allmulticast mode [ 282.556263][ T8522] team0: Port device dummy0 added [ 282.577058][ T8532] netlink: 36727 bytes leftover after parsing attributes in process `syz.1.916'. [ 282.615185][ T8523] dummy0: left promiscuous mode [ 282.620678][ T8523] dummy0: left allmulticast mode [ 282.628420][ T8523] team0: Port device dummy0 removed [ 282.640987][ T8523] .`: (slave dummy0): Enslaving as an active interface with an up link [ 282.833392][ T8530] FAULT_INJECTION: forcing a failure. [ 282.833392][ T8530] name failslab, interval 1, probability 0, space 0, times 0 [ 282.860078][ T8530] CPU: 1 PID: 8530 Comm: syz.0.918 Not tainted syzkaller #0 [ 282.867557][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.878534][ T8530] Call Trace: [ 282.882042][ T8530] [ 282.885020][ T8530] dump_stack_lvl+0x16c/0x230 [ 282.889866][ T8530] ? show_regs_print_info+0x20/0x20 [ 282.895845][ T8530] ? load_image+0x3b0/0x3b0 [ 282.900605][ T8530] ? __might_sleep+0xe0/0xe0 [ 282.905787][ T8530] ? __lock_acquire+0x7c80/0x7c80 [ 282.911027][ T8530] should_fail_ex+0x39d/0x4d0 [ 282.915785][ T8530] should_failslab+0x9/0x20 [ 282.920365][ T8530] slab_pre_alloc_hook+0x59/0x310 [ 282.925559][ T8530] kmem_cache_alloc_node+0x60/0x330 [ 282.930818][ T8530] ? __alloc_skb+0x108/0x2c0 [ 282.935485][ T8530] __alloc_skb+0x108/0x2c0 [ 282.939998][ T8530] br_vlan_notify+0x281/0x740 [ 282.944737][ T8530] br_process_vlan_info+0x35c/0x890 [ 282.950024][ T8530] ? br_getlink+0x180/0x180 [ 282.954610][ T8530] br_afspec+0x392/0x5e0 [ 282.958941][ T8530] ? br_setport+0x1670/0x1670 [ 282.963666][ T8530] ? do_raw_spin_lock+0x121/0x2c0 [ 282.968754][ T8530] br_dellink+0x21a/0x2b0 [ 282.973143][ T8530] ? br_afspec+0x5e0/0x5e0 [ 282.977708][ T8530] ? __mutex_lock+0x4e8/0xcc0 [ 282.982463][ T8530] ? mutex_is_locked+0x12/0x40 [ 282.987318][ T8530] rtnl_bridge_dellink+0x47a/0x6d0 [ 282.992515][ T8530] ? rtnl_bridge_getlink+0xcf0/0xcf0 [ 282.997879][ T8530] ? rtnl_bridge_getlink+0xcf0/0xcf0 [ 283.003309][ T8530] rtnetlink_rcv_msg+0x7c7/0xf10 [ 283.008284][ T8530] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 283.013432][ T8530] ? lockdep_hardirqs_on+0x98/0x150 [ 283.018668][ T8530] ? rtnetlink_bind+0x80/0x80 [ 283.023385][ T8530] ? perf_trace_preemptirq_template+0xa4/0x340 [ 283.029582][ T8530] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 283.035723][ T8530] ? lock_chain_count+0x20/0x20 [ 283.040639][ T8530] ? __local_bh_enable_ip+0x12e/0x1c0 [ 283.046053][ T8530] ? lockdep_hardirqs_on+0x98/0x150 [ 283.051303][ T8530] ? __local_bh_enable_ip+0x12e/0x1c0 [ 283.056884][ T8530] ? _local_bh_enable+0xa0/0xa0 [ 283.061769][ T8530] ? __dev_queue_xmit+0x245/0x35a0 [ 283.066917][ T8530] ? __dev_queue_xmit+0x1449/0x35a0 [ 283.072155][ T8530] ? __dev_queue_xmit+0x245/0x35a0 [ 283.077298][ T8530] ? ref_tracker_free+0x634/0x7d0 [ 283.082351][ T8530] ? __copy_skb_header+0xa7/0x550 [ 283.087412][ T8530] netlink_rcv_skb+0x216/0x480 [ 283.092209][ T8530] ? rtnetlink_bind+0x80/0x80 [ 283.096908][ T8530] ? netlink_ack+0x1110/0x1110 [ 283.101751][ T8530] ? __lock_acquire+0x7c80/0x7c80 [ 283.106856][ T8530] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.112127][ T8530] netlink_unicast+0x751/0x8d0 [ 283.116943][ T8530] netlink_sendmsg+0x8c1/0xbe0 [ 283.121750][ T8530] ? netlink_getsockopt+0x580/0x580 [ 283.126983][ T8530] ? aa_sock_msg_perm+0x94/0x150 [ 283.132034][ T8530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 283.137613][ T8530] ? security_socket_sendmsg+0x80/0xa0 [ 283.143152][ T8530] ? netlink_getsockopt+0x580/0x580 [ 283.148404][ T8530] ____sys_sendmsg+0x5bf/0x950 [ 283.153293][ T8530] ? __asan_memset+0x22/0x40 [ 283.157918][ T8530] ? __sys_sendmsg_sock+0x30/0x30 [ 283.163000][ T8530] ? __import_iovec+0x5f2/0x860 [ 283.168037][ T8530] ? import_iovec+0x73/0xa0 [ 283.172587][ T8530] ___sys_sendmsg+0x220/0x290 [ 283.177494][ T8530] ? __sys_sendmsg+0x270/0x270 [ 283.182328][ T8530] ? __lock_acquire+0x7c80/0x7c80 [ 283.187421][ T8530] __se_sys_sendmsg+0x1a5/0x270 [ 283.192504][ T8530] ? __x64_sys_sendmsg+0x80/0x80 [ 283.197509][ T8530] ? lockdep_hardirqs_on+0x98/0x150 [ 283.202742][ T8530] do_syscall_64+0x55/0xb0 [ 283.207186][ T8530] ? clear_bhb_loop+0x40/0x90 [ 283.211919][ T8530] ? clear_bhb_loop+0x40/0x90 [ 283.216771][ T8530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.222690][ T8530] RIP: 0033:0x7f11dd58f6c9 [ 283.227267][ T8530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.246958][ T8530] RSP: 002b:00007f11de38f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.255490][ T8530] RAX: ffffffffffffffda RBX: 00007f11dd7e5fa0 RCX: 00007f11dd58f6c9 [ 283.263755][ T8530] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 283.271839][ T8530] RBP: 00007f11de38f090 R08: 0000000000000000 R09: 0000000000000000 [ 283.279831][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.287915][ T8530] R13: 00007f11dd7e6038 R14: 00007f11dd7e5fa0 R15: 00007ffdf9d463f8 [ 283.295974][ T8530] [ 283.578458][ T8544] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.921'. [ 283.595097][ T8543] validate_nla: 1 callbacks suppressed [ 283.595152][ T8543] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 283.621335][ T8543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.923'. [ 283.638113][ T8543] dummy0: entered promiscuous mode [ 283.655530][ T8543] dummy0: entered allmulticast mode [ 283.668445][ T8543] .`: (slave dummy0): Releasing backup interface [ 283.684285][ T8549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.924'. [ 283.778877][ T8552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.921'. [ 283.795518][ T8543] bridge0: port 4(dummy0) entered blocking state [ 283.829997][ T8543] bridge0: port 4(dummy0) entered disabled state [ 283.879782][ T8553] netlink: 'syz.1.922': attribute type 21 has an invalid length. [ 283.887701][ T8553] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.922'. [ 283.918532][ T8546] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 283.939096][ T8553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.922'. [ 283.979859][ T8546] .`: (slave dummy0): Releasing backup interface [ 284.057562][ T8546] dummy0: entered promiscuous mode [ 284.070227][ T8546] dummy0: entered allmulticast mode [ 284.084578][ T8546] team0: Port device dummy0 added [ 284.093340][ T8549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.924'. [ 284.106676][ T8551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.924'. [ 284.128760][ T8547] netlink: 'syz.0.921': attribute type 10 has an invalid length. [ 284.167791][ T8547] dummy0: left allmulticast mode [ 284.193446][ T8547] dummy0: left promiscuous mode [ 284.212309][ T8547] bridge0: port 3(dummy0) entered disabled state [ 284.400717][ T8547] dummy0: entered promiscuous mode [ 284.406134][ T8547] dummy0: entered allmulticast mode [ 284.413546][ T8547] team0: Port device dummy0 added [ 284.420424][ T8552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.921'. [ 284.433846][ T8558] IPv6: Can't replace route, no match found [ 284.442132][ T8544] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 284.461451][ T8544] CPU: 0 PID: 8544 Comm: syz.0.921 Not tainted syzkaller #0 [ 284.468839][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.478980][ T8544] Call Trace: [ 284.482317][ T8544] [ 284.485304][ T8544] dump_stack_lvl+0x16c/0x230 [ 284.490060][ T8544] ? show_regs_print_info+0x20/0x20 [ 284.495322][ T8544] ? load_image+0x3b0/0x3b0 [ 284.499900][ T8544] sysfs_warn_dup+0x8e/0xa0 [ 284.504472][ T8544] sysfs_do_create_link_sd+0xc0/0x110 [ 284.510008][ T8544] device_add_class_symlinks+0x1cf/0x240 [ 284.515714][ T8544] device_add+0x507/0xc20 [ 284.520123][ T8544] wiphy_register+0x1e74/0x2c00 [ 284.525070][ T8544] ? cfg80211_event_work+0x40/0x40 [ 284.530243][ T8544] ? minstrel_ht_alloc+0x88a/0x990 [ 284.535431][ T8544] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 284.541562][ T8544] ieee80211_register_hw+0x2de8/0x3b10 [ 284.547099][ T8544] ? ieee80211_register_hw+0xf11/0x3b10 [ 284.552725][ T8544] ? ieee80211_tasklet_handler+0x20/0x20 [ 284.558419][ T8544] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 284.564433][ T8544] ? __debug_object_init+0xe8/0x430 [ 284.569708][ T8544] ? __asan_memset+0x22/0x40 [ 284.574366][ T8544] ? __hrtimer_init+0x186/0x270 [ 284.579278][ T8544] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 284.585354][ T8544] ? mac80211_hwsim_free+0x220/0x220 [ 284.590713][ T8544] ? rcu_is_watching+0x15/0xb0 [ 284.595544][ T8544] ? kstrndup+0xbd/0x140 [ 284.599951][ T8544] hwsim_new_radio_nl+0xd78/0x19d0 [ 284.605465][ T8544] ? __nla_validate+0x50/0x50 [ 284.610312][ T8544] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 284.616813][ T8544] ? __nla_parse+0x40/0x50 [ 284.621386][ T8544] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 284.627877][ T8544] genl_family_rcv_msg_doit+0x209/0x2f0 [ 284.633504][ T8544] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 284.639483][ T8544] ? bpf_lsm_capable+0x9/0x10 [ 284.644230][ T8544] ? security_capable+0x89/0xb0 [ 284.649161][ T8544] genl_rcv_msg+0x60b/0x790 [ 284.653741][ T8544] ? genl_bind+0x360/0x360 [ 284.658215][ T8544] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 284.664638][ T8544] netlink_rcv_skb+0x216/0x480 [ 284.669482][ T8544] ? genl_bind+0x360/0x360 [ 284.673942][ T8544] ? netlink_ack+0x1110/0x1110 [ 284.678814][ T8544] ? __lock_acquire+0x7c80/0x7c80 [ 284.683893][ T8544] ? down_read+0x1ac/0x2e0 [ 284.688375][ T8544] genl_rcv+0x28/0x40 [ 284.692405][ T8544] netlink_unicast+0x751/0x8d0 [ 284.697209][ T8544] netlink_sendmsg+0x8c1/0xbe0 [ 284.702026][ T8544] ? netlink_getsockopt+0x580/0x580 [ 284.707301][ T8544] ? aa_sock_msg_perm+0x94/0x150 [ 284.712283][ T8544] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.717686][ T8544] ? security_socket_sendmsg+0x80/0xa0 [ 284.723180][ T8544] ? netlink_getsockopt+0x580/0x580 [ 284.728464][ T8544] ____sys_sendmsg+0x5bf/0x950 [ 284.733319][ T8544] ? __asan_memset+0x22/0x40 [ 284.737950][ T8544] ? __sys_sendmsg_sock+0x30/0x30 [ 284.743084][ T8544] ? __import_iovec+0x5f2/0x860 [ 284.747983][ T8544] ? import_iovec+0x73/0xa0 [ 284.752521][ T8544] ___sys_sendmsg+0x220/0x290 [ 284.757260][ T8544] ? __sys_sendmsg+0x270/0x270 [ 284.762119][ T8544] __se_sys_sendmsg+0x1a5/0x270 [ 284.767024][ T8544] ? __x64_sys_sendmsg+0x80/0x80 [ 284.772040][ T8544] ? lockdep_hardirqs_on+0x98/0x150 [ 284.777289][ T8544] do_syscall_64+0x55/0xb0 [ 284.781748][ T8544] ? clear_bhb_loop+0x40/0x90 [ 284.786563][ T8544] ? clear_bhb_loop+0x40/0x90 [ 284.791296][ T8544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.797229][ T8544] RIP: 0033:0x7f11dd58f6c9 [ 284.801671][ T8544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.821307][ T8544] RSP: 002b:00007f11de38f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.829760][ T8544] RAX: ffffffffffffffda RBX: 00007f11dd7e5fa0 RCX: 00007f11dd58f6c9 [ 284.837957][ T8544] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 284.845991][ T8544] RBP: 00007f11dd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.854021][ T8544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.862115][ T8544] R13: 00007f11dd7e6038 R14: 00007f11dd7e5fa0 R15: 00007ffdf9d463f8 [ 284.870142][ T8544] [ 284.988239][ T8560] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.928'. [ 285.015923][ T8560] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 285.035457][ T8560] CPU: 1 PID: 8560 Comm: syz.3.928 Not tainted syzkaller #0 [ 285.042855][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.052977][ T8560] Call Trace: [ 285.056312][ T8560] [ 285.059311][ T8560] dump_stack_lvl+0x16c/0x230 [ 285.064081][ T8560] ? show_regs_print_info+0x20/0x20 [ 285.069362][ T8560] ? load_image+0x3b0/0x3b0 [ 285.073965][ T8560] sysfs_warn_dup+0x8e/0xa0 [ 285.078542][ T8560] sysfs_do_create_link_sd+0xc0/0x110 [ 285.084004][ T8560] device_add_class_symlinks+0x1cf/0x240 [ 285.089741][ T8560] device_add+0x507/0xc20 [ 285.094163][ T8560] wiphy_register+0x1e74/0x2c00 [ 285.099139][ T8560] ? cfg80211_event_work+0x40/0x40 [ 285.104388][ T8560] ? minstrel_ht_alloc+0x88a/0x990 [ 285.109595][ T8560] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 285.115729][ T8560] ieee80211_register_hw+0x2de8/0x3b10 [ 285.121263][ T8560] ? ieee80211_register_hw+0xf11/0x3b10 [ 285.126863][ T8560] ? ieee80211_tasklet_handler+0x20/0x20 [ 285.132536][ T8560] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 285.138478][ T8560] ? __debug_object_init+0xe8/0x430 [ 285.143729][ T8560] ? __asan_memset+0x22/0x40 [ 285.148359][ T8560] ? __hrtimer_init+0x186/0x270 [ 285.153253][ T8560] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 285.159096][ T8560] ? mac80211_hwsim_free+0x220/0x220 [ 285.164430][ T8560] ? rcu_is_watching+0x15/0xb0 [ 285.169269][ T8560] ? kstrndup+0xbd/0x140 [ 285.173620][ T8560] hwsim_new_radio_nl+0xd78/0x19d0 [ 285.178793][ T8560] ? __nla_validate+0x50/0x50 [ 285.183555][ T8560] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 285.189954][ T8560] ? __nla_parse+0x40/0x50 [ 285.194445][ T8560] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 285.200837][ T8560] genl_family_rcv_msg_doit+0x209/0x2f0 [ 285.206447][ T8560] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 285.212428][ T8560] ? bpf_lsm_capable+0x9/0x10 [ 285.217158][ T8560] ? security_capable+0x89/0xb0 [ 285.222114][ T8560] genl_rcv_msg+0x60b/0x790 [ 285.226686][ T8560] ? genl_bind+0x360/0x360 [ 285.231167][ T8560] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 285.237563][ T8560] ? perf_trace_lock+0x2ed/0x380 [ 285.242616][ T8560] netlink_rcv_skb+0x216/0x480 [ 285.247428][ T8560] ? genl_bind+0x360/0x360 [ 285.251927][ T8560] ? netlink_ack+0x1110/0x1110 [ 285.256820][ T8560] ? __lock_acquire+0x7c80/0x7c80 [ 285.262159][ T8560] ? down_read+0x1ac/0x2e0 [ 285.266719][ T8560] genl_rcv+0x28/0x40 [ 285.270748][ T8560] netlink_unicast+0x751/0x8d0 [ 285.275799][ T8560] netlink_sendmsg+0x8c1/0xbe0 [ 285.280653][ T8560] ? netlink_getsockopt+0x580/0x580 [ 285.285915][ T8560] ? aa_sock_msg_perm+0x94/0x150 [ 285.290912][ T8560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.296239][ T8560] ? security_socket_sendmsg+0x80/0xa0 [ 285.301737][ T8560] ? netlink_getsockopt+0x580/0x580 [ 285.307017][ T8560] ____sys_sendmsg+0x5bf/0x950 [ 285.311868][ T8560] ? __asan_memset+0x22/0x40 [ 285.316510][ T8560] ? __sys_sendmsg_sock+0x30/0x30 [ 285.321617][ T8560] ? __import_iovec+0x5f2/0x860 [ 285.326668][ T8560] ? import_iovec+0x73/0xa0 [ 285.331237][ T8560] ___sys_sendmsg+0x220/0x290 [ 285.335968][ T8560] ? __sys_sendmsg+0x270/0x270 [ 285.340875][ T8560] __se_sys_sendmsg+0x1a5/0x270 [ 285.345781][ T8560] ? __x64_sys_sendmsg+0x80/0x80 [ 285.350799][ T8560] ? lockdep_hardirqs_on+0x98/0x150 [ 285.356044][ T8560] do_syscall_64+0x55/0xb0 [ 285.360502][ T8560] ? clear_bhb_loop+0x40/0x90 [ 285.365220][ T8560] ? clear_bhb_loop+0x40/0x90 [ 285.370109][ T8560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.376043][ T8560] RIP: 0033:0x7f1aa518f6c9 [ 285.380582][ T8560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.400226][ T8560] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.408707][ T8560] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 285.416724][ T8560] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 285.424759][ T8560] RBP: 00007f1aa5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 285.432804][ T8560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.440845][ T8560] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 285.448896][ T8560] [ 285.478963][ T8562] FAULT_INJECTION: forcing a failure. [ 285.478963][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 285.505109][ T8562] CPU: 1 PID: 8562 Comm: syz.2.927 Not tainted syzkaller #0 [ 285.507561][ T8560] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 285.512467][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.512486][ T8562] Call Trace: [ 285.512496][ T8562] [ 285.512506][ T8562] dump_stack_lvl+0x16c/0x230 [ 285.512544][ T8562] ? show_regs_print_info+0x20/0x20 [ 285.512573][ T8562] ? load_image+0x3b0/0x3b0 [ 285.512602][ T8562] ? verify_lock_unused+0x140/0x140 [ 285.512626][ T8562] ? perf_trace_lock+0xf7/0x380 [ 285.512666][ T8562] should_fail_ex+0x39d/0x4d0 [ 285.524526][ T8560] dummy0: left allmulticast mode [ 285.530497][ T8562] should_failslab+0x9/0x20 [ 285.530539][ T8562] slab_pre_alloc_hook+0x59/0x310 [ 285.530577][ T8562] kmem_cache_alloc+0x5a/0x2e0 [ 285.530604][ T8562] ? skb_clone+0x1eb/0x370 [ 285.530644][ T8562] skb_clone+0x1eb/0x370 [ 285.530683][ T8562] __netlink_deliver_tap+0x41c/0x830 [ 285.530729][ T8562] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.534679][ T8560] dummy0: left promiscuous mode [ 285.537016][ T8562] netlink_deliver_tap+0x19c/0x1b0 [ 285.537059][ T8562] netlink_sendskb+0x68/0x130 [ 285.537093][ T8562] netlink_ack+0xc7e/0x1110 [ 285.537146][ T8562] ? netlink_dump+0xde0/0xde0 [ 285.537174][ T8562] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.537204][ T8562] ? perf_trace_lock+0xf7/0x380 [ 285.537235][ T8562] ? __copy_skb_header+0xa7/0x550 [ 285.537282][ T8562] netlink_rcv_skb+0x29a/0x480 [ 285.537313][ T8562] ? rtnetlink_bind+0x80/0x80 [ 285.639128][ T8560] bridge0: port 4(dummy0) entered disabled state [ 285.639593][ T8562] ? netlink_ack+0x1110/0x1110 [ 285.639650][ T8562] ? __lock_acquire+0x7c80/0x7c80 [ 285.639686][ T8562] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.639724][ T8562] netlink_unicast+0x751/0x8d0 [ 285.639768][ T8562] netlink_sendmsg+0x8c1/0xbe0 [ 285.639817][ T8562] ? netlink_getsockopt+0x580/0x580 [ 285.639851][ T8562] ? aa_sock_msg_perm+0x94/0x150 [ 285.639881][ T8562] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.701391][ T8562] ? security_socket_sendmsg+0x80/0xa0 [ 285.706905][ T8562] ? netlink_getsockopt+0x580/0x580 [ 285.712154][ T8562] ____sys_sendmsg+0x5bf/0x950 [ 285.717076][ T8562] ? __asan_memset+0x22/0x40 [ 285.721704][ T8562] ? __sys_sendmsg_sock+0x30/0x30 [ 285.729251][ T8562] ? __import_iovec+0x5f2/0x860 [ 285.734268][ T8562] ? import_iovec+0x73/0xa0 [ 285.738945][ T8562] ___sys_sendmsg+0x220/0x290 [ 285.743894][ T8562] ? __sys_sendmsg+0x270/0x270 [ 285.749005][ T8562] ? __lock_acquire+0x7c80/0x7c80 [ 285.754127][ T8562] __se_sys_sendmsg+0x1a5/0x270 [ 285.759045][ T8562] ? __x64_sys_sendmsg+0x80/0x80 [ 285.764058][ T8562] ? lockdep_hardirqs_on+0x98/0x150 [ 285.769734][ T8562] do_syscall_64+0x55/0xb0 [ 285.774197][ T8562] ? clear_bhb_loop+0x40/0x90 [ 285.778920][ T8562] ? clear_bhb_loop+0x40/0x90 [ 285.783638][ T8562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.789570][ T8562] RIP: 0033:0x7f023458f6c9 [ 285.794031][ T8562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.813679][ T8562] RSP: 002b:00007f0235466038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.822140][ T8562] RAX: ffffffffffffffda RBX: 00007f02347e5fa0 RCX: 00007f023458f6c9 [ 285.830157][ T8562] RDX: 0000000020040040 RSI: 0000200000000080 RDI: 0000000000000003 [ 285.838183][ T8562] RBP: 00007f0235466090 R08: 0000000000000000 R09: 0000000000000000 [ 285.846194][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.854216][ T8562] R13: 00007f02347e6038 R14: 00007f02347e5fa0 R15: 00007ffd42a6f9c8 [ 285.862254][ T8562] [ 285.976658][ T8560] dummy0: entered promiscuous mode [ 286.010285][ T8560] dummy0: entered allmulticast mode [ 286.021748][ T8560] team0: Port device dummy0 added [ 286.067716][ T8564] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 286.112785][ T8564] CPU: 1 PID: 8564 Comm: syz.1.926 Not tainted syzkaller #0 [ 286.120213][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.130473][ T8564] Call Trace: [ 286.133862][ T8564] [ 286.136887][ T8564] dump_stack_lvl+0x16c/0x230 [ 286.141713][ T8564] ? show_regs_print_info+0x20/0x20 [ 286.147199][ T8564] ? load_image+0x3b0/0x3b0 [ 286.151925][ T8564] sysfs_warn_dup+0x8e/0xa0 [ 286.156561][ T8564] sysfs_do_create_link_sd+0xc0/0x110 [ 286.162076][ T8564] device_add_class_symlinks+0x1cf/0x240 [ 286.167847][ T8564] device_add+0x507/0xc20 [ 286.172331][ T8564] wiphy_register+0x1e74/0x2c00 [ 286.177409][ T8564] ? cfg80211_event_work+0x40/0x40 [ 286.182767][ T8564] ? minstrel_ht_alloc+0x88a/0x990 [ 286.188067][ T8564] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 286.194272][ T8564] ieee80211_register_hw+0x2de8/0x3b10 [ 286.199926][ T8564] ? ieee80211_register_hw+0xf11/0x3b10 [ 286.205619][ T8564] ? ieee80211_tasklet_handler+0x20/0x20 [ 286.211371][ T8564] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 286.217473][ T8564] ? __debug_object_init+0xe8/0x430 [ 286.222806][ T8564] ? __asan_memset+0x22/0x40 [ 286.227775][ T8564] ? __hrtimer_init+0x186/0x270 [ 286.232766][ T8564] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 286.238729][ T8564] ? mac80211_hwsim_free+0x220/0x220 [ 286.244284][ T8564] ? rcu_is_watching+0x15/0xb0 [ 286.249163][ T8564] ? kstrndup+0xbd/0x140 [ 286.253558][ T8564] hwsim_new_radio_nl+0xd78/0x19d0 [ 286.258793][ T8564] ? __nla_validate+0x50/0x50 [ 286.263667][ T8564] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 286.270174][ T8564] ? __nla_parse+0x40/0x50 [ 286.274732][ T8564] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 286.281206][ T8564] genl_family_rcv_msg_doit+0x209/0x2f0 [ 286.286893][ T8564] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 286.292943][ T8564] ? bpf_lsm_capable+0x9/0x10 [ 286.297724][ T8564] ? security_capable+0x89/0xb0 [ 286.302760][ T8564] genl_rcv_msg+0x60b/0x790 [ 286.307420][ T8564] ? genl_bind+0x360/0x360 [ 286.311954][ T8564] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 286.318385][ T8564] ? perf_trace_lock+0x2ed/0x380 [ 286.323502][ T8564] netlink_rcv_skb+0x216/0x480 [ 286.328378][ T8564] ? genl_bind+0x360/0x360 [ 286.332924][ T8564] ? netlink_ack+0x1110/0x1110 [ 286.337863][ T8564] ? __lock_acquire+0x7c80/0x7c80 [ 286.343041][ T8564] ? down_read+0x1ac/0x2e0 [ 286.347583][ T8564] genl_rcv+0x28/0x40 [ 286.351684][ T8564] netlink_unicast+0x751/0x8d0 [ 286.356618][ T8564] netlink_sendmsg+0x8c1/0xbe0 [ 286.361542][ T8564] ? netlink_getsockopt+0x580/0x580 [ 286.366869][ T8564] ? aa_sock_msg_perm+0x94/0x150 [ 286.372093][ T8564] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.377475][ T8564] ? security_socket_sendmsg+0x80/0xa0 [ 286.383039][ T8564] ? netlink_getsockopt+0x580/0x580 [ 286.388375][ T8564] ____sys_sendmsg+0x5bf/0x950 [ 286.393325][ T8564] ? __asan_memset+0x22/0x40 [ 286.398056][ T8564] ? __sys_sendmsg_sock+0x30/0x30 [ 286.403198][ T8564] ? __import_iovec+0x5f2/0x860 [ 286.408215][ T8564] ? import_iovec+0x73/0xa0 [ 286.412869][ T8564] ___sys_sendmsg+0x220/0x290 [ 286.417683][ T8564] ? __sys_sendmsg+0x270/0x270 [ 286.422693][ T8564] ? debug_mutex_init+0x38/0x70 [ 286.427802][ T8564] __se_sys_sendmsg+0x1a5/0x270 [ 286.432804][ T8564] ? __x64_sys_sendmsg+0x80/0x80 [ 286.437993][ T8564] ? lockdep_hardirqs_on+0x98/0x150 [ 286.443332][ T8564] do_syscall_64+0x55/0xb0 [ 286.447872][ T8564] ? clear_bhb_loop+0x40/0x90 [ 286.452658][ T8564] ? clear_bhb_loop+0x40/0x90 [ 286.457446][ T8564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.463449][ T8564] RIP: 0033:0x7f2ba2d8f6c9 [ 286.468003][ T8564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.487822][ T8564] RSP: 002b:00007f2ba3b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.496377][ T8564] RAX: ffffffffffffffda RBX: 00007f2ba2fe5fa0 RCX: 00007f2ba2d8f6c9 [ 286.504465][ T8564] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 286.512549][ T8564] RBP: 00007f2ba2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.520724][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.528804][ T8564] R13: 00007f2ba2fe6038 R14: 00007f2ba2fe5fa0 R15: 00007fff20326a08 [ 286.537011][ T8564] [ 286.603918][ T8566] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 286.674006][ T8566] dummy0: left promiscuous mode [ 286.680864][ T8566] dummy0: left allmulticast mode [ 286.693764][ T8566] team0: Port device dummy0 removed [ 286.721802][ T8566] .`: (slave dummy0): Enslaving as an active interface with an up link [ 286.736129][ T8565] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 286.750919][ T8565] dummy0: left allmulticast mode [ 286.762308][ T8565] dummy0: left promiscuous mode [ 286.772663][ T8565] bridge0: port 3(dummy0) entered disabled state [ 286.872964][ T8565] team0: Port device dummy0 added [ 286.932540][ T8569] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 286.980085][ T8569] team0: Port device dummy0 removed [ 286.993152][ T8569] .`: (slave dummy0): Enslaving as an active interface with an up link [ 287.073968][ T8586] netlink: 'syz.0.932': attribute type 7 has an invalid length. [ 287.230683][ T8591] FAULT_INJECTION: forcing a failure. [ 287.230683][ T8591] name failslab, interval 1, probability 0, space 0, times 0 [ 287.243554][ T8591] CPU: 1 PID: 8591 Comm: syz.1.936 Not tainted syzkaller #0 [ 287.250900][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.261095][ T8591] Call Trace: [ 287.264410][ T8591] [ 287.267374][ T8591] dump_stack_lvl+0x16c/0x230 [ 287.272104][ T8591] ? is_bpf_text_address+0x28f/0x2a0 [ 287.277449][ T8591] ? show_regs_print_info+0x20/0x20 [ 287.282702][ T8591] ? load_image+0x3b0/0x3b0 [ 287.287257][ T8591] ? __lock_acquire+0x1334/0x7c80 [ 287.292414][ T8591] ? stack_trace_save+0xe0/0xe0 [ 287.297321][ T8591] should_fail_ex+0x39d/0x4d0 [ 287.302052][ T8591] should_failslab+0x9/0x20 [ 287.306623][ T8591] slab_pre_alloc_hook+0x59/0x310 [ 287.311731][ T8591] kmem_cache_alloc+0x5a/0x2e0 [ 287.316584][ T8591] ? fib6_add+0x37f/0x3d20 [ 287.321074][ T8591] fib6_add+0x37f/0x3d20 [ 287.325601][ T8591] ? netlink_rcv_skb+0x216/0x480 [ 287.330614][ T8591] ? __se_sys_sendmsg+0x1a5/0x270 [ 287.335726][ T8591] ? do_syscall_64+0x55/0xb0 [ 287.340397][ T8591] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 287.346100][ T8591] ? do_raw_spin_lock+0x121/0x2c0 [ 287.351185][ T8591] ? __rwlock_init+0x150/0x150 [ 287.356010][ T8591] ? inet6_rtm_newroute+0xc41/0x1b40 [ 287.361341][ T8591] inet6_rtm_newroute+0xc5d/0x1b40 [ 287.366524][ T8591] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 287.372511][ T8591] ? rcu_is_watching+0x15/0xb0 [ 287.377353][ T8591] ? trace_contention_end+0x39/0xe0 [ 287.382738][ T8591] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 287.388746][ T8591] rtnetlink_rcv_msg+0x7c7/0xf10 [ 287.393745][ T8591] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 287.398914][ T8591] ? lockdep_hardirqs_on+0x98/0x150 [ 287.404169][ T8591] ? rtnetlink_bind+0x80/0x80 [ 287.408907][ T8591] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 287.414940][ T8591] ? __dev_queue_xmit+0x245/0x35a0 [ 287.420112][ T8591] ? lock_chain_count+0x20/0x20 [ 287.425202][ T8591] ? __local_bh_enable_ip+0x12e/0x1c0 [ 287.430630][ T8591] ? lockdep_hardirqs_on+0x98/0x150 [ 287.435859][ T8591] ? __local_bh_enable_ip+0x12e/0x1c0 [ 287.441251][ T8591] ? _local_bh_enable+0xa0/0xa0 [ 287.446173][ T8591] ? __dev_queue_xmit+0x245/0x35a0 [ 287.451334][ T8591] ? __dev_queue_xmit+0x1449/0x35a0 [ 287.456598][ T8591] ? __dev_queue_xmit+0x245/0x35a0 [ 287.461782][ T8591] ? ref_tracker_free+0x634/0x7d0 [ 287.466832][ T8591] ? __copy_skb_header+0xa7/0x550 [ 287.471915][ T8591] netlink_rcv_skb+0x216/0x480 [ 287.476739][ T8591] ? rtnetlink_bind+0x80/0x80 [ 287.481458][ T8591] ? netlink_ack+0x1110/0x1110 [ 287.486343][ T8591] ? __lock_acquire+0x7c80/0x7c80 [ 287.491509][ T8591] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.496791][ T8591] netlink_unicast+0x751/0x8d0 [ 287.501631][ T8591] netlink_sendmsg+0x8c1/0xbe0 [ 287.506536][ T8591] ? netlink_getsockopt+0x580/0x580 [ 287.511799][ T8591] ? aa_sock_msg_perm+0x94/0x150 [ 287.516779][ T8591] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 287.522881][ T8591] ? security_socket_sendmsg+0x80/0xa0 [ 287.528477][ T8591] ? netlink_getsockopt+0x580/0x580 [ 287.533800][ T8591] ____sys_sendmsg+0x5bf/0x950 [ 287.538636][ T8591] ? __asan_memset+0x22/0x40 [ 287.543281][ T8591] ? __sys_sendmsg_sock+0x30/0x30 [ 287.548366][ T8591] ? __import_iovec+0x5f2/0x860 [ 287.553482][ T8591] ? import_iovec+0x73/0xa0 [ 287.558127][ T8591] ___sys_sendmsg+0x220/0x290 [ 287.562842][ T8591] ? __sys_sendmsg+0x270/0x270 [ 287.567668][ T8591] ? __lock_acquire+0x7c80/0x7c80 [ 287.572762][ T8591] __se_sys_sendmsg+0x1a5/0x270 [ 287.577656][ T8591] ? __x64_sys_sendmsg+0x80/0x80 [ 287.582666][ T8591] ? lockdep_hardirqs_on+0x98/0x150 [ 287.588081][ T8591] do_syscall_64+0x55/0xb0 [ 287.592551][ T8591] ? clear_bhb_loop+0x40/0x90 [ 287.597288][ T8591] ? clear_bhb_loop+0x40/0x90 [ 287.602001][ T8591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.608129][ T8591] RIP: 0033:0x7f2ba2d8f6c9 [ 287.612618][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.632258][ T8591] RSP: 002b:00007f2ba3b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.640790][ T8591] RAX: ffffffffffffffda RBX: 00007f2ba2fe5fa0 RCX: 00007f2ba2d8f6c9 [ 287.648812][ T8591] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 287.656902][ T8591] RBP: 00007f2ba3b83090 R08: 0000000000000000 R09: 0000000000000000 [ 287.664920][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.672969][ T8591] R13: 00007f2ba2fe6038 R14: 00007f2ba2fe5fa0 R15: 00007fff20326a08 [ 287.681018][ T8591] [ 287.936911][ T8602] netlink: 'syz.2.941': attribute type 9 has an invalid length. [ 288.171708][ T8605] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 288.208021][ T8605] CPU: 0 PID: 8605 Comm: syz.2.942 Not tainted syzkaller #0 [ 288.215451][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.225934][ T8605] Call Trace: [ 288.229271][ T8605] [ 288.232264][ T8605] dump_stack_lvl+0x16c/0x230 [ 288.237028][ T8605] ? show_regs_print_info+0x20/0x20 [ 288.242310][ T8605] ? load_image+0x3b0/0x3b0 [ 288.246919][ T8605] sysfs_warn_dup+0x8e/0xa0 [ 288.251501][ T8605] sysfs_do_create_link_sd+0xc0/0x110 [ 288.256996][ T8605] device_add_class_symlinks+0x1cf/0x240 [ 288.262823][ T8605] device_add+0x507/0xc20 [ 288.267428][ T8605] wiphy_register+0x1e74/0x2c00 [ 288.272424][ T8605] ? cfg80211_event_work+0x40/0x40 [ 288.277631][ T8605] ? minstrel_ht_alloc+0x88a/0x990 [ 288.282930][ T8605] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 288.289185][ T8605] ieee80211_register_hw+0x2de8/0x3b10 [ 288.294783][ T8605] ? ieee80211_register_hw+0xf11/0x3b10 [ 288.300447][ T8605] ? ieee80211_tasklet_handler+0x20/0x20 [ 288.306181][ T8605] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 288.312261][ T8605] ? __debug_object_init+0xe8/0x430 [ 288.318170][ T8605] ? __asan_memset+0x22/0x40 [ 288.322933][ T8605] ? __hrtimer_init+0x186/0x270 [ 288.327881][ T8605] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 288.333757][ T8605] ? mac80211_hwsim_free+0x220/0x220 [ 288.339121][ T8605] ? rcu_is_watching+0x15/0xb0 [ 288.344050][ T8605] ? kstrndup+0xbd/0x140 [ 288.348415][ T8605] hwsim_new_radio_nl+0xd78/0x19d0 [ 288.353729][ T8605] ? __nla_validate+0x50/0x50 [ 288.358528][ T8605] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 288.365074][ T8605] ? __nla_parse+0x40/0x50 [ 288.370017][ T8605] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 288.376452][ T8605] genl_family_rcv_msg_doit+0x209/0x2f0 [ 288.382093][ T8605] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 288.388201][ T8605] ? bpf_lsm_capable+0x9/0x10 [ 288.392962][ T8605] ? security_capable+0x89/0xb0 [ 288.397964][ T8605] genl_rcv_msg+0x60b/0x790 [ 288.402582][ T8605] ? genl_bind+0x360/0x360 [ 288.407084][ T8605] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 288.413518][ T8605] ? perf_trace_lock+0x2ed/0x380 [ 288.418580][ T8605] netlink_rcv_skb+0x216/0x480 [ 288.423523][ T8605] ? genl_bind+0x360/0x360 [ 288.428034][ T8605] ? netlink_ack+0x1110/0x1110 [ 288.432921][ T8605] ? __lock_acquire+0x7c80/0x7c80 [ 288.438054][ T8605] ? down_read+0x1ac/0x2e0 [ 288.442584][ T8605] genl_rcv+0x28/0x40 [ 288.446661][ T8605] netlink_unicast+0x751/0x8d0 [ 288.451540][ T8605] netlink_sendmsg+0x8c1/0xbe0 [ 288.456409][ T8605] ? netlink_getsockopt+0x580/0x580 [ 288.461723][ T8605] ? aa_sock_msg_perm+0x94/0x150 [ 288.466740][ T8605] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 288.472098][ T8605] ? security_socket_sendmsg+0x80/0xa0 [ 288.477634][ T8605] ? netlink_getsockopt+0x580/0x580 [ 288.482909][ T8605] ____sys_sendmsg+0x5bf/0x950 [ 288.487771][ T8605] ? __asan_memset+0x22/0x40 [ 288.492429][ T8605] ? __sys_sendmsg_sock+0x30/0x30 [ 288.497532][ T8605] ? __import_iovec+0x5f2/0x860 [ 288.502569][ T8605] ? import_iovec+0x73/0xa0 [ 288.507150][ T8605] ___sys_sendmsg+0x220/0x290 [ 288.511998][ T8605] ? __sys_sendmsg+0x270/0x270 [ 288.516962][ T8605] __se_sys_sendmsg+0x1a5/0x270 [ 288.521904][ T8605] ? __x64_sys_sendmsg+0x80/0x80 [ 288.526974][ T8605] ? lockdep_hardirqs_on+0x98/0x150 [ 288.532271][ T8605] do_syscall_64+0x55/0xb0 [ 288.536854][ T8605] ? clear_bhb_loop+0x40/0x90 [ 288.541799][ T8605] ? clear_bhb_loop+0x40/0x90 [ 288.546540][ T8605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.552495][ T8605] RIP: 0033:0x7f023458f6c9 [ 288.557149][ T8605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.576987][ T8605] RSP: 002b:00007f0235466038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.585439][ T8605] RAX: ffffffffffffffda RBX: 00007f02347e5fa0 RCX: 00007f023458f6c9 [ 288.593481][ T8605] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 288.601522][ T8605] RBP: 00007f0234611f91 R08: 0000000000000000 R09: 0000000000000000 [ 288.609542][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.617562][ T8605] R13: 00007f02347e6038 R14: 00007f02347e5fa0 R15: 00007ffd42a6f9c8 [ 288.625675][ T8605] [ 288.653725][ T8609] __nla_validate_parse: 3 callbacks suppressed [ 288.653746][ T8609] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.944'. [ 288.701509][ T8605] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 288.781562][ T8605] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 288.799809][ T8605] dummy0: left promiscuous mode [ 288.811992][ T8605] dummy0: left allmulticast mode [ 288.843012][ T8605] team0: Port device dummy0 removed [ 288.890697][ T8605] .`: (slave dummy0): Enslaving as an active interface with an up link [ 289.125680][ T8619] netlink: 'syz.1.946': attribute type 10 has an invalid length. [ 289.157976][ T8619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.946'. [ 289.182206][ T8619] dummy0: entered promiscuous mode [ 289.208754][ T8619] dummy0: entered allmulticast mode [ 289.379125][ T8619] .`: (slave dummy0): Releasing backup interface [ 289.391191][ T8623] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 289.508278][ T8627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.948'. [ 289.536188][ T8619] bridge0: port 3(dummy0) entered blocking state [ 289.565258][ T8619] bridge0: port 3(dummy0) entered disabled state [ 289.599009][ T8623] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 289.607874][ T8626] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 289.656858][ T8625] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 289.740851][ T8625] .`: (slave dummy0): Releasing backup interface [ 289.848544][ T8632] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 289.850626][ T8625] dummy0: entered promiscuous mode [ 289.876753][ T8625] dummy0: entered allmulticast mode [ 289.892231][ T8625] team0: Port device dummy0 added [ 289.911542][ T8627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.948'. [ 290.036360][ T8632] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 290.049671][ T8628] netlink: 60 bytes leftover after parsing attributes in process `syz.3.948'. [ 290.095130][ T8636] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 290.684823][ T8647] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.956'. [ 290.747056][ T8647] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 290.779045][ T8647] CPU: 1 PID: 8647 Comm: syz.1.956 Not tainted syzkaller #0 [ 290.786455][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.796592][ T8647] Call Trace: [ 290.799962][ T8647] [ 290.802951][ T8647] dump_stack_lvl+0x16c/0x230 [ 290.807720][ T8647] ? show_regs_print_info+0x20/0x20 [ 290.813003][ T8647] ? load_image+0x3b0/0x3b0 [ 290.817621][ T8647] sysfs_warn_dup+0x8e/0xa0 [ 290.822268][ T8647] sysfs_do_create_link_sd+0xc0/0x110 [ 290.827743][ T8647] device_add_class_symlinks+0x1cf/0x240 [ 290.833574][ T8647] device_add+0x507/0xc20 [ 290.838027][ T8647] wiphy_register+0x1e74/0x2c00 [ 290.843016][ T8647] ? cfg80211_event_work+0x40/0x40 [ 290.848207][ T8647] ? minstrel_ht_alloc+0x88a/0x990 [ 290.853587][ T8647] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 290.859800][ T8647] ieee80211_register_hw+0x2de8/0x3b10 [ 290.865349][ T8647] ? ieee80211_register_hw+0xf11/0x3b10 [ 290.871077][ T8647] ? ieee80211_tasklet_handler+0x20/0x20 [ 290.876855][ T8647] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 290.882807][ T8647] ? __debug_object_init+0xe8/0x430 [ 290.888067][ T8647] ? __asan_memset+0x22/0x40 [ 290.892908][ T8647] ? __hrtimer_init+0x186/0x270 [ 290.897889][ T8647] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 290.903689][ T8647] ? mac80211_hwsim_free+0x220/0x220 [ 290.909035][ T8647] ? rcu_is_watching+0x15/0xb0 [ 290.913844][ T8647] ? kstrndup+0xbd/0x140 [ 290.918147][ T8647] hwsim_new_radio_nl+0xd78/0x19d0 [ 290.923327][ T8647] ? __nla_validate+0x50/0x50 [ 290.928116][ T8647] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 290.934514][ T8647] ? __nla_parse+0x40/0x50 [ 290.939163][ T8647] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 290.945551][ T8647] genl_family_rcv_msg_doit+0x209/0x2f0 [ 290.951185][ T8647] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 290.957234][ T8647] ? bpf_lsm_capable+0x9/0x10 [ 290.962045][ T8647] ? security_capable+0x89/0xb0 [ 290.966948][ T8647] genl_rcv_msg+0x60b/0x790 [ 290.971549][ T8647] ? genl_bind+0x360/0x360 [ 290.976008][ T8647] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 290.982375][ T8647] ? perf_trace_lock+0x2ed/0x380 [ 290.987379][ T8647] netlink_rcv_skb+0x216/0x480 [ 290.992280][ T8647] ? genl_bind+0x360/0x360 [ 290.996742][ T8647] ? netlink_ack+0x1110/0x1110 [ 291.001567][ T8647] ? __lock_acquire+0x7c80/0x7c80 [ 291.006664][ T8647] ? down_read+0x1ac/0x2e0 [ 291.011142][ T8647] genl_rcv+0x28/0x40 [ 291.015202][ T8647] netlink_unicast+0x751/0x8d0 [ 291.020031][ T8647] netlink_sendmsg+0x8c1/0xbe0 [ 291.024852][ T8647] ? netlink_getsockopt+0x580/0x580 [ 291.030130][ T8647] ? aa_sock_msg_perm+0x94/0x150 [ 291.035209][ T8647] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 291.040548][ T8647] ? security_socket_sendmsg+0x80/0xa0 [ 291.046039][ T8647] ? netlink_getsockopt+0x580/0x580 [ 291.051282][ T8647] ____sys_sendmsg+0x5bf/0x950 [ 291.056102][ T8647] ? __asan_memset+0x22/0x40 [ 291.060745][ T8647] ? __sys_sendmsg_sock+0x30/0x30 [ 291.065813][ T8647] ? __import_iovec+0x5f2/0x860 [ 291.070727][ T8647] ? import_iovec+0x73/0xa0 [ 291.075300][ T8647] ___sys_sendmsg+0x220/0x290 [ 291.080058][ T8647] ? __sys_sendmsg+0x270/0x270 [ 291.084956][ T8647] __se_sys_sendmsg+0x1a5/0x270 [ 291.089867][ T8647] ? __x64_sys_sendmsg+0x80/0x80 [ 291.094875][ T8647] ? lockdep_hardirqs_on+0x98/0x150 [ 291.100140][ T8647] do_syscall_64+0x55/0xb0 [ 291.104615][ T8647] ? clear_bhb_loop+0x40/0x90 [ 291.109326][ T8647] ? clear_bhb_loop+0x40/0x90 [ 291.114048][ T8647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.119977][ T8647] RIP: 0033:0x7f2ba2d8f6c9 [ 291.124451][ T8647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.144246][ T8647] RSP: 002b:00007f2ba3b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.152733][ T8647] RAX: ffffffffffffffda RBX: 00007f2ba2fe5fa0 RCX: 00007f2ba2d8f6c9 [ 291.160740][ T8647] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 291.168750][ T8647] RBP: 00007f2ba2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.176783][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.184897][ T8647] R13: 00007f2ba2fe6038 R14: 00007f2ba2fe5fa0 R15: 00007fff20326a08 [ 291.192968][ T8647] [ 291.291897][ T8649] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.955'. [ 291.451684][ T8650] dummy0: left allmulticast mode [ 291.464144][ T8650] dummy0: left promiscuous mode [ 291.477951][ T8650] bridge0: port 3(dummy0) entered disabled state [ 291.541107][ T8650] team0: Port device dummy0 added [ 291.746746][ T8647] team0: Port device dummy0 removed [ 291.785433][ T8647] .`: (slave dummy0): Enslaving as an active interface with an up link [ 291.797456][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 291.855165][ T8656] team0: Port device dummy0 removed [ 291.921996][ T8656] bridge0: port 4(dummy0) entered blocking state [ 291.935352][ T8656] bridge0: port 4(dummy0) entered disabled state [ 292.217280][ T8659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.959'. [ 292.235196][ T8659] dummy0: entered promiscuous mode [ 292.274030][ T8659] dummy0: entered allmulticast mode [ 292.342999][ T8659] .`: (slave dummy0): Releasing backup interface [ 292.420233][ T8659] bridge0: port 3(dummy0) entered blocking state [ 292.427699][ T8659] bridge0: port 3(dummy0) entered disabled state [ 292.572578][ T8665] dummy0: left allmulticast mode [ 292.577778][ T8665] dummy0: left promiscuous mode [ 292.610584][ T8665] bridge0: port 4(dummy0) entered disabled state [ 292.630895][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.962'. [ 292.672333][ T8665] dummy0: entered promiscuous mode [ 292.686425][ T8665] dummy0: entered allmulticast mode [ 292.708603][ T8665] team0: Port device dummy0 added [ 293.017223][ T8675] FAULT_INJECTION: forcing a failure. [ 293.017223][ T8675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.040204][ T8675] CPU: 1 PID: 8675 Comm: syz.3.966 Not tainted syzkaller #0 [ 293.047595][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.057723][ T8675] Call Trace: [ 293.061064][ T8675] [ 293.064049][ T8675] dump_stack_lvl+0x16c/0x230 [ 293.068797][ T8675] ? show_regs_print_info+0x20/0x20 [ 293.074061][ T8675] ? load_image+0x3b0/0x3b0 [ 293.078627][ T8675] ? __might_fault+0xaa/0x120 [ 293.083364][ T8675] ? __lock_acquire+0x7c80/0x7c80 [ 293.088463][ T8675] should_fail_ex+0x39d/0x4d0 [ 293.093308][ T8675] _copy_from_user+0x2f/0xe0 [ 293.097973][ T8675] ___sys_sendmsg+0x159/0x290 [ 293.102760][ T8675] ? __sys_sendmsg+0x270/0x270 [ 293.107646][ T8675] ? __lock_acquire+0x7c80/0x7c80 [ 293.112789][ T8675] __se_sys_sendmsg+0x1a5/0x270 [ 293.117728][ T8675] ? __x64_sys_sendmsg+0x80/0x80 [ 293.122771][ T8675] ? lockdep_hardirqs_on+0x98/0x150 [ 293.128041][ T8675] do_syscall_64+0x55/0xb0 [ 293.132527][ T8675] ? clear_bhb_loop+0x40/0x90 [ 293.137260][ T8675] ? clear_bhb_loop+0x40/0x90 [ 293.142014][ T8675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.148116][ T8675] RIP: 0033:0x7f1aa518f6c9 [ 293.152602][ T8675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.172682][ T8675] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.181172][ T8675] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 293.189225][ T8675] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 293.197252][ T8675] RBP: 00007f1aa60b8090 R08: 0000000000000000 R09: 0000000000000000 [ 293.205370][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.213417][ T8675] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 293.221582][ T8675] [ 293.263601][ T8677] dummy0: entered promiscuous mode [ 293.282295][ T8677] dummy0: entered allmulticast mode [ 293.843698][ T8677] .`: (slave dummy0): Releasing backup interface [ 293.888364][ T8677] bridge0: port 4(dummy0) entered blocking state [ 293.897698][ T8677] bridge0: port 4(dummy0) entered disabled state [ 293.917668][ T8682] validate_nla: 6 callbacks suppressed [ 293.917684][ T8682] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 293.973742][ T8675] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 293.989602][ T8675] dummy0: left promiscuous mode [ 293.998324][ T8675] dummy0: left allmulticast mode [ 294.072932][ T8675] team0: Port device dummy0 removed [ 294.086694][ T8675] .`: (slave dummy0): Enslaving as an active interface with an up link [ 294.122192][ T8683] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 294.141141][ T8683] CPU: 0 PID: 8683 Comm: syz.1.968 Not tainted syzkaller #0 [ 294.148522][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.158634][ T8683] Call Trace: [ 294.161968][ T8683] [ 294.164955][ T8683] dump_stack_lvl+0x16c/0x230 [ 294.169708][ T8683] ? show_regs_print_info+0x20/0x20 [ 294.174968][ T8683] ? load_image+0x3b0/0x3b0 [ 294.179545][ T8683] sysfs_warn_dup+0x8e/0xa0 [ 294.184109][ T8683] sysfs_do_create_link_sd+0xc0/0x110 [ 294.189548][ T8683] device_add_class_symlinks+0x1cf/0x240 [ 294.195270][ T8683] device_add+0x507/0xc20 [ 294.199690][ T8683] wiphy_register+0x1e74/0x2c00 [ 294.204639][ T8683] ? cfg80211_event_work+0x40/0x40 [ 294.209808][ T8683] ? minstrel_ht_alloc+0x88a/0x990 [ 294.215001][ T8683] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 294.221146][ T8683] ieee80211_register_hw+0x2de8/0x3b10 [ 294.226698][ T8683] ? ieee80211_register_hw+0xf11/0x3b10 [ 294.232417][ T8683] ? ieee80211_tasklet_handler+0x20/0x20 [ 294.238130][ T8683] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 294.244100][ T8683] ? __debug_object_init+0xe8/0x430 [ 294.249373][ T8683] ? __asan_memset+0x22/0x40 [ 294.254046][ T8683] ? __hrtimer_init+0x186/0x270 [ 294.258974][ T8683] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 294.264774][ T8683] ? mac80211_hwsim_free+0x220/0x220 [ 294.270099][ T8683] ? rcu_is_watching+0x15/0xb0 [ 294.274897][ T8683] ? kstrndup+0xbd/0x140 [ 294.279653][ T8683] hwsim_new_radio_nl+0xd78/0x19d0 [ 294.284981][ T8683] ? __nla_validate+0x50/0x50 [ 294.289721][ T8683] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 294.296149][ T8683] ? __nla_parse+0x40/0x50 [ 294.300701][ T8683] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 294.307361][ T8683] genl_family_rcv_msg_doit+0x209/0x2f0 [ 294.312980][ T8683] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 294.319022][ T8683] ? bpf_lsm_capable+0x9/0x10 [ 294.323825][ T8683] ? security_capable+0x89/0xb0 [ 294.328750][ T8683] genl_rcv_msg+0x60b/0x790 [ 294.333297][ T8683] ? genl_bind+0x360/0x360 [ 294.337925][ T8683] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 294.344324][ T8683] ? perf_trace_lock+0x2ed/0x380 [ 294.349329][ T8683] netlink_rcv_skb+0x216/0x480 [ 294.354233][ T8683] ? genl_bind+0x360/0x360 [ 294.358701][ T8683] ? netlink_ack+0x1110/0x1110 [ 294.363550][ T8683] ? __lock_acquire+0x7c80/0x7c80 [ 294.368627][ T8683] ? down_read+0x1ac/0x2e0 [ 294.373269][ T8683] genl_rcv+0x28/0x40 [ 294.377376][ T8683] netlink_unicast+0x751/0x8d0 [ 294.382228][ T8683] netlink_sendmsg+0x8c1/0xbe0 [ 294.387185][ T8683] ? netlink_getsockopt+0x580/0x580 [ 294.392438][ T8683] ? aa_sock_msg_perm+0x94/0x150 [ 294.397673][ T8683] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 294.403197][ T8683] ? security_socket_sendmsg+0x80/0xa0 [ 294.408703][ T8683] ? netlink_getsockopt+0x580/0x580 [ 294.413971][ T8683] ____sys_sendmsg+0x5bf/0x950 [ 294.418870][ T8683] ? __asan_memset+0x22/0x40 [ 294.423519][ T8683] ? __sys_sendmsg_sock+0x30/0x30 [ 294.428588][ T8683] ? __import_iovec+0x5f2/0x860 [ 294.433597][ T8683] ? import_iovec+0x73/0xa0 [ 294.438141][ T8683] ___sys_sendmsg+0x220/0x290 [ 294.442875][ T8683] ? __sys_sendmsg+0x270/0x270 [ 294.447805][ T8683] __se_sys_sendmsg+0x1a5/0x270 [ 294.452695][ T8683] ? __x64_sys_sendmsg+0x80/0x80 [ 294.457692][ T8683] ? lockdep_hardirqs_on+0x98/0x150 [ 294.462963][ T8683] do_syscall_64+0x55/0xb0 [ 294.467408][ T8683] ? clear_bhb_loop+0x40/0x90 [ 294.472109][ T8683] ? clear_bhb_loop+0x40/0x90 [ 294.476822][ T8683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.482746][ T8683] RIP: 0033:0x7f2ba2d8f6c9 [ 294.487192][ T8683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.506867][ T8683] RSP: 002b:00007f2ba3b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.515430][ T8683] RAX: ffffffffffffffda RBX: 00007f2ba2fe5fa0 RCX: 00007f2ba2d8f6c9 [ 294.523427][ T8683] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 294.531420][ T8683] RBP: 00007f2ba2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.539414][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.547406][ T8683] R13: 00007f2ba2fe6038 R14: 00007f2ba2fe5fa0 R15: 00007fff20326a08 [ 294.555421][ T8683] [ 294.587082][ T8685] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 294.601661][ T8685] dummy0: left allmulticast mode [ 294.622404][ T8685] dummy0: left promiscuous mode [ 294.627587][ T8685] bridge0: port 3(dummy0) entered disabled state [ 294.666805][ T8685] team0: Port device dummy0 added [ 294.687209][ T8688] netlink: 'syz.1.968': attribute type 10 has an invalid length. [ 294.805786][ T8688] team0: Port device dummy0 removed [ 294.833211][ T8688] .`: (slave dummy0): Enslaving as an active interface with an up link [ 294.846306][ T8695] netlink: 'syz.2.969': attribute type 10 has an invalid length. [ 294.854758][ T8695] __nla_validate_parse: 5 callbacks suppressed [ 294.854778][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.969'. [ 294.880723][ T8695] bridge0: port 4(dummy0) entered blocking state [ 294.887337][ T8695] bridge0: port 4(dummy0) entered forwarding state [ 295.103443][ T8703] FAULT_INJECTION: forcing a failure. [ 295.103443][ T8703] name failslab, interval 1, probability 0, space 0, times 0 [ 295.118140][ T8703] CPU: 1 PID: 8703 Comm: syz.3.975 Not tainted syzkaller #0 [ 295.125580][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.135809][ T8703] Call Trace: [ 295.139141][ T8703] [ 295.142105][ T8703] dump_stack_lvl+0x16c/0x230 [ 295.146840][ T8703] ? show_regs_print_info+0x20/0x20 [ 295.152089][ T8703] ? load_image+0x3b0/0x3b0 [ 295.156639][ T8703] ? __might_sleep+0xe0/0xe0 [ 295.161282][ T8703] ? __lock_acquire+0x7c80/0x7c80 [ 295.166355][ T8703] should_fail_ex+0x39d/0x4d0 [ 295.171095][ T8703] should_failslab+0x9/0x20 [ 295.175649][ T8703] slab_pre_alloc_hook+0x59/0x310 [ 295.180765][ T8703] ? __get_vm_area_node+0x125/0x370 [ 295.186020][ T8703] __kmem_cache_alloc_node+0x53/0x260 [ 295.191452][ T8703] ? __get_vm_area_node+0x125/0x370 [ 295.196708][ T8703] kmalloc_node_trace+0x26/0xe0 [ 295.201612][ T8703] __get_vm_area_node+0x125/0x370 [ 295.206699][ T8703] __vmalloc_node_range+0x36e/0x1320 [ 295.212034][ T8703] ? netlink_sendmsg+0x5f3/0xbe0 [ 295.217019][ T8703] ? netlink_insert+0x106a/0x1370 [ 295.222116][ T8703] ? netlink_insert+0x2b3/0x1370 [ 295.227111][ T8703] ? netlink_data_ready+0x10/0x10 [ 295.232189][ T8703] ? free_vm_area+0x50/0x50 [ 295.236757][ T8703] ? netlink_sendmsg+0x5f3/0xbe0 [ 295.241748][ T8703] vmalloc+0x79/0x90 [ 295.245704][ T8703] ? netlink_sendmsg+0x5f3/0xbe0 [ 295.250702][ T8703] netlink_sendmsg+0x5f3/0xbe0 [ 295.255529][ T8703] ? netlink_getsockopt+0x580/0x580 [ 295.260782][ T8703] ? aa_sock_msg_perm+0x94/0x150 [ 295.265765][ T8703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 295.271096][ T8703] ? security_socket_sendmsg+0x80/0xa0 [ 295.276605][ T8703] sock_write_iter+0x2bb/0x3f0 [ 295.281435][ T8703] ? sock_read_iter+0x3b0/0x3b0 [ 295.286344][ T8703] ? common_file_perm+0x198/0x1f0 [ 295.291427][ T8703] vfs_write+0x43b/0x940 [ 295.295738][ T8703] ? file_end_write+0x250/0x250 [ 295.300642][ T8703] ? __fget_files+0x44a/0x4d0 [ 295.305381][ T8703] ? __fdget_pos+0x1d8/0x330 [ 295.310023][ T8703] ? ksys_write+0x75/0x250 [ 295.314578][ T8703] ksys_write+0x147/0x250 [ 295.319219][ T8703] ? __ia32_sys_read+0x90/0x90 [ 295.324029][ T8703] ? lockdep_hardirqs_on+0x98/0x150 [ 295.329285][ T8703] do_syscall_64+0x55/0xb0 [ 295.333771][ T8703] ? clear_bhb_loop+0x40/0x90 [ 295.338581][ T8703] ? clear_bhb_loop+0x40/0x90 [ 295.343319][ T8703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.349263][ T8703] RIP: 0033:0x7f1aa518f6c9 [ 295.353717][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.373723][ T8703] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.382463][ T8703] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 295.390915][ T8703] RDX: 000000000000fe33 RSI: 0000200000000240 RDI: 0000000000000003 [ 295.398931][ T8703] RBP: 00007f1aa60b8090 R08: 0000000000000000 R09: 0000000000000000 [ 295.407027][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.415057][ T8703] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 295.423101][ T8703] [ 295.498895][ T8703] syz.3.975: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 295.516157][ T8709] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.977'. [ 295.539064][ T8703] CPU: 1 PID: 8703 Comm: syz.3.975 Not tainted syzkaller #0 [ 295.546439][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.556547][ T8703] Call Trace: [ 295.559872][ T8703] [ 295.562864][ T8703] dump_stack_lvl+0x16c/0x230 [ 295.568044][ T8703] ? show_regs_print_info+0x20/0x20 [ 295.573312][ T8703] ? load_image+0x3b0/0x3b0 [ 295.583512][ T8703] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.590013][ T8703] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 295.596590][ T8703] warn_alloc+0x210/0x300 [ 295.601027][ T8703] ? __get_vm_area_node+0x125/0x370 [ 295.606292][ T8703] ? zone_watermark_ok_safe+0x230/0x230 [ 295.612000][ T8703] ? rcu_is_watching+0x15/0xb0 [ 295.616834][ T8703] ? __get_vm_area_node+0x356/0x370 [ 295.622101][ T8703] __vmalloc_node_range+0x393/0x1320 [ 295.627456][ T8703] ? netlink_insert+0x106a/0x1370 [ 295.632628][ T8703] ? netlink_insert+0x2b3/0x1370 [ 295.637623][ T8703] ? netlink_data_ready+0x10/0x10 [ 295.642702][ T8703] ? free_vm_area+0x50/0x50 [ 295.647259][ T8703] ? netlink_sendmsg+0x5f3/0xbe0 [ 295.652417][ T8703] vmalloc+0x79/0x90 [ 295.656355][ T8703] ? netlink_sendmsg+0x5f3/0xbe0 [ 295.661343][ T8703] netlink_sendmsg+0x5f3/0xbe0 [ 295.666168][ T8703] ? netlink_getsockopt+0x580/0x580 [ 295.671417][ T8703] ? aa_sock_msg_perm+0x94/0x150 [ 295.676383][ T8703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 295.681841][ T8703] ? security_socket_sendmsg+0x80/0xa0 [ 295.687336][ T8703] sock_write_iter+0x2bb/0x3f0 [ 295.692392][ T8703] ? sock_read_iter+0x3b0/0x3b0 [ 295.697273][ T8703] ? common_file_perm+0x198/0x1f0 [ 295.702327][ T8703] vfs_write+0x43b/0x940 [ 295.706605][ T8703] ? file_end_write+0x250/0x250 [ 295.711485][ T8703] ? __fget_files+0x44a/0x4d0 [ 295.716421][ T8703] ? __fdget_pos+0x1d8/0x330 [ 295.721062][ T8703] ? ksys_write+0x75/0x250 [ 295.725511][ T8703] ksys_write+0x147/0x250 [ 295.729875][ T8703] ? __ia32_sys_read+0x90/0x90 [ 295.734664][ T8703] ? lockdep_hardirqs_on+0x98/0x150 [ 295.739977][ T8703] do_syscall_64+0x55/0xb0 [ 295.744433][ T8703] ? clear_bhb_loop+0x40/0x90 [ 295.749223][ T8703] ? clear_bhb_loop+0x40/0x90 [ 295.753926][ T8703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.759966][ T8703] RIP: 0033:0x7f1aa518f6c9 [ 295.764407][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.784123][ T8703] RSP: 002b:00007f1aa60b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.792566][ T8703] RAX: ffffffffffffffda RBX: 00007f1aa53e5fa0 RCX: 00007f1aa518f6c9 [ 295.800568][ T8703] RDX: 000000000000fe33 RSI: 0000200000000240 RDI: 0000000000000003 [ 295.808564][ T8703] RBP: 00007f1aa60b8090 R08: 0000000000000000 R09: 0000000000000000 [ 295.816559][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.824585][ T8703] R13: 00007f1aa53e6038 R14: 00007f1aa53e5fa0 R15: 00007ffe774b40e8 [ 295.832590][ T8703] [ 295.863863][ T8703] Mem-Info: [ 295.867108][ T8703] active_anon:22911 inactive_anon:0 isolated_anon:0 [ 295.867108][ T8703] active_file:18603 inactive_file:39956 isolated_file:0 [ 295.867108][ T8703] unevictable:768 dirty:317 writeback:0 [ 295.867108][ T8703] slab_reclaimable:10159 slab_unreclaimable:91166 [ 295.867108][ T8703] mapped:34622 shmem:17439 pagetables:564 [ 295.867108][ T8703] sec_pagetables:0 bounce:0 [ 295.867108][ T8703] kernel_misc_reclaimable:0 [ 295.867108][ T8703] free:1334348 free_pcp:6515 free_cma:0 [ 295.923660][ T8714] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.976'. [ 295.954707][ T8714] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 295.978759][ T8714] CPU: 0 PID: 8714 Comm: syz.1.976 Not tainted syzkaller #0 [ 295.986145][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.996280][ T8714] Call Trace: [ 295.999678][ T8714] [ 296.002637][ T8714] dump_stack_lvl+0x16c/0x230 [ 296.007353][ T8714] ? show_regs_print_info+0x20/0x20 [ 296.012638][ T8714] ? load_image+0x3b0/0x3b0 [ 296.017178][ T8714] sysfs_warn_dup+0x8e/0xa0 [ 296.021720][ T8714] sysfs_do_create_link_sd+0xc0/0x110 [ 296.027145][ T8714] device_add_class_symlinks+0x1cf/0x240 [ 296.032837][ T8714] device_add+0x507/0xc20 [ 296.037216][ T8714] wiphy_register+0x1e74/0x2c00 [ 296.042125][ T8714] ? cfg80211_event_work+0x40/0x40 [ 296.047268][ T8714] ? minstrel_ht_alloc+0x88a/0x990 [ 296.052416][ T8714] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 296.058515][ T8714] ieee80211_register_hw+0x2de8/0x3b10 [ 296.064018][ T8714] ? ieee80211_register_hw+0xf11/0x3b10 [ 296.069599][ T8714] ? ieee80211_tasklet_handler+0x20/0x20 [ 296.075258][ T8714] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 296.081197][ T8714] ? __debug_object_init+0xe8/0x430 [ 296.086426][ T8714] ? __asan_memset+0x22/0x40 [ 296.091064][ T8714] ? __hrtimer_init+0x186/0x270 [ 296.095946][ T8714] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 296.101744][ T8714] ? mac80211_hwsim_free+0x220/0x220 [ 296.107047][ T8714] ? rcu_is_watching+0x15/0xb0 [ 296.111836][ T8714] ? kstrndup+0xbd/0x140 [ 296.116138][ T8714] hwsim_new_radio_nl+0xd78/0x19d0 [ 296.121373][ T8714] ? __nla_validate+0x50/0x50 [ 296.126099][ T8714] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 296.132489][ T8714] ? __nla_parse+0x40/0x50 [ 296.137029][ T8714] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 296.143400][ T8714] genl_family_rcv_msg_doit+0x209/0x2f0 [ 296.148989][ T8714] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 296.154926][ T8714] ? bpf_lsm_capable+0x9/0x10 [ 296.159653][ T8714] ? security_capable+0x89/0xb0 [ 296.164563][ T8714] genl_rcv_msg+0x60b/0x790 [ 296.169118][ T8714] ? genl_bind+0x360/0x360 [ 296.173594][ T8714] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 296.179962][ T8714] ? ref_tracker_free+0x634/0x7d0 [ 296.185025][ T8714] netlink_rcv_skb+0x216/0x480 [ 296.189834][ T8714] ? genl_bind+0x360/0x360 [ 296.194291][ T8714] ? netlink_ack+0x1110/0x1110 [ 296.199101][ T8714] ? __lock_acquire+0x7c80/0x7c80 [ 296.204163][ T8714] ? down_read+0x1ac/0x2e0 [ 296.208628][ T8714] genl_rcv+0x28/0x40 [ 296.212763][ T8714] netlink_unicast+0x751/0x8d0 [ 296.217598][ T8714] netlink_sendmsg+0x8c1/0xbe0 [ 296.222439][ T8714] ? netlink_getsockopt+0x580/0x580 [ 296.227683][ T8714] ? aa_sock_msg_perm+0x94/0x150 [ 296.232684][ T8714] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 296.238021][ T8714] ? security_socket_sendmsg+0x80/0xa0 [ 296.243508][ T8714] ? netlink_getsockopt+0x580/0x580 [ 296.248743][ T8714] ____sys_sendmsg+0x5bf/0x950 [ 296.254002][ T8714] ? __asan_memset+0x22/0x40 [ 296.258661][ T8714] ? __sys_sendmsg_sock+0x30/0x30 [ 296.263760][ T8714] ? __import_iovec+0x5f2/0x860 [ 296.268716][ T8714] ? import_iovec+0x73/0xa0 [ 296.273261][ T8714] ___sys_sendmsg+0x220/0x290 [ 296.277973][ T8714] ? __sys_sendmsg+0x270/0x270 [ 296.282869][ T8714] __se_sys_sendmsg+0x1a5/0x270 [ 296.287781][ T8714] ? __x64_sys_sendmsg+0x80/0x80 [ 296.292806][ T8714] ? lockdep_hardirqs_on+0x98/0x150 [ 296.298038][ T8714] do_syscall_64+0x55/0xb0 [ 296.302486][ T8714] ? clear_bhb_loop+0x40/0x90 [ 296.307218][ T8714] ? clear_bhb_loop+0x40/0x90 [ 296.311961][ T8714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.317893][ T8714] RIP: 0033:0x7f2ba2d8f6c9 [ 296.322340][ T8714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.342251][ T8714] RSP: 002b:00007f2ba3b62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.350697][ T8714] RAX: ffffffffffffffda RBX: 00007f2ba2fe6090 RCX: 00007f2ba2d8f6c9 [ 296.358706][ T8714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 296.366701][ T8714] RBP: 00007f2ba2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.374696][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.382688][ T8714] R13: 00007f2ba2fe6128 R14: 00007f2ba2fe6090 R15: 00007fff20326a08 [ 296.390702][ T8714] [ 296.409373][ T8703] Node 0 active_anon:92844kB inactive_anon:0kB active_file:74412kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133988kB dirty:1264kB writeback:0kB shmem:69420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11232kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no [ 296.508827][ T8703] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 296.628216][ T8703] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.696623][ T8703] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 296.705454][ T8703] Node 0 DMA32 free:1428800kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:87296kB inactive_anon:0kB active_file:74412kB inactive_file:158288kB unevictable:1536kB writepending:1276kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:18616kB local_pcp:3404kB free_cma:0kB [ 296.750356][ T8703] lowmem_reserve[]: 0 0 1 1 1 [ 296.755195][ T8703] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.760335][ T8717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.979'. [ 296.825766][ T8710] netlink: 'syz.1.976': attribute type 10 has an invalid length. [ 296.834706][ T8703] lowmem_reserve[]: 0 0 0 0 0 [ 296.845731][ T8703] Node 1 Normal free:3890976kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19744kB local_pcp:12320kB free_cma:0kB [ 296.890072][ T8703] lowmem_reserve[]: 0 0 0 0 0 [ 296.894960][ T8703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.916635][ T8703] Node 0 DMA32: 24*4kB (UM) 1004*8kB (UE) 630*16kB (UME) 949*32kB (UE) 204*64kB (UE) 53*128kB (UME) 24*256kB (UME) 25*512kB (UM) 26*1024kB (UME) 10*2048kB (UM) 316*4096kB (UM) = 1428800kB [ 296.937900][ T8710] .`: (slave dummy0): Releasing backup interface [ 296.952141][ T8703] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.968461][ T8703] Node 1 Normal: 238*4kB (UME) 59*8kB (UME) 37*16kB (UME) 100*32kB (UME) 39*64kB (UE) 8*128kB (UME) 1*256kB (E) 2*512kB (ME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3890976kB [ 296.998455][ T8703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.014873][ T8703] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.026767][ T8703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.044590][ T8703] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.053610][ T8710] team0: Port device dummy0 added [ 297.082505][ T8703] 72033 total pagecache pages [ 297.101265][ T8703] 0 pages in swap cache [ 297.103908][ T8714] netlink: 'syz.1.976': attribute type 10 has an invalid length. [ 297.114189][ T8703] Free swap = 124996kB [ 297.122889][ T8703] Total swap = 124996kB [ 297.140635][ T8714] team0: Port device dummy0 removed [ 297.145717][ T8703] 2097051 pages RAM [ 297.155256][ T8703] 0 pages HighMem/MovableOnly [ 297.162458][ T8703] 416137 pages reserved [ 297.166831][ T8703] 0 pages cma reserved [ 297.176394][ T8714] .`: (slave dummy0): Enslaving as an active interface with an up link [ 297.428541][ T8724] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 297.455836][ T8730] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.983'. [ 297.493376][ T8724] bridge0: port 4(dummy0) entered disabled state [ 297.544536][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.981'. [ 297.581262][ T8724] dummy0: left allmulticast mode [ 297.586534][ T8724] dummy0: left promiscuous mode [ 297.659671][ T8724] bridge0: port 4(dummy0) entered disabled state [ 297.687181][ T8724] dummy0: entered promiscuous mode [ 297.693678][ T8724] dummy0: entered allmulticast mode [ 297.705225][ T8724] team0: Port device dummy0 added [ 297.732896][ T8733] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 297.748493][ T8733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 297.798849][ T8733] team0: Port device dummy0 removed [ 297.815161][ T8733] bridge0: port 3(dummy0) entered blocking state [ 297.839116][ T8733] bridge0: port 3(dummy0) entered disabled state [ 297.866276][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.981'. [ 297.900773][ T8732] netlink: 'syz.1.983': attribute type 10 has an invalid length. [ 298.033355][ T8732] .`: (slave dummy0): Releasing backup interface [ 298.195091][ T8747] FAULT_INJECTION: forcing a failure. [ 298.195091][ T8747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.214985][ T8747] CPU: 0 PID: 8747 Comm: syz.0.987 Not tainted syzkaller #0 [ 298.222365][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.232475][ T8747] Call Trace: [ 298.235800][ T8747] [ 298.238770][ T8747] dump_stack_lvl+0x16c/0x230 [ 298.243507][ T8747] ? show_regs_print_info+0x20/0x20 [ 298.248762][ T8747] ? load_image+0x3b0/0x3b0 [ 298.253329][ T8747] ? __might_fault+0xaa/0x120 [ 298.258050][ T8747] ? __lock_acquire+0x7c80/0x7c80 [ 298.263129][ T8747] ? __might_fault+0xaa/0x120 [ 298.267254][ T8732] team0: Port device dummy0 added [ 298.267838][ T8747] should_fail_ex+0x39d/0x4d0 [ 298.267882][ T8747] _copy_from_iter+0x1d3/0x1290 [ 298.267913][ T8747] ? __might_fault+0xaa/0x120 [ 298.267939][ T8747] ? _copy_from_iter+0x248/0x1290 [ 298.267967][ T8747] ? __virt_addr_valid+0x18c/0x540 [ 298.267997][ T8747] ? __lock_acquire+0x7c80/0x7c80 [ 298.268023][ T8747] ? copyout_mc+0x70/0x70 [ 298.268056][ T8747] ? copyout_mc+0x70/0x70 [ 298.268082][ T8747] ? __virt_addr_valid+0x18c/0x540 [ 298.268115][ T8747] ? page_copy_sane+0x16a/0x270 [ 298.268149][ T8747] copy_page_from_iter+0x7b/0x100 [ 298.268183][ T8747] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 298.268226][ T8747] tun_get_user+0x1583/0x3bf0 [ 298.268269][ T8747] ? trace_event_raw_event_lock+0x230/0x230 [ 298.268306][ T8747] ? aa_file_perm+0x120/0xec0 [ 298.268334][ T8747] ? aa_file_perm+0x3e8/0xec0 [ 298.268363][ T8747] ? rcu_read_unlock+0xa0/0xa0 [ 298.268405][ T8747] ? tun_get+0x1c/0x2e0 [ 298.268435][ T8747] ? __lock_acquire+0x7c80/0x7c80 [ 298.268467][ T8747] ? tun_get+0x1c/0x2e0 [ 298.268504][ T8747] tun_chr_write_iter+0x119/0x200 [ 298.268536][ T8747] vfs_write+0x43b/0x940 [ 298.268573][ T8747] ? file_end_write+0x250/0x250 [ 298.268607][ T8747] ? __fget_files+0x44a/0x4d0 [ 298.268647][ T8747] ? __fdget_pos+0x1d8/0x330 [ 298.268670][ T8747] ? ksys_write+0x75/0x250 [ 298.268700][ T8747] ksys_write+0x147/0x250 [ 298.403232][ T8747] ? __ia32_sys_read+0x90/0x90 [ 298.408039][ T8747] ? lockdep_hardirqs_on+0x98/0x150 [ 298.413277][ T8747] do_syscall_64+0x55/0xb0 [ 298.417736][ T8747] ? clear_bhb_loop+0x40/0x90 [ 298.422456][ T8747] ? clear_bhb_loop+0x40/0x90 [ 298.427235][ T8747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.433185][ T8747] RIP: 0033:0x7f11dd58f6c9 [ 298.437629][ T8747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.457468][ T8747] RSP: 002b:00007f11de38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.465917][ T8747] RAX: ffffffffffffffda RBX: 00007f11dd7e5fa0 RCX: 00007f11dd58f6c9 [ 298.473931][ T8747] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 298.481948][ T8747] RBP: 00007f11de38f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.489958][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.497954][ T8747] R13: 00007f11dd7e6038 R14: 00007f11dd7e5fa0 R15: 00007ffdf9d463f8 [ 298.505969][ T8747] [ 298.608001][ T8739] team0: Port device dummy0 removed [ 298.622455][ T8739] .`: (slave dummy0): Enslaving as an active interface with an up link [ 298.645899][ T8736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.981'. [ 298.690162][ T8730] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 298.712472][ T8730] CPU: 0 PID: 8730 Comm: syz.1.983 Not tainted syzkaller #0 [ 298.719888][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.730020][ T8730] Call Trace: [ 298.733361][ T8730] [ 298.736340][ T8730] dump_stack_lvl+0x16c/0x230 [ 298.741090][ T8730] ? show_regs_print_info+0x20/0x20 [ 298.746370][ T8730] ? load_image+0x3b0/0x3b0 [ 298.750981][ T8730] sysfs_warn_dup+0x8e/0xa0 [ 298.755591][ T8730] sysfs_do_create_link_sd+0xc0/0x110 [ 298.761042][ T8730] device_add_class_symlinks+0x1cf/0x240 [ 298.766759][ T8730] device_add+0x507/0xc20 [ 298.771169][ T8730] wiphy_register+0x1e74/0x2c00 [ 298.776126][ T8730] ? cfg80211_event_work+0x40/0x40 [ 298.781315][ T8730] ? minstrel_ht_alloc+0x88a/0x990 [ 298.786532][ T8730] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 298.792652][ T8730] ieee80211_register_hw+0x2de8/0x3b10 [ 298.798212][ T8730] ? ieee80211_register_hw+0xf11/0x3b10 [ 298.803838][ T8730] ? ieee80211_tasklet_handler+0x20/0x20 [ 298.809533][ T8730] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 298.815498][ T8730] ? __debug_object_init+0xe8/0x430 [ 298.820769][ T8730] ? __asan_memset+0x22/0x40 [ 298.825439][ T8730] ? __hrtimer_init+0x186/0x270 [ 298.830424][ T8730] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 298.836373][ T8730] ? mac80211_hwsim_free+0x220/0x220 [ 298.841827][ T8730] ? rcu_is_watching+0x15/0xb0 [ 298.846658][ T8730] ? kstrndup+0xbd/0x140 [ 298.850979][ T8730] hwsim_new_radio_nl+0xd78/0x19d0 [ 298.856167][ T8730] ? __nla_validate+0x50/0x50 [ 298.860932][ T8730] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 298.867341][ T8730] ? __nla_parse+0x40/0x50 [ 298.871852][ T8730] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 298.878289][ T8730] genl_family_rcv_msg_doit+0x209/0x2f0 [ 298.884009][ T8730] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 298.889990][ T8730] ? bpf_lsm_capable+0x9/0x10 [ 298.894742][ T8730] ? security_capable+0x89/0xb0 [ 298.900108][ T8730] genl_rcv_msg+0x60b/0x790 [ 298.904696][ T8730] ? genl_bind+0x360/0x360 [ 298.909176][ T8730] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 298.915570][ T8730] ? perf_trace_lock+0x2ed/0x380 [ 298.920684][ T8730] netlink_rcv_skb+0x216/0x480 [ 298.925529][ T8730] ? genl_bind+0x360/0x360 [ 298.930027][ T8730] ? netlink_ack+0x1110/0x1110 [ 298.934878][ T8730] ? __lock_acquire+0x7c80/0x7c80 [ 298.939991][ T8730] ? down_read+0x1ac/0x2e0 [ 298.944486][ T8730] genl_rcv+0x28/0x40 [ 298.948545][ T8730] netlink_unicast+0x751/0x8d0 [ 298.953408][ T8730] netlink_sendmsg+0x8c1/0xbe0 [ 298.958284][ T8730] ? netlink_getsockopt+0x580/0x580 [ 298.963698][ T8730] ? aa_sock_msg_perm+0x94/0x150 [ 298.968704][ T8730] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.974051][ T8730] ? security_socket_sendmsg+0x80/0xa0 [ 298.979557][ T8730] ? netlink_getsockopt+0x580/0x580 [ 298.984819][ T8730] ____sys_sendmsg+0x5bf/0x950 [ 298.989660][ T8730] ? __asan_memset+0x22/0x40 [ 298.994310][ T8730] ? __sys_sendmsg_sock+0x30/0x30 [ 298.999391][ T8730] ? __import_iovec+0x5f2/0x860 [ 299.004313][ T8730] ? import_iovec+0x73/0xa0 [ 299.008888][ T8730] ___sys_sendmsg+0x220/0x290 [ 299.013633][ T8730] ? __sys_sendmsg+0x270/0x270 [ 299.018523][ T8730] __se_sys_sendmsg+0x1a5/0x270 [ 299.023465][ T8730] ? __x64_sys_sendmsg+0x80/0x80 [ 299.028507][ T8730] ? lockdep_hardirqs_on+0x98/0x150 [ 299.033795][ T8730] do_syscall_64+0x55/0xb0 [ 299.038293][ T8730] ? clear_bhb_loop+0x40/0x90 [ 299.043022][ T8730] ? clear_bhb_loop+0x40/0x90 [ 299.047750][ T8730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.053695][ T8730] RIP: 0033:0x7f2ba2d8f6c9 [ 299.058159][ T8730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.078173][ T8730] RSP: 002b:00007f2ba3b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.086640][ T8730] RAX: ffffffffffffffda RBX: 00007f2ba2fe5fa0 RCX: 00007f2ba2d8f6c9 [ 299.094651][ T8730] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 299.102679][ T8730] RBP: 00007f2ba2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 299.110697][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.118709][ T8730] R13: 00007f2ba2fe6038 R14: 00007f2ba2fe5fa0 R15: 00007fff20326a08 [ 299.126751][ T8730] [ 299.714242][ T8764] validate_nla: 1 callbacks suppressed [ 299.714269][ T8764] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 325.649880][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.656319][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.969678][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.980091][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.988350][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.997644][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.006091][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.014845][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.152032][ T5792] Bluetooth: hci4: command tx timeout [ 344.480062][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.489876][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.498064][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.520758][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.548923][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.556616][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.880307][ T5792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.890315][ T5792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.899310][ T5792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.909316][ T5792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.918195][ T5792] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.927111][ T5792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.020746][ T5792] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.031109][ T5792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.039973][ T5792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.049175][ T5792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.060916][ T5792] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.074168][ T5792] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.198902][ T5792] Bluetooth: hci4: command tx timeout [ 346.638852][ T5792] Bluetooth: hci5: command tx timeout [ 346.958958][ T5792] Bluetooth: hci6: command tx timeout [ 347.129048][ T5792] Bluetooth: hci7: command tx timeout [ 347.285394][ T5792] Bluetooth: hci4: command tx timeout [ 348.718909][ T5792] Bluetooth: hci5: command tx timeout [ 349.038856][ T5792] Bluetooth: hci6: command tx timeout [ 349.198848][ T5792] Bluetooth: hci7: command tx timeout [ 349.358899][ T5792] Bluetooth: hci4: command tx timeout [ 350.798810][ T5792] Bluetooth: hci5: command tx timeout [ 351.118804][ T5792] Bluetooth: hci6: command tx timeout [ 351.279448][ T5792] Bluetooth: hci7: command tx timeout [ 352.878843][ T5792] Bluetooth: hci5: command tx timeout [ 353.198978][ T5792] Bluetooth: hci6: command tx timeout [ 353.374593][ T5792] Bluetooth: hci7: command tx timeout [ 386.298293][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 386.308194][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 386.317159][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 386.327067][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 386.335154][ T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 386.342856][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 388.399035][ T5792] Bluetooth: hci8: command tx timeout [ 389.204867][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.214607][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.481673][ T5792] Bluetooth: hci8: command tx timeout [ 392.558817][ T5792] Bluetooth: hci8: command tx timeout [ 394.638864][ T5792] Bluetooth: hci8: command tx timeout [ 404.178641][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 404.185480][ C0] rcu: 0-....: (10499 ticks this GP) idle=9a24/1/0x4000000000000000 softirq=25955/25955 fqs=3369 [ 404.197251][ C0] rcu: hardirqs softirqs csw/system [ 404.203693][ C0] rcu: number: 1270065 0 0 [ 404.210112][ C0] rcu: cputime: 16924 35565 39 ==> 52490(ms) [ 404.217945][ C0] rcu: (t=10500 jiffies g=32157 q=1391 ncpus=2) [ 404.224321][ C0] CPU: 0 PID: 8756 Comm: syz.0.990 Not tainted syzkaller #0 [ 404.231651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 404.241762][ C0] RIP: 0010:rcu_read_unlock_special+0x88/0x460 [ 404.247990][ C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 d9 51 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 404.267703][ C0] RSP: 0018:ffffc90000007400 EFLAGS: 00000206 [ 404.273817][ C0] RAX: 608fb6311e055d00 RBX: 1ffff92000000e84 RCX: 608fb6311e055d00 [ 404.281815][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6b00 [ 404.289801][ C0] RBP: ffffc900000074c8 R08: ffffffff90da85ff R09: 1ffffffff21b50bf [ 404.297802][ C0] R10: dffffc0000000000 R11: fffffbfff21b50c0 R12: ffffffff8cd35101 [ 404.305796][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: ffff88802ccfbc00 [ 404.313797][ C0] FS: 00007f11de34d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 404.322746][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.329343][ C0] CR2: 00007f11db3f4d58 CR3: 000000001e789000 CR4: 00000000003506f0 [ 404.337337][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.345317][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 404.353297][ C0] Call Trace: [ 404.356586][ C0] [ 404.359449][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 404.364430][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.370598][ C0] ? 0xffffffffa0000950 [ 404.374771][ C0] __rcu_read_unlock+0x7c/0xd0 [ 404.379575][ C0] is_bpf_text_address+0x27e/0x2a0 [ 404.384725][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 404.390031][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.396129][ C0] kernel_text_address+0xa0/0xd0 [ 404.401089][ C0] __kernel_text_address+0xd/0x30 [ 404.406127][ C0] unwind_get_return_address+0x5d/0xc0 [ 404.411602][ C0] ? stack_trace_save+0xe0/0xe0 [ 404.416467][ C0] arch_stack_walk+0x11d/0x190 [ 404.421251][ C0] stack_trace_save+0x9c/0xe0 [ 404.425937][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 404.431070][ C0] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 404.437246][ C0] kasan_set_track+0x4e/0x70 [ 404.441864][ C0] ? kasan_set_track+0x4e/0x70 [ 404.446655][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 404.451687][ C0] ? slab_post_alloc_hook+0x6e/0x4d0 [ 404.456984][ C0] ? kmem_cache_alloc_node+0x150/0x330 [ 404.462452][ C0] ? __alloc_skb+0x108/0x2c0 [ 404.467054][ C0] ? ndisc_alloc_skb+0xa6/0x450 [ 404.471918][ C0] ? ndisc_send_rs+0x2a6/0x610 [ 404.476694][ C0] ? addrconf_rs_timer+0x2bc/0x600 [ 404.481817][ C0] ? call_timer_fn+0x16e/0x530 [ 404.486612][ C0] ? __run_timers+0x52d/0x7d0 [ 404.491293][ C0] ? run_timer_softirq+0x67/0xf0 [ 404.496262][ C0] ? handle_softirqs+0x280/0x820 [ 404.501207][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 404.505973][ C0] ? irq_exit_rcu+0x9/0x20 [ 404.510395][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 404.516216][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.522391][ C0] ? generic_exec_single+0x476/0x4f0 [ 404.527701][ C0] ? smp_call_function_single+0x352/0x580 [ 404.533439][ C0] ? perf_install_in_context+0x591/0x8e0 [ 404.539099][ C0] ? __se_sys_perf_event_open+0x17fa/0x1c20 [ 404.545017][ C0] ? do_syscall_64+0x55/0xb0 [ 404.549626][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.555737][ C0] __kasan_slab_alloc+0x6c/0x80 [ 404.560600][ C0] slab_post_alloc_hook+0x6e/0x4d0 [ 404.565734][ C0] kmem_cache_alloc_node+0x150/0x330 [ 404.571032][ C0] ? __alloc_skb+0x108/0x2c0 [ 404.575645][ C0] __alloc_skb+0x108/0x2c0 [ 404.580075][ C0] ndisc_alloc_skb+0xa6/0x450 [ 404.584767][ C0] ndisc_send_rs+0x2a6/0x610 [ 404.589378][ C0] addrconf_rs_timer+0x2bc/0x600 [ 404.594336][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 404.600419][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 404.606416][ C0] call_timer_fn+0x16e/0x530 [ 404.611013][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.617175][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 404.623278][ C0] ? call_timer_fn+0xbf/0x530 [ 404.627964][ C0] ? __run_timers+0x7d0/0x7d0 [ 404.632919][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 404.639023][ C0] __run_timers+0x52d/0x7d0 [ 404.643556][ C0] ? detach_timer+0x2b0/0x2b0 [ 404.648243][ C0] ? lock_chain_count+0x20/0x20 [ 404.653128][ C0] run_timer_softirq+0x67/0xf0 [ 404.657918][ C0] handle_softirqs+0x280/0x820 [ 404.662690][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 404.667482][ C0] ? do_softirq+0x180/0x180 [ 404.672078][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 404.677301][ C0] __irq_exit_rcu+0xc7/0x190 [ 404.681906][ C0] ? irq_exit_rcu+0x20/0x20 [ 404.686419][ C0] irq_exit_rcu+0x9/0x20 [ 404.690773][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 404.696457][ C0] [ 404.699406][ C0] [ 404.702340][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.708332][ C0] RIP: 0010:generic_exec_single+0x476/0x4f0 [ 404.714234][ C0] Code: 75 11 e8 3d e6 0a 00 48 85 db 75 16 e8 33 e6 0a 00 eb 15 e8 2c e6 0a 00 e8 47 24 f4 08 48 85 db 74 ea e8 1d e6 0a 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c [ 404.733859][ C0] RSP: 0018:ffffc90003a67a00 EFLAGS: 00000246 [ 404.739943][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 404.747963][ C0] RDX: ffffc9000eae1000 RSI: 000000000001dc6b RDI: 000000000001dc6c [ 404.755955][ C0] RBP: ffffc90003a67ad0 R08: ffffffff90da85ff R09: 1ffffffff21b50bf [ 404.763960][ C0] R10: dffffc0000000000 R11: fffffbfff21b50c0 R12: 1ffff9200074cf44 [ 404.771945][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200074cf65 [ 404.779947][ C0] ? event_function+0x300/0x300 [ 404.784815][ C0] ? smp_call_function_single+0x580/0x580 [ 404.790605][ C0] ? lock_chain_count+0x20/0x20 [ 404.795470][ C0] ? smp_call_function_single+0xa1/0x580 [ 404.801130][ C0] smp_call_function_single+0x352/0x580 [ 404.806684][ C0] ? event_function+0x300/0x300 [ 404.811563][ C0] ? flush_smp_call_function_queue+0x240/0x240 [ 404.817728][ C0] ? event_function+0x300/0x300 [ 404.822645][ C0] perf_install_in_context+0x591/0x8e0 [ 404.828121][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 404.834109][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 404.839431][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 404.844646][ C0] ? perf_event__header_size+0x165/0x220 [ 404.850433][ C0] __se_sys_perf_event_open+0x17fa/0x1c20 [ 404.856218][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 404.861894][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 404.867798][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 404.873473][ C0] do_syscall_64+0x55/0xb0 [ 404.877916][ C0] ? clear_bhb_loop+0x40/0x90 [ 404.882637][ C0] ? clear_bhb_loop+0x40/0x90 [ 404.887329][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.893236][ C0] RIP: 0033:0x7f11dd58f6c9 [ 404.897667][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.917310][ C0] RSP: 002b:00007f11de34d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 404.925738][ C0] RAX: ffffffffffffffda RBX: 00007f11dd7e6180 RCX: 00007f11dd58f6c9 [ 404.933722][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 404.941704][ C0] RBP: 00007f11dd611f91 R08: 0000000000000003 R09: 0000000000000000 [ 404.949785][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 404.957800][ C0] R13: 00007f11dd7e6218 R14: 00007f11dd7e6180 R15: 00007ffdf9d463f8 [ 404.965814][ C0] [ 406.095319][ T5794] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 406.110025][ T5794] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.130894][ T5794] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 406.144737][ T5794] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 406.152644][ T5794] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 406.160962][ T5794] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.187017][ T5794] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 406.199877][ T5794] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 406.207114][ T5794] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.246434][ T5794] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 406.253906][ T5794] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 406.261741][ T5794] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 406.273258][ T5798] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 406.283126][ T5798] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 406.290847][ T5798] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 406.298306][ T5798] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 406.308454][ T5798] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 406.316211][ T5798] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 408.399156][ T5792] Bluetooth: hci9: command tx timeout [ 408.405600][ T5792] Bluetooth: hci10: command tx timeout [ 408.478852][ T5792] Bluetooth: hci11: command tx timeout [ 410.478865][ T5794] Bluetooth: hci9: command tx timeout [ 410.485851][ T5792] Bluetooth: hci10: command tx timeout [ 410.558985][ T5792] Bluetooth: hci11: command tx timeout [ 412.558823][ T5794] Bluetooth: hci9: command tx timeout [ 412.565816][ T5792] Bluetooth: hci10: command tx timeout [ 412.638864][ T5792] Bluetooth: hci11: command tx timeout