last executing test programs: 37.069040008s ago: executing program 1 (id=15575): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e120800140000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d1dd7cc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be7797f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580afa025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4badf23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x7, 0x73, 0x4, 0x2, 0x0, 0xe, 0x40c44, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3fffe, 0x8}, 0x10060, 0x11f, 0x20000003, 0x6, 0x40007, 0x80000001, 0xf0, 0x0, 0x6b, 0x0, 0x8000000000000004}) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@cgroup, 0x11, 0x0, 0xa324, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000b80)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000009500000004000000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r9}, 0x1) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="2c0000003000000040000000f9d4f57da6e0165c1f6c32931e0b0cfb8e0962325b97d2d30da709a1167b014692df73b37cf34f87fbb9fc09ac2d5c6c9cfcf80c5d445742dc07e5ae561f0cdadc8825bee65916f7febf66c6a48670d9e37b1110ecb756b2083a6085dbbb88e8d2d0f52734bce0f81a351e5368", @ANYRES8=r3], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) 32.690689772s ago: executing program 1 (id=15581): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1}, 0x17) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) 32.441318398s ago: executing program 1 (id=15585): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x2, 0x0, [{}]}]}}, &(0x7f0000000340)=""/4083, 0x2e, 0xff3, 0x1}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x21, 0x2, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5421, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff8085000000c700000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x94, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4048001) sendmsg$tipc(r2, &(0x7f00000015c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x1, 0x2}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="55e18576bfd292fddf6d850c36ad96a541420d6114c7afa6cbddf6bab3fcb2733b73221879e10c6485f235c1948b16e084ec3430630903934dfa705470cd2ee01c8af79e91f83615a41f36f66b743af8b34c9de61e4848acbb80176a9a7d26c720076d94af067cffe098ee2c900b001befa4f0eeb34128a885361826253d34a18f06dffe25d7171c20d71da22595a07e012f1290fc6740c0d457b26285470f2559d0ad451b35023d8872183ef33e6cdfa6ff58896472a91d20e77bf2bc223b62089d64f318d1e0061617396a26aa", 0xce}, {&(0x7f0000001340)="86ca3ee8c7b3949bf9609730518af721e0b8f544be3ce6be9c659ef0fa835851036a4ec6c0ba5fe0a7dac05bc0", 0x2d}, {&(0x7f0000001380)="20ca7d5be629a6cafa2356a34fe734cf596e00cd7c9849913c19e3c504e7f579fcf288399340a6e47a8c3bf57985c4cf7afe43a873a8964cfad1f73ab4d7407c70c366e2a0bd975094a040048731aeea58a0af6f360c56410d8b0d07380e18a4b265aa38c64bff60444e908a19d5539b403e60b70314ed953e071f447debb680a4541139ae", 0x85}, {&(0x7f0000001440)="4cb8eaa0e8bacbfc48348bcb", 0xc}], 0x4, &(0x7f00000014c0)="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", 0xfb, 0x44004}, 0x10004001) 31.936622051s ago: executing program 1 (id=15587): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x1, 0x4, 0x0, 0x20, 0x8eca}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r3], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.586322126s ago: executing program 1 (id=15592): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$cgroup_procs(0xffffffffffffffff, 0xfffffffffffffffe, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 30.430096481s ago: executing program 1 (id=15594): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 23.87181124s ago: executing program 4 (id=15607): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f0000001a40)=""/4083, 0xff3}, {&(0x7f0000001980)=""/192, 0xc0}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000000700)=""/219, 0xdb}], 0x6}, 0x20) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0, 0x0, 0x0, 0x20}, 0x80) 23.690161605s ago: executing program 3 (id=15609): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb86dd00017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) 23.631556227s ago: executing program 4 (id=15610): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b717000000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f00000000c0)="878b0d151f8218e3c73697e40800480209004000000000000000ed47b735ce689cbd", 0x0, 0x7ab8e720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 23.601831358s ago: executing program 2 (id=15611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0x401, @remote}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000400)="bf093c5579337d13634df2b1c0b847d2c64588b82b09650bdc0f469348d126597d29361215ac70adbe17bd761041b73998fa48e467a71c40f3a4bfa36d706f6600f86d6472d769e795be9a922516", 0x4e}, {&(0x7f0000000480)="a73f95a7b9c172be71a05a3771e0caa0b4aa26a80d966327fece5358bfebc188294bc6c0979cf989beba2760bb11bd2923898675af88b69b0d7170852b7ad8ec7cd241ae05238b4f9e8fb1e99bf2eee8f0fe392a63a6269561", 0x59}, {&(0x7f0000000500)="034c85278ab3aa0d3e525089f961bf15b940bf66b48faec4fc3dc61c8e37ba57738f868e5eba5b6865bebf91f87a1a30e4cf1deedae0e4132f8c9b14582744ca0876a9e25bcb0f6f9e9cb3073b40dceb828f52da7e673f82cd3adb12659785ce58b956e5135cd4122349152e8ec0e600648ad683916e98aa7b8c616ffb887383e5abd9e6f68d6cbdae076ac52d6173290abe170871c5b4b55e836d06705d37ad097134918316a527e7b9a39caef0adf1fad0236a07e160edf7ee8ae6691f8bb760cd1cdb6ffa54a95966b33c6cc2b82e3a33ec4b1efdfb4e6c7aa7afc664e91ef796ecc71fa8a63c2bc9a78f6ac45168", 0xf0}, {&(0x7f0000000600)="3e56e0cf5fced481af1f7fa3e9579939c83340643fd051f75854b6618a2243bab600590570872376faf09289f98b796c9daf9d7efc2077b24ba2f3eb811b4384f3c58ab0339a94ec6389d52db474f23e7d57c67f76f79405b04036d62300ec62f8b19f9f209bb58143b05a0fd86649cd50751aad2d3cac268d425b5caba6fdab0c78757fc57708fc34b0386feecf4b62f1d1d06817ae66420bfd1eed7701341e5d9429b4d36d35c99cf65e96a378", 0xae}, {&(0x7f0000000800)="a6b9a5eec3386239414d8bceca57303dced88fd9a5fa1df08e60b06538cc9668f2c00c695302cb992cfd675dddb94b4512810f001a0624cafae3d3fae573cce6940265a36aad6e4c6f6ad1598d5d96e535841b7ea6135e662afdea68279a82557deb8888204093f34f79b615c9223aee7359e971d53479f526a70f2075e3cce302c6199d0c80ac35b517", 0x8a}], 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) 22.496710816s ago: executing program 4 (id=15613): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10c002, 0xac5d, 0x0, 0x6, 0x3, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7fff, 0x3, 0x0, 0x800, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d80), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000080)="fbd2b9d22e2a0b4a6ce75d08910a7b3da5602f74fa0f", 0x16}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d", 0x18}], 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x48) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=[{0x20, 0x84, 0x8, "fe8000000000000002"}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000080000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r5, 0x0, 0xf7, 0x20, &(0x7f00000011c0)="8b561ef71e294a266b84f4e08def609e9d3b8356a25b4d1397a016783bbee84ce93ae41e3bb46dcff90c39f20ec079be74fc2059025744db15d9b3c8dc2300651a40164d2afe81a4939bcb6066e89f22cb5ff10e80fa9f48451d01962f03406a9f3d08e3a09ac549da2bbcb7cdfe3d28b0f99b288c46fe37ec6ed00a056fd6e17a10dfd812117cf37b79f86a5996d09547dd4f58593f3a98bc32723040e210896e824f4c13008807a4842b846835039d0313c50d50286fe9e0d5f57a9665d92dc05ab24ac96c7f4c9cea0f636de3839ec6bd3fd82f1e9eea0c60e6632b2790f349cf245ee3fb5657a6736f6be00ec875fb1277570dbc39", &(0x7f00000012c0)=""/32, 0xf4c5, 0x0, 0x92, 0x0, &(0x7f0000001300)="9805d1dea5da082ad2c910d9c8eb04962cabe893fee34d69ae01b31bd26b01a9d529ccd5d97f852b19a9d5fd2a3ac5b05be382c72f901ce932a07ff9d9796fe18576f030373a80ac1ce1c5b5067f8a62b8f0ddb03e2f9822276c84a060cfd5e211ccf3efa640440d47c3b402f43c935a9a668e568679c041974b29581e32f164c6fba15db5278f4c3bb0f45ffdb0970ea696", 0x0, 0x2, 0x0, 0x6}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x1f, &(0x7f00000008c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x40, 0x8a, &(0x7f00000006c0)=""/138, 0x40f00, 0x41, '\x00', r7, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000040)=[0xffffffffffffffff, r6, r4, r4, r6], &(0x7f0000000dc0)=[{0x9, 0x5, 0x1, 0xa}, {0x2, 0x5, 0xc, 0x1}, {0x5, 0x4, 0x6, 0xc}, {0x2, 0x2, 0x80003, 0xc}, {0x5, 0x1, 0x2, 0xc}, {0x1, 0x5, 0x8, 0x9}], 0x10, 0x8}, 0x94) socketpair(0x10, 0x5, 0x9, &(0x7f0000000240)) 22.495836096s ago: executing program 3 (id=15614): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac14"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760004000000000027000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 22.493656996s ago: executing program 0 (id=15615): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x5, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r4], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.390143779s ago: executing program 2 (id=15616): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x20000084) 22.117217836s ago: executing program 2 (id=15617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r0}, 0x38) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0xc2280, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xd, 0x2}, {0x2, 0x4, 0xe, 0x4}, {0x4, 0x4, 0x7}, {0x2, 0x4, 0x2, 0x7}], 0x10, 0xfffffe01}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x485, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x400004, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/user\x00') sendmsg$unix(r7, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="5d0a8e594cf7f9ed1d9446626e68c540c6385651f7f03f0eff08f8e4dbcbcf4ac9f37a5932367802a879dd6137df8b58c9df26b871370e77df216582200577a4d3524e737f7ec55c5185214c977d5947", 0x50}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r4, r6, r5, r4, r5, r4, r9]}}], 0x50, 0x4051}, 0x40010) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc041389810039000000060fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x65, 0x1}, @func_proto, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x24}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x4, 0x7}, {0x6, 0x5, 0xc}, {0xb, 0x1, 0xffffffff}, {0xc, 0x1, 0x80000001}, {0x7, 0x2, 0x6}, {0x7, 0x4, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x1000}}]}, {0x0, [0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000001bc0)=""/123, 0xb6, 0x7b, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_ext={0x1c, 0x12, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001940)='GPL\x00', 0x7ff, 0xf8, &(0x7f0000001980)=""/248, 0x40f00, 0xa, '\x00', r10, 0x0, r12, 0x8, &(0x7f0000001c80)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x59c0, 0xffffffffffffffff, 0x4, &(0x7f0000001cc0)=[r2, r0, r0, r11], &(0x7f0000001d00)=[{0x4, 0x5, 0x0, 0xa}, {0x4, 0x2, 0x6, 0xa}, {0x3, 0x1, 0x9, 0x7}, {0x1, 0x5, 0x6, 0x7}], 0x10, 0x401}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) 22.116059946s ago: executing program 4 (id=15618): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r3 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r6, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000900)=@in6={0xa, 0x4e20, 0x800000, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000002900000034"], 0x10}, 0x40000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r9, 0x40086602, &(0x7f0000000940)) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001780)=0xffffffffffffffff, 0x4) r11 = gettid() r12 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000300)="0b388c39bb42c0f82081f0139ea5eb235d5b1400636dc92a209c9edd696d5618884766d0c76038c8cbe1331c673e3b6dc22366974ac127602fc0f4466ea13ba251e7f413b84274b168317cf41299f78dd553633f8dd0620db05ea07a568705083eff353239b008d0199236c99c1a2d43914d97505646e36b44c35a3b4cc9330dfc1541afa85e34cd7eb72c5152f0c5df1ea9b39d7744f1d7e2fa560f5422c6edf3d240cce0ff1bf5bbd954f8c771b7cdb9faf75cd2992afa6248c9bf9416dcd608b8de6923d8aaeb8acf335ee2d82e6979c2c58db68a7a2a4e0d", 0xda}, {&(0x7f0000000400)="97184b33d7e1380255ff5f13a43d3bc9180b51be712754bd04527c1597e2a752dc5bc25892f7b1050a444be7240009e29429c62a5c1b8b95d6512d87653ca65e", 0x40}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="20010000800000000000000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x108, 0x84}, 0x4851) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/104, 0x68}], 0x3, &(0x7f00000015c0)=""/228, 0xe4}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="1803000000000000000000000010000085100000060000001800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000000000000000000000040000950000000000000054030000000000009500004ee8000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 21.864359113s ago: executing program 3 (id=15619): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 21.426676764s ago: executing program 3 (id=15620): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b717000000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x5605744c5c971ce2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000f765) ioctl$TUNSETSNDBUF(r4, 0x400454d4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x63, 0x2, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500, 0x100000001}, 0x119406, 0x0, 0x0, 0x5, 0xffffffffffffbbfe, 0xffffffff, 0x1, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0x1ffffe, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 21.385339415s ago: executing program 0 (id=15621): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1000000, 0x4, 0x0, 0x8400) 21.291286978s ago: executing program 4 (id=15622): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e120800140000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x7, 0x73, 0x4, 0x2, 0x0, 0xe, 0x40c44, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3fffe, 0x8}, 0x10060, 0x11f, 0x20000003, 0x6, 0x40007, 0x80000001, 0xf0, 0x0, 0x6b, 0x0, 0x8000000000000004}) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@cgroup, 0x11, 0x0, 0xa324, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000b80)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000009500000004000000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r9}, 0x1) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="2c0000003000000040000000f9d4f57da6e0165c1f6c32931e0b0cfb8e0962325b97d2d30da709a1167b014692df73b37cf34f87fbb9fc09ac2d5c6c9cfcf80c5d445742dc07e5ae561f0cdadc8825bee65916f7febf66c6a48670d9e37b1110ecb756b2083a6085dbbb88e8d2d0f52734bce0f81a351e5368", @ANYRES8=r3], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 21.284459118s ago: executing program 2 (id=15623): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b717000000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f00000000c0)="878b0d151f8218e3c73697e40800480209004000000000000000ed47b735ce689cbd", 0x0, 0x7ab8e720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 21.146112841s ago: executing program 0 (id=15624): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb86dd00017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) 20.178534316s ago: executing program 3 (id=15625): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe6, 0xffffffff, 0x42}, 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x1, &(0x7f0000000200)=@raw=[@alu={0x7, 0x1, 0x4, 0x8, 0x5, 0xffffffffffffffc0, 0x8}], &(0x7f0000000240)='syzkaller\x00', 0x7fff, 0xe9, &(0x7f0000001300)=""/233, 0x40f00, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001680)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x1, 0x2, 0x0, 0xa}, {0x2, 0x3, 0x6, 0x8}, {0x0, 0x2, 0x1, 0xf}, {0x3, 0x2, 0x6, 0x1}], 0x10, 0x8001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300)}, 0x11540, 0x0, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = getpid() perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x4, 0x40, 0x7f, 0xd6, 0x0, 0x4e, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000180), 0x3}, 0x2c00, 0xff, 0x442, 0x2, 0x4, 0x2, 0x4, 0x0, 0x3, 0x0, 0x859}, r5, 0xffffffffffffffff, r3, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90) 20.167580117s ago: executing program 2 (id=15626): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x25, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001140)={&(0x7f0000000140)={0x2, 0xffff, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50018bf3a8", 0x10}], 0x1}, 0x20040000) 20.103464839s ago: executing program 0 (id=15627): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100"/55], 0x0, 0x44}, 0x28) 19.444917806s ago: executing program 3 (id=15628): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x0, '\x00', 0x0, r1, 0x4, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018210000", @ANYRES32=r1, @ANYBLOB="000000000c00000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018150000", @ANYRES32=r4, @ANYBLOB="00000095000000182400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000085000000460000007d4cc0ffffffffff18570000030000000000000000000000fd35080008000000"], &(0x7f00000003c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0xe, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x0, 0x9}, 0x10, 0x0, r2, 0x3, &(0x7f0000000680)=[r7, r1], &(0x7f00000006c0)=[{0x0, 0x2, 0x5, 0x2}, {0x4, 0x5, 0xa, 0xc}, {0x0, 0x2, 0x2, 0xb}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003567d25a806f8c6394f96724fc60", 0x14}], 0x1}, 0x0) gettid() 19.160654033s ago: executing program 4 (id=15629): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19.063974396s ago: executing program 0 (id=15630): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x5, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r4], 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.009807527s ago: executing program 2 (id=15631): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r3 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r6, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000900)=@in6={0xa, 0x4e20, 0x800000, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000002900000034"], 0x10}, 0x40000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r9, 0x40086602, &(0x7f0000000940)) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001780)=0xffffffffffffffff, 0x4) r11 = gettid() r12 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000300)="0b388c39bb42c0f82081f0139ea5eb235d5b1400636dc92a209c9edd696d5618884766d0c76038c8cbe1331c673e3b6dc22366974ac127602fc0f4466ea13ba251e7f413b84274b168317cf41299f78dd553633f8dd0620db05ea07a568705083eff353239b008d0199236c99c1a2d43914d97505646e36b44c35a3b4cc9330dfc1541afa85e34cd7eb72c5152f0c5df1ea9b39d7744f1d7e2fa560f5422c6edf3d240cce0ff1bf5bbd954f8c771b7cdb9faf75cd2992afa6248c9bf9416dcd608b8de6923d8aaeb8acf335ee2d82e6979c2c58db68a7a2a4e0d", 0xda}, {&(0x7f0000000400)="97184b33d7e1380255ff5f13a43d3bc9180b51be712754bd04527c1597e2a752dc5bc25892f7b1050a444be7240009e29429c62a5c1b8b95d6512d87653ca65e", 0x40}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="20010000800000000000000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x108, 0x84}, 0x4851) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/104, 0x68}], 0x3, &(0x7f00000015c0)=""/228, 0xe4}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="1803000000000000000000000010000085100000060000001800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000000000000000000000040000950000000000000054030000000000009500004ee8000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 15.523406907s ago: executing program 0 (id=15632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r0}, 0x38) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0xc2280, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xd, 0x2}, {0x2, 0x4, 0xe, 0x4}, {0x4, 0x4, 0x7}, {0x2, 0x4, 0x2, 0x7}], 0x10, 0xfffffe01}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x485, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x400004, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/user\x00') sendmsg$unix(r7, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="5d0a8e594cf7f9ed1d9446626e68c540c6385651f7f03f0eff08f8e4dbcbcf4ac9f37a5932367802a879dd6137df8b58c9df26b871370e77df216582200577a4d3524e737f7ec55c5185214c977d5947", 0x50}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r4, r6, r5, r4, r5, r4, r9]}}], 0x50, 0x4051}, 0x40010) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc041389810039000000060fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x65, 0x1}, @func_proto, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x24}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x4, 0x7}, {0x6, 0x5, 0xc}, {0xb, 0x1, 0xffffffff}, {0xc, 0x1, 0x80000001}, {0x7, 0x2, 0x6}, {0x7, 0x4, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x1000}}]}, {0x0, [0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000001bc0)=""/123, 0xb6, 0x7b, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_ext={0x1c, 0x12, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001940)='GPL\x00', 0x7ff, 0xf8, &(0x7f0000001980)=""/248, 0x40f00, 0xa, '\x00', r10, 0x0, r12, 0x8, &(0x7f0000001c80)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x59c0, 0xffffffffffffffff, 0x4, &(0x7f0000001cc0)=[r2, r0, r0, r11], &(0x7f0000001d00)=[{0x4, 0x5, 0x0, 0xa}, {0x4, 0x2, 0x6, 0xa}, {0x3, 0x1, 0x9, 0x7}, {0x1, 0x5, 0x6, 0x7}], 0x10, 0x401}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) 4.040193886s ago: executing program 32 (id=15628): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x0, '\x00', 0x0, r1, 0x4, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018210000", @ANYRES32=r1, @ANYBLOB="000000000c00000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018150000", @ANYRES32=r4, @ANYBLOB="00000095000000182400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000085000000460000007d4cc0ffffffffff18570000030000000000000000000000fd35080008000000"], &(0x7f00000003c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0xe, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xa, 0x0, 0x9}, 0x10, 0x0, r2, 0x3, &(0x7f0000000680)=[r7, r1], &(0x7f00000006c0)=[{0x0, 0x2, 0x5, 0x2}, {0x4, 0x5, 0xa, 0xc}, {0x0, 0x2, 0x2, 0xb}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003567d25a806f8c6394f96724fc60", 0x14}], 0x1}, 0x0) gettid() 3.930125808s ago: executing program 33 (id=15629): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.880400325s ago: executing program 34 (id=15631): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r3 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f00000004c0)}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r6, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000900)=@in6={0xa, 0x4e20, 0x800000, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000002900000034"], 0x10}, 0x40000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r9, 0x40086602, &(0x7f0000000940)) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001780)=0xffffffffffffffff, 0x4) r11 = gettid() r12 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000300)="0b388c39bb42c0f82081f0139ea5eb235d5b1400636dc92a209c9edd696d5618884766d0c76038c8cbe1331c673e3b6dc22366974ac127602fc0f4466ea13ba251e7f413b84274b168317cf41299f78dd553633f8dd0620db05ea07a568705083eff353239b008d0199236c99c1a2d43914d97505646e36b44c35a3b4cc9330dfc1541afa85e34cd7eb72c5152f0c5df1ea9b39d7744f1d7e2fa560f5422c6edf3d240cce0ff1bf5bbd954f8c771b7cdb9faf75cd2992afa6248c9bf9416dcd608b8de6923d8aaeb8acf335ee2d82e6979c2c58db68a7a2a4e0d", 0xda}, {&(0x7f0000000400)="97184b33d7e1380255ff5f13a43d3bc9180b51be712754bd04527c1597e2a752dc5bc25892f7b1050a444be7240009e29429c62a5c1b8b95d6512d87653ca65e", 0x40}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="20010000800000000000000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x108, 0x84}, 0x4851) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/104, 0x68}], 0x3, &(0x7f00000015c0)=""/228, 0xe4}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="1803000000000000000000000010000085100000060000001800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000000000000000000000040000950000000000000054030000000000009500004ee8000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 0s ago: executing program 35 (id=15632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r0}, 0x38) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0xc2280, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xd, 0x2}, {0x2, 0x4, 0xe, 0x4}, {0x4, 0x4, 0x7}, {0x2, 0x4, 0x2, 0x7}], 0x10, 0xfffffe01}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x485, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x400004, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/user\x00') sendmsg$unix(r7, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="5d0a8e594cf7f9ed1d9446626e68c540c6385651f7f03f0eff08f8e4dbcbcf4ac9f37a5932367802a879dd6137df8b58c9df26b871370e77df216582200577a4d3524e737f7ec55c5185214c977d5947", 0x50}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r4, r6, r5, r4, r5, r4, r9]}}], 0x50, 0x4051}, 0x40010) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x11, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc041389810039000000060fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)='%ps \x00'}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000001a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x65, 0x1}, @func_proto, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x24}, @union={0x6, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x4, 0x7}, {0x6, 0x5, 0xc}, {0xb, 0x1, 0xffffffff}, {0xc, 0x1, 0x80000001}, {0x7, 0x2, 0x6}, {0x7, 0x4, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x1000}}]}, {0x0, [0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000001bc0)=""/123, 0xb6, 0x7b, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_ext={0x1c, 0x12, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001940)='GPL\x00', 0x7ff, 0xf8, &(0x7f0000001980)=""/248, 0x40f00, 0xa, '\x00', r10, 0x0, r12, 0x8, &(0x7f0000001c80)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x59c0, 0xffffffffffffffff, 0x4, &(0x7f0000001cc0)=[r2, r0, r0, r11], &(0x7f0000001d00)=[{0x4, 0x5, 0x0, 0xa}, {0x4, 0x2, 0x6, 0xa}, {0x3, 0x1, 0x9, 0x7}, {0x1, 0x5, 0x6, 0x7}], 0x10, 0x401}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) kernel console output (not intermixed with test programs): rface [ 2969.578577][T14965] device bond_slave_0 left promiscuous mode [ 2969.661083][T14965] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2969.677397][T14965] device bridge_slave_1 left promiscuous mode [ 2969.977539][T14965] bond0 (unregistering): Released all slaves [ 2970.080860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2970.097465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2970.109220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2970.126566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2970.140358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2970.154604][T21438] netlink: 'syz.0.15266': attribute type 25 has an invalid length. [ 2970.172052][T21438] netlink: 'syz.0.15266': attribute type 28 has an invalid length. [ 2970.216904][T19426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2970.232763][T19426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2970.256725][T19426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2970.286558][T19426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2970.355287][T21253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2970.590567][T21471] device syzkaller0 entered promiscuous mode [ 2970.760000][T21476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15261'. [ 2972.226593][T21488] netlink: 'syz.1.15264': attribute type 2 has an invalid length. [ 2972.385281][T21491] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15265'. [ 2974.703321][T21491] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2974.718543][T21491] CPU: 0 PID: 21491 Comm: syz.3.15265 Not tainted syzkaller #0 [ 2974.726176][T21491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2974.736288][T21491] Call Trace: [ 2974.739625][T21491] [ 2974.742594][T21491] dump_stack_lvl+0x188/0x24e [ 2974.747326][T21491] ? show_regs_print_info+0x12/0x12 [ 2974.752594][T21491] ? load_image+0x410/0x410 [ 2974.757164][T21491] sysfs_warn_dup+0x8a/0xa0 [ 2974.761732][T21491] sysfs_do_create_link_sd+0xc0/0x110 [ 2974.767168][T21491] device_add+0x83b/0x1050 [ 2974.771651][T21491] wiphy_register+0x1d8b/0x2aa0 [ 2974.776568][T21491] ? cfg80211_event_work+0x40/0x40 [ 2974.781723][T21491] ? minstrel_ht_alloc+0x894/0xa20 [ 2974.786894][T21491] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2974.793011][T21491] ieee80211_register_hw+0x2d48/0x39f0 [ 2974.798524][T21491] ? ieee80211_register_hw+0xee1/0x39f0 [ 2974.804117][T21491] ? ieee80211_register_hw+0xee1/0x39f0 [ 2974.809706][T21491] ? ieee80211_tasklet_handler+0x20/0x20 [ 2974.815378][T21491] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2974.821306][T21491] ? __debug_object_init+0xed/0x440 [ 2974.826552][T21491] ? memset+0x1e/0x40 [ 2974.830556][T21491] ? __hrtimer_init+0x189/0x270 [ 2974.835442][T21491] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2974.841205][T21491] ? memcpy+0x3c/0x60 [ 2974.845221][T21491] hwsim_new_radio_nl+0xab7/0xc90 [ 2974.850290][T21491] genl_family_rcv_msg_doit+0x22f/0x350 [ 2974.855870][T21491] ? end_current_label_crit_section+0x170/0x170 [ 2974.862149][T21491] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2974.868079][T21491] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2974.874011][T21491] ? bpf_lsm_capable+0x5/0x10 [ 2974.878722][T21491] ? security_capable+0x85/0xb0 [ 2974.883617][T21491] genl_rcv_msg+0x601/0x790 [ 2974.888153][T21491] ? genl_bind+0x360/0x360 [ 2974.892589][T21491] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2974.898962][T21491] netlink_rcv_skb+0x1ef/0x440 [ 2974.903766][T21491] ? genl_bind+0x360/0x360 [ 2974.908206][T21491] ? netlink_ack+0x1160/0x1160 [ 2974.913009][T21491] ? down_read+0x1a8/0x2d0 [ 2974.917451][T21491] genl_rcv+0x24/0x40 [ 2974.921458][T21491] netlink_unicast+0x7ad/0x920 [ 2974.926266][T21491] netlink_sendmsg+0x8ad/0xbd0 [ 2974.931070][T21491] ? netlink_getsockopt+0x550/0x550 [ 2974.936304][T21491] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2974.941898][T21491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2974.947297][T21491] ? security_socket_sendmsg+0x7c/0xa0 [ 2974.952792][T21491] ? netlink_getsockopt+0x550/0x550 [ 2974.958029][T21491] ____sys_sendmsg+0x5ed/0x9a0 [ 2974.962847][T21491] ? __sys_sendmsg_sock+0x30/0x30 [ 2974.967909][T21491] ? __import_iovec+0x306/0x510 [ 2974.972813][T21491] ? import_iovec+0x6f/0xa0 [ 2974.977361][T21491] ___sys_sendmsg+0x2a2/0x360 [ 2974.982077][T21491] ? __sys_sendmsg+0x2a0/0x2a0 [ 2974.986911][T21491] __se_sys_sendmsg+0x1c3/0x2b0 [ 2974.991791][T21491] ? ct_nmi_exit+0x145/0x1c0 [ 2974.996414][T21491] ? __x64_sys_sendmsg+0x80/0x80 [ 2975.001406][T21491] ? lockdep_hardirqs_on+0x94/0x140 [ 2975.006638][T21491] do_syscall_64+0x4c/0xa0 [ 2975.011367][T21491] ? clear_bhb_loop+0x60/0xb0 [ 2975.016097][T21491] ? clear_bhb_loop+0x60/0xb0 [ 2975.020816][T21491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2975.026750][T21491] RIP: 0033:0x7fdac5b9e019 [ 2975.031219][T21491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2975.050859][T21491] RSP: 002b:00007fdac6adb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2975.059306][T21491] RAX: ffffffffffffffda RBX: 00007fdac5e26090 RCX: 00007fdac5b9e019 [ 2975.067304][T21491] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2975.075304][T21491] RBP: 00007fdac5c3500c R08: 0000000000000000 R09: 0000000000000000 [ 2975.083305][T21491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2975.091299][T21491] R13: 00007fdac5e26128 R14: 00007fdac5e26090 R15: 00007ffde2613798 [ 2975.099314][T21491] [ 2975.123172][T21495] netlink: 'syz.1.15264': attribute type 10 has an invalid length. [ 2975.180334][T21495] team0: Device hsr_slave_0 failed to register rx_handler [ 2975.293922][T30881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2975.329086][T30881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2975.380932][T21253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2975.506286][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2975.536993][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2975.624766][T21500] netlink: 'syz.0.15276': attribute type 39 has an invalid length. [ 2975.675484][T21508] netlink: 'syz.3.15269': attribute type 15 has an invalid length. [ 2975.684525][T21508] netlink: 'syz.3.15269': attribute type 7 has an invalid length. [ 2975.737733][T21253] device veth0_vlan entered promiscuous mode [ 2975.796107][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2975.812890][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2975.857374][T21253] device veth1_vlan entered promiscuous mode [ 2975.874716][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2975.884027][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2975.896565][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2975.937925][T21253] device veth0_macvtap entered promiscuous mode [ 2975.960023][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2975.978224][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2976.009496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2976.035939][T21253] device veth1_macvtap entered promiscuous mode [ 2976.054764][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2976.073016][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2976.104417][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2976.125896][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.151153][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2976.179320][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.206963][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2976.221772][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.238806][T21253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2976.250568][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2976.270492][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2976.283474][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2976.303115][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.318348][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2976.335245][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.346082][T21253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2976.359002][T21253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2976.372766][T21253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2976.390511][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2976.404752][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2976.430145][T21253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.446021][T21253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.457272][T21253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2976.473521][T21253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2978.056276][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2978.981646][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2978.998171][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2979.074555][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2979.137662][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2979.231750][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2979.244812][T21533] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15277'. [ 2979.281696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2979.671123][T21542] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15279'. [ 2979.709769][T21542] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2979.727888][T21542] CPU: 1 PID: 21542 Comm: syz.3.15279 Not tainted syzkaller #0 [ 2979.735533][T21542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2979.745670][T21542] Call Trace: [ 2979.748988][T21542] [ 2979.751965][T21542] dump_stack_lvl+0x188/0x24e [ 2979.756711][T21542] ? show_regs_print_info+0x12/0x12 [ 2979.761992][T21542] ? load_image+0x410/0x410 [ 2979.766567][T21542] sysfs_warn_dup+0x8a/0xa0 [ 2979.771121][T21542] sysfs_do_create_link_sd+0xc0/0x110 [ 2979.776556][T21542] device_add+0x83b/0x1050 [ 2979.781047][T21542] wiphy_register+0x1d8b/0x2aa0 [ 2979.785998][T21542] ? cfg80211_event_work+0x40/0x40 [ 2979.791171][T21542] ? minstrel_ht_alloc+0x894/0xa20 [ 2979.796354][T21542] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2979.802477][T21542] ieee80211_register_hw+0x2d48/0x39f0 [ 2979.808013][T21542] ? ieee80211_register_hw+0xee1/0x39f0 [ 2979.813642][T21542] ? ieee80211_register_hw+0xee1/0x39f0 [ 2979.819287][T21542] ? ieee80211_tasklet_handler+0x20/0x20 [ 2979.824987][T21542] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2979.830937][T21542] ? __debug_object_init+0xed/0x440 [ 2979.836226][T21542] ? memset+0x1e/0x40 [ 2979.840253][T21542] ? __hrtimer_init+0x189/0x270 [ 2979.845198][T21542] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2979.850987][T21542] ? memcpy+0x3c/0x60 [ 2979.855026][T21542] hwsim_new_radio_nl+0xab7/0xc90 [ 2979.860128][T21542] genl_family_rcv_msg_doit+0x22f/0x350 [ 2979.865804][T21542] ? end_current_label_crit_section+0x170/0x170 [ 2979.872126][T21542] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2979.878104][T21542] ? bpf_lsm_capable+0x5/0x10 [ 2979.882841][T21542] ? security_capable+0x85/0xb0 [ 2979.887772][T21542] genl_rcv_msg+0x601/0x790 [ 2979.892338][T21542] ? genl_bind+0x360/0x360 [ 2979.896800][T21542] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2979.903211][T21542] netlink_rcv_skb+0x1ef/0x440 [ 2979.908048][T21542] ? genl_bind+0x360/0x360 [ 2979.912511][T21542] ? netlink_ack+0x1160/0x1160 [ 2979.917372][T21542] ? down_read+0x1a8/0x2d0 [ 2979.921838][T21542] genl_rcv+0x24/0x40 [ 2979.925864][T21542] netlink_unicast+0x7ad/0x920 [ 2979.930698][T21542] netlink_sendmsg+0x8ad/0xbd0 [ 2979.935531][T21542] ? netlink_getsockopt+0x550/0x550 [ 2979.940787][T21542] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2979.946393][T21542] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2979.951735][T21542] ? security_socket_sendmsg+0x7c/0xa0 [ 2979.957249][T21542] ? netlink_getsockopt+0x550/0x550 [ 2979.962523][T21542] ____sys_sendmsg+0x5ed/0x9a0 [ 2979.967373][T21542] ? __sys_sendmsg_sock+0x30/0x30 [ 2979.972466][T21542] ? __import_iovec+0x306/0x510 [ 2979.977396][T21542] ? import_iovec+0x6f/0xa0 [ 2979.981961][T21542] ___sys_sendmsg+0x2a2/0x360 [ 2979.986702][T21542] ? __sys_sendmsg+0x2a0/0x2a0 [ 2979.991602][T21542] __se_sys_sendmsg+0x1c3/0x2b0 [ 2979.996518][T21542] ? __x64_sys_sendmsg+0x80/0x80 [ 2980.001541][T21542] ? lockdep_hardirqs_on+0x94/0x140 [ 2980.006886][T21542] do_syscall_64+0x4c/0xa0 [ 2980.011367][T21542] ? clear_bhb_loop+0x60/0xb0 [ 2980.016097][T21542] ? clear_bhb_loop+0x60/0xb0 [ 2980.020834][T21542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2980.026786][T21542] RIP: 0033:0x7fdac5b9e019 [ 2980.031245][T21542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2980.050935][T21542] RSP: 002b:00007fdac6aba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2980.059397][T21542] RAX: ffffffffffffffda RBX: 00007fdac5e26180 RCX: 00007fdac5b9e019 [ 2980.067420][T21542] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2980.075454][T21542] RBP: 00007fdac5c3500c R08: 0000000000000000 R09: 0000000000000000 [ 2980.083476][T21542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2980.091602][T21542] R13: 00007fdac5e26218 R14: 00007fdac5e26180 R15: 00007ffde2613798 [ 2980.099651][T21542] [ 2980.658159][T21547] netlink: 'syz.2.15210': attribute type 3 has an invalid length. [ 2980.694593][T21547] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15210'. [ 2980.952651][T21558] netlink: 'syz.4.15282': attribute type 39 has an invalid length. [ 2981.389757][T21558] device hsr_slave_1 left promiscuous mode [ 2981.461507][T21552] netlink: 'syz.1.15280': attribute type 39 has an invalid length. [ 2981.493354][T21563] netlink: 'syz.3.15285': attribute type 25 has an invalid length. [ 2981.501394][T21563] netlink: 'syz.3.15285': attribute type 28 has an invalid length. [ 2983.314831][T21593] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.15294'. [ 2985.046483][T21593] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2985.082069][T21593] CPU: 1 PID: 21593 Comm: syz.0.15294 Not tainted syzkaller #0 [ 2985.089729][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2985.099834][T21593] Call Trace: [ 2985.103165][T21593] [ 2985.106139][T21593] dump_stack_lvl+0x188/0x24e [ 2985.110883][T21593] ? show_regs_print_info+0x12/0x12 [ 2985.116139][T21593] ? load_image+0x410/0x410 [ 2985.120728][T21593] sysfs_warn_dup+0x8a/0xa0 [ 2985.125307][T21593] sysfs_do_create_link_sd+0xc0/0x110 [ 2985.130745][T21593] device_add+0x83b/0x1050 [ 2985.135260][T21593] wiphy_register+0x1d8b/0x2aa0 [ 2985.140195][T21593] ? cfg80211_event_work+0x40/0x40 [ 2985.145373][T21593] ? minstrel_ht_alloc+0x894/0xa20 [ 2985.150589][T21593] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2985.156719][T21593] ieee80211_register_hw+0x2d48/0x39f0 [ 2985.162270][T21593] ? ieee80211_register_hw+0xee1/0x39f0 [ 2985.168318][T21593] ? ieee80211_register_hw+0xee1/0x39f0 [ 2985.173968][T21593] ? ieee80211_tasklet_handler+0x20/0x20 [ 2985.179662][T21593] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2985.185628][T21593] ? __debug_object_init+0xed/0x440 [ 2985.190907][T21593] ? memset+0x1e/0x40 [ 2985.194982][T21593] ? __hrtimer_init+0x189/0x270 [ 2985.199890][T21593] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2985.205686][T21593] ? memcpy+0x3c/0x60 [ 2985.209723][T21593] hwsim_new_radio_nl+0xab7/0xc90 [ 2985.214826][T21593] genl_family_rcv_msg_doit+0x22f/0x350 [ 2985.220425][T21593] ? end_current_label_crit_section+0x170/0x170 [ 2985.226736][T21593] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2985.232701][T21593] ? bpf_lsm_capable+0x5/0x10 [ 2985.237426][T21593] ? security_capable+0x85/0xb0 [ 2985.242345][T21593] genl_rcv_msg+0x601/0x790 [ 2985.246911][T21593] ? genl_bind+0x360/0x360 [ 2985.251378][T21593] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2985.257789][T21593] netlink_rcv_skb+0x1ef/0x440 [ 2985.262615][T21593] ? genl_bind+0x360/0x360 [ 2985.267089][T21593] ? netlink_ack+0x1160/0x1160 [ 2985.271917][T21593] ? down_read+0x1a8/0x2d0 [ 2985.276385][T21593] genl_rcv+0x24/0x40 [ 2985.280425][T21593] netlink_unicast+0x7ad/0x920 [ 2985.285274][T21593] netlink_sendmsg+0x8ad/0xbd0 [ 2985.290112][T21593] ? netlink_getsockopt+0x550/0x550 [ 2985.295385][T21593] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2985.300999][T21593] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2985.306341][T21593] ? security_socket_sendmsg+0x7c/0xa0 [ 2985.311862][T21593] ? netlink_getsockopt+0x550/0x550 [ 2985.317136][T21593] ____sys_sendmsg+0x5ed/0x9a0 [ 2985.321978][T21593] ? __sys_sendmsg_sock+0x30/0x30 [ 2985.327067][T21593] ? __import_iovec+0x306/0x510 [ 2985.331992][T21593] ? import_iovec+0x6f/0xa0 [ 2985.336574][T21593] ___sys_sendmsg+0x2a2/0x360 [ 2985.341320][T21593] ? __sys_sendmsg+0x2a0/0x2a0 [ 2985.346221][T21593] __se_sys_sendmsg+0x1c3/0x2b0 [ 2985.351157][T21593] ? __x64_sys_sendmsg+0x80/0x80 [ 2985.356195][T21593] ? lockdep_hardirqs_on+0x94/0x140 [ 2985.361463][T21593] do_syscall_64+0x4c/0xa0 [ 2985.365946][T21593] ? clear_bhb_loop+0x60/0xb0 [ 2985.370683][T21593] ? clear_bhb_loop+0x60/0xb0 [ 2985.375425][T21593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2985.381377][T21593] RIP: 0033:0x7f27c959e019 [ 2985.385839][T21593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2985.405500][T21593] RSP: 002b:00007f27c73d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2985.413976][T21593] RAX: ffffffffffffffda RBX: 00007f27c9826270 RCX: 00007f27c959e019 [ 2985.421996][T21593] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2985.430015][T21593] RBP: 00007f27c963500c R08: 0000000000000000 R09: 0000000000000000 [ 2985.438050][T21593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2985.446071][T21593] R13: 00007f27c9826308 R14: 00007f27c9826270 R15: 00007ffe76deb8d8 [ 2985.454118][T21593] [ 2986.390478][T21611] netlink: 'syz.2.15298': attribute type 39 has an invalid length. [ 2986.865360][T21611] device macvlan0 entered promiscuous mode [ 2987.436276][T21634] netlink: 'syz.1.15302': attribute type 39 has an invalid length. [ 2988.722170][T21658] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15310'. [ 2988.803427][T21658] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2988.874910][T21658] CPU: 0 PID: 21658 Comm: syz.3.15310 Not tainted syzkaller #0 [ 2988.882563][T21658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2988.892688][T21658] Call Trace: [ 2988.896009][T21658] [ 2988.898989][T21658] dump_stack_lvl+0x188/0x24e [ 2988.903745][T21658] ? show_regs_print_info+0x12/0x12 [ 2988.909002][T21658] ? load_image+0x410/0x410 [ 2988.913570][T21658] sysfs_warn_dup+0x8a/0xa0 [ 2988.918134][T21658] sysfs_do_create_link_sd+0xc0/0x110 [ 2988.923577][T21658] device_add+0x83b/0x1050 [ 2988.928092][T21658] wiphy_register+0x1d8b/0x2aa0 [ 2988.933041][T21658] ? cfg80211_event_work+0x40/0x40 [ 2988.938227][T21658] ? minstrel_ht_alloc+0x894/0xa20 [ 2988.943415][T21658] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2988.949590][T21658] ieee80211_register_hw+0x2d48/0x39f0 [ 2988.955129][T21658] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2988.961375][T21658] ? ieee80211_register_hw+0xee1/0x39f0 [ 2988.967013][T21658] ? ieee80211_register_hw+0xee1/0x39f0 [ 2988.972647][T21658] ? ieee80211_tasklet_handler+0x20/0x20 [ 2988.978352][T21658] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2988.984324][T21658] ? __debug_object_init+0xed/0x440 [ 2988.989614][T21658] ? memset+0x1e/0x40 [ 2988.993662][T21658] ? __hrtimer_init+0x189/0x270 [ 2988.998583][T21658] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2989.004396][T21658] ? memcpy+0x3c/0x60 [ 2989.008443][T21658] hwsim_new_radio_nl+0xab7/0xc90 [ 2989.013563][T21658] genl_family_rcv_msg_doit+0x22f/0x350 [ 2989.019173][T21658] ? end_current_label_crit_section+0x170/0x170 [ 2989.025500][T21658] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2989.031471][T21658] ? bpf_lsm_capable+0x5/0x10 [ 2989.036212][T21658] ? security_capable+0x85/0xb0 [ 2989.041146][T21658] genl_rcv_msg+0x601/0x790 [ 2989.045730][T21658] ? genl_bind+0x360/0x360 [ 2989.050200][T21658] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2989.056620][T21658] netlink_rcv_skb+0x1ef/0x440 [ 2989.061454][T21658] ? genl_bind+0x360/0x360 [ 2989.065934][T21658] ? netlink_ack+0x1160/0x1160 [ 2989.070815][T21658] ? down_read+0x1a8/0x2d0 [ 2989.075291][T21658] genl_rcv+0x24/0x40 [ 2989.079335][T21658] netlink_unicast+0x7ad/0x920 [ 2989.084186][T21658] netlink_sendmsg+0x8ad/0xbd0 [ 2989.089023][T21658] ? netlink_getsockopt+0x550/0x550 [ 2989.094290][T21658] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2989.099904][T21658] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2989.105250][T21658] ? security_socket_sendmsg+0x7c/0xa0 [ 2989.110767][T21658] ? netlink_getsockopt+0x550/0x550 [ 2989.116047][T21658] ____sys_sendmsg+0x5ed/0x9a0 [ 2989.120904][T21658] ? __sys_sendmsg_sock+0x30/0x30 [ 2989.125994][T21658] ? __import_iovec+0x306/0x510 [ 2989.130933][T21658] ? import_iovec+0x6f/0xa0 [ 2989.135516][T21658] ___sys_sendmsg+0x2a2/0x360 [ 2989.140266][T21658] ? __sys_sendmsg+0x2a0/0x2a0 [ 2989.145123][T21658] ? trace_call_bpf+0xbf/0x6b0 [ 2989.149990][T21658] __se_sys_sendmsg+0x1c3/0x2b0 [ 2989.154917][T21658] ? perf_trace_preemptirq_template+0x268/0x320 [ 2989.161272][T21658] ? __x64_sys_sendmsg+0x80/0x80 [ 2989.166311][T21658] ? lockdep_hardirqs_on+0x94/0x140 [ 2989.171589][T21658] do_syscall_64+0x4c/0xa0 [ 2989.176110][T21658] ? clear_bhb_loop+0x60/0xb0 [ 2989.180857][T21658] ? clear_bhb_loop+0x60/0xb0 [ 2989.185641][T21658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2989.191600][T21658] RIP: 0033:0x7fdac5b9e019 [ 2989.196071][T21658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2989.215750][T21658] RSP: 002b:00007fdac6a99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2989.224236][T21658] RAX: ffffffffffffffda RBX: 00007fdac5e26270 RCX: 00007fdac5b9e019 [ 2989.232265][T21658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2989.240291][T21658] RBP: 00007fdac5c3500c R08: 0000000000000000 R09: 0000000000000000 [ 2989.248324][T21658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2989.256356][T21658] R13: 00007fdac5e26308 R14: 00007fdac5e26270 R15: 00007ffde2613798 [ 2989.264424][T21658] [ 2989.785290][T21665] netlink: 'syz.1.15315': attribute type 1 has an invalid length. [ 2989.813552][T21665] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.15315'. [ 2990.058174][T21668] netlink: 'syz.0.15316': attribute type 39 has an invalid length. [ 2990.166093][T21681] netlink: 'syz.2.15318': attribute type 39 has an invalid length. [ 2991.184203][T21681] device hsr_slave_1 left promiscuous mode [ 2991.305440][T21687] netlink: 'syz.1.15323': attribute type 10 has an invalid length. [ 2991.358218][T21687] device geneve1 entered promiscuous mode [ 2991.400752][T21687] team0: Port device geneve1 added [ 2991.424139][T21690] IPv6: Can't replace route, no match found [ 2991.629313][T21694] netlink: 'syz.4.15324': attribute type 25 has an invalid length. [ 2991.670539][T21694] netlink: 'syz.4.15324': attribute type 28 has an invalid length. [ 2992.181201][T21704] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15328'. [ 2992.285364][T21711] netlink: 'syz.4.15331': attribute type 10 has an invalid length. [ 2992.299667][T21710] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.15330'. [ 2992.326256][T21711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15331'. [ 2993.827513][T21711] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2993.852105][T21711] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2993.861159][T21711] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2993.870736][T21711] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2993.903365][T21711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2993.922018][T21711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2993.934450][T21711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2993.943790][T21711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2993.956437][T21711] team0: Port device geneve0 added [ 2993.966430][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): geneve0: link becomes ready [ 2993.993203][T21720] netlink: 'syz.1.15332': attribute type 39 has an invalid length. [ 2994.022442][T21704] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2994.042065][T21704] CPU: 1 PID: 21704 Comm: syz.3.15328 Not tainted syzkaller #0 [ 2994.049721][T21704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2994.059852][T21704] Call Trace: [ 2994.063183][T21704] [ 2994.066172][T21704] dump_stack_lvl+0x188/0x24e [ 2994.070927][T21704] ? show_regs_print_info+0x12/0x12 [ 2994.076207][T21704] ? load_image+0x410/0x410 [ 2994.080786][T21704] sysfs_warn_dup+0x8a/0xa0 [ 2994.085363][T21704] sysfs_do_create_link_sd+0xc0/0x110 [ 2994.090806][T21704] device_add+0x83b/0x1050 [ 2994.095304][T21704] wiphy_register+0x1d8b/0x2aa0 [ 2994.100244][T21704] ? cfg80211_event_work+0x40/0x40 [ 2994.105418][T21704] ? minstrel_ht_alloc+0x894/0xa20 [ 2994.110610][T21704] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2994.116747][T21704] ieee80211_register_hw+0x2d48/0x39f0 [ 2994.122296][T21704] ? ieee80211_register_hw+0xee1/0x39f0 [ 2994.127907][T21704] ? ieee80211_register_hw+0xee1/0x39f0 [ 2994.133531][T21704] ? ieee80211_tasklet_handler+0x20/0x20 [ 2994.139234][T21704] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2994.145205][T21704] ? __debug_object_init+0xed/0x440 [ 2994.150491][T21704] ? memset+0x1e/0x40 [ 2994.154585][T21704] ? __hrtimer_init+0x189/0x270 [ 2994.159509][T21704] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2994.165317][T21704] ? memcpy+0x3c/0x60 [ 2994.169374][T21704] hwsim_new_radio_nl+0xab7/0xc90 [ 2994.174508][T21704] genl_family_rcv_msg_doit+0x22f/0x350 [ 2994.180163][T21704] ? end_current_label_crit_section+0x170/0x170 [ 2994.186488][T21704] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2994.192455][T21704] ? bpf_lsm_capable+0x5/0x10 [ 2994.197213][T21704] ? security_capable+0x85/0xb0 [ 2994.202240][T21704] genl_rcv_msg+0x601/0x790 [ 2994.206825][T21704] ? genl_bind+0x360/0x360 [ 2994.211406][T21704] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2994.217874][T21704] netlink_rcv_skb+0x1ef/0x440 [ 2994.222722][T21704] ? genl_bind+0x360/0x360 [ 2994.227205][T21704] ? netlink_ack+0x1160/0x1160 [ 2994.232059][T21704] ? down_read+0x1a8/0x2d0 [ 2994.236536][T21704] genl_rcv+0x24/0x40 [ 2994.240578][T21704] netlink_unicast+0x7ad/0x920 [ 2994.245432][T21704] netlink_sendmsg+0x8ad/0xbd0 [ 2994.250284][T21704] ? netlink_getsockopt+0x550/0x550 [ 2994.255579][T21704] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2994.261199][T21704] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2994.266547][T21704] ? security_socket_sendmsg+0x7c/0xa0 [ 2994.272074][T21704] ? netlink_getsockopt+0x550/0x550 [ 2994.277359][T21704] ____sys_sendmsg+0x5ed/0x9a0 [ 2994.282218][T21704] ? __sys_sendmsg_sock+0x30/0x30 [ 2994.287333][T21704] ? __import_iovec+0x306/0x510 [ 2994.292280][T21704] ? import_iovec+0x6f/0xa0 [ 2994.296863][T21704] ___sys_sendmsg+0x2a2/0x360 [ 2994.301622][T21704] ? __sys_sendmsg+0x2a0/0x2a0 [ 2994.306489][T21704] ? trace_call_bpf+0xbf/0x6b0 [ 2994.311364][T21704] __se_sys_sendmsg+0x1c3/0x2b0 [ 2994.316322][T21704] ? perf_trace_preemptirq_template+0x268/0x320 [ 2994.322646][T21704] ? __x64_sys_sendmsg+0x80/0x80 [ 2994.327686][T21704] ? lockdep_hardirqs_on+0x94/0x140 [ 2994.332952][T21704] do_syscall_64+0x4c/0xa0 [ 2994.337447][T21704] ? clear_bhb_loop+0x60/0xb0 [ 2994.342197][T21704] ? clear_bhb_loop+0x60/0xb0 [ 2994.346952][T21704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2994.352925][T21704] RIP: 0033:0x7fdac5b9e019 [ 2994.357398][T21704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2994.377069][T21704] RSP: 002b:00007fdac6adb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2994.385562][T21704] RAX: ffffffffffffffda RBX: 00007fdac5e26090 RCX: 00007fdac5b9e019 [ 2994.393607][T21704] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2994.401643][T21704] RBP: 00007fdac5c3500c R08: 0000000000000000 R09: 0000000000000000 [ 2994.409669][T21704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2994.417702][T21704] R13: 00007fdac5e26128 R14: 00007fdac5e26090 R15: 00007ffde2613798 [ 2994.425754][T21704] [ 2994.823403][T21733] netlink: 'syz.3.15337': attribute type 10 has an invalid length. [ 2996.630308][T21740] netlink: 'syz.0.15338': attribute type 39 has an invalid length. [ 2996.861112][T21757] netlink: 'syz.4.15343': attribute type 10 has an invalid length. [ 2997.168655][T21764] netlink: 'syz.2.15345': attribute type 39 has an invalid length. [ 2997.451087][T21774] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.15347'. [ 2997.527424][T21774] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2997.566077][T21774] CPU: 0 PID: 21774 Comm: syz.1.15347 Not tainted syzkaller #0 [ 2997.573727][T21774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2997.583831][T21774] Call Trace: [ 2997.587157][T21774] [ 2997.590136][T21774] dump_stack_lvl+0x188/0x24e [ 2997.594874][T21774] ? show_regs_print_info+0x12/0x12 [ 2997.600149][T21774] ? load_image+0x410/0x410 [ 2997.604718][T21774] sysfs_warn_dup+0x8a/0xa0 [ 2997.609308][T21774] sysfs_do_create_link_sd+0xc0/0x110 [ 2997.614737][T21774] device_add+0x83b/0x1050 [ 2997.619214][T21774] wiphy_register+0x1d8b/0x2aa0 [ 2997.624146][T21774] ? cfg80211_event_work+0x40/0x40 [ 2997.629402][T21774] ? minstrel_ht_alloc+0x894/0xa20 [ 2997.634578][T21774] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2997.640701][T21774] ieee80211_register_hw+0x2d48/0x39f0 [ 2997.646239][T21774] ? ieee80211_register_hw+0xee1/0x39f0 [ 2997.651853][T21774] ? ieee80211_register_hw+0xee1/0x39f0 [ 2997.657471][T21774] ? ieee80211_tasklet_handler+0x20/0x20 [ 2997.663168][T21774] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2997.669119][T21774] ? __debug_object_init+0xed/0x440 [ 2997.674404][T21774] ? memset+0x1e/0x40 [ 2997.678439][T21774] ? __hrtimer_init+0x189/0x270 [ 2997.683362][T21774] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2997.689145][T21774] ? memcpy+0x3c/0x60 [ 2997.693174][T21774] hwsim_new_radio_nl+0xab7/0xc90 [ 2997.698304][T21774] genl_family_rcv_msg_doit+0x22f/0x350 [ 2997.703902][T21774] ? end_current_label_crit_section+0x170/0x170 [ 2997.710204][T21774] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2997.716154][T21774] ? bpf_lsm_capable+0x5/0x10 [ 2997.720888][T21774] ? security_capable+0x85/0xb0 [ 2997.725844][T21774] genl_rcv_msg+0x601/0x790 [ 2997.730404][T21774] ? genl_bind+0x360/0x360 [ 2997.734861][T21774] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2997.741260][T21774] netlink_rcv_skb+0x1ef/0x440 [ 2997.746116][T21774] ? genl_bind+0x360/0x360 [ 2997.750578][T21774] ? netlink_ack+0x1160/0x1160 [ 2997.755413][T21774] ? down_read+0x1a8/0x2d0 [ 2997.759885][T21774] genl_rcv+0x24/0x40 [ 2997.763942][T21774] netlink_unicast+0x7ad/0x920 [ 2997.768803][T21774] netlink_sendmsg+0x8ad/0xbd0 [ 2997.773670][T21774] ? netlink_getsockopt+0x550/0x550 [ 2997.778945][T21774] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2997.784557][T21774] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2997.789902][T21774] ? security_socket_sendmsg+0x7c/0xa0 [ 2997.795419][T21774] ? netlink_getsockopt+0x550/0x550 [ 2997.800679][T21774] ____sys_sendmsg+0x5ed/0x9a0 [ 2997.805516][T21774] ? __sys_sendmsg_sock+0x30/0x30 [ 2997.810597][T21774] ? __import_iovec+0x306/0x510 [ 2997.815507][T21774] ? import_iovec+0x6f/0xa0 [ 2997.820067][T21774] ___sys_sendmsg+0x2a2/0x360 [ 2997.824899][T21774] ? __sys_sendmsg+0x2a0/0x2a0 [ 2997.829782][T21774] __se_sys_sendmsg+0x1c3/0x2b0 [ 2997.834695][T21774] ? __x64_sys_sendmsg+0x80/0x80 [ 2997.839712][T21774] ? lockdep_hardirqs_on+0x94/0x140 [ 2997.844959][T21774] do_syscall_64+0x4c/0xa0 [ 2997.849421][T21774] ? clear_bhb_loop+0x60/0xb0 [ 2997.854143][T21774] ? clear_bhb_loop+0x60/0xb0 [ 2997.858894][T21774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2997.864836][T21774] RIP: 0033:0x7f659039e019 [ 2997.869306][T21774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2997.888968][T21774] RSP: 002b:00007f659128f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2997.897437][T21774] RAX: ffffffffffffffda RBX: 00007f6590626270 RCX: 00007f659039e019 [ 2997.905458][T21774] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2997.913473][T21774] RBP: 00007f659043500c R08: 0000000000000000 R09: 0000000000000000 [ 2997.921494][T21774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2997.929510][T21774] R13: 00007f6590626308 R14: 00007f6590626270 R15: 00007fffe4219d68 [ 2997.937541][T21774] [ 2998.680832][T21788] netlink: 'syz.0.15352': attribute type 10 has an invalid length. [ 3000.221181][T21802] netlink: 'syz.4.15357': attribute type 25 has an invalid length. [ 3000.250705][T21802] netlink: 'syz.4.15357': attribute type 28 has an invalid length. [ 3000.449041][T21814] netlink: 'syz.2.15361': attribute type 10 has an invalid length. [ 3001.161019][T21814] team0: Port device geneve1 added [ 3001.486588][T21822] netlink: 'syz.3.15362': attribute type 39 has an invalid length. [ 3001.544023][T21829] netlink: 'syz.2.15366': attribute type 10 has an invalid length. [ 3004.002417][T21830] mac80211_hwsim hwsim246 wlan1: refused to change device tx_queue_len [ 3006.298197][T21873] FAULT_INJECTION: forcing a failure. [ 3006.298197][T21873] name failslab, interval 1, probability 0, space 0, times 0 [ 3006.405795][T21873] CPU: 1 PID: 21873 Comm: syz.1.15377 Not tainted syzkaller #0 [ 3006.413462][T21873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3006.423585][T21873] Call Trace: [ 3006.426916][T21873] [ 3006.429906][T21873] dump_stack_lvl+0x188/0x24e [ 3006.434675][T21873] ? show_regs_print_info+0x12/0x12 [ 3006.439952][T21873] ? load_image+0x410/0x410 [ 3006.444531][T21873] ? __might_sleep+0xd0/0xd0 [ 3006.449187][T21873] ? __lock_acquire+0x7c40/0x7c40 [ 3006.454300][T21873] should_fail_ex+0x390/0x4c0 [ 3006.459071][T21873] should_failslab+0x5/0x20 [ 3006.463671][T21873] slab_pre_alloc_hook+0x59/0x300 [ 3006.468763][T21873] ? __lock_acquire+0x1465/0x7c40 [ 3006.473879][T21873] kmem_cache_alloc_lru+0x49/0x2e0 [ 3006.479066][T21873] ? __d_alloc+0x2e/0x6e0 [ 3006.483476][T21873] __d_alloc+0x2e/0x6e0 [ 3006.487712][T21873] d_alloc_parallel+0xdc/0x1590 [ 3006.492644][T21873] ? memset+0x1e/0x40 [ 3006.496729][T21873] ? lockdep_init_map_type+0x98/0x8d0 [ 3006.502258][T21873] ? lockdep_softirqs_off+0x430/0x430 [ 3006.507720][T21873] ? d_hash_and_lookup+0x1b0/0x1b0 [ 3006.512981][T21873] ? __init_waitqueue_head+0xa4/0x140 [ 3006.518438][T21873] __lookup_slow+0x134/0x3f0 [ 3006.523107][T21873] ? lookup_one_len+0x2d0/0x2d0 [ 3006.528056][T21873] ? down_read+0x1a8/0x2d0 [ 3006.532569][T21873] lookup_slow+0x53/0x70 [ 3006.536885][T21873] link_path_walk+0x976/0xea0 [ 3006.541675][T21873] ? handle_lookup_down+0x130/0x130 [ 3006.546966][T21873] path_openat+0x285/0x2f10 [ 3006.551578][T21873] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3006.557424][T21873] ? do_filp_open+0x420/0x420 [ 3006.562183][T21873] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 3006.568873][T21873] do_filp_open+0x1ee/0x420 [ 3006.573472][T21873] ? vfs_tmpfile+0x470/0x470 [ 3006.578151][T21873] ? noop_direct_IO+0x10/0x10 [ 3006.582915][T21873] ? _raw_spin_unlock+0x24/0x40 [ 3006.587893][T21873] ? alloc_fd+0x590/0x640 [ 3006.592323][T21873] do_sys_openat2+0x14b/0x4f0 [ 3006.597076][T21873] ? perf_trace_preemptirq_template+0x268/0x320 [ 3006.603398][T21873] ? do_sys_open+0xe0/0xe0 [ 3006.607894][T21873] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3006.613950][T21873] ? srcu_init_notifier_head+0x90/0x90 [ 3006.619478][T21873] ? lock_chain_count+0x20/0x20 [ 3006.624410][T21873] __x64_sys_openat+0x135/0x160 [ 3006.629357][T21873] do_syscall_64+0x4c/0xa0 [ 3006.633847][T21873] ? clear_bhb_loop+0x60/0xb0 [ 3006.638587][T21873] ? clear_bhb_loop+0x60/0xb0 [ 3006.643343][T21873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3006.649415][T21873] RIP: 0033:0x7f659035e84e [ 3006.653900][T21873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3006.673586][T21873] RSP: 002b:00007f65912f1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3006.682085][T21873] RAX: ffffffffffffffda RBX: 00007f65912f26c0 RCX: 00007f659035e84e [ 3006.690116][T21873] RDX: 0000000000000002 RSI: 00007f65912f1f90 RDI: ffffffffffffff9c [ 3006.698150][T21873] RBP: 00007f65912f2090 R08: 0000000000000000 R09: 0000000000000000 [ 3006.706197][T21873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3006.714232][T21873] R13: 00007f6590626038 R14: 00007f6590625fa0 R15: 00007fffe4219d68 [ 3006.722303][T21873] [ 3007.082583][T21876] FAULT_INJECTION: forcing a failure. [ 3007.082583][T21876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3007.132062][T21876] CPU: 1 PID: 21876 Comm: syz.0.15378 Not tainted syzkaller #0 [ 3007.139773][T21876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3007.149889][T21876] Call Trace: [ 3007.153398][T21876] [ 3007.156394][T21876] dump_stack_lvl+0x188/0x24e [ 3007.161139][T21876] ? show_regs_print_info+0x12/0x12 [ 3007.166403][T21876] ? load_image+0x410/0x410 [ 3007.170971][T21876] ? __lock_acquire+0x7c40/0x7c40 [ 3007.176051][T21876] ? snprintf+0xe5/0x140 [ 3007.180339][T21876] should_fail_ex+0x390/0x4c0 [ 3007.185073][T21876] _copy_to_user+0x2c/0x130 [ 3007.189714][T21876] simple_read_from_buffer+0xe3/0x150 [ 3007.195162][T21876] proc_fail_nth_read+0x1a6/0x220 [ 3007.200252][T21876] ? proc_fault_inject_write+0x310/0x310 [ 3007.206378][T21876] ? fsnotify_perm+0x248/0x550 [ 3007.211197][T21876] ? proc_fault_inject_write+0x310/0x310 [ 3007.216860][T21876] vfs_read+0x2db/0x960 [ 3007.221062][T21876] ? kernel_read+0x1e0/0x1e0 [ 3007.225690][T21876] ? __fget_files+0x28/0x460 [ 3007.230323][T21876] ? __fget_files+0x3fc/0x460 [ 3007.235044][T21876] ? __fdget_pos+0x2ae/0x360 [ 3007.239677][T21876] ? ksys_read+0x70/0x260 [ 3007.244062][T21876] ksys_read+0x14d/0x260 [ 3007.248352][T21876] ? vfs_write+0x9a0/0x9a0 [ 3007.252804][T21876] ? lockdep_hardirqs_on+0x94/0x140 [ 3007.258039][T21876] do_syscall_64+0x4c/0xa0 [ 3007.262490][T21876] ? clear_bhb_loop+0x60/0xb0 [ 3007.267204][T21876] ? clear_bhb_loop+0x60/0xb0 [ 3007.271916][T21876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3007.277842][T21876] RIP: 0033:0x7f27c955e84e [ 3007.282289][T21876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3007.301927][T21876] RSP: 002b:00007f27ca3a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3007.310372][T21876] RAX: ffffffffffffffda RBX: 00007f27ca3a66c0 RCX: 00007f27c955e84e [ 3007.318386][T21876] RDX: 000000000000000f RSI: 00007f27ca3a60a0 RDI: 0000000000000005 [ 3007.326380][T21876] RBP: 00007f27ca3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 3007.334402][T21876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3007.342399][T21876] R13: 00007f27c9826038 R14: 00007f27c9825fa0 R15: 00007ffe76deb8d8 [ 3007.350412][T21876] [ 3009.093785][T30881] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3010.497224][T21864] netlink: 'syz.4.15375': attribute type 5 has an invalid length. [ 3010.505274][T21864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15375'. [ 3010.515483][T21870] netlink: 'syz.2.15374': attribute type 25 has an invalid length. [ 3010.526007][T21870] netlink: 'syz.2.15374': attribute type 28 has an invalid length. [ 3010.552003][T21879] netlink: 'syz.1.15379': attribute type 10 has an invalid length. [ 3010.601264][T21882] netlink: 'syz.0.15380': attribute type 39 has an invalid length. [ 3010.763693][T21893] FAULT_INJECTION: forcing a failure. [ 3010.763693][T21893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3010.803541][T21893] CPU: 0 PID: 21893 Comm: syz.3.15383 Not tainted syzkaller #0 [ 3010.811191][T21893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3010.821291][T21893] Call Trace: [ 3010.824722][T21893] [ 3010.827693][T21893] dump_stack_lvl+0x188/0x24e [ 3010.832423][T21893] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3010.838640][T21893] ? show_regs_print_info+0x12/0x12 [ 3010.843895][T21893] ? load_image+0x410/0x410 [ 3010.848553][T21893] should_fail_ex+0x390/0x4c0 [ 3010.853290][T21893] _copy_to_user+0x2c/0x130 [ 3010.857847][T21893] simple_read_from_buffer+0xe3/0x150 [ 3010.863274][T21893] proc_fail_nth_read+0x1a6/0x220 [ 3010.868366][T21893] ? proc_fault_inject_write+0x310/0x310 [ 3010.874059][T21893] ? fsnotify_perm+0x248/0x550 [ 3010.878881][T21893] ? proc_fault_inject_write+0x310/0x310 [ 3010.884556][T21893] vfs_read+0x2db/0x960 [ 3010.888784][T21893] ? kernel_read+0x1e0/0x1e0 [ 3010.893442][T21893] ? __fget_files+0x28/0x460 [ 3010.898090][T21893] ? __fget_files+0x3fc/0x460 [ 3010.902840][T21893] ? __fdget_pos+0x2ae/0x360 [ 3010.907487][T21893] ? ksys_read+0x70/0x260 [ 3010.911881][T21893] ksys_read+0x14d/0x260 [ 3010.916181][T21893] ? vfs_write+0x9a0/0x9a0 [ 3010.920651][T21893] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3010.926597][T21893] do_syscall_64+0x4c/0xa0 [ 3010.931069][T21893] ? clear_bhb_loop+0x60/0xb0 [ 3010.935808][T21893] ? clear_bhb_loop+0x60/0xb0 [ 3010.940541][T21893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3010.946490][T21893] RIP: 0033:0x7fdac5b5e84e [ 3010.950964][T21893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3010.970627][T21893] RSP: 002b:00007fdac6afbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3010.979102][T21893] RAX: ffffffffffffffda RBX: 00007fdac6afc6c0 RCX: 00007fdac5b5e84e [ 3010.987127][T21893] RDX: 000000000000000f RSI: 00007fdac6afc0a0 RDI: 0000000000000007 [ 3010.995152][T21893] RBP: 00007fdac6afc090 R08: 0000000000000000 R09: 0000000000000000 [ 3011.003173][T21893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3011.011190][T21893] R13: 00007fdac5e26038 R14: 00007fdac5e25fa0 R15: 00007ffde2613798 [ 3011.019233][T21893] [ 3011.980074][T21914] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.15389'. [ 3012.004156][T21914] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3012.022895][T21914] CPU: 1 PID: 21914 Comm: syz.0.15389 Not tainted syzkaller #0 [ 3012.030559][T21914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3012.040686][T21914] Call Trace: [ 3012.044037][T21914] [ 3012.047034][T21914] dump_stack_lvl+0x188/0x24e [ 3012.051812][T21914] ? show_regs_print_info+0x12/0x12 [ 3012.057111][T21914] ? load_image+0x410/0x410 [ 3012.061721][T21914] sysfs_warn_dup+0x8a/0xa0 [ 3012.066312][T21914] sysfs_do_create_link_sd+0xc0/0x110 [ 3012.071769][T21914] device_add+0x83b/0x1050 [ 3012.076289][T21914] wiphy_register+0x1d8b/0x2aa0 [ 3012.081246][T21914] ? cfg80211_event_work+0x40/0x40 [ 3012.086435][T21914] ? minstrel_ht_alloc+0x894/0xa20 [ 3012.091699][T21914] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3012.097822][T21914] ieee80211_register_hw+0x2d48/0x39f0 [ 3012.103351][T21914] ? ieee80211_register_hw+0xee1/0x39f0 [ 3012.108943][T21914] ? ieee80211_register_hw+0xee1/0x39f0 [ 3012.114545][T21914] ? ieee80211_tasklet_handler+0x20/0x20 [ 3012.120230][T21914] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3012.126172][T21914] ? __debug_object_init+0xed/0x440 [ 3012.131430][T21914] ? memset+0x1e/0x40 [ 3012.135453][T21914] ? __hrtimer_init+0x189/0x270 [ 3012.140352][T21914] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3012.146137][T21914] ? memcpy+0x3c/0x60 [ 3012.150175][T21914] hwsim_new_radio_nl+0xab7/0xc90 [ 3012.155274][T21914] genl_family_rcv_msg_doit+0x22f/0x350 [ 3012.160863][T21914] ? end_current_label_crit_section+0x170/0x170 [ 3012.167158][T21914] ? lockdep_hardirqs_on+0x94/0x140 [ 3012.172401][T21914] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3012.178350][T21914] ? bpf_lsm_capable+0x5/0x10 [ 3012.183073][T21914] ? security_capable+0x85/0xb0 [ 3012.188001][T21914] genl_rcv_msg+0x601/0x790 [ 3012.192602][T21914] ? genl_bind+0x360/0x360 [ 3012.197147][T21914] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3012.203603][T21914] netlink_rcv_skb+0x1ef/0x440 [ 3012.208429][T21914] ? genl_bind+0x360/0x360 [ 3012.212889][T21914] ? netlink_ack+0x1160/0x1160 [ 3012.217718][T21914] ? down_read+0x1a8/0x2d0 [ 3012.222179][T21914] genl_rcv+0x24/0x40 [ 3012.226198][T21914] netlink_unicast+0x7ad/0x920 [ 3012.231029][T21914] netlink_sendmsg+0x8ad/0xbd0 [ 3012.235866][T21914] ? netlink_getsockopt+0x550/0x550 [ 3012.241128][T21914] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3012.246823][T21914] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3012.252155][T21914] ? security_socket_sendmsg+0x7c/0xa0 [ 3012.257661][T21914] ? netlink_getsockopt+0x550/0x550 [ 3012.262916][T21914] ____sys_sendmsg+0x5ed/0x9a0 [ 3012.267750][T21914] ? __sys_sendmsg_sock+0x30/0x30 [ 3012.272828][T21914] ? __import_iovec+0x306/0x510 [ 3012.277743][T21914] ? import_iovec+0x6f/0xa0 [ 3012.282312][T21914] ___sys_sendmsg+0x2a2/0x360 [ 3012.287054][T21914] ? __sys_sendmsg+0x2a0/0x2a0 [ 3012.291965][T21914] __se_sys_sendmsg+0x1c3/0x2b0 [ 3012.296875][T21914] ? __x64_sys_sendmsg+0x80/0x80 [ 3012.301899][T21914] ? lockdep_hardirqs_on+0x94/0x140 [ 3012.307152][T21914] do_syscall_64+0x4c/0xa0 [ 3012.311708][T21914] ? clear_bhb_loop+0x60/0xb0 [ 3012.316432][T21914] ? clear_bhb_loop+0x60/0xb0 [ 3012.321163][T21914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3012.327104][T21914] RIP: 0033:0x7f27c959e019 [ 3012.331559][T21914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3012.351226][T21914] RSP: 002b:00007f27ca385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3012.359698][T21914] RAX: ffffffffffffffda RBX: 00007f27c9826090 RCX: 00007f27c959e019 [ 3012.367717][T21914] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3012.375737][T21914] RBP: 00007f27c963500c R08: 0000000000000000 R09: 0000000000000000 [ 3012.383802][T21914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3012.391825][T21914] R13: 00007f27c9826128 R14: 00007f27c9826090 R15: 00007ffe76deb8d8 [ 3012.399885][T21914] [ 3013.472085][T21932] netlink: 'syz.1.15394': attribute type 10 has an invalid length. [ 3013.904437][T21935] netlink: 'syz.0.15395': attribute type 39 has an invalid length. [ 3014.384486][T21957] netlink: 'syz.1.15402': attribute type 9 has an invalid length. [ 3014.398381][T21957] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.15402'. [ 3016.042919][T21965] netlink: 'syz.3.15404': attribute type 25 has an invalid length. [ 3016.088721][T21965] netlink: 'syz.3.15404': attribute type 28 has an invalid length. [ 3016.147813][T21972] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.15406'. [ 3016.217209][T21972] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3016.339601][T21972] CPU: 1 PID: 21972 Comm: syz.0.15406 Not tainted syzkaller #0 [ 3016.347273][T21972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3016.357399][T21972] Call Trace: [ 3016.360731][T21972] [ 3016.363730][T21972] dump_stack_lvl+0x188/0x24e [ 3016.368507][T21972] ? show_regs_print_info+0x12/0x12 [ 3016.373785][T21972] ? load_image+0x410/0x410 [ 3016.378381][T21972] sysfs_warn_dup+0x8a/0xa0 [ 3016.383007][T21972] sysfs_do_create_link_sd+0xc0/0x110 [ 3016.388496][T21972] device_add+0x83b/0x1050 [ 3016.393005][T21972] wiphy_register+0x1d8b/0x2aa0 [ 3016.397974][T21972] ? cfg80211_event_work+0x40/0x40 [ 3016.403159][T21972] ? minstrel_ht_alloc+0x894/0xa20 [ 3016.408375][T21972] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3016.414539][T21972] ieee80211_register_hw+0x2d48/0x39f0 [ 3016.420108][T21972] ? ieee80211_register_hw+0xee1/0x39f0 [ 3016.425767][T21972] ? ieee80211_register_hw+0xee1/0x39f0 [ 3016.431410][T21972] ? ieee80211_tasklet_handler+0x20/0x20 [ 3016.437114][T21972] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3016.443099][T21972] ? __debug_object_init+0xed/0x440 [ 3016.448432][T21972] ? memset+0x1e/0x40 [ 3016.452489][T21972] ? __hrtimer_init+0x189/0x270 [ 3016.457418][T21972] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3016.463233][T21972] ? memcpy+0x3c/0x60 [ 3016.467287][T21972] hwsim_new_radio_nl+0xab7/0xc90 [ 3016.472426][T21972] genl_family_rcv_msg_doit+0x22f/0x350 [ 3016.478110][T21972] ? end_current_label_crit_section+0x170/0x170 [ 3016.484473][T21972] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3016.490456][T21972] ? bpf_lsm_capable+0x5/0x10 [ 3016.495207][T21972] ? security_capable+0x85/0xb0 [ 3016.500154][T21972] genl_rcv_msg+0x601/0x790 [ 3016.504762][T21972] ? genl_bind+0x360/0x360 [ 3016.509254][T21972] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3016.515694][T21972] netlink_rcv_skb+0x1ef/0x440 [ 3016.520527][T21972] ? genl_bind+0x360/0x360 [ 3016.525009][T21972] ? netlink_ack+0x1160/0x1160 [ 3016.529869][T21972] ? down_read+0x1a8/0x2d0 [ 3016.534353][T21972] genl_rcv+0x24/0x40 [ 3016.538394][T21972] netlink_unicast+0x7ad/0x920 [ 3016.543256][T21972] netlink_sendmsg+0x8ad/0xbd0 [ 3016.548121][T21972] ? netlink_getsockopt+0x550/0x550 [ 3016.553408][T21972] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3016.559073][T21972] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3016.564440][T21972] ? security_socket_sendmsg+0x7c/0xa0 [ 3016.569976][T21972] ? netlink_getsockopt+0x550/0x550 [ 3016.575261][T21972] ____sys_sendmsg+0x5ed/0x9a0 [ 3016.580123][T21972] ? __sys_sendmsg_sock+0x30/0x30 [ 3016.585221][T21972] ? __import_iovec+0x306/0x510 [ 3016.590167][T21972] ? import_iovec+0x6f/0xa0 [ 3016.594756][T21972] ___sys_sendmsg+0x2a2/0x360 [ 3016.599528][T21972] ? __sys_sendmsg+0x2a0/0x2a0 [ 3016.604472][T21972] __se_sys_sendmsg+0x1c3/0x2b0 [ 3016.609404][T21972] ? __x64_sys_sendmsg+0x80/0x80 [ 3016.614454][T21972] ? lockdep_hardirqs_on+0x94/0x140 [ 3016.619763][T21972] do_syscall_64+0x4c/0xa0 [ 3016.624244][T21972] ? clear_bhb_loop+0x60/0xb0 [ 3016.628983][T21972] ? clear_bhb_loop+0x60/0xb0 [ 3016.633733][T21972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3016.639695][T21972] RIP: 0033:0x7f27c959e019 [ 3016.644162][T21972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3016.663837][T21972] RSP: 002b:00007f27ca385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3016.672330][T21972] RAX: ffffffffffffffda RBX: 00007f27c9826090 RCX: 00007f27c959e019 [ 3016.680363][T21972] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3016.688423][T21972] RBP: 00007f27c963500c R08: 0000000000000000 R09: 0000000000000000 [ 3016.696627][T21972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3016.704662][T21972] R13: 00007f27c9826128 R14: 00007f27c9826090 R15: 00007ffe76deb8d8 [ 3016.712903][T21972] [ 3017.247728][T21982] netlink: 'syz.3.15409': attribute type 10 has an invalid length. [ 3017.848118][T21990] device syzkaller0 entered promiscuous mode [ 3017.860588][T21994] netlink: 'syz.0.15414': attribute type 10 has an invalid length. [ 3017.919252][T21994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15414'. [ 3018.010185][T21994] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3018.021636][T21994] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3018.061464][T21994] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3018.126551][T21988] netlink: 'syz.2.15411': attribute type 39 has an invalid length. [ 3020.513859][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.520238][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.900708][T22017] netlink: 'syz.2.15420': attribute type 25 has an invalid length. [ 3021.908824][T22017] netlink: 'syz.2.15420': attribute type 28 has an invalid length. [ 3022.156577][T22026] netlink: 'syz.0.15423': attribute type 10 has an invalid length. [ 3022.306134][T22033] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.15424'. [ 3023.863289][T22044] netlink: 'syz.2.15430': attribute type 39 has an invalid length. [ 3023.938050][T22047] netlink: 'syz.3.15431': attribute type 39 has an invalid length. [ 3025.063702][T22055] netlink: 'syz.0.15434': attribute type 25 has an invalid length. [ 3025.076844][T22055] netlink: 'syz.0.15434': attribute type 28 has an invalid length. [ 3026.010289][T22057] netlink: 'syz.4.15433': attribute type 10 has an invalid length. [ 3026.066657][T22057] device hsr0 left promiscuous mode [ 3026.075225][T22057] bridge0: port 4(hsr0) entered disabled state [ 3026.130679][T22057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3026.156494][T22057] team0: Port device hsr0 added [ 3026.300307][T22072] netlink: 'syz.1.15438': attribute type 10 has an invalid length. [ 3026.333797][T22071] netlink: 'syz.0.15439': attribute type 8 has an invalid length. [ 3026.359221][T22071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15439'. [ 3026.387353][T22073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15437'. [ 3026.437005][T22073] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3026.465192][T22073] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3026.509801][T22073] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3026.531379][T22082] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.15441'. [ 3026.577633][T22082] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3026.588257][T22082] CPU: 1 PID: 22082 Comm: syz.2.15441 Not tainted syzkaller #0 [ 3026.595906][T22082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3026.606033][T22082] Call Trace: [ 3026.609368][T22082] [ 3026.612354][T22082] dump_stack_lvl+0x188/0x24e [ 3026.617145][T22082] ? show_regs_print_info+0x12/0x12 [ 3026.622430][T22082] ? load_image+0x410/0x410 [ 3026.627023][T22082] sysfs_warn_dup+0x8a/0xa0 [ 3026.631601][T22082] sysfs_do_create_link_sd+0xc0/0x110 [ 3026.637054][T22082] device_add+0x83b/0x1050 [ 3026.641565][T22082] wiphy_register+0x1d8b/0x2aa0 [ 3026.646533][T22082] ? cfg80211_event_work+0x40/0x40 [ 3026.651723][T22082] ? minstrel_ht_alloc+0x894/0xa20 [ 3026.656932][T22082] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3026.663094][T22082] ieee80211_register_hw+0x2d48/0x39f0 [ 3026.668668][T22082] ? ieee80211_register_hw+0xee1/0x39f0 [ 3026.674286][T22082] ? ieee80211_register_hw+0xee1/0x39f0 [ 3026.679917][T22082] ? ieee80211_tasklet_handler+0x20/0x20 [ 3026.685629][T22082] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3026.691608][T22082] ? __debug_object_init+0xed/0x440 [ 3026.696903][T22082] ? memset+0x1e/0x40 [ 3026.700951][T22082] ? __hrtimer_init+0x189/0x270 [ 3026.705926][T22082] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3026.711736][T22082] ? memcpy+0x3c/0x60 [ 3026.715778][T22082] hwsim_new_radio_nl+0xab7/0xc90 [ 3026.720885][T22082] genl_family_rcv_msg_doit+0x22f/0x350 [ 3026.726495][T22082] ? end_current_label_crit_section+0x170/0x170 [ 3026.732805][T22082] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3026.738752][T22082] ? bpf_lsm_capable+0x5/0x10 [ 3026.743468][T22082] ? security_capable+0x85/0xb0 [ 3026.748377][T22082] genl_rcv_msg+0x601/0x790 [ 3026.752940][T22082] ? genl_bind+0x360/0x360 [ 3026.757396][T22082] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3026.763796][T22082] netlink_rcv_skb+0x1ef/0x440 [ 3026.768614][T22082] ? genl_bind+0x360/0x360 [ 3026.773071][T22082] ? netlink_ack+0x1160/0x1160 [ 3026.777897][T22082] ? down_read+0x1a8/0x2d0 [ 3026.782355][T22082] genl_rcv+0x24/0x40 [ 3026.786378][T22082] netlink_unicast+0x7ad/0x920 [ 3026.791202][T22082] netlink_sendmsg+0x8ad/0xbd0 [ 3026.796026][T22082] ? netlink_getsockopt+0x550/0x550 [ 3026.801309][T22082] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3026.806912][T22082] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3026.812241][T22082] ? security_socket_sendmsg+0x7c/0xa0 [ 3026.817831][T22082] ? netlink_getsockopt+0x550/0x550 [ 3026.823083][T22082] ____sys_sendmsg+0x5ed/0x9a0 [ 3026.827912][T22082] ? __sys_sendmsg_sock+0x30/0x30 [ 3026.832977][T22082] ? __import_iovec+0x306/0x510 [ 3026.837930][T22082] ? import_iovec+0x6f/0xa0 [ 3026.842490][T22082] ___sys_sendmsg+0x2a2/0x360 [ 3026.847225][T22082] ? __sys_sendmsg+0x2a0/0x2a0 [ 3026.852117][T22082] __se_sys_sendmsg+0x1c3/0x2b0 [ 3026.857024][T22082] ? __x64_sys_sendmsg+0x80/0x80 [ 3026.862063][T22082] ? lockdep_hardirqs_on+0x94/0x140 [ 3026.867307][T22082] do_syscall_64+0x4c/0xa0 [ 3026.871763][T22082] ? clear_bhb_loop+0x60/0xb0 [ 3026.876506][T22082] ? clear_bhb_loop+0x60/0xb0 [ 3026.881226][T22082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3026.887160][T22082] RIP: 0033:0x7fb01339e019 [ 3026.891636][T22082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3026.911295][T22082] RSP: 002b:00007fb0142f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3026.919750][T22082] RAX: ffffffffffffffda RBX: 00007fb013626090 RCX: 00007fb01339e019 [ 3026.927762][T22082] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3026.935771][T22082] RBP: 00007fb01343500c R08: 0000000000000000 R09: 0000000000000000 [ 3026.943776][T22082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3026.951784][T22082] R13: 00007fb013626128 R14: 00007fb013626090 R15: 00007fff75d06c08 [ 3026.959860][T22082] [ 3028.459568][T22098] validate_nla: 4 callbacks suppressed [ 3028.459586][T22098] netlink: 'syz.4.15445': attribute type 39 has an invalid length. [ 3028.481555][T22112] netlink: 'syz.0.15450': attribute type 25 has an invalid length. [ 3028.508338][T22112] netlink: 'syz.0.15450': attribute type 28 has an invalid length. [ 3028.842869][T22123] netlink: 'syz.1.15451': attribute type 10 has an invalid length. [ 3029.047979][T22123] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3029.580880][T22133] netlink: 'syz.2.15458': attribute type 10 has an invalid length. [ 3029.601519][T22133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15458'. [ 3029.679483][T22133] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3029.690979][T22133] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3029.727516][T22133] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3029.813583][T22137] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.15459'. [ 3029.846371][T22137] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3029.854511][T22137] CPU: 0 PID: 22137 Comm: syz.1.15459 Not tainted syzkaller #0 [ 3029.862126][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3029.872238][T22137] Call Trace: [ 3029.875569][T22137] [ 3029.878552][T22137] dump_stack_lvl+0x188/0x24e [ 3029.883310][T22137] ? show_regs_print_info+0x12/0x12 [ 3029.888580][T22137] ? load_image+0x410/0x410 [ 3029.893198][T22137] sysfs_warn_dup+0x8a/0xa0 [ 3029.897784][T22137] sysfs_do_create_link_sd+0xc0/0x110 [ 3029.903233][T22137] device_add+0x83b/0x1050 [ 3029.907730][T22137] wiphy_register+0x1d8b/0x2aa0 [ 3029.912694][T22137] ? cfg80211_event_work+0x40/0x40 [ 3029.917879][T22137] ? minstrel_ht_alloc+0x894/0xa20 [ 3029.923098][T22137] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3029.929248][T22137] ieee80211_register_hw+0x2d48/0x39f0 [ 3029.934843][T22137] ? ieee80211_register_hw+0xee1/0x39f0 [ 3029.940456][T22137] ? ieee80211_register_hw+0xee1/0x39f0 [ 3029.946126][T22137] ? ieee80211_tasklet_handler+0x20/0x20 [ 3029.951832][T22137] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3029.957795][T22137] ? __debug_object_init+0xed/0x440 [ 3029.963084][T22137] ? memset+0x1e/0x40 [ 3029.967138][T22137] ? __hrtimer_init+0x189/0x270 [ 3029.972095][T22137] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3029.977916][T22137] ? memcpy+0x3c/0x60 [ 3029.981978][T22137] hwsim_new_radio_nl+0xab7/0xc90 [ 3029.987119][T22137] genl_family_rcv_msg_doit+0x22f/0x350 [ 3029.992771][T22137] ? end_current_label_crit_section+0x170/0x170 [ 3029.999102][T22137] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3030.005103][T22137] ? bpf_lsm_capable+0x5/0x10 [ 3030.009879][T22137] ? security_capable+0x85/0xb0 [ 3030.014860][T22137] genl_rcv_msg+0x601/0x790 [ 3030.019477][T22137] ? genl_bind+0x360/0x360 [ 3030.023986][T22137] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3030.030465][T22137] netlink_rcv_skb+0x1ef/0x440 [ 3030.035337][T22137] ? genl_bind+0x360/0x360 [ 3030.039842][T22137] ? netlink_ack+0x1160/0x1160 [ 3030.044730][T22137] ? down_read+0x1a8/0x2d0 [ 3030.049225][T22137] genl_rcv+0x24/0x40 [ 3030.053278][T22137] netlink_unicast+0x7ad/0x920 [ 3030.058154][T22137] netlink_sendmsg+0x8ad/0xbd0 [ 3030.063029][T22137] ? netlink_getsockopt+0x550/0x550 [ 3030.068335][T22137] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3030.073977][T22137] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3030.079338][T22137] ? security_socket_sendmsg+0x7c/0xa0 [ 3030.084878][T22137] ? netlink_getsockopt+0x550/0x550 [ 3030.090212][T22137] ____sys_sendmsg+0x5ed/0x9a0 [ 3030.095094][T22137] ? __sys_sendmsg_sock+0x30/0x30 [ 3030.100201][T22137] ? __import_iovec+0x306/0x510 [ 3030.105159][T22137] ? import_iovec+0x6f/0xa0 [ 3030.109761][T22137] ___sys_sendmsg+0x2a2/0x360 [ 3030.114568][T22137] ? __sys_sendmsg+0x2a0/0x2a0 [ 3030.119563][T22137] __se_sys_sendmsg+0x1c3/0x2b0 [ 3030.124547][T22137] ? __x64_sys_sendmsg+0x80/0x80 [ 3030.129615][T22137] ? lockdep_hardirqs_on+0x94/0x140 [ 3030.134902][T22137] do_syscall_64+0x4c/0xa0 [ 3030.139412][T22137] ? clear_bhb_loop+0x60/0xb0 [ 3030.144180][T22137] ? clear_bhb_loop+0x60/0xb0 [ 3030.148950][T22137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3030.154927][T22137] RIP: 0033:0x7f659039e019 [ 3030.159430][T22137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3030.179121][T22137] RSP: 002b:00007f65912d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3030.187623][T22137] RAX: ffffffffffffffda RBX: 00007f6590626090 RCX: 00007f659039e019 [ 3030.195683][T22137] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3030.203740][T22137] RBP: 00007f659043500c R08: 0000000000000000 R09: 0000000000000000 [ 3030.211787][T22137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3030.219827][T22137] R13: 00007f6590626128 R14: 00007f6590626090 R15: 00007fffe4219d68 [ 3030.227901][T22137] [ 3031.258703][T22150] netlink: 'syz.3.15461': attribute type 39 has an invalid length. [ 3034.410377][T22173] netlink: 'syz.2.15468': attribute type 27 has an invalid length. [ 3034.543962][T22173] bond0: (slave bond_slave_0): Releasing backup interface [ 3034.800034][T22178] netlink: 'syz.0.15470': attribute type 10 has an invalid length. [ 3034.924964][T22178] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3035.037886][T22181] FAULT_INJECTION: forcing a failure. [ 3035.037886][T22181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3035.068657][T22181] CPU: 0 PID: 22181 Comm: syz.4.15471 Not tainted syzkaller #0 [ 3035.076296][T22181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3035.086380][T22181] Call Trace: [ 3035.089692][T22181] [ 3035.092658][T22181] dump_stack_lvl+0x188/0x24e [ 3035.097393][T22181] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3035.103609][T22181] ? show_regs_print_info+0x12/0x12 [ 3035.108858][T22181] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3035.115069][T22181] should_fail_ex+0x390/0x4c0 [ 3035.119816][T22181] _copy_to_user+0x2c/0x130 [ 3035.124376][T22181] simple_read_from_buffer+0xe3/0x150 [ 3035.129794][T22181] proc_fail_nth_read+0x1a6/0x220 [ 3035.134868][T22181] ? proc_fault_inject_write+0x310/0x310 [ 3035.140541][T22181] ? fsnotify_perm+0x248/0x550 [ 3035.145338][T22181] ? proc_fault_inject_write+0x310/0x310 [ 3035.151008][T22181] vfs_read+0x2db/0x960 [ 3035.155215][T22181] ? kernel_read+0x1e0/0x1e0 [ 3035.159873][T22181] ? __fget_files+0x28/0x460 [ 3035.164511][T22181] ? __fget_files+0x3fc/0x460 [ 3035.169248][T22181] ? __fdget_pos+0x2ae/0x360 [ 3035.173888][T22181] ? ksys_read+0x70/0x260 [ 3035.178259][T22181] ksys_read+0x14d/0x260 [ 3035.182601][T22181] ? vfs_write+0x9a0/0x9a0 [ 3035.187071][T22181] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3035.193005][T22181] do_syscall_64+0x4c/0xa0 [ 3035.197458][T22181] ? clear_bhb_loop+0x60/0xb0 [ 3035.202169][T22181] ? clear_bhb_loop+0x60/0xb0 [ 3035.206893][T22181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3035.212828][T22181] RIP: 0033:0x7f448d55e84e [ 3035.217280][T22181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3035.236956][T22181] RSP: 002b:00007f448e482fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3035.245415][T22181] RAX: ffffffffffffffda RBX: 00007f448e4836c0 RCX: 00007f448d55e84e [ 3035.253419][T22181] RDX: 000000000000000f RSI: 00007f448e4830a0 RDI: 000000000000000b [ 3035.261434][T22181] RBP: 00007f448e483090 R08: 0000000000000000 R09: 0000000000000000 [ 3035.269445][T22181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3035.277451][T22181] R13: 00007f448d826038 R14: 00007f448d825fa0 R15: 00007ffeaad3b578 [ 3035.285476][T22181] [ 3036.004637][T22193] FAULT_INJECTION: forcing a failure. [ 3036.004637][T22193] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.067856][T22193] CPU: 1 PID: 22193 Comm: syz.2.15476 Not tainted syzkaller #0 [ 3036.075508][T22193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3036.085623][T22193] Call Trace: [ 3036.088944][T22193] [ 3036.091921][T22193] dump_stack_lvl+0x188/0x24e [ 3036.096683][T22193] ? show_regs_print_info+0x12/0x12 [ 3036.101947][T22193] ? load_image+0x410/0x410 [ 3036.106506][T22193] ? perf_trace_lock+0x301/0x390 [ 3036.111504][T22193] should_fail_ex+0x390/0x4c0 [ 3036.116245][T22193] should_failslab+0x5/0x20 [ 3036.120797][T22193] slab_pre_alloc_hook+0x59/0x300 [ 3036.125875][T22193] kmem_cache_alloc+0x56/0x2f0 [ 3036.130678][T22193] ? skb_clone+0x1e7/0x370 [ 3036.135152][T22193] skb_clone+0x1e7/0x370 [ 3036.139450][T22193] __netlink_deliver_tap+0x3e4/0x7e0 [ 3036.144815][T22193] ? netlink_deliver_tap+0x2e/0x1b0 [ 3036.150068][T22193] netlink_deliver_tap+0x19c/0x1b0 [ 3036.155232][T22193] netlink_dump+0x80f/0xcd0 [ 3036.159805][T22193] ? netlink_lookup+0x200/0x200 [ 3036.164706][T22193] ? __netlink_lookup+0x2d/0x730 [ 3036.169693][T22193] ? netlink_lookup+0x30/0x200 [ 3036.174504][T22193] ? netlink_lookup+0x30/0x200 [ 3036.179336][T22193] __netlink_dump_start+0x52c/0x6f0 [ 3036.184596][T22193] netlink_diag_handler_dump+0x195/0x230 [ 3036.190279][T22193] ? netlink_policy_dump_write+0x5d0/0x5d0 [ 3036.196119][T22193] ? __mutex_trylock_common+0x15c/0x260 [ 3036.201709][T22193] ? netlink_diag_handler_dump+0x230/0x230 [ 3036.207561][T22193] ? netlink_diag_dump+0x230/0x230 [ 3036.212747][T22193] ? sock_diag_lock_handler+0x19/0x280 [ 3036.218265][T22193] ? netlink_policy_dump_write+0x5d0/0x5d0 [ 3036.224111][T22193] sock_diag_rcv_msg+0x3c7/0x5e0 [ 3036.229087][T22193] netlink_rcv_skb+0x1ef/0x440 [ 3036.233903][T22193] ? sock_diag_bind+0xa0/0xa0 [ 3036.238634][T22193] ? netlink_ack+0x1160/0x1160 [ 3036.243464][T22193] ? netlink_deliver_tap+0x2e/0x1b0 [ 3036.248709][T22193] sock_diag_rcv+0x26/0x40 [ 3036.253162][T22193] netlink_unicast+0x7ad/0x920 [ 3036.258010][T22193] netlink_sendmsg+0x8ad/0xbd0 [ 3036.262837][T22193] ? netlink_getsockopt+0x550/0x550 [ 3036.268087][T22193] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3036.273685][T22193] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3036.279008][T22193] ? security_socket_sendmsg+0x7c/0xa0 [ 3036.284501][T22193] ? netlink_getsockopt+0x550/0x550 [ 3036.289756][T22193] ____sys_sendmsg+0x5ed/0x9a0 [ 3036.294616][T22193] ? __sys_sendmsg_sock+0x30/0x30 [ 3036.299690][T22193] ? __import_iovec+0x306/0x510 [ 3036.304599][T22193] ? import_iovec+0x6f/0xa0 [ 3036.309160][T22193] ___sys_sendmsg+0x2a2/0x360 [ 3036.313891][T22193] ? __sys_sendmsg+0x2a0/0x2a0 [ 3036.318742][T22193] ? __lock_acquire+0x7c40/0x7c40 [ 3036.323858][T22193] __se_sys_sendmsg+0x1c3/0x2b0 [ 3036.328760][T22193] ? __x64_sys_sendmsg+0x80/0x80 [ 3036.333774][T22193] ? lockdep_hardirqs_on+0x94/0x140 [ 3036.339022][T22193] do_syscall_64+0x4c/0xa0 [ 3036.343480][T22193] ? clear_bhb_loop+0x60/0xb0 [ 3036.348193][T22193] ? clear_bhb_loop+0x60/0xb0 [ 3036.352918][T22193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3036.358879][T22193] RIP: 0033:0x7fb01339e019 [ 3036.363331][T22193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3036.382974][T22193] RSP: 002b:00007fb014313028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3036.391423][T22193] RAX: ffffffffffffffda RBX: 00007fb013625fa0 RCX: 00007fb01339e019 [ 3036.399429][T22193] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 3036.407434][T22193] RBP: 00007fb014313090 R08: 0000000000000000 R09: 0000000000000000 [ 3036.415439][T22193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.423449][T22193] R13: 00007fb013626038 R14: 00007fb013625fa0 R15: 00007fff75d06c08 [ 3036.431484][T22193] [ 3036.446467][T22198] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.15477'. [ 3036.473597][T22198] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3036.481420][T22198] CPU: 0 PID: 22198 Comm: syz.0.15477 Not tainted syzkaller #0 [ 3036.489024][T22198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3036.499147][T22198] Call Trace: [ 3036.502485][T22198] [ 3036.505477][T22198] dump_stack_lvl+0x188/0x24e [ 3036.510229][T22198] ? show_regs_print_info+0x12/0x12 [ 3036.515501][T22198] ? load_image+0x410/0x410 [ 3036.520096][T22198] sysfs_warn_dup+0x8a/0xa0 [ 3036.524681][T22198] sysfs_do_create_link_sd+0xc0/0x110 [ 3036.530128][T22198] device_add+0x83b/0x1050 [ 3036.534636][T22198] wiphy_register+0x1d8b/0x2aa0 [ 3036.539597][T22198] ? cfg80211_event_work+0x40/0x40 [ 3036.544769][T22198] ? minstrel_ht_alloc+0x894/0xa20 [ 3036.549967][T22198] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3036.556152][T22198] ieee80211_register_hw+0x2d48/0x39f0 [ 3036.561709][T22198] ? ieee80211_register_hw+0xee1/0x39f0 [ 3036.567319][T22198] ? ieee80211_register_hw+0xee1/0x39f0 [ 3036.572969][T22198] ? ieee80211_tasklet_handler+0x20/0x20 [ 3036.578670][T22198] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3036.584656][T22198] ? __debug_object_init+0xed/0x440 [ 3036.589953][T22198] ? memset+0x1e/0x40 [ 3036.594049][T22198] ? __hrtimer_init+0x189/0x270 [ 3036.598989][T22198] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3036.604900][T22198] ? memcpy+0x3c/0x60 [ 3036.608965][T22198] hwsim_new_radio_nl+0xab7/0xc90 [ 3036.614108][T22198] genl_family_rcv_msg_doit+0x22f/0x350 [ 3036.619727][T22198] ? end_current_label_crit_section+0x170/0x170 [ 3036.626050][T22198] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3036.632220][T22198] ? bpf_lsm_capable+0x5/0x10 [ 3036.636972][T22198] ? security_capable+0x85/0xb0 [ 3036.641928][T22198] genl_rcv_msg+0x601/0x790 [ 3036.646522][T22198] ? genl_bind+0x360/0x360 [ 3036.650999][T22198] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3036.657449][T22198] netlink_rcv_skb+0x1ef/0x440 [ 3036.662373][T22198] ? genl_bind+0x360/0x360 [ 3036.666838][T22198] ? netlink_ack+0x1160/0x1160 [ 3036.671689][T22198] ? down_read+0x1a8/0x2d0 [ 3036.676155][T22198] genl_rcv+0x24/0x40 [ 3036.680182][T22198] netlink_unicast+0x7ad/0x920 [ 3036.685015][T22198] netlink_sendmsg+0x8ad/0xbd0 [ 3036.689842][T22198] ? netlink_getsockopt+0x550/0x550 [ 3036.695095][T22198] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3036.700730][T22198] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3036.706078][T22198] ? security_socket_sendmsg+0x7c/0xa0 [ 3036.711605][T22198] ? netlink_getsockopt+0x550/0x550 [ 3036.716861][T22198] ____sys_sendmsg+0x5ed/0x9a0 [ 3036.721692][T22198] ? __sys_sendmsg_sock+0x30/0x30 [ 3036.726761][T22198] ? __import_iovec+0x306/0x510 [ 3036.731690][T22198] ? import_iovec+0x6f/0xa0 [ 3036.736302][T22198] ___sys_sendmsg+0x2a2/0x360 [ 3036.741044][T22198] ? __sys_sendmsg+0x2a0/0x2a0 [ 3036.745981][T22198] __se_sys_sendmsg+0x1c3/0x2b0 [ 3036.750892][T22198] ? __x64_sys_sendmsg+0x80/0x80 [ 3036.755915][T22198] ? lockdep_hardirqs_on+0x94/0x140 [ 3036.761168][T22198] do_syscall_64+0x4c/0xa0 [ 3036.765627][T22198] ? clear_bhb_loop+0x60/0xb0 [ 3036.770343][T22198] ? clear_bhb_loop+0x60/0xb0 [ 3036.775076][T22198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3036.781010][T22198] RIP: 0033:0x7f27c959e019 [ 3036.785465][T22198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3036.805120][T22198] RSP: 002b:00007f27ca385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3036.813581][T22198] RAX: ffffffffffffffda RBX: 00007f27c9826090 RCX: 00007f27c959e019 [ 3036.821589][T22198] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3036.829685][T22198] RBP: 00007f27c963500c R08: 0000000000000000 R09: 0000000000000000 [ 3036.837695][T22198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3036.845707][T22198] R13: 00007f27c9826128 R14: 00007f27c9826090 R15: 00007ffe76deb8d8 [ 3036.853753][T22198] [ 3037.241592][T22204] netlink: 'syz.3.15479': attribute type 25 has an invalid length. [ 3037.251781][T22204] netlink: 'syz.3.15479': attribute type 28 has an invalid length. [ 3037.651384][T22225] FAULT_INJECTION: forcing a failure. [ 3037.651384][T22225] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.682924][T22225] CPU: 1 PID: 22225 Comm: syz.1.15487 Not tainted syzkaller #0 [ 3037.690734][T22225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3037.700850][T22225] Call Trace: [ 3037.704189][T22225] [ 3037.707198][T22225] dump_stack_lvl+0x188/0x24e [ 3037.711939][T22225] ? show_regs_print_info+0x12/0x12 [ 3037.717217][T22225] ? load_image+0x410/0x410 [ 3037.721768][T22225] ? __might_sleep+0xd0/0xd0 [ 3037.726401][T22225] ? __lock_acquire+0x7c40/0x7c40 [ 3037.731485][T22225] should_fail_ex+0x390/0x4c0 [ 3037.736221][T22225] should_failslab+0x5/0x20 [ 3037.740757][T22225] slab_pre_alloc_hook+0x59/0x300 [ 3037.745858][T22225] ? __get_vm_area_node+0x122/0x330 [ 3037.751093][T22225] __kmem_cache_alloc_node+0x4f/0x270 [ 3037.756499][T22225] ? __get_vm_area_node+0x122/0x330 [ 3037.761733][T22225] kmalloc_node_trace+0x22/0xe0 [ 3037.766625][T22225] __get_vm_area_node+0x122/0x330 [ 3037.771867][T22225] __vmalloc_node_range+0x357/0x1380 [ 3037.777712][T22225] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 3037.783314][T22225] ? aa_get_newest_label+0xf9/0x5b0 [ 3037.788552][T22225] ? free_vm_area+0x50/0x50 [ 3037.793084][T22225] ? end_current_label_crit_section+0x170/0x170 [ 3037.799357][T22225] ? __lock_acquire+0x7c40/0x7c40 [ 3037.804414][T22225] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 3037.810015][T22225] __vmalloc+0x76/0x80 [ 3037.814117][T22225] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 3037.819701][T22225] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 3037.825109][T22225] ? bpf_prog_alloc+0x13/0x1b0 [ 3037.829906][T22225] bpf_prog_alloc+0x1c/0x1b0 [ 3037.834536][T22225] bpf_prog_load+0x7d4/0x1530 [ 3037.839274][T22225] ? map_freeze+0x390/0x390 [ 3037.844501][T22225] ? __might_fault+0xa6/0x120 [ 3037.849215][T22225] ? __might_fault+0xa6/0x120 [ 3037.853923][T22225] ? __might_fault+0xc2/0x120 [ 3037.858624][T22225] ? __might_fault+0xa6/0x120 [ 3037.863327][T22225] ? bpf_lsm_bpf+0x5/0x10 [ 3037.867682][T22225] ? security_bpf+0x7a/0xa0 [ 3037.872222][T22225] __sys_bpf+0x5b8/0x780 [ 3037.876499][T22225] ? bpf_link_show_fdinfo+0x380/0x380 [ 3037.881925][T22225] ? lock_chain_count+0x20/0x20 [ 3037.886845][T22225] __x64_sys_bpf+0x78/0x90 [ 3037.891313][T22225] do_syscall_64+0x4c/0xa0 [ 3037.895761][T22225] ? clear_bhb_loop+0x60/0xb0 [ 3037.900469][T22225] ? clear_bhb_loop+0x60/0xb0 [ 3037.905210][T22225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3037.911143][T22225] RIP: 0033:0x7f659039e019 [ 3037.915582][T22225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3037.935217][T22225] RSP: 002b:00007f65912f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3037.943680][T22225] RAX: ffffffffffffffda RBX: 00007f6590625fa0 RCX: 00007f659039e019 [ 3037.951677][T22225] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 3037.959677][T22225] RBP: 00007f65912f2090 R08: 0000000000000000 R09: 0000000000000000 [ 3037.967674][T22225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3037.975670][T22225] R13: 00007f6590626038 R14: 00007f6590625fa0 R15: 00007fffe4219d68 [ 3037.983685][T22225] [ 3038.312590][T22225] syz.1.15487: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 3038.347333][T22225] CPU: 1 PID: 22225 Comm: syz.1.15487 Not tainted syzkaller #0 [ 3038.354962][T22225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3038.365066][T22225] Call Trace: [ 3038.368384][T22225] [ 3038.371535][T22225] dump_stack_lvl+0x188/0x24e [ 3038.376265][T22225] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 3038.382756][T22225] ? show_regs_print_info+0x12/0x12 [ 3038.388021][T22225] ? load_image+0x410/0x410 [ 3038.392577][T22225] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 3038.399057][T22225] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 3038.405613][T22225] warn_alloc+0x242/0x330 [ 3038.409998][T22225] ? __get_vm_area_node+0x122/0x330 [ 3038.415251][T22225] ? zone_watermark_ok_safe+0x270/0x270 [ 3038.420852][T22225] ? rcu_is_watching+0x11/0xa0 [ 3038.425674][T22225] ? __get_vm_area_node+0x318/0x330 [ 3038.430935][T22225] __vmalloc_node_range+0x37c/0x1380 [ 3038.436299][T22225] ? aa_get_newest_label+0xf9/0x5b0 [ 3038.441562][T22225] ? free_vm_area+0x50/0x50 [ 3038.446117][T22225] ? end_current_label_crit_section+0x170/0x170 [ 3038.452414][T22225] ? __lock_acquire+0x7c40/0x7c40 [ 3038.457498][T22225] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 3038.463112][T22225] __vmalloc+0x76/0x80 [ 3038.467234][T22225] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 3038.472844][T22225] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 3038.478270][T22225] ? bpf_prog_alloc+0x13/0x1b0 [ 3038.483097][T22225] bpf_prog_alloc+0x1c/0x1b0 [ 3038.487777][T22225] bpf_prog_load+0x7d4/0x1530 [ 3038.492533][T22225] ? map_freeze+0x390/0x390 [ 3038.497091][T22225] ? __might_fault+0xa6/0x120 [ 3038.501828][T22225] ? __might_fault+0xa6/0x120 [ 3038.506550][T22225] ? __might_fault+0xc2/0x120 [ 3038.511299][T22225] ? __might_fault+0xa6/0x120 [ 3038.516026][T22225] ? bpf_lsm_bpf+0x5/0x10 [ 3038.520401][T22225] ? security_bpf+0x7a/0xa0 [ 3038.524962][T22225] __sys_bpf+0x5b8/0x780 [ 3038.529263][T22225] ? bpf_link_show_fdinfo+0x380/0x380 [ 3038.534704][T22225] ? lock_chain_count+0x20/0x20 [ 3038.539623][T22225] __x64_sys_bpf+0x78/0x90 [ 3038.544097][T22225] do_syscall_64+0x4c/0xa0 [ 3038.548586][T22225] ? clear_bhb_loop+0x60/0xb0 [ 3038.553319][T22225] ? clear_bhb_loop+0x60/0xb0 [ 3038.558048][T22225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3038.564077][T22225] RIP: 0033:0x7f659039e019 [ 3038.568535][T22225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3038.588206][T22225] RSP: 002b:00007f65912f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3038.596679][T22225] RAX: ffffffffffffffda RBX: 00007f6590625fa0 RCX: 00007f659039e019 [ 3038.604706][T22225] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 3038.612726][T22225] RBP: 00007f65912f2090 R08: 0000000000000000 R09: 0000000000000000 [ 3038.620754][T22225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.628788][T22225] R13: 00007f6590626038 R14: 00007f6590625fa0 R15: 00007fffe4219d68 [ 3038.636824][T22225] [ 3038.678498][T22225] Mem-Info: [ 3038.681877][T22225] active_anon:10344 inactive_anon:0 isolated_anon:0 [ 3038.681877][T22225] active_file:22214 inactive_file:41137 isolated_file:0 [ 3038.681877][T22225] unevictable:768 dirty:317 writeback:0 [ 3038.681877][T22225] slab_reclaimable:21634 slab_unreclaimable:95463 [ 3038.681877][T22225] mapped:30643 shmem:1361 pagetables:641 [ 3038.681877][T22225] sec_pagetables:0 bounce:0 [ 3038.681877][T22225] kernel_misc_reclaimable:0 [ 3038.681877][T22225] free:1311341 free_pcp:10448 free_cma:0 [ 3038.728254][T22225] Node 0 active_anon:41376kB inactive_anon:0kB active_file:88856kB inactive_file:164348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122572kB dirty:1268kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9956kB pagetables:2564kB sec_pagetables:0kB all_unreclaimable? no [ 3038.762158][T22225] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3038.828382][T22225] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3038.899908][T22225] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 3038.906061][T22225] Node 0 DMA32 free:1332188kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:41048kB inactive_anon:0kB active_file:88856kB inactive_file:164356kB unevictable:1536kB writepending:1268kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:21684kB local_pcp:6000kB free_cma:0kB [ 3038.996831][T22225] lowmem_reserve[]: 0 0 1 1 1 [ 3039.006786][T22225] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 3039.080115][T22225] lowmem_reserve[]: 0 0 0 0 0 [ 3039.085020][T22225] Node 1 Normal free:3897808kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20588kB local_pcp:13512kB free_cma:0kB [ 3039.165652][T22241] netlink: 'syz.2.15492': attribute type 1 has an invalid length. [ 3039.183528][T22225] lowmem_reserve[]: 0 0 0 0 0 [ 3039.185083][T22241] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.15492'. [ 3039.188448][T22225] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3039.188603][T22225] Node 0 DMA32: 723*4kB (UME) 2678*8kB (UME) 1618*16kB (UME) 1510*32kB (UME) 1417*64kB (UME) 988*128kB (UM) 532*256kB (UM) 313*512kB (UM) 205*1024kB (UME) 35*2048kB (UM) 107*4096kB (UM) = 1331996kB [ 3039.188812][T22225] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 3039.188955][T22225] Node 1 Normal: 268*4kB (UE) 58*8kB (UE) 31*16kB (UME) 49*32kB (UME) 25*64kB (UME) 11*128kB (UME) 4*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897808kB [ 3039.189163][T22225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3039.189183][T22225] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3039.189201][T22225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3039.189220][T22225] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3039.189239][T22225] 64714 total pagecache pages [ 3039.189262][T22225] 0 pages in swap cache [ 3039.335108][T22225] Free swap = 124996kB [ 3039.339434][T22225] Total swap = 124996kB [ 3039.349010][T22225] 2097051 pages RAM [ 3039.353264][T22225] 0 pages HighMem/MovableOnly [ 3039.358075][T22225] 415222 pages reserved [ 3039.367314][T22225] 0 pages cma reserved [ 3039.756185][T22254] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15496'. [ 3040.103870][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3040.218885][T22266] netlink: 'syz.1.15499': attribute type 12 has an invalid length. [ 3040.313677][T22261] netlink: 'syz.3.15500': attribute type 25 has an invalid length. [ 3040.398559][T22261] netlink: 'syz.3.15500': attribute type 28 has an invalid length. [ 3040.808417][T22276] FAULT_INJECTION: forcing a failure. [ 3040.808417][T22276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3040.828366][T22276] CPU: 0 PID: 22276 Comm: syz.4.15505 Not tainted syzkaller #0 [ 3040.836004][T22276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3040.846110][T22276] Call Trace: [ 3040.849427][T22276] [ 3040.852398][T22276] dump_stack_lvl+0x188/0x24e [ 3040.857152][T22276] ? show_regs_print_info+0x12/0x12 [ 3040.862424][T22276] ? load_image+0x410/0x410 [ 3040.866978][T22276] ? __lock_acquire+0x7c40/0x7c40 [ 3040.872059][T22276] should_fail_ex+0x390/0x4c0 [ 3040.876790][T22276] _copy_from_user+0x2c/0x170 [ 3040.881541][T22276] iovec_from_user+0x143/0x360 [ 3040.886371][T22276] __import_iovec+0x6c/0x510 [ 3040.891025][T22276] ? __might_fault+0xa6/0x120 [ 3040.895752][T22276] import_iovec+0x6f/0xa0 [ 3040.900168][T22276] ___sys_recvmsg+0x4b2/0x590 [ 3040.904913][T22276] ? __sys_recvmsg+0x2a0/0x2a0 [ 3040.909741][T22276] ? common_file_perm+0x171/0x1c0 [ 3040.914856][T22276] ? __fget_files+0x3fc/0x460 [ 3040.919773][T22276] __x64_sys_recvmsg+0x20d/0x2e0 [ 3040.924780][T22276] ? ___sys_recvmsg+0x590/0x590 [ 3040.929704][T22276] ? lockdep_hardirqs_on+0x94/0x140 [ 3040.934949][T22276] do_syscall_64+0x4c/0xa0 [ 3040.939422][T22276] ? clear_bhb_loop+0x60/0xb0 [ 3040.944147][T22276] ? clear_bhb_loop+0x60/0xb0 [ 3040.948872][T22276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3040.954818][T22276] RIP: 0033:0x7f448d59e019 [ 3040.959278][T22276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3040.978938][T22276] RSP: 002b:00007f448e483028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3040.987400][T22276] RAX: ffffffffffffffda RBX: 00007f448d825fa0 RCX: 00007f448d59e019 [ 3040.995424][T22276] RDX: 0000000000002002 RSI: 0000200000000280 RDI: 0000000000000003 [ 3041.003437][T22276] RBP: 00007f448e483090 R08: 0000000000000000 R09: 0000000000000000 [ 3041.011487][T22276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3041.019504][T22276] R13: 00007f448d826038 R14: 00007f448d825fa0 R15: 00007ffeaad3b578 [ 3041.027539][T22276] [ 3041.756762][T22280] netlink: 'syz.0.15506': attribute type 2 has an invalid length. [ 3041.846842][T22288] FAULT_INJECTION: forcing a failure. [ 3041.846842][T22288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3041.892015][T22288] CPU: 1 PID: 22288 Comm: syz.3.15510 Not tainted syzkaller #0 [ 3041.899720][T22288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3041.909835][T22288] Call Trace: [ 3041.913162][T22288] [ 3041.916143][T22288] dump_stack_lvl+0x188/0x24e [ 3041.920895][T22288] ? show_regs_print_info+0x12/0x12 [ 3041.926167][T22288] ? load_image+0x410/0x410 [ 3041.930729][T22288] ? __might_fault+0xa6/0x120 [ 3041.935475][T22288] should_fail_ex+0x390/0x4c0 [ 3041.940217][T22288] copyin+0x1b/0x120 [ 3041.944167][T22288] _copy_from_iter+0x559/0x1130 [ 3041.949064][T22288] ? copyout_mc+0x110/0x110 [ 3041.953617][T22288] ? __virt_addr_valid+0x188/0x540 [ 3041.958790][T22288] ? __virt_addr_valid+0x188/0x540 [ 3041.964118][T22288] ? __virt_addr_valid+0x467/0x540 [ 3041.969290][T22288] ? __phys_addr_symbol+0x2b/0x70 [ 3041.974357][T22288] ? __check_object_size+0x4f6/0xa70 [ 3041.979677][T22288] netlink_sendmsg+0x755/0xbd0 [ 3041.984496][T22288] ? netlink_getsockopt+0x550/0x550 [ 3041.989730][T22288] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3041.995314][T22288] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3042.000627][T22288] ? security_socket_sendmsg+0x7c/0xa0 [ 3042.006114][T22288] ? netlink_getsockopt+0x550/0x550 [ 3042.011383][T22288] ____sys_sendmsg+0x5ed/0x9a0 [ 3042.016194][T22288] ? __sys_sendmsg_sock+0x30/0x30 [ 3042.021245][T22288] ? __import_iovec+0x306/0x510 [ 3042.026134][T22288] ? import_iovec+0x6f/0xa0 [ 3042.030675][T22288] ___sys_sendmsg+0x2a2/0x360 [ 3042.035391][T22288] ? __sys_sendmsg+0x2a0/0x2a0 [ 3042.040202][T22288] ? __lock_acquire+0x7c40/0x7c40 [ 3042.045279][T22288] __se_sys_sendmsg+0x1c3/0x2b0 [ 3042.050162][T22288] ? __x64_sys_sendmsg+0x80/0x80 [ 3042.055150][T22288] ? lockdep_hardirqs_on+0x94/0x140 [ 3042.060380][T22288] do_syscall_64+0x4c/0xa0 [ 3042.064828][T22288] ? clear_bhb_loop+0x60/0xb0 [ 3042.069533][T22288] ? clear_bhb_loop+0x60/0xb0 [ 3042.074240][T22288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3042.080162][T22288] RIP: 0033:0x7fdac5b9e019 [ 3042.084608][T22288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3042.104244][T22288] RSP: 002b:00007fdac6afc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3042.112685][T22288] RAX: ffffffffffffffda RBX: 00007fdac5e25fa0 RCX: 00007fdac5b9e019 [ 3042.120703][T22288] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3042.128693][T22288] RBP: 00007fdac6afc090 R08: 0000000000000000 R09: 0000000000000000 [ 3042.136683][T22288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3042.144676][T22288] R13: 00007fdac5e26038 R14: 00007fdac5e25fa0 R15: 00007ffde2613798 [ 3042.152713][T22288] [ 3042.917877][T22308] netlink: 'syz.2.15516': attribute type 25 has an invalid length. [ 3043.041704][T22308] netlink: 'syz.2.15516': attribute type 28 has an invalid length. [ 3043.086704][T22315] netlink: 'syz.0.15519': attribute type 27 has an invalid length. [ 3043.104076][T22315] netlink: 'syz.0.15519': attribute type 1 has an invalid length. [ 3043.121244][T22315] netlink: 'syz.0.15519': attribute type 3 has an invalid length. [ 3043.135114][T22315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15519'. [ 3044.151032][T22325] device syzkaller0 entered promiscuous mode [ 3045.850325][T22358] netlink: 'syz.1.15532': attribute type 39 has an invalid length. [ 3045.866819][T22364] netlink: 'syz.2.15533': attribute type 25 has an invalid length. [ 3045.882152][T22364] netlink: 'syz.2.15533': attribute type 28 has an invalid length. [ 3050.341987][T22393] netlink: 'syz.4.15546': attribute type 39 has an invalid length. [ 3050.352743][T22405] netlink: 'syz.2.15547': attribute type 25 has an invalid length. [ 3050.360711][T22405] netlink: 'syz.2.15547': attribute type 28 has an invalid length. [ 3050.592902][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15550'. [ 3050.808501][T22430] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 3050.920145][T22434] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.15556'. [ 3051.027283][T22434] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3051.222555][T22434] CPU: 1 PID: 22434 Comm: syz.4.15556 Not tainted syzkaller #0 [ 3051.230206][T22434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3051.240321][T22434] Call Trace: [ 3051.243648][T22434] [ 3051.246634][T22434] dump_stack_lvl+0x188/0x24e [ 3051.251401][T22434] ? show_regs_print_info+0x12/0x12 [ 3051.256674][T22434] ? load_image+0x410/0x410 [ 3051.261273][T22434] sysfs_warn_dup+0x8a/0xa0 [ 3051.265847][T22434] sysfs_do_create_link_sd+0xc0/0x110 [ 3051.271321][T22434] device_add+0x83b/0x1050 [ 3051.275825][T22434] wiphy_register+0x1d8b/0x2aa0 [ 3051.280785][T22434] ? cfg80211_event_work+0x40/0x40 [ 3051.285969][T22434] ? minstrel_ht_alloc+0x894/0xa20 [ 3051.291178][T22434] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3051.297328][T22434] ieee80211_register_hw+0x2d48/0x39f0 [ 3051.302887][T22434] ? ieee80211_register_hw+0xee1/0x39f0 [ 3051.308518][T22434] ? ieee80211_register_hw+0xee1/0x39f0 [ 3051.314159][T22434] ? ieee80211_tasklet_handler+0x20/0x20 [ 3051.319854][T22434] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3051.325825][T22434] ? __debug_object_init+0xed/0x440 [ 3051.331113][T22434] ? memset+0x1e/0x40 [ 3051.335155][T22434] ? __hrtimer_init+0x189/0x270 [ 3051.340086][T22434] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3051.345897][T22434] ? memcpy+0x3c/0x60 [ 3051.349962][T22434] hwsim_new_radio_nl+0xab7/0xc90 [ 3051.355111][T22434] genl_family_rcv_msg_doit+0x22f/0x350 [ 3051.360734][T22434] ? end_current_label_crit_section+0x170/0x170 [ 3051.367064][T22434] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3051.373054][T22434] ? bpf_lsm_capable+0x5/0x10 [ 3051.377795][T22434] ? security_capable+0x85/0xb0 [ 3051.382730][T22434] genl_rcv_msg+0x601/0x790 [ 3051.387327][T22434] ? genl_bind+0x360/0x360 [ 3051.391836][T22434] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3051.398284][T22434] netlink_rcv_skb+0x1ef/0x440 [ 3051.403141][T22434] ? genl_bind+0x360/0x360 [ 3051.407631][T22434] ? netlink_ack+0x1160/0x1160 [ 3051.412494][T22434] ? down_read+0x1a8/0x2d0 [ 3051.416981][T22434] genl_rcv+0x24/0x40 [ 3051.421067][T22434] netlink_unicast+0x7ad/0x920 [ 3051.425962][T22434] netlink_sendmsg+0x8ad/0xbd0 [ 3051.430865][T22434] ? netlink_getsockopt+0x550/0x550 [ 3051.436157][T22434] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3051.441794][T22434] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3051.447152][T22434] ? security_socket_sendmsg+0x7c/0xa0 [ 3051.452679][T22434] ? netlink_getsockopt+0x550/0x550 [ 3051.457966][T22434] ____sys_sendmsg+0x5ed/0x9a0 [ 3051.462880][T22434] ? __sys_sendmsg_sock+0x30/0x30 [ 3051.467984][T22434] ? __import_iovec+0x306/0x510 [ 3051.472936][T22434] ? import_iovec+0x6f/0xa0 [ 3051.477529][T22434] ___sys_sendmsg+0x2a2/0x360 [ 3051.482300][T22434] ? __sys_sendmsg+0x2a0/0x2a0 [ 3051.487263][T22434] __se_sys_sendmsg+0x1c3/0x2b0 [ 3051.492214][T22434] ? ct_nmi_exit+0x145/0x1c0 [ 3051.496863][T22434] ? __x64_sys_sendmsg+0x80/0x80 [ 3051.501901][T22434] ? lockdep_hardirqs_on+0x94/0x140 [ 3051.507174][T22434] do_syscall_64+0x4c/0xa0 [ 3051.511666][T22434] ? clear_bhb_loop+0x60/0xb0 [ 3051.516450][T22434] ? clear_bhb_loop+0x60/0xb0 [ 3051.521240][T22434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3051.527292][T22434] RIP: 0033:0x7f448d59e019 [ 3051.531759][T22434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3051.551445][T22434] RSP: 002b:00007f448e462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3051.559925][T22434] RAX: ffffffffffffffda RBX: 00007f448d826090 RCX: 00007f448d59e019 [ 3051.567949][T22434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3051.575989][T22434] RBP: 00007f448d63500c R08: 0000000000000000 R09: 0000000000000000 [ 3051.584121][T22434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3051.592206][T22434] R13: 00007f448d826128 R14: 00007f448d826090 R15: 00007ffeaad3b578 [ 3051.600282][T22434] [ 3051.918450][T22447] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15558'. [ 3052.450825][T22447] device hsr_slave_0 left promiscuous mode [ 3052.927324][T22458] netlink: 'syz.4.15561': attribute type 39 has an invalid length. [ 3053.185786][T22475] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.15572'. [ 3053.212879][T22456] device syzkaller0 entered promiscuous mode [ 3053.270933][T22472] netlink: 'syz.0.15563': attribute type 25 has an invalid length. [ 3053.302509][T22472] netlink: 'syz.0.15563': attribute type 28 has an invalid length. [ 3053.318562][T22475] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3053.337991][T22475] CPU: 1 PID: 22475 Comm: syz.1.15572 Not tainted syzkaller #0 [ 3053.345654][T22475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3053.355774][T22475] Call Trace: [ 3053.359118][T22475] [ 3053.362110][T22475] dump_stack_lvl+0x188/0x24e [ 3053.366870][T22475] ? show_regs_print_info+0x12/0x12 [ 3053.372154][T22475] ? load_image+0x410/0x410 [ 3053.376771][T22475] sysfs_warn_dup+0x8a/0xa0 [ 3053.381355][T22475] sysfs_do_create_link_sd+0xc0/0x110 [ 3053.386803][T22475] device_add+0x83b/0x1050 [ 3053.391311][T22475] wiphy_register+0x1d8b/0x2aa0 [ 3053.396277][T22475] ? cfg80211_event_work+0x40/0x40 [ 3053.401478][T22475] ? minstrel_ht_alloc+0x894/0xa20 [ 3053.406681][T22475] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3053.412827][T22475] ieee80211_register_hw+0x2d48/0x39f0 [ 3053.418574][T22475] ? ieee80211_register_hw+0xee1/0x39f0 [ 3053.424196][T22475] ? ieee80211_register_hw+0xee1/0x39f0 [ 3053.429831][T22475] ? ieee80211_tasklet_handler+0x20/0x20 [ 3053.435535][T22475] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3053.441616][T22475] ? __debug_object_init+0xed/0x440 [ 3053.446879][T22475] ? memset+0x1e/0x40 [ 3053.450907][T22475] ? __hrtimer_init+0x189/0x270 [ 3053.455817][T22475] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3053.461599][T22475] ? memcpy+0x3c/0x60 [ 3053.465655][T22475] hwsim_new_radio_nl+0xab7/0xc90 [ 3053.470761][T22475] genl_family_rcv_msg_doit+0x22f/0x350 [ 3053.476356][T22475] ? end_current_label_crit_section+0x170/0x170 [ 3053.482658][T22475] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3053.488639][T22475] ? bpf_lsm_capable+0x5/0x10 [ 3053.493385][T22475] ? security_capable+0x85/0xb0 [ 3053.498301][T22475] genl_rcv_msg+0x601/0x790 [ 3053.502919][T22475] ? genl_bind+0x360/0x360 [ 3053.507373][T22475] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3053.513780][T22475] netlink_rcv_skb+0x1ef/0x440 [ 3053.518596][T22475] ? genl_bind+0x360/0x360 [ 3053.523053][T22475] ? netlink_ack+0x1160/0x1160 [ 3053.527889][T22475] ? down_read+0x1a8/0x2d0 [ 3053.532349][T22475] genl_rcv+0x24/0x40 [ 3053.536370][T22475] netlink_unicast+0x7ad/0x920 [ 3053.541200][T22475] netlink_sendmsg+0x8ad/0xbd0 [ 3053.546037][T22475] ? netlink_getsockopt+0x550/0x550 [ 3053.551288][T22475] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3053.556910][T22475] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3053.562238][T22475] ? security_socket_sendmsg+0x7c/0xa0 [ 3053.567732][T22475] ? netlink_getsockopt+0x550/0x550 [ 3053.572982][T22475] ____sys_sendmsg+0x5ed/0x9a0 [ 3053.577816][T22475] ? __sys_sendmsg_sock+0x30/0x30 [ 3053.582880][T22475] ? __import_iovec+0x306/0x510 [ 3053.587791][T22475] ? import_iovec+0x6f/0xa0 [ 3053.592351][T22475] ___sys_sendmsg+0x2a2/0x360 [ 3053.597088][T22475] ? __sys_sendmsg+0x2a0/0x2a0 [ 3053.601991][T22475] __se_sys_sendmsg+0x1c3/0x2b0 [ 3053.606896][T22475] ? __x64_sys_sendmsg+0x80/0x80 [ 3053.611913][T22475] ? lockdep_hardirqs_on+0x94/0x140 [ 3053.617157][T22475] do_syscall_64+0x4c/0xa0 [ 3053.621615][T22475] ? clear_bhb_loop+0x60/0xb0 [ 3053.626337][T22475] ? clear_bhb_loop+0x60/0xb0 [ 3053.631062][T22475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3053.637009][T22475] RIP: 0033:0x7f659039e019 [ 3053.641494][T22475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3053.661139][T22475] RSP: 002b:00007f65912d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3053.669600][T22475] RAX: ffffffffffffffda RBX: 00007f6590626090 RCX: 00007f659039e019 [ 3053.677614][T22475] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3053.685649][T22475] RBP: 00007f659043500c R08: 0000000000000000 R09: 0000000000000000 [ 3053.693670][T22475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3053.701714][T22475] R13: 00007f6590626128 R14: 00007f6590626090 R15: 00007fffe4219d68 [ 3053.709766][T22475] [ 3053.860529][T22479] netlink: 164 bytes leftover after parsing attributes in process `syz.4.15562'. [ 3053.975994][T22481] FAULT_INJECTION: forcing a failure. [ 3053.975994][T22481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3054.027325][T22481] CPU: 1 PID: 22481 Comm: syz.0.15565 Not tainted syzkaller #0 [ 3054.034975][T22481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3054.045076][T22481] Call Trace: [ 3054.048401][T22481] [ 3054.051368][T22481] dump_stack_lvl+0x188/0x24e [ 3054.056158][T22481] ? show_regs_print_info+0x12/0x12 [ 3054.061424][T22481] ? load_image+0x410/0x410 [ 3054.065986][T22481] ? __lock_acquire+0x7c40/0x7c40 [ 3054.071065][T22481] ? ct_irq_exit_irqson+0x113/0x170 [ 3054.076319][T22481] should_fail_ex+0x390/0x4c0 [ 3054.081082][T22481] _copy_from_user+0x2c/0x170 [ 3054.085844][T22481] __sys_bpf+0x2ea/0x780 [ 3054.090152][T22481] ? bpf_link_show_fdinfo+0x380/0x380 [ 3054.095594][T22481] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3054.101813][T22481] __x64_sys_bpf+0x78/0x90 [ 3054.106284][T22481] do_syscall_64+0x4c/0xa0 [ 3054.110748][T22481] ? clear_bhb_loop+0x60/0xb0 [ 3054.115479][T22481] ? clear_bhb_loop+0x60/0xb0 [ 3054.120209][T22481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3054.126187][T22481] RIP: 0033:0x7f27c959e019 [ 3054.130642][T22481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3054.150306][T22481] RSP: 002b:00007f27ca3a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3054.158778][T22481] RAX: ffffffffffffffda RBX: 00007f27c9825fa0 RCX: 00007f27c959e019 [ 3054.166799][T22481] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 3054.174825][T22481] RBP: 00007f27ca3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 3054.182841][T22481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3054.190869][T22481] R13: 00007f27c9826038 R14: 00007f27c9825fa0 R15: 00007ffe76deb8d8 [ 3054.198904][T22481] [ 3055.702848][T22509] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.15575'. [ 3055.716278][T22507] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 3059.066186][T22493] netlink: 'syz.4.15567': attribute type 21 has an invalid length. [ 3059.074309][T22493] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15567'. [ 3059.084149][T22501] netlink: 'syz.3.15573': attribute type 39 has an invalid length. [ 3059.105987][T22509] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3059.133085][T22509] CPU: 1 PID: 22509 Comm: syz.1.15575 Not tainted syzkaller #0 [ 3059.140730][T22509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3059.150862][T22509] Call Trace: [ 3059.154191][T22509] [ 3059.157171][T22509] dump_stack_lvl+0x188/0x24e [ 3059.161910][T22509] ? show_regs_print_info+0x12/0x12 [ 3059.167202][T22509] ? load_image+0x410/0x410 [ 3059.171768][T22509] sysfs_warn_dup+0x8a/0xa0 [ 3059.176324][T22509] sysfs_do_create_link_sd+0xc0/0x110 [ 3059.181776][T22509] device_add+0x83b/0x1050 [ 3059.186247][T22509] wiphy_register+0x1d8b/0x2aa0 [ 3059.191155][T22509] ? cfg80211_event_work+0x40/0x40 [ 3059.196310][T22509] ? minstrel_ht_alloc+0x894/0xa20 [ 3059.201464][T22509] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3059.207563][T22509] ieee80211_register_hw+0x2d48/0x39f0 [ 3059.213077][T22509] ? ieee80211_register_hw+0xee1/0x39f0 [ 3059.218659][T22509] ? ieee80211_register_hw+0xee1/0x39f0 [ 3059.224250][T22509] ? ieee80211_tasklet_handler+0x20/0x20 [ 3059.229926][T22509] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3059.235860][T22509] ? __debug_object_init+0xed/0x440 [ 3059.241101][T22509] ? memset+0x1e/0x40 [ 3059.245152][T22509] ? __hrtimer_init+0x189/0x270 [ 3059.250039][T22509] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3059.255808][T22509] ? memcpy+0x3c/0x60 [ 3059.259823][T22509] hwsim_new_radio_nl+0xab7/0xc90 [ 3059.264910][T22509] genl_family_rcv_msg_doit+0x22f/0x350 [ 3059.270492][T22509] ? end_current_label_crit_section+0x170/0x170 [ 3059.276784][T22509] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3059.282727][T22509] ? bpf_lsm_capable+0x5/0x10 [ 3059.287433][T22509] ? security_capable+0x85/0xb0 [ 3059.292331][T22509] genl_rcv_msg+0x601/0x790 [ 3059.296877][T22509] ? genl_bind+0x360/0x360 [ 3059.301350][T22509] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3059.307736][T22509] netlink_rcv_skb+0x1ef/0x440 [ 3059.312548][T22509] ? genl_bind+0x360/0x360 [ 3059.316992][T22509] ? netlink_ack+0x1160/0x1160 [ 3059.321805][T22509] ? down_read+0x1a8/0x2d0 [ 3059.326285][T22509] genl_rcv+0x24/0x40 [ 3059.330293][T22509] netlink_unicast+0x7ad/0x920 [ 3059.335150][T22509] netlink_sendmsg+0x8ad/0xbd0 [ 3059.339981][T22509] ? netlink_getsockopt+0x550/0x550 [ 3059.345230][T22509] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3059.350819][T22509] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3059.356138][T22509] ? security_socket_sendmsg+0x7c/0xa0 [ 3059.361631][T22509] ? netlink_getsockopt+0x550/0x550 [ 3059.366869][T22509] ____sys_sendmsg+0x5ed/0x9a0 [ 3059.371677][T22509] ? __sys_sendmsg_sock+0x30/0x30 [ 3059.376765][T22509] ? __import_iovec+0x306/0x510 [ 3059.381657][T22509] ? import_iovec+0x6f/0xa0 [ 3059.386206][T22509] ___sys_sendmsg+0x2a2/0x360 [ 3059.390927][T22509] ? __sys_sendmsg+0x2a0/0x2a0 [ 3059.395768][T22509] __se_sys_sendmsg+0x1c3/0x2b0 [ 3059.400656][T22509] ? ct_nmi_exit+0x145/0x1c0 [ 3059.405274][T22509] ? __x64_sys_sendmsg+0x80/0x80 [ 3059.410258][T22509] ? lockdep_hardirqs_on+0x94/0x140 [ 3059.415485][T22509] do_syscall_64+0x4c/0xa0 [ 3059.419937][T22509] ? clear_bhb_loop+0x60/0xb0 [ 3059.424653][T22509] ? clear_bhb_loop+0x60/0xb0 [ 3059.429364][T22509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3059.435288][T22509] RIP: 0033:0x7f659039e019 [ 3059.439731][T22509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3059.459374][T22509] RSP: 002b:00007f65912d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3059.467820][T22509] RAX: ffffffffffffffda RBX: 00007f6590626090 RCX: 00007f659039e019 [ 3059.475821][T22509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3059.483846][T22509] RBP: 00007f659043500c R08: 0000000000000000 R09: 0000000000000000 [ 3059.491841][T22509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3059.499840][T22509] R13: 00007f6590626128 R14: 00007f6590626090 R15: 00007fffe4219d68 [ 3059.507851][T22509] [ 3059.789829][T22528] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15579'. [ 3060.011128][T22533] sctp: [Deprecated]: syz.1.15581 (pid 22533) Use of int in maxseg socket option. [ 3060.011128][T22533] Use struct sctp_assoc_value instead [ 3060.312182][T22540] sctp: [Deprecated]: syz.1.15585 (pid 22540) Use of int in max_burst socket option deprecated. [ 3060.312182][T22540] Use struct sctp_assoc_value instead [ 3061.445679][T22559] device syzkaller0 entered promiscuous mode [ 3061.476246][T22555] netlink: 'syz.3.15588': attribute type 39 has an invalid length. [ 3062.311648][T22576] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15593'. [ 3062.393425][T22576] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3062.419847][T22576] CPU: 1 PID: 22576 Comm: syz.3.15593 Not tainted syzkaller #0 [ 3062.427493][T22576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3062.437593][T22576] Call Trace: [ 3062.440916][T22576] [ 3062.443891][T22576] dump_stack_lvl+0x188/0x24e [ 3062.448653][T22576] ? show_regs_print_info+0x12/0x12 [ 3062.453905][T22576] ? load_image+0x410/0x410 [ 3062.458503][T22576] sysfs_warn_dup+0x8a/0xa0 [ 3062.463072][T22576] sysfs_do_create_link_sd+0xc0/0x110 [ 3062.468505][T22576] device_add+0x83b/0x1050 [ 3062.472980][T22576] wiphy_register+0x1d8b/0x2aa0 [ 3062.477908][T22576] ? cfg80211_event_work+0x40/0x40 [ 3062.483070][T22576] ? minstrel_ht_alloc+0x894/0xa20 [ 3062.488247][T22576] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3062.494372][T22576] ieee80211_register_hw+0x2d48/0x39f0 [ 3062.499898][T22576] ? ieee80211_register_hw+0xee1/0x39f0 [ 3062.505496][T22576] ? ieee80211_register_hw+0xee1/0x39f0 [ 3062.511087][T22576] ? ieee80211_tasklet_handler+0x20/0x20 [ 3062.516757][T22576] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3062.522681][T22576] ? __debug_object_init+0xed/0x440 [ 3062.527940][T22576] ? memset+0x1e/0x40 [ 3062.531948][T22576] ? __hrtimer_init+0x189/0x270 [ 3062.536833][T22576] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3062.542594][T22576] ? memcpy+0x3c/0x60 [ 3062.546613][T22576] hwsim_new_radio_nl+0xab7/0xc90 [ 3062.551685][T22576] genl_family_rcv_msg_doit+0x22f/0x350 [ 3062.557263][T22576] ? end_current_label_crit_section+0x170/0x170 [ 3062.563537][T22576] ? lockdep_hardirqs_on+0x94/0x140 [ 3062.568767][T22576] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3062.574698][T22576] ? bpf_lsm_capable+0x5/0x10 [ 3062.579414][T22576] ? security_capable+0x85/0xb0 [ 3062.584346][T22576] genl_rcv_msg+0x601/0x790 [ 3062.588890][T22576] ? genl_bind+0x360/0x360 [ 3062.593333][T22576] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3062.599713][T22576] netlink_rcv_skb+0x1ef/0x440 [ 3062.604522][T22576] ? genl_bind+0x360/0x360 [ 3062.608969][T22576] ? netlink_ack+0x1160/0x1160 [ 3062.613779][T22576] ? down_read+0x1a8/0x2d0 [ 3062.618222][T22576] genl_rcv+0x24/0x40 [ 3062.622234][T22576] netlink_unicast+0x7ad/0x920 [ 3062.627046][T22576] netlink_sendmsg+0x8ad/0xbd0 [ 3062.631864][T22576] ? netlink_getsockopt+0x550/0x550 [ 3062.637106][T22576] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3062.642691][T22576] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3062.648006][T22576] ? security_socket_sendmsg+0x7c/0xa0 [ 3062.653501][T22576] ? netlink_getsockopt+0x550/0x550 [ 3062.658751][T22576] ____sys_sendmsg+0x5ed/0x9a0 [ 3062.663559][T22576] ? __sys_sendmsg_sock+0x30/0x30 [ 3062.668657][T22576] ? __import_iovec+0x306/0x510 [ 3062.673573][T22576] ? import_iovec+0x6f/0xa0 [ 3062.678127][T22576] ___sys_sendmsg+0x2a2/0x360 [ 3062.682857][T22576] ? __sys_sendmsg+0x2a0/0x2a0 [ 3062.687748][T22576] __se_sys_sendmsg+0x1c3/0x2b0 [ 3062.692642][T22576] ? __x64_sys_sendmsg+0x80/0x80 [ 3062.697644][T22576] ? lockdep_hardirqs_on+0x94/0x140 [ 3062.702875][T22576] do_syscall_64+0x4c/0xa0 [ 3062.707341][T22576] ? clear_bhb_loop+0x60/0xb0 [ 3062.712091][T22576] ? clear_bhb_loop+0x60/0xb0 [ 3062.716857][T22576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3062.722796][T22576] RIP: 0033:0x7fdac5b9e019 [ 3062.727236][T22576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3062.746896][T22576] RSP: 002b:00007fdac6a99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3062.755348][T22576] RAX: ffffffffffffffda RBX: 00007fdac5e26270 RCX: 00007fdac5b9e019 [ 3062.763354][T22576] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3062.771619][T22576] RBP: 00007fdac5c3500c R08: 0000000000000000 R09: 0000000000000000 [ 3062.779640][T22576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3062.787659][T22576] R13: 00007fdac5e26308 R14: 00007fdac5e26270 R15: 00007ffde2613798 [ 3062.795697][T22576] [ 3064.046552][T22589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15596'. [ 3064.328893][T13576] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3064.345576][T13576] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3064.355481][T13576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3064.364364][T13576] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3064.374135][T13576] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3064.385295][T13576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3066.414541][T22603] delete_channel: no stack [ 3066.427330][T13576] Bluetooth: hci2: command 0x0409 tx timeout [ 3067.504149][T22585] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15597'. [ 3067.513673][T22584] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15596'. [ 3068.504778][T13576] Bluetooth: hci2: command 0x041b tx timeout [ 3068.585731][T19426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.631205][T22612] netlink: 'syz.4.15603': attribute type 39 has an invalid length. [ 3068.697452][T19426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.798252][T22624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15607'. [ 3068.821482][T19426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.851236][T22624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15607'. [ 3068.861489][T22625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15607'. [ 3068.873631][T22624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15607'. [ 3068.988237][T19426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3069.084359][T22597] chnl_net:caif_netlink_parms(): no params data found [ 3069.214435][T22638] sctp: [Deprecated]: syz.2.15611 (pid 22638) Use of int in maxseg socket option. [ 3069.214435][T22638] Use struct sctp_assoc_value instead [ 3069.978596][T22642] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15612'. [ 3070.209950][T19426] device 0 left promiscuous mode [ 3070.352307][T22654] netlink: 'syz.3.15614': attribute type 3 has an invalid length. [ 3070.366124][T22597] bridge0: port 1(bridge_slave_0) entered blocking state [ 3070.398554][T22654] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15614'. [ 3070.419651][T22597] bridge0: port 1(bridge_slave_0) entered disabled state [ 3070.463336][T22597] device bridge_slave_0 entered promiscuous mode [ 3070.499112][T22597] bridge0: port 2(bridge_slave_1) entered blocking state [ 3070.516861][T22597] bridge0: port 2(bridge_slave_1) entered disabled state [ 3070.562451][T22597] device bridge_slave_1 entered promiscuous mode [ 3070.581885][T13576] Bluetooth: hci2: command 0x040f tx timeout [ 3070.710304][T22597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3070.779616][T22597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3070.972958][T22597] team0: Port device team_slave_0 added [ 3071.011105][T22597] team0: Port device team_slave_1 added [ 3071.103506][T22664] netlink: 'syz.2.15617': attribute type 39 has an invalid length. [ 3071.387916][T22597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3071.401954][T22597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3071.482588][T22597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3071.605152][T22688] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.15622'. [ 3071.661164][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3072.349989][T22597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3072.378863][T22597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3072.485072][T22597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3072.627529][T22688] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3072.641304][T22688] CPU: 1 PID: 22688 Comm: syz.4.15622 Not tainted syzkaller #0 [ 3072.649031][T22688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3072.659189][T22688] Call Trace: [ 3072.662103][T13576] Bluetooth: hci2: command 0x0419 tx timeout [ 3072.662527][T22688] [ 3072.671514][T22688] dump_stack_lvl+0x188/0x24e [ 3072.676293][T22688] ? show_regs_print_info+0x12/0x12 [ 3072.681553][T22688] ? load_image+0x410/0x410 [ 3072.686127][T22688] sysfs_warn_dup+0x8a/0xa0 [ 3072.690697][T22688] sysfs_do_create_link_sd+0xc0/0x110 [ 3072.696137][T22688] device_add+0x83b/0x1050 [ 3072.700630][T22688] wiphy_register+0x1d8b/0x2aa0 [ 3072.705571][T22688] ? cfg80211_event_work+0x40/0x40 [ 3072.710757][T22688] ? minstrel_ht_alloc+0x894/0xa20 [ 3072.715946][T22688] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3072.722070][T22688] ieee80211_register_hw+0x2d48/0x39f0 [ 3072.727612][T22688] ? ieee80211_register_hw+0xee1/0x39f0 [ 3072.733218][T22688] ? ieee80211_register_hw+0xee1/0x39f0 [ 3072.738850][T22688] ? ieee80211_tasklet_handler+0x20/0x20 [ 3072.744543][T22688] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3072.750508][T22688] ? __debug_object_init+0xed/0x440 [ 3072.755797][T22688] ? memset+0x1e/0x40 [ 3072.759932][T22688] ? __hrtimer_init+0x189/0x270 [ 3072.764854][T22688] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3072.770684][T22688] ? memcpy+0x3c/0x60 [ 3072.774734][T22688] hwsim_new_radio_nl+0xab7/0xc90 [ 3072.779840][T22688] genl_family_rcv_msg_doit+0x22f/0x350 [ 3072.785445][T22688] ? end_current_label_crit_section+0x170/0x170 [ 3072.791765][T22688] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3072.797721][T22688] ? bpf_lsm_capable+0x5/0x10 [ 3072.802531][T22688] ? security_capable+0x85/0xb0 [ 3072.807461][T22688] genl_rcv_msg+0x601/0x790 [ 3072.812027][T22688] ? genl_bind+0x360/0x360 [ 3072.816505][T22688] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3072.822918][T22688] netlink_rcv_skb+0x1ef/0x440 [ 3072.827750][T22688] ? genl_bind+0x360/0x360 [ 3072.832260][T22688] ? netlink_ack+0x1160/0x1160 [ 3072.837105][T22688] ? down_read+0x1a8/0x2d0 [ 3072.841571][T22688] genl_rcv+0x24/0x40 [ 3072.845603][T22688] netlink_unicast+0x7ad/0x920 [ 3072.850448][T22688] netlink_sendmsg+0x8ad/0xbd0 [ 3072.855329][T22688] ? netlink_getsockopt+0x550/0x550 [ 3072.860600][T22688] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3072.866213][T22688] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3072.871544][T22688] ? security_socket_sendmsg+0x7c/0xa0 [ 3072.877067][T22688] ? netlink_getsockopt+0x550/0x550 [ 3072.882330][T22688] ____sys_sendmsg+0x5ed/0x9a0 [ 3072.887168][T22688] ? __sys_sendmsg_sock+0x30/0x30 [ 3072.892251][T22688] ? __import_iovec+0x306/0x510 [ 3072.897180][T22688] ? import_iovec+0x6f/0xa0 [ 3072.901747][T22688] ___sys_sendmsg+0x2a2/0x360 [ 3072.906489][T22688] ? __sys_sendmsg+0x2a0/0x2a0 [ 3072.911375][T22688] __se_sys_sendmsg+0x1c3/0x2b0 [ 3072.916288][T22688] ? __x64_sys_sendmsg+0x80/0x80 [ 3072.921306][T22688] ? lockdep_hardirqs_on+0x94/0x140 [ 3072.926570][T22688] do_syscall_64+0x4c/0xa0 [ 3072.931052][T22688] ? clear_bhb_loop+0x60/0xb0 [ 3072.935783][T22688] ? clear_bhb_loop+0x60/0xb0 [ 3072.940521][T22688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3072.946506][T22688] RIP: 0033:0x7f448d59e019 [ 3072.950983][T22688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3072.970658][T22688] RSP: 002b:00007f448e441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3072.979180][T22688] RAX: ffffffffffffffda RBX: 00007f448d826180 RCX: 00007f448d59e019 [ 3072.987473][T22688] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3072.995499][T22688] RBP: 00007f448d63500c R08: 0000000000000000 R09: 0000000000000000 [ 3073.003526][T22688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3073.011549][T22688] R13: 00007f448d826218 R14: 00007f448d826180 R15: 00007ffeaad3b578 [ 3073.019594][T22688] [ 3073.051966][T22702] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15625'. [ 3073.326476][T22715] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.15628'. [ 3073.473436][T22597] device hsr_slave_0 entered promiscuous mode [ 3073.533002][T22597] device hsr_slave_1 entered promiscuous mode [ 3073.572335][T22597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3073.580001][T22597] Cannot create hsr debugfs directory [ 3081.994294][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.000703][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3089.244612][T13576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3089.254198][T13576] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3089.264732][T13576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3089.273161][T13576] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3089.281096][T13576] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3089.290608][T13576] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3089.356061][T22934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3089.367981][T22934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3089.377370][T22934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3089.385708][T22934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3089.394100][T22934] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3089.401574][T22934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3090.051562][T13576] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3090.061282][T13576] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3090.069950][T13576] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3090.079262][T13576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3090.089634][T13576] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3090.097426][T13576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3091.342040][ T9064] Bluetooth: hci3: command 0x0409 tx timeout [ 3091.492044][ T9064] Bluetooth: hci6: command 0x0409 tx timeout [ 3092.142038][ T9064] Bluetooth: hci7: command 0x0409 tx timeout [ 3092.949395][T13576] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3092.960179][T13576] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3092.969677][T13576] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3092.978071][T13576] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3092.986328][T13576] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 3092.993933][T13576] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3093.392187][ T9064] Bluetooth: hci3: command 0x041b tx timeout [ 3093.542098][ T9064] Bluetooth: hci6: command 0x041b tx timeout [ 3094.192061][ T9064] Bluetooth: hci7: command 0x041b tx timeout [ 3095.092113][ T9064] Bluetooth: hci8: command 0x0409 tx timeout [ 3095.492024][ T9064] Bluetooth: hci3: command 0x040f tx timeout [ 3095.642025][ T9064] Bluetooth: hci6: command 0x040f tx timeout [ 3096.291989][ T9064] Bluetooth: hci7: command 0x040f tx timeout [ 3097.142104][ T9064] Bluetooth: hci8: command 0x041b tx timeout [ 3097.541990][ T9064] Bluetooth: hci3: command 0x0419 tx timeout [ 3097.741957][ T9064] Bluetooth: hci6: command 0x0419 tx timeout [ 3098.342137][ T9064] Bluetooth: hci7: command 0x0419 tx timeout [ 3099.242234][ T9064] Bluetooth: hci8: command 0x040f tx timeout [ 3101.342150][ T9064] Bluetooth: hci8: command 0x0419 tx timeout [ 3102.677494][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3103.742080][T12777] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2681 jiffies s: 449265 root: 0x1/. [ 3103.755057][T12777] rcu: blocking rcu_node structures (internal RCU debug): [ 3103.762547][T12777] Sending NMI from CPU 1 to CPUs 0: [ 3103.767816][ C0] NMI backtrace for cpu 0 [ 3103.767827][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 3103.767843][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3103.767855][ C0] Workqueue: bat_events batadv_dat_purge [ 3103.768003][ C0] RIP: 0010:check_preemption_disabled+0x3/0x110 [ 3103.768026][ C0] Code: bc 8c 4c 89 f6 e8 dd 53 0d fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 80 5d df 8a 48 c7 c6 c0 5d df 8a eb 00 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 3103.768040][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00000046 [ 3103.768054][ C0] RAX: 0b3acafd7e923000 RBX: ffffffff818bd4df RCX: 0b3acafd7e923000 [ 3103.768068][ C0] RDX: 0000000000000003 RSI: ffffffff8a9183c0 RDI: ffffffff8adf5de0 [ 3103.768080][ C0] RBP: ffffc90000007a18 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 3103.768093][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000120000 [ 3103.768106][ C0] R13: 1ffff92000000f30 R14: ffff88807e124c28 R15: 0000000000000000 [ 3103.768118][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3103.768132][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3103.768145][ C0] CR2: 00007f27c95eb700 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 3103.768160][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 3103.768171][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3103.768182][ C0] Call Trace: [ 3103.768188][ C0] [ 3103.768195][ C0] trace_call_bpf+0x5d6/0x6b0 [ 3103.768221][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 3103.768247][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 3103.768273][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 3103.768289][ C0] ? sched_clock_cpu+0x6e/0x260 [ 3103.768313][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 3103.768342][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 3103.768367][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 3103.768391][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 3103.768417][ C0] ? __irq_exit_rcu+0x147/0x230 [ 3103.768439][ C0] ? irq_exit_rcu+0x20/0x20 [ 3103.768457][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 3103.768479][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 3103.768504][ C0] trace_hardirqs_on+0x24/0x40 [ 3103.768525][ C0] asm_sysvec_irq_work+0x16/0x20 [ 3103.768547][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 3103.768566][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 3103.768580][ C0] RSP: 0018:ffffc90000007c40 EFLAGS: 00000206 [ 3103.768593][ C0] RAX: 0b3acafd7e923000 RBX: 1ffff92000000f90 RCX: 0b3acafd7e923000 [ 3103.768606][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 3103.768619][ C0] RBP: ffffc90000007d30 R08: ffffffff90b10347 R09: 1ffffffff2162068 [ 3103.768632][ C0] R10: dffffc0000000000 R11: fffffbfff2162069 R12: 0000000000000246 [ 3103.768645][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 3103.768670][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 3103.768694][ C0] __rcu_read_unlock+0x78/0xd0 [ 3103.768712][ C0] rebalance_domains+0x86f/0x9d0 [ 3103.768739][ C0] ? rebalance_domains+0x12b/0x9d0 [ 3103.768765][ C0] handle_softirqs+0x291/0x910 [ 3103.768785][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 3103.768803][ C0] ? do_softirq+0x210/0x210 [ 3103.768817][ C0] ? hrtimer_interrupt+0x775/0x980 [ 3103.768842][ C0] __irq_exit_rcu+0x13b/0x230 [ 3103.768858][ C0] ? irq_exit_rcu+0x20/0x20 [ 3103.768880][ C0] irq_exit_rcu+0x5/0x20 [ 3103.768894][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 3103.768912][ C0] [ 3103.768917][ C0] [ 3103.768923][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3103.768947][ C0] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 3103.768965][ C0] Code: 8a e8 b6 f2 e0 08 65 66 8b 05 2e 67 b4 7e 66 85 c0 75 54 bf 01 00 00 00 e8 6f 82 09 00 e8 ca 57 39 00 fb 65 8b 05 da 33 b3 7e <85> c0 75 05 e8 e9 47 b1 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 3103.768979][ C0] RSP: 0018:ffffc900000e7b40 EFLAGS: 00000286 [ 3103.768992][ C0] RAX: 0000000080000000 RBX: 0000000000000201 RCX: 0b3acafd7e923000 [ 3103.769004][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 3103.769017][ C0] RBP: ffffc900000e7bc8 R08: ffffffff90b10347 R09: 1ffffffff2162068 [ 3103.769030][ C0] R10: dffffc0000000000 R11: fffffbfff2162069 R12: ffffffff89f6b348 [ 3103.769044][ C0] R13: ffff88806247dc48 R14: dffffc0000000000 R15: 1ffff9200001cf68 [ 3103.769058][ C0] ? batadv_dat_purge+0x2d8/0x3c0 [ 3103.769089][ C0] ? _local_bh_enable+0xa0/0xa0 [ 3103.769106][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 3103.769124][ C0] ? batadv_dat_purge+0x2d8/0x3c0 [ 3103.769149][ C0] batadv_dat_purge+0x2d8/0x3c0 [ 3103.769176][ C0] ? process_one_work+0x7b4/0x1160 [ 3103.769226][ C0] process_one_work+0x8ab/0x1160 [ 3103.769254][ C0] ? worker_detach_from_pool+0x240/0x240 [ 3103.769273][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 3103.769294][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3103.769313][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3103.769334][ C0] ? wq_worker_running+0x97/0x190 [ 3103.769362][ C0] worker_thread+0xaf5/0x12a0 [ 3103.769396][ C0] kthread+0x29d/0x330 [ 3103.769411][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 3103.769435][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3103.769451][ C0] ret_from_fork+0x1f/0x30 [ 3103.769489][ C0]