last executing test programs: 8.294533262s ago: executing program 4 (id=7341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8"], 0xb2) 8.108621861s ago: executing program 4 (id=7345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1081c7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.014201198s ago: executing program 4 (id=7353): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x9, 0x1367}, 0x100c, 0x100000000, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01000066ee044c2400000003780000010000000000000902000a8d052eefc97398000010ba8f32e990517c08000000000000000100000b0100"/71], &(0x7f0000000540)=""/246, 0x3f, 0xf6, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='~\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC=r2], 0x50) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x8, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x4, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r8 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) 5.013112668s ago: executing program 0 (id=7363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1081c7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.160942341s ago: executing program 0 (id=7357): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.125737773s ago: executing program 3 (id=7358): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000bc000000180100002020702500000000002020207b1af8ff00000000bfa100000013000007010000f8ffffffb7020000ffff00b7030000050000008500000006000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000340)="b9e6033168440372b89e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d656d6f7279202b72647cbeec13744b15e1b0c88efb17442002858e14ffcb3bb0387a2d61202d696f202b6d656d6f72798d509524"], 0x36) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x1f, 0x1, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="2f00000010000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="69cfd4e611632b754738c6002ab78db5d62ffd0500399e11ef4f2bad4a0f12f855767e05b5820add55ca5c65b1e1cafe6ca6af4732fea26c0b7020e2edb2cf841272b96be96aa5243f529559a54716d476ce", @ANYRES64=r10], 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xe, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0x3, 0x4, 0x9, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x6b}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000380)='GPL\x00', 0x8, 0xa9, &(0x7f00000003c0)=""/169, 0x41100, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r1, r1, r1, r1], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r11, r1, 0xc, 0x0, 0x0, @void, @value=r2, @void, @void, r10}, 0x20) 3.081568585s ago: executing program 4 (id=7360): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5, 0x0, 0x101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x62a9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0xfffffffc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="000000000000008b7ebb675686a5678271910f802b00b703000000000000850000000c000000b70000000000009c3b110000300ad9cf20832c3230497e83b96a2c0690a55b3a27", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0xc, 0x80, 0x81, 0x4, 0x8, 0x44, 0x0, 0xb7d, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xef94, 0x1, @perf_bp={&(0x7f0000000580), 0x6}, 0x20, 0x9, 0x80000001, 0x6, 0x7650, 0x7, 0x6, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00') close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 2.948645272s ago: executing program 3 (id=7361): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f", 0xbf}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 2.922421103s ago: executing program 2 (id=7362): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x6, 0x7, 0x0, 0x72, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x0, @perf_bp={&(0x7f0000000140)}, 0x800, 0xffffffff, 0x5, 0x9, 0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x4}, 0xffffffffffffffff, 0x4, r0, 0x5) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x7, 0x4, 0x8, 0x0, 0x1, 0x4141, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000080), 0xe}, 0x40, 0x2, 0xa, 0x4, 0x2, 0x5, 0x3ff, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x3, r3, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x66}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f4, &(0x7f0000000080)) r8 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[], 0x9) 2.917466643s ago: executing program 0 (id=7364): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x8404, 0xc8, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x20000000000, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8100058700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) close(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2.760022912s ago: executing program 2 (id=7365): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4002, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.557644061s ago: executing program 3 (id=7367): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000bc000000180100002020702500000000002020207b1af8ff00000000bfa100000013000007010000f8ffffffb7020000ffff00b7030000050000008500000006000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000340)="b9e6033168440372b89e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d656d6f7279202b72647cbeec13744b15e1b0c88efb17442002858e14ffcb3bb0387a2d61202d696f202b6d656d6f72798d509524"], 0x36) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x1f, 0x1, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="2f00000010000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="69cfd4e611632b754738c6002ab78db5d62ffd0500399e11ef4f2bad4a0f12f855767e05b5820add55ca5c65b1e1cafe6ca6af4732fea26c0b7020e2edb2cf841272b96be96aa5243f529559a54716d476ce", @ANYRES64=r10], 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xe, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0x3, 0x4, 0x9, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x6b}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000380)='GPL\x00', 0x8, 0xa9, &(0x7f00000003c0)=""/169, 0x41100, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r1, r1, r1, r1], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r11, r1, 0xc, 0x0, 0x0, @void, @value=r2, @void, @void, r10}, 0x20) 2.440098817s ago: executing program 1 (id=7368): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000bc000000180100002020702500000000002020207b1af8ff00000000bfa100000013000007010000f8ffffffb7020000ffff00b7030000050000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d656d6f7279202b72647cbeec13744b15e1b0c88efb17442002858e14ff"], 0x36) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.370580461s ago: executing program 2 (id=7369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1081c7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.369167331s ago: executing program 1 (id=7370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0xfffffffffffffd4e}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000eb00"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r4, &(0x7f0000000700)="8ac49d1cf7cbaf377061d299233bd2964fca6317cd5fb69fb616712e02efd3fdee84d5eff183a0757072f7a65772353a8ed14d720502605ff9f142f56e43cf9544429e301572de7acbafdb56f88493c401243d3441c5ee4267285fdf88d22e4ec0c405f8a56e6d976f", 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r9, &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000100), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c0200bd7ebe84ec9c5aa10000ea6100000200000d0000000000000000000002b45c8271a8feb8847d8cdccc00000000000000000000006100"], 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 2.293854375s ago: executing program 3 (id=7371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8"], 0xb2) 2.272627386s ago: executing program 4 (id=7372): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x9, 0x1367}, 0x100c, 0x100000000, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01000066ee044c2400000003780000010000000000000902000a8d052eefc97398000010ba8f32e990517c08000000000000000100000b0100"/71], &(0x7f0000000540)=""/246, 0x3f, 0xf6, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='~\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC=r2], 0x50) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 493.904716ms ago: executing program 0 (id=7373): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000bc000000180100002020702500000000002020207b1af8ff00000000bfa100000013000007010000f8ffffffb7020000ffff00b7030000050000008500000006000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000340)="b9e6033168440372b89e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d656d6f7279202b72647cbeec13744b15e1b0c88efb17442002858e14ffcb3bb0387a2d61202d696f202b6d656d6f72798d509524"], 0x36) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x1f, 0x1, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="2f00000010000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="69cfd4e611632b754738c6002ab78db5d62ffd0500399e11ef4f2bad4a0f12f855767e05b5820add55ca5c65b1e1cafe6ca6af4732fea26c0b7020e2edb2cf841272b96be96aa5243f529559a54716d476ce", @ANYRES64=r10], 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xe, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0x3, 0x4, 0x9, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x6b}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000380)='GPL\x00', 0x8, 0xa9, &(0x7f00000003c0)=""/169, 0x41100, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r1, r1, r1, r1], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r11, r1, 0xc, 0x0, 0x0, @void, @value=r2, @void, @void, r10}, 0x20) 493.066106ms ago: executing program 1 (id=7374): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x1, 0x0, 0xa, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) 453.105557ms ago: executing program 2 (id=7375): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x80440, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40}, 0xa420, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) close(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 398.18072ms ago: executing program 1 (id=7376): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000bc000000180100002020702500000000002020207b1af8ff00000000bfa100000013000007010000f8ffffffb7020000ffff00b7030000050000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d656d6f7279202b72647cbeec13744b15e1b0c88efb17442002858e14ff"], 0x36) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 397.68797ms ago: executing program 3 (id=7377): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f", 0xbf}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 347.808683ms ago: executing program 4 (id=7378): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x8f}, 0x4}}, 0x80, 0x0}, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 305.060225ms ago: executing program 0 (id=7379): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x1, 0x0, 0xa, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 285.537776ms ago: executing program 3 (id=7380): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000007319455299a904b116a7e0adbd3c97eaa984e8d3089fcacb1882c901c5874ad40c7c9374b2ed3b85e5614a070fbb151bd2b0de664c2e2672f671f36b61e056de4d48cfc06b0f773a832bbeffe2256d1678f2617e0588f7331a580bf49a199ef07bdc89c5b7393614d41b19b339e1c78f540dec3a79641dc59f722b608a2b4ee5d335678e15afa11b4170fc951e4d1db6799ce26488d800af45b4f176ebb2ed6eec3cf6d36d63347b0ad2fb876119bfc3a936e38868"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1c000, r0, 0x4}, 0x38) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7f) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x7a, [{0x1000005, 0x5, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x61]}}, &(0x7f00000003c0)=""/173, 0x36, 0xad, 0x1}, 0x28) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000540)={0x1, 0x80, 0x2, 0x81, 0x81, 0x3c, 0x0, 0x9, 0x1208, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x2}, 0x1041, 0x0, 0x1, 0x6, 0x10000, 0x2, 0x6, 0x0, 0xfc, 0x8000000, 0x1}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aa, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xc, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200009d000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) close(r7) close(r6) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x0) 228.203259ms ago: executing program 2 (id=7381): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000bc000000180100002020702500000000002020207b1af8ff00000000bfa100000013000007010000f8ffffffb7020000ffff00b7030000050000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d656d6f7279202b72647cbeec13744b15e1b0c88efb17442002858e14ff"], 0x36) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 227.454929ms ago: executing program 1 (id=7382): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000bc000000180100002020702500000000002020207b1af8ff00000000bfa100000013000007010000f8ffffffb7020000ffff00b7030000050000008500000006000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000340)="b9e6033168440372b89e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6d656d6f7279202b72647cbeec13744b15e1b0c88efb17442002858e14ffcb3bb0387a2d61202d696f202b6d656d6f72798d509524"], 0x36) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x1f, 0x1, 0x7ff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="2f00000010000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="69cfd4e611632b754738c6002ab78db5d62ffd0500399e11ef4f2bad4a0f12f855767e05b5820add55ca5c65b1e1cafe6ca6af4732fea26c0b7020e2edb2cf841272b96be96aa5243f529559a54716d476ce", @ANYRES64=r10], 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xe, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x0, 0x3, 0x4, 0x9, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x6b}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000380)='GPL\x00', 0x8, 0xa9, &(0x7f00000003c0)=""/169, 0x41100, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1, r1, r1, r1, r1], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r11, r1, 0xc, 0x0, 0x0, @void, @value=r2, @void, @void, r10}, 0x20) 173.537231ms ago: executing program 2 (id=7383): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000}, 0x18) r5 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, @perf_config_ext={0x200000000000000, 0x8}}) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)={[{0x6088e748966b50f4, 'pids'}, {0x2d, 'perf_event'}, {0x2b, 'cpu'}]}, 0x17) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2f}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001200)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1}}, 0x80, 0x0}, 0x20040012) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x40000040) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f3, &(0x7f0000000080)) 91.688506ms ago: executing program 0 (id=7384): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x2, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x8404, 0xc8, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x20000000000, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8100058700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x18, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) close(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 0s ago: executing program 1 (id=7385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1081c7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ? __x64_sys_sendmsg+0x80/0x80 [ 1119.249666][T23338] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1119.255672][T23338] ? lockdep_hardirqs_on+0x94/0x140 [ 1119.261911][T23338] do_syscall_64+0x4c/0xa0 [ 1119.266418][T23338] ? clear_bhb_loop+0x30/0x80 [ 1119.271193][T23338] ? clear_bhb_loop+0x30/0x80 [ 1119.275884][T23338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1119.281875][T23338] RIP: 0033:0x7f54b0f39799 [ 1119.286561][T23338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.306595][T23338] RSP: 002b:00007f54af193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.315027][T23338] RAX: ffffffffffffffda RBX: 00007f54b11b2fa0 RCX: 00007f54b0f39799 [ 1119.323078][T23338] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000007 [ 1119.331128][T23338] RBP: 00007f54af193090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.339263][T23338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.347226][T23338] R13: 00007f54b11b3038 R14: 00007f54b11b2fa0 R15: 00007ffd0e858058 [ 1119.355282][T23338] [ 1119.375252][T23339] device ipvlan1 entered promiscuous mode [ 1119.392706][T23347] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1119.400763][T23339] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1119.519616][T23341] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1119.630262][T23349] device syzkaller0 entered promiscuous mode [ 1119.852531][T23367] netlink: 'syz.0.6848': attribute type 4 has an invalid length. [ 1119.899241][T23367] netlink: 'syz.0.6848': attribute type 3 has an invalid length. [ 1119.928525][T23367] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1119.991132][T23356] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6845'. [ 1120.305527][T23356] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1120.318206][T23356] CPU: 0 PID: 23356 Comm: syz.3.6845 Not tainted syzkaller #0 [ 1120.325799][T23356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1120.335881][T23356] Call Trace: [ 1120.339185][T23356] [ 1120.342135][T23356] dump_stack_lvl+0x188/0x250 [ 1120.346853][T23356] ? show_regs_print_info+0x20/0x20 [ 1120.352093][T23356] ? load_image+0x400/0x400 [ 1120.356652][T23356] sysfs_warn_dup+0x8a/0xa0 [ 1120.361176][T23356] sysfs_do_create_link_sd+0xc0/0x110 [ 1120.366622][T23356] device_add+0x7ed/0xfb0 [ 1120.371100][T23356] wiphy_register+0x1e81/0x2c30 [ 1120.376106][T23356] ? cfg80211_event_work+0x40/0x40 [ 1120.381238][T23356] ? minstrel_ht_alloc+0x808/0x980 [ 1120.386386][T23356] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1120.392573][T23356] ieee80211_register_hw+0x2aa1/0x3af0 [ 1120.398283][T23356] ? ieee80211_tasklet_handler+0x20/0x20 [ 1120.403950][T23356] ? lockdep_hardirqs_on+0x94/0x140 [ 1120.409175][T23356] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1120.415466][T23356] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1120.421237][T23356] hwsim_new_radio_nl+0xa6f/0xc40 [ 1120.426454][T23356] genl_rcv_msg+0xcea/0xf90 [ 1120.431018][T23356] ? genl_bind+0x380/0x380 [ 1120.435477][T23356] ? swake_up_one+0x6d/0x130 [ 1120.440171][T23356] ? verify_lock_unused+0x140/0x140 [ 1120.445414][T23356] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1120.451180][T23356] ? perf_trace_lock+0x301/0x390 [ 1120.456238][T23356] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1120.463064][T23356] netlink_rcv_skb+0x1f5/0x440 [ 1120.468014][T23356] ? genl_bind+0x380/0x380 [ 1120.472533][T23356] ? netlink_ack+0xb50/0xb50 [ 1120.477220][T23356] ? __lock_acquire+0x7d10/0x7d10 [ 1120.482364][T23356] ? down_read+0x1aa/0x2e0 [ 1120.486836][T23356] genl_rcv+0x24/0x40 [ 1120.491006][T23356] netlink_unicast+0x774/0x920 [ 1120.495883][T23356] netlink_sendmsg+0x8ba/0xbe0 [ 1120.501203][T23356] ? lockdep_hardirqs_on+0x94/0x140 [ 1120.506534][T23356] ? netlink_getsockopt+0x570/0x570 [ 1120.511827][T23356] ? netlink_getsockopt+0x570/0x570 [ 1120.517059][T23356] ? netlink_getsockopt+0x570/0x570 [ 1120.522270][T23356] ____sys_sendmsg+0x5b7/0x8f0 [ 1120.527085][T23356] ? __sys_sendmsg_sock+0x30/0x30 [ 1120.532247][T23356] ? import_iovec+0x6f/0xa0 [ 1120.536898][T23356] ___sys_sendmsg+0x236/0x2e0 [ 1120.541627][T23356] ? __sys_sendmsg+0x2a0/0x2a0 [ 1120.546498][T23356] __se_sys_sendmsg+0x1af/0x290 [ 1120.551406][T23356] ? __x64_sys_sendmsg+0x80/0x80 [ 1120.556372][T23356] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1120.562476][T23356] ? lockdep_hardirqs_on+0x94/0x140 [ 1120.567883][T23356] do_syscall_64+0x4c/0xa0 [ 1120.572505][T23356] ? clear_bhb_loop+0x30/0x80 [ 1120.577277][T23356] ? clear_bhb_loop+0x30/0x80 [ 1120.581965][T23356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1120.587950][T23356] RIP: 0033:0x7f6cb5cb0799 [ 1120.592666][T23356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.612483][T23356] RSP: 002b:00007f6cb3f0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.621355][T23356] RAX: ffffffffffffffda RBX: 00007f6cb5f29fa0 RCX: 00007f6cb5cb0799 [ 1120.629347][T23356] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1120.637347][T23356] RBP: 00007f6cb5d46c99 R08: 0000000000000000 R09: 0000000000000000 [ 1120.645482][T23356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.653632][T23356] R13: 00007f6cb5f2a038 R14: 00007f6cb5f29fa0 R15: 00007fff7bdf01f8 [ 1120.661662][T23356] [ 1122.304377][T23386] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.6855'. [ 1122.345156][T23391] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6854'. [ 1122.394589][T23392] netlink: 'syz.0.6856': attribute type 10 has an invalid length. [ 1122.418509][T23392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1122.422296][T23388] netlink: 'syz.2.6853': attribute type 7 has an invalid length. [ 1122.458281][T23392] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1122.464499][T23388] netlink: 'syz.2.6853': attribute type 1 has an invalid length. [ 1122.516974][T23395] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1122.552404][T23388] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1122.800723][T23407] netlink: 'syz.1.6861': attribute type 4 has an invalid length. [ 1122.907127][T23407] netlink: 'syz.1.6861': attribute type 3 has an invalid length. [ 1123.187587][T23415] device syzkaller0 entered promiscuous mode [ 1124.854474][T23422] __nla_validate_parse: 1 callbacks suppressed [ 1124.854494][T23422] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1125.054830][T23422] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1125.096083][T23422] CPU: 1 PID: 23422 Comm: syz.4.6865 Not tainted syzkaller #0 [ 1125.103771][T23422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1125.113940][T23422] Call Trace: [ 1125.117249][T23422] [ 1125.120588][T23422] dump_stack_lvl+0x188/0x250 [ 1125.125385][T23422] ? show_regs_print_info+0x20/0x20 [ 1125.130606][T23422] ? load_image+0x400/0x400 [ 1125.135131][T23422] sysfs_warn_dup+0x8a/0xa0 [ 1125.139947][T23422] sysfs_do_create_link_sd+0xc0/0x110 [ 1125.145431][T23422] device_add+0x7ed/0xfb0 [ 1125.149892][T23422] wiphy_register+0x1e81/0x2c30 [ 1125.154882][T23422] ? cfg80211_event_work+0x40/0x40 [ 1125.160171][T23422] ? minstrel_ht_alloc+0x808/0x980 [ 1125.165929][T23422] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1125.172028][T23422] ieee80211_register_hw+0x2aa1/0x3af0 [ 1125.177707][T23422] ? ieee80211_tasklet_handler+0x20/0x20 [ 1125.183442][T23422] ? rcu_is_watching+0x11/0xa0 [ 1125.188301][T23422] ? memset+0x1e/0x40 [ 1125.192524][T23422] ? hrtimer_init+0x10c/0x220 [ 1125.197668][T23422] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1125.203427][T23422] hwsim_new_radio_nl+0xa6f/0xc40 [ 1125.208479][T23422] genl_rcv_msg+0xcea/0xf90 [ 1125.213002][T23422] ? genl_bind+0x380/0x380 [ 1125.217716][T23422] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1125.223018][T23422] ? verify_lock_unused+0x140/0x140 [ 1125.228588][T23422] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1125.234645][T23422] ? perf_trace_lock+0x301/0x390 [ 1125.239835][T23422] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1125.246786][T23422] netlink_rcv_skb+0x1f5/0x440 [ 1125.251566][T23422] ? genl_bind+0x380/0x380 [ 1125.256297][T23422] ? netlink_ack+0xb50/0xb50 [ 1125.261117][T23422] ? __lock_acquire+0x7d10/0x7d10 [ 1125.266171][T23422] ? down_read+0x1aa/0x2e0 [ 1125.270596][T23422] genl_rcv+0x24/0x40 [ 1125.274882][T23422] netlink_unicast+0x774/0x920 [ 1125.279777][T23422] netlink_sendmsg+0x8ba/0xbe0 [ 1125.284850][T23422] ? netlink_getsockopt+0x570/0x570 [ 1125.290244][T23422] ? aa_sock_msg_perm+0x94/0x150 [ 1125.295474][T23422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1125.300853][T23422] ? security_socket_sendmsg+0x7c/0xa0 [ 1125.306602][T23422] ? netlink_getsockopt+0x570/0x570 [ 1125.312181][T23422] ____sys_sendmsg+0x5b7/0x8f0 [ 1125.316988][T23422] ? __sys_sendmsg_sock+0x30/0x30 [ 1125.322382][T23422] ? import_iovec+0x6f/0xa0 [ 1125.326993][T23422] ___sys_sendmsg+0x236/0x2e0 [ 1125.332053][T23422] ? __sys_sendmsg+0x2a0/0x2a0 [ 1125.336846][T23422] ? trace_event_raw_event_lock+0x270/0x270 [ 1125.342777][T23422] __se_sys_sendmsg+0x1af/0x290 [ 1125.347720][T23422] ? __x64_sys_sendmsg+0x80/0x80 [ 1125.352854][T23422] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1125.359141][T23422] ? lockdep_hardirqs_on+0x94/0x140 [ 1125.364361][T23422] do_syscall_64+0x4c/0xa0 [ 1125.368977][T23422] ? clear_bhb_loop+0x30/0x80 [ 1125.373828][T23422] ? clear_bhb_loop+0x30/0x80 [ 1125.379209][T23422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1125.385368][T23422] RIP: 0033:0x7f3642af0799 [ 1125.389790][T23422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.409851][T23422] RSP: 002b:00007f3640d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.418679][T23422] RAX: ffffffffffffffda RBX: 00007f3642d6a090 RCX: 00007f3642af0799 [ 1125.426650][T23422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1125.434886][T23422] RBP: 00007f3642b86c99 R08: 0000000000000000 R09: 0000000000000000 [ 1125.443032][T23422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.451428][T23422] R13: 00007f3642d6a128 R14: 00007f3642d6a090 R15: 00007ffd5e6957c8 [ 1125.459836][T23422] [ 1125.595274][T23439] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6869'. [ 1125.737369][T23445] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6871'. [ 1125.793860][T23450] netlink: 'syz.1.6873': attribute type 4 has an invalid length. [ 1125.829097][T23450] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6873'. [ 1125.854941][T23456] FAULT_INJECTION: forcing a failure. [ 1125.854941][T23456] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.875433][T23456] CPU: 0 PID: 23456 Comm: syz.4.6876 Not tainted syzkaller #0 [ 1125.883032][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1125.893299][T23456] Call Trace: [ 1125.896600][T23456] [ 1125.899552][T23456] dump_stack_lvl+0x188/0x250 [ 1125.904281][T23456] ? show_regs_print_info+0x20/0x20 [ 1125.909774][T23456] ? load_image+0x400/0x400 [ 1125.914211][T23450] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1125.914554][T23456] ? __might_sleep+0xf0/0xf0 [ 1125.934979][T23456] ? __lock_acquire+0x7d10/0x7d10 [ 1125.940141][T23456] should_fail+0x38c/0x4c0 [ 1125.944682][T23456] should_failslab+0x5/0x20 [ 1125.949463][T23456] slab_pre_alloc_hook+0x51/0xc0 [ 1125.954413][T23456] kmem_cache_alloc_node+0x47/0x2d0 [ 1125.959609][T23456] ? __alloc_skb+0xf4/0x750 [ 1125.964239][T23456] __alloc_skb+0xf4/0x750 [ 1125.968577][T23456] __ip6_append_data+0x266c/0x38c0 [ 1125.973712][T23456] ? ip6_setup_cork+0x11e0/0x11e0 [ 1125.978732][T23456] ? ip6_setup_cork+0xc63/0x11e0 [ 1125.983671][T23456] ip6_append_data+0x1d4/0x310 [ 1125.988517][T23456] ? rawv6_send_hdrinc+0x1690/0x1690 [ 1125.993810][T23456] ? rawv6_send_hdrinc+0x1690/0x1690 [ 1125.999712][T23456] rawv6_sendmsg+0x1222/0x1700 [ 1126.004572][T23456] ? compat_rawv6_ioctl+0x60/0x60 [ 1126.009719][T23456] ? aa_af_perm+0x340/0x340 [ 1126.014392][T23456] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1126.020971][T23456] ? sock_rps_record_flow+0x17/0x3b0 [ 1126.026424][T23456] ? inet_sendmsg+0x78/0x2f0 [ 1126.031221][T23456] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1126.036519][T23456] ? security_socket_sendmsg+0x7c/0xa0 [ 1126.042150][T23456] ? inet_send_prepare+0x260/0x260 [ 1126.047377][T23456] ____sys_sendmsg+0x5b7/0x8f0 [ 1126.052157][T23456] ? __sys_sendmsg_sock+0x30/0x30 [ 1126.057273][T23456] ? import_iovec+0x6f/0xa0 [ 1126.061897][T23456] ___sys_sendmsg+0x236/0x2e0 [ 1126.066691][T23456] ? __sys_sendmsg+0x2a0/0x2a0 [ 1126.071647][T23456] ? vfs_write+0x8b2/0xd60 [ 1126.076083][T23456] __se_sys_sendmsg+0x1af/0x290 [ 1126.081163][T23456] ? __x64_sys_sendmsg+0x80/0x80 [ 1126.086228][T23456] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1126.092209][T23456] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.097404][T23456] do_syscall_64+0x4c/0xa0 [ 1126.101982][T23456] ? clear_bhb_loop+0x30/0x80 [ 1126.106742][T23456] ? clear_bhb_loop+0x30/0x80 [ 1126.111493][T23456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1126.117372][T23456] RIP: 0033:0x7f3642af0799 [ 1126.121863][T23456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.142010][T23456] RSP: 002b:00007f3640d4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.150430][T23456] RAX: ffffffffffffffda RBX: 00007f3642d69fa0 RCX: 00007f3642af0799 [ 1126.158480][T23456] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1126.166612][T23456] RBP: 00007f3640d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.174743][T23456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.182797][T23456] R13: 00007f3642d6a038 R14: 00007f3642d69fa0 R15: 00007ffd5e6957c8 [ 1126.190771][T23456] [ 1126.246306][T23452] netlink: 'syz.3.6875': attribute type 7 has an invalid length. [ 1126.296759][T23452] netlink: 'syz.3.6875': attribute type 1 has an invalid length. [ 1126.305078][T23452] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1126.376001][T23461] device syzkaller0 entered promiscuous mode [ 1126.421048][T23469] netlink: 'syz.4.6878': attribute type 4 has an invalid length. [ 1126.476509][T23461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1126.476862][T23469] netlink: 'syz.4.6878': attribute type 3 has an invalid length. [ 1126.516088][T23469] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.6878'. [ 1126.552998][T23468] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6882'. [ 1126.876054][T23472] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6883'. [ 1127.074808][T23472] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1127.084334][T23472] CPU: 0 PID: 23472 Comm: syz.2.6883 Not tainted syzkaller #0 [ 1127.091909][T23472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1127.102009][T23472] Call Trace: [ 1127.105502][T23472] [ 1127.108478][T23472] dump_stack_lvl+0x188/0x250 [ 1127.113374][T23472] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1127.119671][T23472] ? show_regs_print_info+0x20/0x20 [ 1127.125112][T23472] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1127.131417][T23472] ? dump_stack+0x5/0x20 [ 1127.135892][T23472] sysfs_warn_dup+0x8a/0xa0 [ 1127.140530][T23472] sysfs_do_create_link_sd+0xc0/0x110 [ 1127.145964][T23472] device_add+0x7ed/0xfb0 [ 1127.150572][T23472] wiphy_register+0x1e81/0x2c30 [ 1127.155498][T23472] ? cfg80211_event_work+0x40/0x40 [ 1127.160648][T23472] ? minstrel_ht_alloc+0x808/0x980 [ 1127.165906][T23472] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1127.172029][T23472] ieee80211_register_hw+0x2aa1/0x3af0 [ 1127.177918][T23472] ? ieee80211_tasklet_handler+0x20/0x20 [ 1127.183967][T23472] ? rcu_is_watching+0x11/0xa0 [ 1127.188775][T23472] ? memset+0x1e/0x40 [ 1127.192899][T23472] ? hrtimer_init+0x10c/0x220 [ 1127.197789][T23472] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1127.203763][T23472] hwsim_new_radio_nl+0xa6f/0xc40 [ 1127.208964][T23472] genl_rcv_msg+0xcea/0xf90 [ 1127.213981][T23472] ? genl_bind+0x380/0x380 [ 1127.218733][T23472] ? verify_lock_unused+0x140/0x140 [ 1127.224236][T23472] ? rcu_preempt_deferred_qs_irqrestore+0x88b/0xc30 [ 1127.230996][T23472] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1127.236773][T23472] ? perf_trace_lock+0x301/0x390 [ 1127.241760][T23472] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1127.248666][T23472] netlink_rcv_skb+0x1f5/0x440 [ 1127.253480][T23472] ? genl_bind+0x380/0x380 [ 1127.258156][T23472] ? netlink_ack+0xb50/0xb50 [ 1127.262929][T23472] ? __lock_acquire+0x7d10/0x7d10 [ 1127.268018][T23472] ? down_read+0x1aa/0x2e0 [ 1127.272880][T23472] genl_rcv+0x24/0x40 [ 1127.276990][T23472] netlink_unicast+0x774/0x920 [ 1127.282172][T23472] netlink_sendmsg+0x8ba/0xbe0 [ 1127.287104][T23472] ? netlink_getsockopt+0x570/0x570 [ 1127.292737][T23472] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1127.299298][T23472] ? aa_sock_msg_perm+0x94/0x150 [ 1127.304291][T23472] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1127.309839][T23472] ? security_socket_sendmsg+0x7c/0xa0 [ 1127.315607][T23472] ? netlink_getsockopt+0x570/0x570 [ 1127.321124][T23472] ____sys_sendmsg+0x5b7/0x8f0 [ 1127.326232][T23472] ? __sys_sendmsg_sock+0x30/0x30 [ 1127.331846][T23472] ? import_iovec+0x6f/0xa0 [ 1127.336938][T23472] ___sys_sendmsg+0x236/0x2e0 [ 1127.341908][T23472] ? __sys_sendmsg+0x2a0/0x2a0 [ 1127.346740][T23472] ? rcu_irq_exit_check_preempt+0x200/0x200 [ 1127.352987][T23472] __se_sys_sendmsg+0x1af/0x290 [ 1127.358418][T23472] ? __x64_sys_sendmsg+0x80/0x80 [ 1127.363457][T23472] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1127.369501][T23472] do_syscall_64+0x4c/0xa0 [ 1127.373955][T23472] ? clear_bhb_loop+0x30/0x80 [ 1127.379110][T23472] ? clear_bhb_loop+0x30/0x80 [ 1127.384112][T23472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1127.390283][T23472] RIP: 0033:0x7ff2207fd799 [ 1127.395325][T23472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.416351][T23472] RSP: 002b:00007ff21ea57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1127.424947][T23472] RAX: ffffffffffffffda RBX: 00007ff220a76fa0 RCX: 00007ff2207fd799 [ 1127.433205][T23472] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1127.442300][T23472] RBP: 00007ff220893c99 R08: 0000000000000000 R09: 0000000000000000 [ 1127.450303][T23472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.458895][T23472] R13: 00007ff220a77038 R14: 00007ff220a76fa0 R15: 00007ffd4b86f478 [ 1127.467727][T23472] [ 1127.573279][T23493] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1127.746984][T23502] netlink: 'syz.4.6892': attribute type 7 has an invalid length. [ 1127.767657][T23502] netlink: 'syz.4.6892': attribute type 1 has an invalid length. [ 1127.806180][T23502] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1127.910648][T23512] netlink: 'syz.1.6895': attribute type 4 has an invalid length. [ 1127.968839][T23512] netlink: 'syz.1.6895': attribute type 3 has an invalid length. [ 1128.135583][T23519] device syzkaller0 entered promiscuous mode [ 1128.216434][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.305393][T23519] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1128.602918][T23529] FAULT_INJECTION: forcing a failure. [ 1128.602918][T23529] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.734501][T23529] CPU: 0 PID: 23529 Comm: syz.3.6913 Not tainted syzkaller #0 [ 1128.742296][T23529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1128.752386][T23529] Call Trace: [ 1128.755739][T23529] [ 1128.758783][T23529] dump_stack_lvl+0x188/0x250 [ 1128.763496][T23529] ? show_regs_print_info+0x20/0x20 [ 1128.768828][T23529] ? load_image+0x400/0x400 [ 1128.773373][T23529] ? __lock_acquire+0x7d10/0x7d10 [ 1128.778436][T23529] ? rcu_lock_release+0x5/0x20 [ 1128.783241][T23529] should_fail+0x38c/0x4c0 [ 1128.787720][T23529] should_failslab+0x5/0x20 [ 1128.792437][T23529] slab_pre_alloc_hook+0x51/0xc0 [ 1128.797747][T23529] ? __d_alloc+0x2a/0x6f0 [ 1128.802192][T23529] kmem_cache_alloc+0x3d/0x290 [ 1128.807180][T23529] __d_alloc+0x2a/0x6f0 [ 1128.811359][T23529] ? rwsem_write_trylock+0x135/0x1c0 [ 1128.816848][T23529] d_alloc+0x4a/0x250 [ 1128.821048][T23529] lookup_one_qstr_excl+0xc6/0x240 [ 1128.826539][T23529] filename_create+0x23a/0x470 [ 1128.831523][T23529] ? kern_path_create+0x190/0x190 [ 1128.836813][T23529] do_mkdirat+0xa5/0x5b0 [ 1128.841082][T23529] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1128.847274][T23529] ? vfs_mkdir+0x570/0x570 [ 1128.851727][T23529] __x64_sys_mkdir+0x6a/0x80 [ 1128.856435][T23529] do_syscall_64+0x4c/0xa0 [ 1128.860878][T23529] ? clear_bhb_loop+0x30/0x80 [ 1128.865574][T23529] ? clear_bhb_loop+0x30/0x80 [ 1128.870260][T23529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1128.876422][T23529] RIP: 0033:0x7f6cb5cb0799 [ 1128.880855][T23529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.901281][T23529] RSP: 002b:00007f6cb3f0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1128.909898][T23529] RAX: ffffffffffffffda RBX: 00007f6cb5f29fa0 RCX: 00007f6cb5cb0799 [ 1128.918077][T23529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 1128.926068][T23529] RBP: 00007f6cb3f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.934253][T23529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.942340][T23529] R13: 00007f6cb5f2a038 R14: 00007f6cb5f29fa0 R15: 00007fff7bdf01f8 [ 1128.950626][T23529] [ 1129.083886][T23540] FAULT_INJECTION: forcing a failure. [ 1129.083886][T23540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.120091][T23540] CPU: 0 PID: 23540 Comm: syz.0.6907 Not tainted syzkaller #0 [ 1129.127801][T23540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1129.138714][T23540] Call Trace: [ 1129.142004][T23540] [ 1129.144945][T23540] dump_stack_lvl+0x188/0x250 [ 1129.149704][T23540] ? show_regs_print_info+0x20/0x20 [ 1129.154922][T23540] ? load_image+0x400/0x400 [ 1129.159535][T23540] ? __lock_acquire+0x7d10/0x7d10 [ 1129.164678][T23540] ? __alloc_skb+0x473/0x750 [ 1129.169376][T23540] should_fail+0x38c/0x4c0 [ 1129.173814][T23540] _copy_from_iter+0x22e/0x1170 [ 1129.178680][T23540] ? __lock_acquire+0x7d10/0x7d10 [ 1129.183823][T23540] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 1129.189304][T23540] ? __virt_addr_valid+0x3c6/0x470 [ 1129.194429][T23540] ? __phys_addr_symbol+0x2b/0x70 [ 1129.199476][T23540] ? __check_object_size+0x30c/0x410 [ 1129.204788][T23540] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 1129.210523][T23540] ? skb_put+0x117/0x210 [ 1129.214900][T23540] tun_get_user+0xaf9/0x3a70 [ 1129.219638][T23540] ? tun_ring_recv+0xc40/0xc40 [ 1129.224433][T23540] ? rcu_lock_release+0x5/0x20 [ 1129.229640][T23540] ? __lock_acquire+0x7d10/0x7d10 [ 1129.234989][T23540] tun_chr_write_iter+0x112/0x1e0 [ 1129.240176][T23540] vfs_write+0x745/0xd60 [ 1129.244608][T23540] ? file_end_write+0x250/0x250 [ 1129.249574][T23540] ? __fget_files+0x40f/0x480 [ 1129.254581][T23540] ? __fdget_pos+0x1e2/0x370 [ 1129.259260][T23540] ? ksys_write+0x71/0x260 [ 1129.263686][T23540] ksys_write+0x152/0x260 [ 1129.268214][T23540] ? __ia32_sys_read+0x80/0x80 [ 1129.272984][T23540] ? lockdep_hardirqs_on+0x94/0x140 [ 1129.278292][T23540] do_syscall_64+0x4c/0xa0 [ 1129.282903][T23540] ? clear_bhb_loop+0x30/0x80 [ 1129.287821][T23540] ? clear_bhb_loop+0x30/0x80 [ 1129.292781][T23540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.298876][T23540] RIP: 0033:0x7f54b0f39799 [ 1129.303412][T23540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.323217][T23540] RSP: 002b:00007f54af193028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.331726][T23540] RAX: ffffffffffffffda RBX: 00007f54b11b2fa0 RCX: 00007f54b0f39799 [ 1129.339869][T23540] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 1129.348008][T23540] RBP: 00007f54af193090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.356451][T23540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.364612][T23540] R13: 00007f54b11b3038 R14: 00007f54b11b2fa0 R15: 00007ffd0e858058 [ 1129.372712][T23540] [ 1129.428509][T23548] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1129.445724][T23548] CPU: 0 PID: 23548 Comm: syz.3.6906 Not tainted syzkaller #0 [ 1129.453424][T23548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1129.463599][T23548] Call Trace: [ 1129.466899][T23548] [ 1129.469847][T23548] dump_stack_lvl+0x188/0x250 [ 1129.474711][T23548] ? show_regs_print_info+0x20/0x20 [ 1129.480034][T23548] ? load_image+0x400/0x400 [ 1129.484725][T23548] sysfs_warn_dup+0x8a/0xa0 [ 1129.489445][T23548] sysfs_do_create_link_sd+0xc0/0x110 [ 1129.495213][T23548] device_add+0x7ed/0xfb0 [ 1129.499689][T23548] wiphy_register+0x1e81/0x2c30 [ 1129.504638][T23548] ? cfg80211_event_work+0x40/0x40 [ 1129.510814][T23548] ? minstrel_ht_alloc+0x808/0x980 [ 1129.516145][T23548] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1129.522475][T23548] ieee80211_register_hw+0x2aa1/0x3af0 [ 1129.528182][T23548] ? ieee80211_tasklet_handler+0x20/0x20 [ 1129.534040][T23548] ? rcu_is_watching+0x11/0xa0 [ 1129.538956][T23548] ? memset+0x1e/0x40 [ 1129.543052][T23548] ? hrtimer_init+0x10c/0x220 [ 1129.547876][T23548] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1129.553660][T23548] hwsim_new_radio_nl+0xa6f/0xc40 [ 1129.558757][T23548] genl_rcv_msg+0xcea/0xf90 [ 1129.563408][T23548] ? genl_bind+0x380/0x380 [ 1129.568055][T23548] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1129.573444][T23548] ? verify_lock_unused+0x140/0x140 [ 1129.578757][T23548] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1129.584629][T23548] ? perf_trace_lock+0x301/0x390 [ 1129.589586][T23548] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1129.596324][T23548] netlink_rcv_skb+0x1f5/0x440 [ 1129.601104][T23548] ? genl_bind+0x380/0x380 [ 1129.605734][T23548] ? netlink_ack+0xb50/0xb50 [ 1129.610391][T23548] ? __lock_acquire+0x7d10/0x7d10 [ 1129.615436][T23548] ? down_read+0x1aa/0x2e0 [ 1129.619956][T23548] genl_rcv+0x24/0x40 [ 1129.624032][T23548] netlink_unicast+0x774/0x920 [ 1129.629002][T23548] netlink_sendmsg+0x8ba/0xbe0 [ 1129.633884][T23548] ? netlink_getsockopt+0x570/0x570 [ 1129.639207][T23548] ? aa_sock_msg_perm+0x94/0x150 [ 1129.644511][T23548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1129.649810][T23548] ? security_socket_sendmsg+0x7c/0xa0 [ 1129.655395][T23548] ? netlink_getsockopt+0x570/0x570 [ 1129.660711][T23548] ____sys_sendmsg+0x5b7/0x8f0 [ 1129.665530][T23548] ? __sys_sendmsg_sock+0x30/0x30 [ 1129.670767][T23548] ? import_iovec+0x6f/0xa0 [ 1129.675391][T23548] ___sys_sendmsg+0x236/0x2e0 [ 1129.680359][T23548] ? __sys_sendmsg+0x2a0/0x2a0 [ 1129.685649][T23548] __se_sys_sendmsg+0x1af/0x290 [ 1129.690932][T23548] ? __x64_sys_sendmsg+0x80/0x80 [ 1129.696265][T23548] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1129.702396][T23548] ? lockdep_hardirqs_on+0x94/0x140 [ 1129.707913][T23548] do_syscall_64+0x4c/0xa0 [ 1129.712543][T23548] ? clear_bhb_loop+0x30/0x80 [ 1129.717345][T23548] ? clear_bhb_loop+0x30/0x80 [ 1129.722194][T23548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.728302][T23548] RIP: 0033:0x7f6cb5cb0799 [ 1129.732748][T23548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.752798][T23548] RSP: 002b:00007f6cb3ec8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1129.761425][T23548] RAX: ffffffffffffffda RBX: 00007f6cb5f2a180 RCX: 00007f6cb5cb0799 [ 1129.769597][T23548] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1129.777601][T23548] RBP: 00007f6cb5d46c99 R08: 0000000000000000 R09: 0000000000000000 [ 1129.785842][T23548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.793942][T23548] R13: 00007f6cb5f2a218 R14: 00007f6cb5f2a180 R15: 00007fff7bdf01f8 [ 1129.802228][T23548] [ 1130.262284][T23568] FAULT_INJECTION: forcing a failure. [ 1130.262284][T23568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1130.285883][T23565] netlink: 'syz.0.6916': attribute type 4 has an invalid length. [ 1130.293787][T23565] __nla_validate_parse: 5 callbacks suppressed [ 1130.293806][T23565] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1130.311257][T23568] CPU: 1 PID: 23568 Comm: syz.4.6918 Not tainted syzkaller #0 [ 1130.319152][T23568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1130.329231][T23568] Call Trace: [ 1130.332657][T23568] [ 1130.335595][T23568] dump_stack_lvl+0x188/0x250 [ 1130.340454][T23568] ? show_regs_print_info+0x20/0x20 [ 1130.345739][T23568] ? load_image+0x400/0x400 [ 1130.350266][T23568] ? __lock_acquire+0x7d10/0x7d10 [ 1130.355314][T23568] ? lockdep_hardirqs_on+0x94/0x140 [ 1130.360728][T23568] should_fail+0x38c/0x4c0 [ 1130.365174][T23568] _copy_from_user+0x2e/0x170 [ 1130.369866][T23568] do_vfs_ioctl+0x191a/0x1ef0 [ 1130.374661][T23568] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 1130.380386][T23568] ? rcu_lock_release+0x5/0x20 [ 1130.385167][T23568] ? __lock_acquire+0x7d10/0x7d10 [ 1130.390502][T23568] ? kfree+0xef/0x2a0 [ 1130.394504][T23568] ? tomoyo_path_number_perm+0x5b4/0x660 [ 1130.400395][T23568] ? verify_lock_unused+0x140/0x140 [ 1130.405692][T23568] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1130.411398][T23568] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1130.416652][T23568] ? security_file_ioctl+0x7c/0xa0 [ 1130.422011][T23568] __se_sys_ioctl+0x83/0x170 [ 1130.426620][T23568] do_syscall_64+0x4c/0xa0 [ 1130.431120][T23568] ? clear_bhb_loop+0x30/0x80 [ 1130.435979][T23568] ? clear_bhb_loop+0x30/0x80 [ 1130.440753][T23568] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.446871][T23568] RIP: 0033:0x7f3642af0799 [ 1130.451393][T23568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.471403][T23568] RSP: 002b:00007f3640d4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.479929][T23568] RAX: ffffffffffffffda RBX: 00007f3642d69fa0 RCX: 00007f3642af0799 [ 1130.488091][T23568] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000008 [ 1130.496094][T23568] RBP: 00007f3640d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.504332][T23568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.512499][T23568] R13: 00007f3642d6a038 R14: 00007f3642d69fa0 R15: 00007ffd5e6957c8 [ 1130.520591][T23568] [ 1130.546696][T23568] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6918'. [ 1130.569830][T23569] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.6917'. [ 1130.715402][T23568] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1130.933520][T23579] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1131.066686][T23585] validate_nla: 4 callbacks suppressed [ 1131.066707][T23585] netlink: 'syz.4.6923': attribute type 19 has an invalid length. [ 1131.234976][T23595] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6927'. [ 1131.298198][T23594] FAULT_INJECTION: forcing a failure. [ 1131.298198][T23594] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.317109][T23595] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1131.361964][T23594] CPU: 0 PID: 23594 Comm: syz.3.6928 Not tainted syzkaller #0 [ 1131.369568][T23594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1131.380115][T23594] Call Trace: [ 1131.383498][T23594] [ 1131.386478][T23594] dump_stack_lvl+0x188/0x250 [ 1131.391178][T23594] ? show_regs_print_info+0x20/0x20 [ 1131.396387][T23594] ? load_image+0x400/0x400 [ 1131.400905][T23594] ? __might_sleep+0xf0/0xf0 [ 1131.405510][T23594] ? __lock_acquire+0x7d10/0x7d10 [ 1131.410735][T23594] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1131.417081][T23594] should_fail+0x38c/0x4c0 [ 1131.421698][T23594] should_failslab+0x5/0x20 [ 1131.426208][T23594] slab_pre_alloc_hook+0x51/0xc0 [ 1131.431137][T23594] kmem_cache_alloc_node+0x47/0x2d0 [ 1131.436329][T23594] ? __alloc_skb+0xf4/0x750 [ 1131.440830][T23594] __alloc_skb+0xf4/0x750 [ 1131.445572][T23594] netlink_sendmsg+0x654/0xbe0 [ 1131.450549][T23594] ? netlink_getsockopt+0x570/0x570 [ 1131.455744][T23594] ? aa_sock_msg_perm+0x94/0x150 [ 1131.461019][T23594] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1131.466294][T23594] ? security_socket_sendmsg+0x7c/0xa0 [ 1131.472005][T23594] ? netlink_getsockopt+0x570/0x570 [ 1131.477283][T23594] ____sys_sendmsg+0x5b7/0x8f0 [ 1131.482318][T23594] ? __sys_sendmsg_sock+0x30/0x30 [ 1131.487990][T23594] ? import_iovec+0x6f/0xa0 [ 1131.492566][T23594] ___sys_sendmsg+0x236/0x2e0 [ 1131.497250][T23594] ? __sys_sendmsg+0x2a0/0x2a0 [ 1131.502244][T23594] __se_sys_sendmsg+0x1af/0x290 [ 1131.507195][T23594] ? __x64_sys_sendmsg+0x80/0x80 [ 1131.512843][T23594] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1131.519569][T23594] ? lockdep_hardirqs_on+0x94/0x140 [ 1131.524879][T23594] do_syscall_64+0x4c/0xa0 [ 1131.529412][T23594] ? clear_bhb_loop+0x30/0x80 [ 1131.534115][T23594] ? clear_bhb_loop+0x30/0x80 [ 1131.538980][T23594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1131.544984][T23594] RIP: 0033:0x7f6cb5cb0799 [ 1131.549759][T23594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.570188][T23594] RSP: 002b:00007f6cb3f0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.579051][T23594] RAX: ffffffffffffffda RBX: 00007f6cb5f29fa0 RCX: 00007f6cb5cb0799 [ 1131.587231][T23594] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1131.595477][T23594] RBP: 00007f6cb3f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.603648][T23594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.611934][T23594] R13: 00007f6cb5f2a038 R14: 00007f6cb5f29fa0 R15: 00007fff7bdf01f8 [ 1131.620422][T23594] [ 1131.633302][T23595] CPU: 0 PID: 23595 Comm: syz.0.6927 Not tainted syzkaller #0 [ 1131.640903][T23595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1131.651157][T23595] Call Trace: [ 1131.654447][T23595] [ 1131.657465][T23595] dump_stack_lvl+0x188/0x250 [ 1131.662422][T23595] ? show_regs_print_info+0x20/0x20 [ 1131.667721][T23595] ? load_image+0x400/0x400 [ 1131.672243][T23595] sysfs_warn_dup+0x8a/0xa0 [ 1131.676748][T23595] sysfs_do_create_link_sd+0xc0/0x110 [ 1131.682304][T23595] device_add+0x7ed/0xfb0 [ 1131.686667][T23595] wiphy_register+0x1e81/0x2c30 [ 1131.691849][T23595] ? cfg80211_event_work+0x40/0x40 [ 1131.697283][T23595] ? minstrel_ht_alloc+0x808/0x980 [ 1131.702615][T23595] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1131.708821][T23595] ieee80211_register_hw+0x2aa1/0x3af0 [ 1131.714777][T23595] ? ieee80211_tasklet_handler+0x20/0x20 [ 1131.720697][T23595] ? rcu_is_watching+0x11/0xa0 [ 1131.725732][T23595] ? memset+0x1e/0x40 [ 1131.729805][T23595] ? hrtimer_init+0x10c/0x220 [ 1131.734658][T23595] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1131.740731][T23595] hwsim_new_radio_nl+0xa6f/0xc40 [ 1131.745908][T23595] genl_rcv_msg+0xcea/0xf90 [ 1131.750661][T23595] ? genl_bind+0x380/0x380 [ 1131.755268][T23595] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1131.760578][T23595] ? verify_lock_unused+0x140/0x140 [ 1131.766485][T23595] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1131.772335][T23595] ? perf_trace_lock+0x301/0x390 [ 1131.777570][T23595] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1131.784216][T23595] netlink_rcv_skb+0x1f5/0x440 [ 1131.789084][T23595] ? genl_bind+0x380/0x380 [ 1131.794017][T23595] ? netlink_ack+0xb50/0xb50 [ 1131.799092][T23595] ? __lock_acquire+0x7d10/0x7d10 [ 1131.804590][T23595] ? down_read+0x1aa/0x2e0 [ 1131.809133][T23595] genl_rcv+0x24/0x40 [ 1131.813120][T23595] netlink_unicast+0x774/0x920 [ 1131.817898][T23595] netlink_sendmsg+0x8ba/0xbe0 [ 1131.822677][T23595] ? netlink_getsockopt+0x570/0x570 [ 1131.827881][T23595] ? aa_sock_msg_perm+0x94/0x150 [ 1131.833001][T23595] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1131.838287][T23595] ? security_socket_sendmsg+0x7c/0xa0 [ 1131.844031][T23595] ? netlink_getsockopt+0x570/0x570 [ 1131.849317][T23595] ____sys_sendmsg+0x5b7/0x8f0 [ 1131.854448][T23595] ? __sys_sendmsg_sock+0x30/0x30 [ 1131.859549][T23595] ? import_iovec+0x6f/0xa0 [ 1131.864328][T23595] ___sys_sendmsg+0x236/0x2e0 [ 1131.869110][T23595] ? __sys_sendmsg+0x2a0/0x2a0 [ 1131.873998][T23595] ? trace_event_raw_event_lock+0x270/0x270 [ 1131.879969][T23595] __se_sys_sendmsg+0x1af/0x290 [ 1131.885011][T23595] ? __x64_sys_sendmsg+0x80/0x80 [ 1131.890141][T23595] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1131.896454][T23595] ? lockdep_hardirqs_on+0x94/0x140 [ 1131.901873][T23595] do_syscall_64+0x4c/0xa0 [ 1131.907020][T23595] ? clear_bhb_loop+0x30/0x80 [ 1131.911893][T23595] ? clear_bhb_loop+0x30/0x80 [ 1131.917537][T23595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1131.923559][T23595] RIP: 0033:0x7f54b0f39799 [ 1131.928091][T23595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.948830][T23595] RSP: 002b:00007f54af172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.958407][T23595] RAX: ffffffffffffffda RBX: 00007f54b11b3090 RCX: 00007f54b0f39799 [ 1131.966980][T23595] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1131.975089][T23595] RBP: 00007f54b0fcfc99 R08: 0000000000000000 R09: 0000000000000000 [ 1131.983693][T23595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.992225][T23595] R13: 00007f54b11b3128 R14: 00007f54b11b3090 R15: 00007ffd0e858058 [ 1132.000789][T23595] [ 1132.026760][T23600] FAULT_INJECTION: forcing a failure. [ 1132.026760][T23600] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.123902][T23600] CPU: 0 PID: 23600 Comm: syz.1.6929 Not tainted syzkaller #0 [ 1132.131777][T23600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.142309][T23600] Call Trace: [ 1132.145703][T23600] [ 1132.148649][T23600] dump_stack_lvl+0x188/0x250 [ 1132.153438][T23600] ? show_regs_print_info+0x20/0x20 [ 1132.158935][T23600] ? load_image+0x400/0x400 [ 1132.163465][T23600] ? __might_sleep+0xf0/0xf0 [ 1132.168132][T23600] ? __lock_acquire+0x7d10/0x7d10 [ 1132.173393][T23600] ? netlink_insert+0xe95/0x11f0 [ 1132.178620][T23600] should_fail+0x38c/0x4c0 [ 1132.183063][T23600] should_failslab+0x5/0x20 [ 1132.188186][T23600] slab_pre_alloc_hook+0x51/0xc0 [ 1132.193235][T23600] kmem_cache_alloc_node+0x47/0x2d0 [ 1132.198715][T23600] ? __alloc_skb+0xf4/0x750 [ 1132.203870][T23600] __alloc_skb+0xf4/0x750 [ 1132.208620][T23600] netlink_sendmsg+0x654/0xbe0 [ 1132.213694][T23600] ? netlink_getsockopt+0x570/0x570 [ 1132.219094][T23600] ? aa_sock_msg_perm+0x94/0x150 [ 1132.224159][T23600] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1132.229857][T23600] ? security_socket_sendmsg+0x7c/0xa0 [ 1132.235797][T23600] ? netlink_getsockopt+0x570/0x570 [ 1132.241126][T23600] ____sys_sendmsg+0x5b7/0x8f0 [ 1132.246367][T23600] ? __sys_sendmsg_sock+0x30/0x30 [ 1132.251598][T23600] ? import_iovec+0x6f/0xa0 [ 1132.256354][T23600] ___sys_sendmsg+0x236/0x2e0 [ 1132.261240][T23600] ? __sys_sendmsg+0x2a0/0x2a0 [ 1132.266420][T23600] __se_sys_sendmsg+0x1af/0x290 [ 1132.271531][T23600] ? __x64_sys_sendmsg+0x80/0x80 [ 1132.276845][T23600] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1132.282874][T23600] ? lockdep_hardirqs_on+0x94/0x140 [ 1132.288264][T23600] do_syscall_64+0x4c/0xa0 [ 1132.292777][T23600] ? clear_bhb_loop+0x30/0x80 [ 1132.297654][T23600] ? clear_bhb_loop+0x30/0x80 [ 1132.302487][T23600] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1132.308621][T23600] RIP: 0033:0x7faf3747c799 [ 1132.313270][T23600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.333330][T23600] RSP: 002b:00007faf356d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1132.341947][T23600] RAX: ffffffffffffffda RBX: 00007faf376f5fa0 RCX: 00007faf3747c799 [ 1132.350214][T23600] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 1132.358464][T23600] RBP: 00007faf356d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.366893][T23600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.375163][T23600] R13: 00007faf376f6038 R14: 00007faf376f5fa0 R15: 00007fff7343ce28 [ 1132.383513][T23600] [ 1132.525431][T23608] netlink: 'syz.1.6932': attribute type 4 has an invalid length. [ 1132.547105][T23608] netlink: 'syz.1.6932': attribute type 3 has an invalid length. [ 1132.569411][T23608] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.6932'. [ 1132.672622][T23617] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1132.816533][T23621] netlink: 'syz.1.6937': attribute type 4 has an invalid length. [ 1132.849475][T23621] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6937'. [ 1132.922856][T23621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1133.058289][T23629] netlink: 'syz.0.6941': attribute type 4 has an invalid length. [ 1133.074983][T23629] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6941'. [ 1133.124892][T23638] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6942'. [ 1133.313305][T23629] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1133.337865][T23638] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1133.355229][T23638] CPU: 0 PID: 23638 Comm: syz.2.6942 Not tainted syzkaller #0 [ 1133.362743][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.373127][T23638] Call Trace: [ 1133.376601][T23638] [ 1133.379550][T23638] dump_stack_lvl+0x188/0x250 [ 1133.384397][T23638] ? show_regs_print_info+0x20/0x20 [ 1133.389969][T23638] ? load_image+0x400/0x400 [ 1133.394556][T23638] sysfs_warn_dup+0x8a/0xa0 [ 1133.399286][T23638] sysfs_do_create_link_sd+0xc0/0x110 [ 1133.404863][T23638] device_add+0x7ed/0xfb0 [ 1133.409336][T23638] wiphy_register+0x1e81/0x2c30 [ 1133.414268][T23638] ? cfg80211_event_work+0x40/0x40 [ 1133.419505][T23638] ? minstrel_ht_alloc+0x808/0x980 [ 1133.424754][T23638] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1133.430953][T23638] ieee80211_register_hw+0x2aa1/0x3af0 [ 1133.436661][T23638] ? ieee80211_tasklet_handler+0x20/0x20 [ 1133.442335][T23638] ? rcu_is_watching+0x11/0xa0 [ 1133.447136][T23638] ? memset+0x1e/0x40 [ 1133.451342][T23638] ? hrtimer_init+0x10c/0x220 [ 1133.456242][T23638] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1133.462248][T23638] hwsim_new_radio_nl+0xa6f/0xc40 [ 1133.467380][T23638] genl_rcv_msg+0xcea/0xf90 [ 1133.472043][T23638] ? genl_bind+0x380/0x380 [ 1133.476833][T23638] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1133.482064][T23638] ? verify_lock_unused+0x140/0x140 [ 1133.487420][T23638] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1133.493029][T23638] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1133.499731][T23638] ? perf_trace_lock+0x301/0x390 [ 1133.505047][T23638] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1133.511805][T23638] netlink_rcv_skb+0x1f5/0x440 [ 1133.516782][T23638] ? genl_bind+0x380/0x380 [ 1133.521459][T23638] ? netlink_ack+0xb50/0xb50 [ 1133.526075][T23638] ? __lock_acquire+0x7d10/0x7d10 [ 1133.531228][T23638] ? down_read+0x1aa/0x2e0 [ 1133.535763][T23638] genl_rcv+0x24/0x40 [ 1133.539843][T23638] netlink_unicast+0x774/0x920 [ 1133.544658][T23638] netlink_sendmsg+0x8ba/0xbe0 [ 1133.549478][T23638] ? netlink_getsockopt+0x570/0x570 [ 1133.554719][T23638] ? aa_sock_msg_perm+0x94/0x150 [ 1133.559693][T23638] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1133.565009][T23638] ? security_socket_sendmsg+0x7c/0xa0 [ 1133.570504][T23638] ? netlink_getsockopt+0x570/0x570 [ 1133.575913][T23638] ____sys_sendmsg+0x5b7/0x8f0 [ 1133.580724][T23638] ? __sys_sendmsg_sock+0x30/0x30 [ 1133.585851][T23638] ? import_iovec+0x6f/0xa0 [ 1133.590403][T23638] ___sys_sendmsg+0x236/0x2e0 [ 1133.595123][T23638] ? __sys_sendmsg+0x2a0/0x2a0 [ 1133.599950][T23638] __se_sys_sendmsg+0x1af/0x290 [ 1133.604807][T23638] ? __x64_sys_sendmsg+0x80/0x80 [ 1133.609744][T23638] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1133.615852][T23638] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.621066][T23638] do_syscall_64+0x4c/0xa0 [ 1133.625570][T23638] ? clear_bhb_loop+0x30/0x80 [ 1133.630237][T23638] ? clear_bhb_loop+0x30/0x80 [ 1133.635217][T23638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1133.641219][T23638] RIP: 0033:0x7ff2207fd799 [ 1133.645666][T23638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.665753][T23638] RSP: 002b:00007ff21ea36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.674478][T23638] RAX: ffffffffffffffda RBX: 00007ff220a77090 RCX: 00007ff2207fd799 [ 1133.682582][T23638] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1133.690650][T23638] RBP: 00007ff220893c99 R08: 0000000000000000 R09: 0000000000000000 [ 1133.699146][T23638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.707287][T23638] R13: 00007ff220a77128 R14: 00007ff220a77090 R15: 00007ffd4b86f478 [ 1133.715453][T23638] [ 1133.814494][T23648] FAULT_INJECTION: forcing a failure. [ 1133.814494][T23648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.870062][T23648] CPU: 0 PID: 23648 Comm: syz.1.6947 Not tainted syzkaller #0 [ 1133.877832][T23648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.888144][T23648] Call Trace: [ 1133.891638][T23648] [ 1133.894556][T23648] dump_stack_lvl+0x188/0x250 [ 1133.899235][T23648] ? show_regs_print_info+0x20/0x20 [ 1133.904556][T23648] ? load_image+0x400/0x400 [ 1133.909044][T23648] ? __lock_acquire+0x7d10/0x7d10 [ 1133.914063][T23648] should_fail+0x38c/0x4c0 [ 1133.918659][T23648] _copy_from_user+0x2e/0x170 [ 1133.923347][T23648] iovec_from_user+0x142/0x370 [ 1133.928105][T23648] __import_iovec+0x70/0x490 [ 1133.932864][T23648] import_iovec+0x6f/0xa0 [ 1133.937187][T23648] ___sys_sendmsg+0x1fd/0x2e0 [ 1133.941942][T23648] ? __sys_sendmsg+0x2a0/0x2a0 [ 1133.946697][T23648] ? trace_event_raw_event_lock+0x270/0x270 [ 1133.952576][T23648] ? vfs_write+0x8b2/0xd60 [ 1133.957090][T23648] __se_sys_sendmsg+0x1af/0x290 [ 1133.962031][T23648] ? __x64_sys_sendmsg+0x80/0x80 [ 1133.967352][T23648] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1133.973377][T23648] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.978847][T23648] do_syscall_64+0x4c/0xa0 [ 1133.983395][T23648] ? clear_bhb_loop+0x30/0x80 [ 1133.988236][T23648] ? clear_bhb_loop+0x30/0x80 [ 1133.992901][T23648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1133.999078][T23648] RIP: 0033:0x7faf3747c799 [ 1134.003548][T23648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.023325][T23648] RSP: 002b:00007faf356d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.032039][T23648] RAX: ffffffffffffffda RBX: 00007faf376f5fa0 RCX: 00007faf3747c799 [ 1134.040020][T23648] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1134.048522][T23648] RBP: 00007faf356d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.056585][T23648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.064718][T23648] R13: 00007faf376f6038 R14: 00007faf376f5fa0 R15: 00007fff7343ce28 [ 1134.072776][T23648] [ 1134.146818][T23653] netlink: 'syz.0.6948': attribute type 4 has an invalid length. [ 1134.154694][T23653] netlink: 'syz.0.6948': attribute type 3 has an invalid length. [ 1134.423464][T23667] netlink: 'syz.4.6957': attribute type 10 has an invalid length. [ 1134.458888][T23667] device ipvlan1 entered promiscuous mode [ 1134.525089][T23667] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1134.849013][T23679] netlink: 'syz.3.6958': attribute type 10 has an invalid length. [ 1136.386364][ C0] Illegal XDP return value 16128, expect packet loss! [ 1136.484727][T23693] netlink: 'syz.3.6964': attribute type 4 has an invalid length. [ 1136.494551][T23693] netlink: 'syz.3.6964': attribute type 3 has an invalid length. [ 1136.521725][T23693] __nla_validate_parse: 3 callbacks suppressed [ 1136.521743][T23693] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.6964'. [ 1136.688689][T23702] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1136.732990][T23702] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1136.742213][T23702] CPU: 1 PID: 23702 Comm: syz.0.6965 Not tainted syzkaller #0 [ 1136.749713][T23702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.760066][T23702] Call Trace: [ 1136.763529][T23702] [ 1136.766545][T23702] dump_stack_lvl+0x188/0x250 [ 1136.771322][T23702] ? show_regs_print_info+0x20/0x20 [ 1136.776520][T23702] ? load_image+0x400/0x400 [ 1136.781050][T23702] sysfs_warn_dup+0x8a/0xa0 [ 1136.785554][T23702] sysfs_do_create_link_sd+0xc0/0x110 [ 1136.791129][T23702] device_add+0x7ed/0xfb0 [ 1136.795486][T23702] wiphy_register+0x1e81/0x2c30 [ 1136.800364][T23702] ? cfg80211_event_work+0x40/0x40 [ 1136.805478][T23702] ? minstrel_ht_alloc+0x808/0x980 [ 1136.810603][T23702] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1136.816859][T23702] ieee80211_register_hw+0x2aa1/0x3af0 [ 1136.822345][T23702] ? ieee80211_tasklet_handler+0x20/0x20 [ 1136.828008][T23702] ? rcu_is_watching+0x11/0xa0 [ 1136.832805][T23702] ? memset+0x1e/0x40 [ 1136.836820][T23702] ? hrtimer_init+0x10c/0x220 [ 1136.841696][T23702] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1136.847446][T23702] hwsim_new_radio_nl+0xa6f/0xc40 [ 1136.852697][T23702] genl_rcv_msg+0xcea/0xf90 [ 1136.857311][T23702] ? genl_bind+0x380/0x380 [ 1136.861823][T23702] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1136.867017][T23702] ? verify_lock_unused+0x140/0x140 [ 1136.872503][T23702] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1136.878240][T23702] ? perf_trace_lock+0x301/0x390 [ 1136.883269][T23702] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1136.889916][T23702] netlink_rcv_skb+0x1f5/0x440 [ 1136.894768][T23702] ? genl_bind+0x380/0x380 [ 1136.899279][T23702] ? netlink_ack+0xb50/0xb50 [ 1136.904141][T23702] ? __lock_acquire+0x7d10/0x7d10 [ 1136.909385][T23702] ? down_read+0x1aa/0x2e0 [ 1136.913804][T23702] genl_rcv+0x24/0x40 [ 1136.917782][T23702] netlink_unicast+0x774/0x920 [ 1136.922564][T23702] netlink_sendmsg+0x8ba/0xbe0 [ 1136.927426][T23702] ? netlink_getsockopt+0x570/0x570 [ 1136.932808][T23702] ? aa_sock_msg_perm+0x94/0x150 [ 1136.937841][T23702] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1136.943125][T23702] ? security_socket_sendmsg+0x7c/0xa0 [ 1136.948581][T23702] ? netlink_getsockopt+0x570/0x570 [ 1136.953773][T23702] ____sys_sendmsg+0x5b7/0x8f0 [ 1136.958662][T23702] ? __sys_sendmsg_sock+0x30/0x30 [ 1136.963855][T23702] ? import_iovec+0x6f/0xa0 [ 1136.968483][T23702] ___sys_sendmsg+0x236/0x2e0 [ 1136.973193][T23702] ? __sys_sendmsg+0x2a0/0x2a0 [ 1136.978012][T23702] ? trace_event_raw_event_lock+0x270/0x270 [ 1136.983966][T23702] __se_sys_sendmsg+0x1af/0x290 [ 1136.988849][T23702] ? __x64_sys_sendmsg+0x80/0x80 [ 1136.993890][T23702] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1137.000210][T23702] ? lockdep_hardirqs_on+0x94/0x140 [ 1137.005506][T23702] do_syscall_64+0x4c/0xa0 [ 1137.009948][T23702] ? clear_bhb_loop+0x30/0x80 [ 1137.014644][T23702] ? clear_bhb_loop+0x30/0x80 [ 1137.019331][T23702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1137.025531][T23702] RIP: 0033:0x7f54b0f39799 [ 1137.029960][T23702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.050330][T23702] RSP: 002b:00007f54af172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.058856][T23702] RAX: ffffffffffffffda RBX: 00007f54b11b3090 RCX: 00007f54b0f39799 [ 1137.066830][T23702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1137.074983][T23702] RBP: 00007f54b0fcfc99 R08: 0000000000000000 R09: 0000000000000000 [ 1137.083298][T23702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.091456][T23702] R13: 00007f54b11b3128 R14: 00007f54b11b3090 R15: 00007ffd0e858058 [ 1137.099449][T23702] [ 1137.127020][T23705] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6967'. [ 1139.325254][T23734] FAULT_INJECTION: forcing a failure. [ 1139.325254][T23734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.356474][T23735] netlink: 'syz.1.6978': attribute type 4 has an invalid length. [ 1139.361939][T23734] CPU: 0 PID: 23734 Comm: syz.3.6977 Not tainted syzkaller #0 [ 1139.371991][T23734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.375815][T23735] netlink: 'syz.1.6978': attribute type 3 has an invalid length. [ 1139.382058][T23734] Call Trace: [ 1139.382074][T23734] [ 1139.382083][T23734] dump_stack_lvl+0x188/0x250 [ 1139.382107][T23734] ? show_regs_print_info+0x20/0x20 [ 1139.382128][T23734] ? load_image+0x400/0x400 [ 1139.382147][T23734] ? __lock_acquire+0x7d10/0x7d10 [ 1139.382166][T23734] ? __local_bh_enable_ip+0x136/0x1c0 [ 1139.382183][T23734] ? _local_bh_enable+0xa0/0xa0 [ 1139.382200][T23734] should_fail+0x38c/0x4c0 [ 1139.382225][T23734] copy_fpstate_to_sigframe+0x8af/0xbf0 [ 1139.382255][T23734] ? fpregs_set+0x5b0/0x5b0 [ 1139.382271][T23734] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1139.382289][T23734] ? get_signal+0x1200/0x12c0 [ 1139.382320][T23734] ? fpu__alloc_mathframe+0x77/0x140 [ 1139.382340][T23734] arch_do_signal_or_restart+0x679/0x12c0 [ 1139.382377][T23734] ? get_sigframe_size+0x10/0x10 [ 1139.382402][T23734] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1139.382433][T23734] ? exit_to_user_mode_loop+0x3b/0x130 [ 1139.382454][T23734] exit_to_user_mode_loop+0x9e/0x130 [ 1139.382472][T23734] exit_to_user_mode_prepare+0xee/0x180 [ 1139.382491][T23734] irqentry_exit_to_user_mode+0x5/0x30 [ 1139.382511][T23734] exc_general_protection+0x1e4/0x270 [ 1139.382529][T23734] ? __context_tracking_enter+0x60/0x90 [ 1139.382555][T23734] ? do_syscall_64+0x58/0xa0 [ 1139.382576][T23734] asm_exc_general_protection+0x22/0x30 [ 1139.382593][T23734] RIP: 0033:0x7f6cb5c8f539 [ 1139.382612][T23734] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 1139.382628][T23734] RSP: 002b:00007f6cb3f098a8 EFLAGS: 00010283 [ 1139.382646][T23734] RAX: 0000000000000999 RBX: 00007f6cb3f09de0 RCX: 2f666c65732f636f [ 1139.382660][T23734] RDX: 9999999999999999 RSI: 00007f6cb5d70de0 RDI: 9999999999999999 [ 1139.382672][T23734] RBP: 9999999999999999 R08: 00007f6cb3f0a010 R09: 00000000ffffffff [ 1139.382683][T23734] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1139.382692][T23734] R13: 0000000000000073 R14: 00007f6cb5d45f63 R15: 00007f6cb3f09ea0 [ 1139.382714][T23734] [ 1139.613995][T23735] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.6978'. [ 1139.688707][T23740] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6981'. [ 1139.948720][T23754] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1140.019818][T23754] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1140.034911][T23754] CPU: 0 PID: 23754 Comm: syz.4.6984 Not tainted syzkaller #0 [ 1140.042441][T23754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.052666][T23754] Call Trace: [ 1140.055978][T23754] [ 1140.059038][T23754] dump_stack_lvl+0x188/0x250 [ 1140.063943][T23754] ? show_regs_print_info+0x20/0x20 [ 1140.069185][T23754] ? load_image+0x400/0x400 [ 1140.073938][T23754] sysfs_warn_dup+0x8a/0xa0 [ 1140.078564][T23754] sysfs_do_create_link_sd+0xc0/0x110 [ 1140.083980][T23754] device_add+0x7ed/0xfb0 [ 1140.088585][T23754] wiphy_register+0x1e81/0x2c30 [ 1140.093689][T23754] ? cfg80211_event_work+0x40/0x40 [ 1140.099135][T23754] ? minstrel_ht_alloc+0x808/0x980 [ 1140.104567][T23754] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1140.110774][T23754] ieee80211_register_hw+0x2aa1/0x3af0 [ 1140.116410][T23754] ? ieee80211_tasklet_handler+0x20/0x20 [ 1140.122091][T23754] ? rcu_is_watching+0x11/0xa0 [ 1140.127155][T23754] ? memset+0x1e/0x40 [ 1140.131379][T23754] ? hrtimer_init+0x10c/0x220 [ 1140.136301][T23754] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1140.142114][T23754] hwsim_new_radio_nl+0xa6f/0xc40 [ 1140.147394][T23754] genl_rcv_msg+0xcea/0xf90 [ 1140.151950][T23754] ? genl_bind+0x380/0x380 [ 1140.156569][T23754] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1140.161899][T23754] ? verify_lock_unused+0x140/0x140 [ 1140.167636][T23754] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1140.173830][T23754] ? perf_trace_lock+0x301/0x390 [ 1140.178915][T23754] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1140.185585][T23754] netlink_rcv_skb+0x1f5/0x440 [ 1140.190410][T23754] ? genl_bind+0x380/0x380 [ 1140.194876][T23754] ? netlink_ack+0xb50/0xb50 [ 1140.199682][T23754] ? __lock_acquire+0x7d10/0x7d10 [ 1140.204958][T23754] ? down_read+0x1aa/0x2e0 [ 1140.210071][T23754] genl_rcv+0x24/0x40 [ 1140.214539][T23754] netlink_unicast+0x774/0x920 [ 1140.219627][T23754] netlink_sendmsg+0x8ba/0xbe0 [ 1140.224627][T23754] ? netlink_getsockopt+0x570/0x570 [ 1140.230775][T23754] ? aa_sock_msg_perm+0x94/0x150 [ 1140.236008][T23754] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1140.241691][T23754] ? security_socket_sendmsg+0x7c/0xa0 [ 1140.247280][T23754] ? netlink_getsockopt+0x570/0x570 [ 1140.252867][T23754] ____sys_sendmsg+0x5b7/0x8f0 [ 1140.257897][T23754] ? __sys_sendmsg_sock+0x30/0x30 [ 1140.263273][T23754] ? import_iovec+0x6f/0xa0 [ 1140.268005][T23754] ___sys_sendmsg+0x236/0x2e0 [ 1140.272875][T23754] ? __sys_sendmsg+0x2a0/0x2a0 [ 1140.278158][T23754] ? trace_event_raw_event_lock+0x270/0x270 [ 1140.285084][T23754] __se_sys_sendmsg+0x1af/0x290 [ 1140.291021][T23754] ? __x64_sys_sendmsg+0x80/0x80 [ 1140.296005][T23754] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1140.302762][T23754] ? lockdep_hardirqs_on+0x94/0x140 [ 1140.308461][T23754] do_syscall_64+0x4c/0xa0 [ 1140.313753][T23754] ? clear_bhb_loop+0x30/0x80 [ 1140.319006][T23754] ? clear_bhb_loop+0x30/0x80 [ 1140.324708][T23754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1140.331083][T23754] RIP: 0033:0x7f3642af0799 [ 1140.335743][T23754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.356267][T23754] RSP: 002b:00007f3640d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1140.365252][T23754] RAX: ffffffffffffffda RBX: 00007f3642d6a090 RCX: 00007f3642af0799 [ 1140.373470][T23754] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1140.381687][T23754] RBP: 00007f3642b86c99 R08: 0000000000000000 R09: 0000000000000000 [ 1140.390125][T23754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.398876][T23754] R13: 00007f3642d6a128 R14: 00007f3642d6a090 R15: 00007ffd5e6957c8 [ 1140.407179][T23754] [ 1142.616332][T23772] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6994'. [ 1142.698938][T23777] netlink: 'syz.3.6995': attribute type 4 has an invalid length. [ 1142.742584][T23777] netlink: 'syz.3.6995': attribute type 3 has an invalid length. [ 1142.759604][T23777] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.6995'. [ 1142.889161][T23789] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1145.483555][T23789] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1145.553534][T23789] CPU: 1 PID: 23789 Comm: syz.2.6997 Not tainted syzkaller #0 [ 1145.561402][T23789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.571676][T23789] Call Trace: [ 1145.574976][T23789] [ 1145.577915][T23789] dump_stack_lvl+0x188/0x250 [ 1145.582698][T23789] ? show_regs_print_info+0x20/0x20 [ 1145.588116][T23789] ? load_image+0x400/0x400 [ 1145.592785][T23789] sysfs_warn_dup+0x8a/0xa0 [ 1145.597311][T23789] sysfs_do_create_link_sd+0xc0/0x110 [ 1145.602711][T23789] device_add+0x7ed/0xfb0 [ 1145.607173][T23789] wiphy_register+0x1e81/0x2c30 [ 1145.612073][T23789] ? cfg80211_event_work+0x40/0x40 [ 1145.617203][T23789] ? minstrel_ht_alloc+0x808/0x980 [ 1145.622608][T23789] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1145.629110][T23789] ieee80211_register_hw+0x2aa1/0x3af0 [ 1145.634613][T23789] ? ieee80211_tasklet_handler+0x20/0x20 [ 1145.640355][T23789] ? rcu_is_watching+0x11/0xa0 [ 1145.645219][T23789] ? memset+0x1e/0x40 [ 1145.649304][T23789] ? hrtimer_init+0x10c/0x220 [ 1145.654007][T23789] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1145.660299][T23789] hwsim_new_radio_nl+0xa6f/0xc40 [ 1145.665542][T23789] genl_rcv_msg+0xcea/0xf90 [ 1145.670236][T23789] ? genl_bind+0x380/0x380 [ 1145.674920][T23789] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1145.680116][T23789] ? verify_lock_unused+0x140/0x140 [ 1145.685597][T23789] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1145.691619][T23789] ? perf_trace_lock+0x301/0x390 [ 1145.696665][T23789] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1145.703461][T23789] netlink_rcv_skb+0x1f5/0x440 [ 1145.708578][T23789] ? genl_bind+0x380/0x380 [ 1145.713106][T23789] ? netlink_ack+0xb50/0xb50 [ 1145.717837][T23789] ? __lock_acquire+0x7d10/0x7d10 [ 1145.722876][T23789] ? down_read+0x1aa/0x2e0 [ 1145.727301][T23789] genl_rcv+0x24/0x40 [ 1145.731288][T23789] netlink_unicast+0x774/0x920 [ 1145.736197][T23789] netlink_sendmsg+0x8ba/0xbe0 [ 1145.741013][T23789] ? netlink_getsockopt+0x570/0x570 [ 1145.746334][T23789] ? aa_sock_msg_perm+0x94/0x150 [ 1145.751457][T23789] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1145.756832][T23789] ? security_socket_sendmsg+0x7c/0xa0 [ 1145.762564][T23789] ? netlink_getsockopt+0x570/0x570 [ 1145.768443][T23789] ____sys_sendmsg+0x5b7/0x8f0 [ 1145.773416][T23789] ? __sys_sendmsg_sock+0x30/0x30 [ 1145.778498][T23789] ? import_iovec+0x6f/0xa0 [ 1145.783168][T23789] ___sys_sendmsg+0x236/0x2e0 [ 1145.787973][T23789] ? __sys_sendmsg+0x2a0/0x2a0 [ 1145.792859][T23789] ? trace_event_raw_event_lock+0x270/0x270 [ 1145.798994][T23789] __se_sys_sendmsg+0x1af/0x290 [ 1145.803866][T23789] ? __x64_sys_sendmsg+0x80/0x80 [ 1145.808831][T23789] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1145.814858][T23789] ? lockdep_hardirqs_on+0x94/0x140 [ 1145.820684][T23789] do_syscall_64+0x4c/0xa0 [ 1145.825108][T23789] ? clear_bhb_loop+0x30/0x80 [ 1145.829872][T23789] ? clear_bhb_loop+0x30/0x80 [ 1145.834800][T23789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1145.840821][T23789] RIP: 0033:0x7ff2207fd799 [ 1145.845255][T23789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.866141][T23789] RSP: 002b:00007ff21ea36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.874747][T23789] RAX: ffffffffffffffda RBX: 00007ff220a77090 RCX: 00007ff2207fd799 [ 1145.882980][T23789] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1145.890954][T23789] RBP: 00007ff220893c99 R08: 0000000000000000 R09: 0000000000000000 [ 1145.898934][T23789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.907004][T23789] R13: 00007ff220a77128 R14: 00007ff220a77090 R15: 00007ffd4b86f478 [ 1145.915700][T23789] [ 1146.008818][T23805] netlink: 'syz.1.7007': attribute type 12 has an invalid length. [ 1146.030588][T23805] netlink: 'syz.1.7007': attribute type 11 has an invalid length. [ 1146.059097][T23805] netlink: 178840 bytes leftover after parsing attributes in process `syz.1.7007'. [ 1146.074680][T23806] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7008'. [ 1146.177379][T23815] netlink: 'syz.1.7012': attribute type 4 has an invalid length. [ 1146.187034][T23815] netlink: 'syz.1.7012': attribute type 3 has an invalid length. [ 1146.195417][T23815] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.7012'. [ 1146.694985][T23837] device syzkaller0 entered promiscuous mode [ 1146.761810][T23839] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7021'. [ 1146.820413][T23839] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1146.853812][T23839] CPU: 1 PID: 23839 Comm: syz.3.7021 Not tainted syzkaller #0 [ 1146.861495][T23839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1146.871928][T23839] Call Trace: [ 1146.875316][T23839] [ 1146.878361][T23839] dump_stack_lvl+0x188/0x250 [ 1146.883304][T23839] ? show_regs_print_info+0x20/0x20 [ 1146.888830][T23839] ? load_image+0x400/0x400 [ 1146.893546][T23839] sysfs_warn_dup+0x8a/0xa0 [ 1146.898074][T23839] sysfs_do_create_link_sd+0xc0/0x110 [ 1146.904074][T23839] device_add+0x7ed/0xfb0 [ 1146.908439][T23839] wiphy_register+0x1e81/0x2c30 [ 1146.913362][T23839] ? cfg80211_event_work+0x40/0x40 [ 1146.918601][T23839] ? minstrel_ht_alloc+0x808/0x980 [ 1146.923907][T23839] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1146.929999][T23839] ieee80211_register_hw+0x2aa1/0x3af0 [ 1146.935600][T23839] ? ieee80211_tasklet_handler+0x20/0x20 [ 1146.941454][T23839] ? rcu_is_watching+0x11/0xa0 [ 1146.946235][T23839] ? memset+0x1e/0x40 [ 1146.950231][T23839] ? hrtimer_init+0x10c/0x220 [ 1146.954935][T23839] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1146.960871][T23839] hwsim_new_radio_nl+0xa6f/0xc40 [ 1146.966221][T23839] genl_rcv_msg+0xcea/0xf90 [ 1146.970757][T23839] ? genl_bind+0x380/0x380 [ 1146.975200][T23839] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1146.980412][T23839] ? verify_lock_unused+0x140/0x140 [ 1146.985644][T23839] ? kmalloc_large_node+0xf2/0x190 [ 1146.990898][T23839] ? dev_queue_xmit+0x20/0x20 [ 1146.995607][T23839] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1147.003301][T23839] netlink_rcv_skb+0x1f5/0x440 [ 1147.008530][T23839] ? genl_bind+0x380/0x380 [ 1147.013258][T23839] ? netlink_ack+0xb50/0xb50 [ 1147.018350][T23839] ? __lock_acquire+0x7d10/0x7d10 [ 1147.023562][T23839] ? down_read+0x1aa/0x2e0 [ 1147.028189][T23839] genl_rcv+0x24/0x40 [ 1147.032285][T23839] netlink_unicast+0x774/0x920 [ 1147.037523][T23839] netlink_sendmsg+0x8ba/0xbe0 [ 1147.043009][T23839] ? netlink_getsockopt+0x570/0x570 [ 1147.048461][T23839] ? aa_sock_msg_perm+0x94/0x150 [ 1147.053692][T23839] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1147.059179][T23839] ? security_socket_sendmsg+0x7c/0xa0 [ 1147.064765][T23839] ? netlink_getsockopt+0x570/0x570 [ 1147.070773][T23839] ____sys_sendmsg+0x5b7/0x8f0 [ 1147.075580][T23839] ? __sys_sendmsg_sock+0x30/0x30 [ 1147.080987][T23839] ? import_iovec+0x6f/0xa0 [ 1147.085716][T23839] ___sys_sendmsg+0x236/0x2e0 [ 1147.090902][T23839] ? __sys_sendmsg+0x2a0/0x2a0 [ 1147.095882][T23839] ? percpu_counter_add_batch+0x13b/0x160 [ 1147.102363][T23839] __se_sys_sendmsg+0x1af/0x290 [ 1147.107515][T23839] ? __x64_sys_sendmsg+0x80/0x80 [ 1147.112661][T23839] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1147.118800][T23839] ? lockdep_hardirqs_on+0x94/0x140 [ 1147.124121][T23839] do_syscall_64+0x4c/0xa0 [ 1147.128903][T23839] ? clear_bhb_loop+0x30/0x80 [ 1147.133680][T23839] ? clear_bhb_loop+0x30/0x80 [ 1147.138370][T23839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1147.144474][T23839] RIP: 0033:0x7f6cb5cb0799 [ 1147.149078][T23839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.168700][T23839] RSP: 002b:00007f6cb3ec8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.177482][T23839] RAX: ffffffffffffffda RBX: 00007f6cb5f2a180 RCX: 00007f6cb5cb0799 [ 1147.185565][T23839] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1147.193759][T23839] RBP: 00007f6cb5d46c99 R08: 0000000000000000 R09: 0000000000000000 [ 1147.201866][T23839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.210208][T23839] R13: 00007f6cb5f2a218 R14: 00007f6cb5f2a180 R15: 00007fff7bdf01f8 [ 1147.218487][T23839] [ 1148.398333][T23846] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1148.595577][T23857] netlink: 'syz.1.7026': attribute type 3 has an invalid length. [ 1148.635993][T23857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1148.717573][T23864] FAULT_INJECTION: forcing a failure. [ 1148.717573][T23864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.734991][T23864] CPU: 0 PID: 23864 Comm: syz.4.7030 Not tainted syzkaller #0 [ 1148.742623][T23864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1148.753139][T23864] Call Trace: [ 1148.756434][T23864] [ 1148.759468][T23864] dump_stack_lvl+0x188/0x250 [ 1148.764361][T23864] ? show_regs_print_info+0x20/0x20 [ 1148.769698][T23864] ? load_image+0x400/0x400 [ 1148.774393][T23864] ? __lock_acquire+0x7d10/0x7d10 [ 1148.779520][T23864] ? __lock_acquire+0x7d10/0x7d10 [ 1148.784760][T23864] should_fail+0x38c/0x4c0 [ 1148.789199][T23864] _copy_to_user+0x2e/0x130 [ 1148.793804][T23864] put_user_ifreq+0x74/0xb0 [ 1148.798390][T23864] sock_do_ioctl+0x272/0x320 [ 1148.802979][T23864] ? sock_show_fdinfo+0xb0/0xb0 [ 1148.807930][T23864] sock_ioctl+0x4d2/0x710 [ 1148.812602][T23864] ? sock_poll+0x410/0x410 [ 1148.817110][T23864] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1148.822063][T23864] ? security_file_ioctl+0x7c/0xa0 [ 1148.827511][T23864] ? sock_poll+0x410/0x410 [ 1148.832006][T23864] __se_sys_ioctl+0xfa/0x170 [ 1148.836587][T23864] do_syscall_64+0x4c/0xa0 [ 1148.840994][T23864] ? clear_bhb_loop+0x30/0x80 [ 1148.845679][T23864] ? clear_bhb_loop+0x30/0x80 [ 1148.850350][T23864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1148.856339][T23864] RIP: 0033:0x7f3642af0799 [ 1148.860742][T23864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.880784][T23864] RSP: 002b:00007f3640d4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.889283][T23864] RAX: ffffffffffffffda RBX: 00007f3642d69fa0 RCX: 00007f3642af0799 [ 1148.897504][T23864] RDX: 0000200000000cc0 RSI: 0000000000008970 RDI: 0000000000000004 [ 1148.905657][T23864] RBP: 00007f3640d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.913967][T23864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.921938][T23864] R13: 00007f3642d6a038 R14: 00007f3642d69fa0 R15: 00007ffd5e6957c8 [ 1148.930099][T23864] [ 1148.995211][T23870] netlink: 'syz.2.7032': attribute type 4 has an invalid length. [ 1149.066902][T23870] netlink: 'syz.2.7032': attribute type 3 has an invalid length. [ 1149.102044][T23870] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.7032'. [ 1150.907693][T23879] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1151.047082][T23879] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1151.058088][T23879] CPU: 1 PID: 23879 Comm: syz.4.7035 Not tainted syzkaller #0 [ 1151.065761][T23879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1151.078093][T23879] Call Trace: [ 1151.081989][T23879] [ 1151.085088][T23879] dump_stack_lvl+0x188/0x250 [ 1151.090216][T23879] ? show_regs_print_info+0x20/0x20 [ 1151.095984][T23879] ? load_image+0x400/0x400 [ 1151.100783][T23879] sysfs_warn_dup+0x8a/0xa0 [ 1151.105402][T23879] sysfs_do_create_link_sd+0xc0/0x110 [ 1151.110915][T23879] device_add+0x7ed/0xfb0 [ 1151.115492][T23879] wiphy_register+0x1e81/0x2c30 [ 1151.120671][T23879] ? cfg80211_event_work+0x40/0x40 [ 1151.126275][T23879] ? minstrel_ht_alloc+0x808/0x980 [ 1151.131943][T23879] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1151.138309][T23879] ieee80211_register_hw+0x2aa1/0x3af0 [ 1151.143906][T23879] ? ieee80211_tasklet_handler+0x20/0x20 [ 1151.149674][T23879] ? rcu_is_watching+0x11/0xa0 [ 1151.154639][T23879] ? memset+0x1e/0x40 [ 1151.158836][T23879] ? hrtimer_init+0x10c/0x220 [ 1151.163822][T23879] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1151.169685][T23879] hwsim_new_radio_nl+0xa6f/0xc40 [ 1151.175212][T23879] genl_rcv_msg+0xcea/0xf90 [ 1151.180039][T23879] ? genl_bind+0x380/0x380 [ 1151.184573][T23879] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1151.189787][T23879] ? verify_lock_unused+0x140/0x140 [ 1151.195106][T23879] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1151.201230][T23879] ? perf_trace_lock+0x301/0x390 [ 1151.206294][T23879] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1151.213063][T23879] netlink_rcv_skb+0x1f5/0x440 [ 1151.217852][T23879] ? genl_bind+0x380/0x380 [ 1151.222636][T23879] ? netlink_ack+0xb50/0xb50 [ 1151.227538][T23879] ? __lock_acquire+0x7d10/0x7d10 [ 1151.233418][T23879] ? down_read+0x1aa/0x2e0 [ 1151.237880][T23879] genl_rcv+0x24/0x40 [ 1151.242022][T23879] netlink_unicast+0x774/0x920 [ 1151.246906][T23879] netlink_sendmsg+0x8ba/0xbe0 [ 1151.251857][T23879] ? netlink_getsockopt+0x570/0x570 [ 1151.257494][T23879] ? aa_sock_msg_perm+0x94/0x150 [ 1151.262713][T23879] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1151.268183][T23879] ? security_socket_sendmsg+0x7c/0xa0 [ 1151.273650][T23879] ? netlink_getsockopt+0x570/0x570 [ 1151.279025][T23879] ____sys_sendmsg+0x5b7/0x8f0 [ 1151.284403][T23879] ? __sys_sendmsg_sock+0x30/0x30 [ 1151.289750][T23879] ? import_iovec+0x6f/0xa0 [ 1151.294453][T23879] ___sys_sendmsg+0x236/0x2e0 [ 1151.299426][T23879] ? __sys_sendmsg+0x2a0/0x2a0 [ 1151.304334][T23879] ? trace_event_raw_event_lock+0x270/0x270 [ 1151.310440][T23879] __se_sys_sendmsg+0x1af/0x290 [ 1151.315393][T23879] ? __x64_sys_sendmsg+0x80/0x80 [ 1151.320520][T23879] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1151.326788][T23879] ? lockdep_hardirqs_on+0x94/0x140 [ 1151.332361][T23879] do_syscall_64+0x4c/0xa0 [ 1151.336893][T23879] ? clear_bhb_loop+0x30/0x80 [ 1151.341696][T23879] ? clear_bhb_loop+0x30/0x80 [ 1151.346385][T23879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1151.352470][T23879] RIP: 0033:0x7f3642af0799 [ 1151.357067][T23879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.377574][T23879] RSP: 002b:00007f3640d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.386266][T23879] RAX: ffffffffffffffda RBX: 00007f3642d6a090 RCX: 00007f3642af0799 [ 1151.394714][T23879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1151.402961][T23879] RBP: 00007f3642b86c99 R08: 0000000000000000 R09: 0000000000000000 [ 1151.411309][T23879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.419541][T23879] R13: 00007f3642d6a128 R14: 00007f3642d6a090 R15: 00007ffd5e6957c8 [ 1151.427715][T23879] [ 1151.472626][T23884] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7036'. [ 1151.612909][T23896] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7048'. [ 1151.633975][T23896] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1151.643639][T23896] CPU: 1 PID: 23896 Comm: syz.2.7048 Not tainted syzkaller #0 [ 1151.651582][T23896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1151.662452][T23896] Call Trace: [ 1151.666058][T23896] [ 1151.669069][T23896] dump_stack_lvl+0x188/0x250 [ 1151.673949][T23896] ? show_regs_print_info+0x20/0x20 [ 1151.679438][T23896] ? load_image+0x400/0x400 [ 1151.684085][T23896] sysfs_warn_dup+0x8a/0xa0 [ 1151.689133][T23896] sysfs_do_create_link_sd+0xc0/0x110 [ 1151.696022][T23896] device_add+0x7ed/0xfb0 [ 1151.700686][T23896] wiphy_register+0x1e81/0x2c30 [ 1151.705893][T23896] ? cfg80211_event_work+0x40/0x40 [ 1151.711201][T23896] ? minstrel_ht_alloc+0x808/0x980 [ 1151.716533][T23896] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1151.722788][T23896] ieee80211_register_hw+0x2aa1/0x3af0 [ 1151.728823][T23896] ? ieee80211_tasklet_handler+0x20/0x20 [ 1151.734685][T23896] ? rcu_is_watching+0x11/0xa0 [ 1151.739464][T23896] ? memset+0x1e/0x40 [ 1151.743734][T23896] ? hrtimer_init+0x10c/0x220 [ 1151.748875][T23896] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1151.754652][T23896] hwsim_new_radio_nl+0xa6f/0xc40 [ 1151.759822][T23896] genl_rcv_msg+0xcea/0xf90 [ 1151.764732][T23896] ? genl_bind+0x380/0x380 [ 1151.769465][T23896] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1151.774778][T23896] ? verify_lock_unused+0x140/0x140 [ 1151.780532][T23896] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1151.786533][T23896] ? perf_trace_lock+0x301/0x390 [ 1151.791802][T23896] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1151.798477][T23896] netlink_rcv_skb+0x1f5/0x440 [ 1151.803259][T23896] ? genl_bind+0x380/0x380 [ 1151.807779][T23896] ? netlink_ack+0xb50/0xb50 [ 1151.812642][T23896] ? __lock_acquire+0x7d10/0x7d10 [ 1151.817694][T23896] ? down_read+0x1aa/0x2e0 [ 1151.822299][T23896] genl_rcv+0x24/0x40 [ 1151.826645][T23896] netlink_unicast+0x774/0x920 [ 1151.831438][T23896] netlink_sendmsg+0x8ba/0xbe0 [ 1151.836319][T23896] ? netlink_getsockopt+0x570/0x570 [ 1151.841720][T23896] ? aa_sock_msg_perm+0x94/0x150 [ 1151.846677][T23896] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1151.852170][T23896] ? security_socket_sendmsg+0x7c/0xa0 [ 1151.857927][T23896] ? netlink_getsockopt+0x570/0x570 [ 1151.863312][T23896] ____sys_sendmsg+0x5b7/0x8f0 [ 1151.868109][T23896] ? __sys_sendmsg_sock+0x30/0x30 [ 1151.873255][T23896] ? import_iovec+0x6f/0xa0 [ 1151.877784][T23896] ___sys_sendmsg+0x236/0x2e0 [ 1151.882684][T23896] ? __sys_sendmsg+0x2a0/0x2a0 [ 1151.887720][T23896] ? trace_event_raw_event_lock+0x270/0x270 [ 1151.893709][T23896] __se_sys_sendmsg+0x1af/0x290 [ 1151.898949][T23896] ? __x64_sys_sendmsg+0x80/0x80 [ 1151.903970][T23896] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1151.910094][T23896] ? lockdep_hardirqs_on+0x94/0x140 [ 1151.915318][T23896] do_syscall_64+0x4c/0xa0 [ 1151.919841][T23896] ? clear_bhb_loop+0x30/0x80 [ 1151.924547][T23896] ? clear_bhb_loop+0x30/0x80 [ 1151.929530][T23896] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1151.935747][T23896] RIP: 0033:0x7ff2207fd799 [ 1151.940281][T23896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.962117][T23896] RSP: 002b:00007ff21ea36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.970864][T23896] RAX: ffffffffffffffda RBX: 00007ff220a77090 RCX: 00007ff2207fd799 [ 1151.978945][T23896] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1151.987203][T23896] RBP: 00007ff220893c99 R08: 0000000000000000 R09: 0000000000000000 [ 1151.995558][T23896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.004053][T23896] R13: 00007ff220a77128 R14: 00007ff220a77090 R15: 00007ffd4b86f478 [ 1152.012172][T23896] [ 1156.973036][T23937] FAULT_INJECTION: forcing a failure. [ 1156.973036][T23937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.036287][T23937] CPU: 0 PID: 23937 Comm: syz.0.7058 Not tainted syzkaller #0 [ 1157.044369][T23937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.055298][T23937] Call Trace: [ 1157.059042][T23937] [ 1157.062192][T23937] dump_stack_lvl+0x188/0x250 [ 1157.067079][T23937] ? show_regs_print_info+0x20/0x20 [ 1157.072439][T23937] ? load_image+0x400/0x400 [ 1157.077075][T23937] ? __lock_acquire+0x7d10/0x7d10 [ 1157.082939][T23937] should_fail+0x38c/0x4c0 [ 1157.088461][T23937] _copy_from_user+0x2e/0x170 [ 1157.094017][T23937] perf_copy_attr+0x167/0x840 [ 1157.098920][T23937] __se_sys_perf_event_open+0xf5/0x1bb0 [ 1157.104804][T23937] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1157.111392][T23937] ? lockdep_hardirqs_on+0x94/0x140 [ 1157.117175][T23937] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1157.123279][T23937] do_syscall_64+0x4c/0xa0 [ 1157.128075][T23937] ? clear_bhb_loop+0x30/0x80 [ 1157.132953][T23937] ? clear_bhb_loop+0x30/0x80 [ 1157.137723][T23937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1157.143684][T23937] RIP: 0033:0x7f54b0f39799 [ 1157.148108][T23937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.168874][T23937] RSP: 002b:00007f54af193028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1157.177603][T23937] RAX: ffffffffffffffda RBX: 00007f54b11b2fa0 RCX: 00007f54b0f39799 [ 1157.186202][T23937] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 1157.194606][T23937] RBP: 00007f54af193090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.202680][T23937] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1157.211040][T23937] R13: 00007f54b11b3038 R14: 00007f54b11b2fa0 R15: 00007ffd0e858058 [ 1157.219344][T23937] [ 1157.276933][T23942] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1157.391050][T23942] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1157.449255][T23942] CPU: 0 PID: 23942 Comm: syz.3.7059 Not tainted syzkaller #0 [ 1157.457419][T23942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1157.467678][T23942] Call Trace: [ 1157.470995][T23942] [ 1157.474136][T23942] dump_stack_lvl+0x188/0x250 [ 1157.479195][T23942] ? show_regs_print_info+0x20/0x20 [ 1157.484706][T23942] ? load_image+0x400/0x400 [ 1157.489448][T23942] sysfs_warn_dup+0x8a/0xa0 [ 1157.494289][T23942] sysfs_do_create_link_sd+0xc0/0x110 [ 1157.499824][T23942] device_add+0x7ed/0xfb0 [ 1157.504257][T23942] wiphy_register+0x1e81/0x2c30 [ 1157.509342][T23942] ? cfg80211_event_work+0x40/0x40 [ 1157.515376][T23942] ? minstrel_ht_alloc+0x808/0x980 [ 1157.520936][T23942] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1157.527422][T23942] ieee80211_register_hw+0x2aa1/0x3af0 [ 1157.533454][T23942] ? ieee80211_tasklet_handler+0x20/0x20 [ 1157.539644][T23942] ? rcu_is_watching+0x11/0xa0 [ 1157.545241][T23942] ? memset+0x1e/0x40 [ 1157.549320][T23942] ? hrtimer_init+0x10c/0x220 [ 1157.554191][T23942] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1157.560266][T23942] hwsim_new_radio_nl+0xa6f/0xc40 [ 1157.565956][T23942] genl_rcv_msg+0xcea/0xf90 [ 1157.570714][T23942] ? genl_bind+0x380/0x380 [ 1157.575534][T23942] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1157.581004][T23942] ? verify_lock_unused+0x140/0x140 [ 1157.586623][T23942] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1157.592682][T23942] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1157.600218][T23942] ? perf_trace_lock+0x301/0x390 [ 1157.605726][T23942] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1157.612554][T23942] netlink_rcv_skb+0x1f5/0x440 [ 1157.617782][T23942] ? genl_bind+0x380/0x380 [ 1157.622852][T23942] ? netlink_ack+0xb50/0xb50 [ 1157.627907][T23942] ? __lock_acquire+0x7d10/0x7d10 [ 1157.633162][T23942] ? down_read+0x1aa/0x2e0 [ 1157.637815][T23942] genl_rcv+0x24/0x40 [ 1157.641908][T23942] netlink_unicast+0x774/0x920 [ 1157.647588][T23942] netlink_sendmsg+0x8ba/0xbe0 [ 1157.652829][T23942] ? netlink_getsockopt+0x570/0x570 [ 1157.658057][T23942] ? aa_sock_msg_perm+0x94/0x150 [ 1157.663201][T23942] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1157.668657][T23942] ? security_socket_sendmsg+0x7c/0xa0 [ 1157.674308][T23942] ? netlink_getsockopt+0x570/0x570 [ 1157.679515][T23942] ____sys_sendmsg+0x5b7/0x8f0 [ 1157.684676][T23942] ? __sys_sendmsg_sock+0x30/0x30 [ 1157.690488][T23942] ? import_iovec+0x6f/0xa0 [ 1157.695266][T23942] ___sys_sendmsg+0x236/0x2e0 [ 1157.699964][T23942] ? __sys_sendmsg+0x2a0/0x2a0 [ 1157.705241][T23942] __se_sys_sendmsg+0x1af/0x290 [ 1157.710111][T23942] ? __x64_sys_sendmsg+0x80/0x80 [ 1157.715055][T23942] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1157.721416][T23942] ? lockdep_hardirqs_on+0x94/0x140 [ 1157.727037][T23942] do_syscall_64+0x4c/0xa0 [ 1157.731700][T23942] ? clear_bhb_loop+0x30/0x80 [ 1157.736582][T23942] ? clear_bhb_loop+0x30/0x80 [ 1157.741304][T23942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1157.747476][T23942] RIP: 0033:0x7f6cb5cb0799 [ 1157.751933][T23942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.772522][T23942] RSP: 002b:00007f6cb3ee9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.781518][T23942] RAX: ffffffffffffffda RBX: 00007f6cb5f2a090 RCX: 00007f6cb5cb0799 [ 1157.790131][T23942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1157.798381][T23942] RBP: 00007f6cb5d46c99 R08: 0000000000000000 R09: 0000000000000000 [ 1157.806484][T23942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.814467][T23942] R13: 00007f6cb5f2a128 R14: 00007f6cb5f2a090 R15: 00007fff7bdf01f8 [ 1157.822781][T23942] [ 1160.447982][T23988] netlink: 'syz.4.7077': attribute type 4 has an invalid length. [ 1160.467003][T23989] FAULT_INJECTION: forcing a failure. [ 1160.467003][T23989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.485169][T23988] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7077'. [ 1160.505796][T23989] CPU: 0 PID: 23989 Comm: syz.3.7078 Not tainted syzkaller #0 [ 1160.513652][T23989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.524044][T23989] Call Trace: [ 1160.527514][T23989] [ 1160.530632][T23989] dump_stack_lvl+0x188/0x250 [ 1160.535557][T23989] ? show_regs_print_info+0x20/0x20 [ 1160.540922][T23989] ? load_image+0x400/0x400 [ 1160.545987][T23989] ? __lock_acquire+0x7d10/0x7d10 [ 1160.551318][T23989] should_fail+0x38c/0x4c0 [ 1160.556056][T23989] _copy_from_user+0x2e/0x170 [ 1160.560750][T23989] __copy_msghdr_from_user+0xc9/0x630 [ 1160.560775][T23989] ? verify_lock_unused+0x140/0x140 [ 1160.571464][T23989] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1160.576796][T23989] ___sys_sendmsg+0x19a/0x2e0 [ 1160.581504][T23989] ? __sys_sendmsg+0x2a0/0x2a0 [ 1160.586299][T23989] ? vfs_write+0x8b2/0xd60 [ 1160.590840][T23989] __se_sys_sendmsg+0x1af/0x290 [ 1160.595802][T23989] ? __x64_sys_sendmsg+0x80/0x80 [ 1160.600833][T23989] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1160.606943][T23989] ? lockdep_hardirqs_on+0x94/0x140 [ 1160.612483][T23989] do_syscall_64+0x4c/0xa0 [ 1160.616913][T23989] ? clear_bhb_loop+0x30/0x80 [ 1160.621731][T23989] ? clear_bhb_loop+0x30/0x80 [ 1160.626522][T23989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1160.632625][T23989] RIP: 0033:0x7f6cb5cb0799 [ 1160.637069][T23989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.657191][T23989] RSP: 002b:00007f6cb3f0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.665636][T23989] RAX: ffffffffffffffda RBX: 00007f6cb5f29fa0 RCX: 00007f6cb5cb0799 [ 1160.673981][T23989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1160.681978][T23989] RBP: 00007f6cb3f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.690330][T23989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.698421][T23989] R13: 00007f6cb5f2a038 R14: 00007f6cb5f29fa0 R15: 00007fff7bdf01f8 [ 1160.706428][T23989] [ 1160.713052][T23995] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7076'. [ 1160.739101][T23995] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1160.747381][T23995] CPU: 0 PID: 23995 Comm: syz.1.7076 Not tainted syzkaller #0 [ 1160.755064][T23995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.765322][T23995] Call Trace: [ 1160.768704][T23995] [ 1160.771731][T23995] dump_stack_lvl+0x188/0x250 [ 1160.776429][T23995] ? show_regs_print_info+0x20/0x20 [ 1160.781744][T23995] ? load_image+0x400/0x400 [ 1160.786479][T23995] sysfs_warn_dup+0x8a/0xa0 [ 1160.791021][T23995] sysfs_do_create_link_sd+0xc0/0x110 [ 1160.796412][T23995] device_add+0x7ed/0xfb0 [ 1160.801206][T23995] wiphy_register+0x1e81/0x2c30 [ 1160.806281][T23995] ? cfg80211_event_work+0x40/0x40 [ 1160.811417][T23995] ? minstrel_ht_alloc+0x808/0x980 [ 1160.816735][T23995] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1160.822928][T23995] ieee80211_register_hw+0x2aa1/0x3af0 [ 1160.828609][T23995] ? ieee80211_tasklet_handler+0x20/0x20 [ 1160.834358][T23995] ? rcu_is_watching+0x11/0xa0 [ 1160.839138][T23995] ? memset+0x1e/0x40 [ 1160.843323][T23995] ? hrtimer_init+0x10c/0x220 [ 1160.848173][T23995] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1160.853938][T23995] hwsim_new_radio_nl+0xa6f/0xc40 [ 1160.859100][T23995] genl_rcv_msg+0xcea/0xf90 [ 1160.863724][T23995] ? genl_bind+0x380/0x380 [ 1160.868244][T23995] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1160.873621][T23995] ? verify_lock_unused+0x140/0x140 [ 1160.878846][T23995] ? kmalloc_large_node+0xf2/0x190 [ 1160.884240][T23995] ? dev_queue_xmit+0x20/0x20 [ 1160.889016][T23995] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1160.895826][T23995] netlink_rcv_skb+0x1f5/0x440 [ 1160.900706][T23995] ? genl_bind+0x380/0x380 [ 1160.905166][T23995] ? netlink_ack+0xb50/0xb50 [ 1160.909849][T23995] ? __lock_acquire+0x7d10/0x7d10 [ 1160.915136][T23995] ? down_read+0x1aa/0x2e0 [ 1160.919643][T23995] genl_rcv+0x24/0x40 [ 1160.923626][T23995] netlink_unicast+0x774/0x920 [ 1160.928733][T23995] netlink_sendmsg+0x8ba/0xbe0 [ 1160.933876][T23995] ? netlink_getsockopt+0x570/0x570 [ 1160.939186][T23995] ? aa_sock_msg_perm+0x94/0x150 [ 1160.944394][T23995] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1160.949764][T23995] ? security_socket_sendmsg+0x7c/0xa0 [ 1160.955482][T23995] ? netlink_getsockopt+0x570/0x570 [ 1160.960957][T23995] ____sys_sendmsg+0x5b7/0x8f0 [ 1160.965732][T23995] ? __sys_sendmsg_sock+0x30/0x30 [ 1160.970960][T23995] ? import_iovec+0x6f/0xa0 [ 1160.975486][T23995] ___sys_sendmsg+0x236/0x2e0 [ 1160.980277][T23995] ? __sys_sendmsg+0x2a0/0x2a0 [ 1160.985056][T23995] ? percpu_counter_add_batch+0x13b/0x160 [ 1160.990975][T23995] __se_sys_sendmsg+0x1af/0x290 [ 1160.995837][T23995] ? __x64_sys_sendmsg+0x80/0x80 [ 1161.000982][T23995] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1161.007169][T23995] ? lockdep_hardirqs_on+0x94/0x140 [ 1161.012552][T23995] do_syscall_64+0x4c/0xa0 [ 1161.016968][T23995] ? clear_bhb_loop+0x30/0x80 [ 1161.022364][T23995] ? clear_bhb_loop+0x30/0x80 [ 1161.027049][T23995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1161.033073][T23995] RIP: 0033:0x7faf3747c799 [ 1161.037490][T23995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.058266][T23995] RSP: 002b:00007faf35694028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1161.066957][T23995] RAX: ffffffffffffffda RBX: 00007faf376f6180 RCX: 00007faf3747c799 [ 1161.075199][T23995] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1161.083584][T23995] RBP: 00007faf37512c99 R08: 0000000000000000 R09: 0000000000000000 [ 1161.091835][T23995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.099908][T23995] R13: 00007faf376f6218 R14: 00007faf376f6180 R15: 00007fff7343ce28 [ 1161.108606][T23995] [ 1165.337048][T24046] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7098'. [ 1165.409198][T24046] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1165.430208][T24046] CPU: 1 PID: 24046 Comm: syz.4.7098 Not tainted syzkaller #0 [ 1165.437725][T24046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1165.448165][T24046] Call Trace: [ 1165.451592][T24046] [ 1165.454573][T24046] dump_stack_lvl+0x188/0x250 [ 1165.459373][T24046] ? show_regs_print_info+0x20/0x20 [ 1165.464591][T24046] ? load_image+0x400/0x400 [ 1165.469240][T24046] sysfs_warn_dup+0x8a/0xa0 [ 1165.473875][T24046] sysfs_do_create_link_sd+0xc0/0x110 [ 1165.479473][T24046] device_add+0x7ed/0xfb0 [ 1165.484046][T24046] wiphy_register+0x1e81/0x2c30 [ 1165.489036][T24046] ? cfg80211_event_work+0x40/0x40 [ 1165.494185][T24046] ? minstrel_ht_alloc+0x808/0x980 [ 1165.499345][T24046] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1165.505648][T24046] ieee80211_register_hw+0x2aa1/0x3af0 [ 1165.511705][T24046] ? ieee80211_tasklet_handler+0x20/0x20 [ 1165.517659][T24046] ? rcu_is_watching+0x11/0xa0 [ 1165.522632][T24046] ? memset+0x1e/0x40 [ 1165.526632][T24046] ? hrtimer_init+0x10c/0x220 [ 1165.531511][T24046] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1165.537728][T24046] hwsim_new_radio_nl+0xa6f/0xc40 [ 1165.542956][T24046] genl_rcv_msg+0xcea/0xf90 [ 1165.547515][T24046] ? genl_bind+0x380/0x380 [ 1165.552210][T24046] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1165.557894][T24046] ? verify_lock_unused+0x140/0x140 [ 1165.563493][T24046] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1165.569490][T24046] ? perf_trace_lock+0x301/0x390 [ 1165.574829][T24046] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1165.581698][T24046] netlink_rcv_skb+0x1f5/0x440 [ 1165.586592][T24046] ? genl_bind+0x380/0x380 [ 1165.591213][T24046] ? netlink_ack+0xb50/0xb50 [ 1165.595850][T24046] ? __lock_acquire+0x7d10/0x7d10 [ 1165.601080][T24046] ? down_read+0x1aa/0x2e0 [ 1165.605611][T24046] genl_rcv+0x24/0x40 [ 1165.609606][T24046] netlink_unicast+0x774/0x920 [ 1165.614405][T24046] netlink_sendmsg+0x8ba/0xbe0 [ 1165.619421][T24046] ? netlink_getsockopt+0x570/0x570 [ 1165.624630][T24046] ? aa_sock_msg_perm+0x94/0x150 [ 1165.629765][T24046] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1165.635066][T24046] ? security_socket_sendmsg+0x7c/0xa0 [ 1165.640630][T24046] ? netlink_getsockopt+0x570/0x570 [ 1165.646143][T24046] ____sys_sendmsg+0x5b7/0x8f0 [ 1165.651034][T24046] ? __sys_sendmsg_sock+0x30/0x30 [ 1165.656180][T24046] ? import_iovec+0x6f/0xa0 [ 1165.660856][T24046] ___sys_sendmsg+0x236/0x2e0 [ 1165.665756][T24046] ? __sys_sendmsg+0x2a0/0x2a0 [ 1165.671337][T24046] ? trace_event_raw_event_lock+0x270/0x270 [ 1165.677550][T24046] __se_sys_sendmsg+0x1af/0x290 [ 1165.682466][T24046] ? __x64_sys_sendmsg+0x80/0x80 [ 1165.687431][T24046] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1165.693896][T24046] ? lockdep_hardirqs_on+0x94/0x140 [ 1165.699467][T24046] do_syscall_64+0x4c/0xa0 [ 1165.704073][T24046] ? clear_bhb_loop+0x30/0x80 [ 1165.709163][T24046] ? clear_bhb_loop+0x30/0x80 [ 1165.714074][T24046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1165.720511][T24046] RIP: 0033:0x7f3642af0799 [ 1165.725131][T24046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.745361][T24046] RSP: 002b:00007f3640d29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.754157][T24046] RAX: ffffffffffffffda RBX: 00007f3642d6a090 RCX: 00007f3642af0799 [ 1165.762423][T24046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1165.770587][T24046] RBP: 00007f3642b86c99 R08: 0000000000000000 R09: 0000000000000000 [ 1165.778755][T24046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.786751][T24046] R13: 00007f3642d6a128 R14: 00007f3642d6a090 R15: 00007ffd5e6957c8 [ 1165.795248][T24046] [ 1169.569114][T24089] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7116'. [ 1169.793914][T24089] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1169.871664][T24089] CPU: 0 PID: 24089 Comm: syz.4.7116 Not tainted syzkaller #0 [ 1169.879271][T24089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1169.889477][T24089] Call Trace: [ 1169.892779][T24089] [ 1169.895737][T24089] dump_stack_lvl+0x188/0x250 [ 1169.900709][T24089] ? show_regs_print_info+0x20/0x20 [ 1169.905949][T24089] ? load_image+0x400/0x400 [ 1169.911560][T24089] sysfs_warn_dup+0x8a/0xa0 [ 1169.916192][T24089] sysfs_do_create_link_sd+0xc0/0x110 [ 1169.921611][T24089] device_add+0x7ed/0xfb0 [ 1169.925995][T24089] wiphy_register+0x1e81/0x2c30 [ 1169.931018][T24089] ? cfg80211_event_work+0x40/0x40 [ 1169.936599][T24089] ? minstrel_ht_alloc+0x808/0x980 [ 1169.941755][T24089] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1169.947994][T24089] ieee80211_register_hw+0x2aa1/0x3af0 [ 1169.953544][T24089] ? ieee80211_tasklet_handler+0x20/0x20 [ 1169.959318][T24089] ? rcu_is_watching+0x11/0xa0 [ 1169.964122][T24089] ? memset+0x1e/0x40 [ 1169.968138][T24089] ? hrtimer_init+0x10c/0x220 [ 1169.972976][T24089] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1169.979057][T24089] hwsim_new_radio_nl+0xa6f/0xc40 [ 1169.984241][T24089] genl_rcv_msg+0xcea/0xf90 [ 1169.989489][T24089] ? genl_bind+0x380/0x380 [ 1169.994063][T24089] ? mark_lock+0x94/0x320 [ 1169.998981][T24089] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1170.005105][T24089] ? lock_chain_count+0x20/0x20 [ 1170.010303][T24089] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1170.016790][T24089] ? lockdep_hardirqs_on+0x94/0x140 [ 1170.022220][T24089] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1170.029065][T24089] netlink_rcv_skb+0x1f5/0x440 [ 1170.033862][T24089] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1170.040343][T24089] ? genl_bind+0x380/0x380 [ 1170.044895][T24089] ? netlink_ack+0xb50/0xb50 [ 1170.049858][T24089] ? down_read+0x5f/0x2e0 [ 1170.054234][T24089] ? down_read+0x1aa/0x2e0 [ 1170.058885][T24089] genl_rcv+0x24/0x40 [ 1170.063134][T24089] netlink_unicast+0x774/0x920 [ 1170.068127][T24089] netlink_sendmsg+0x8ba/0xbe0 [ 1170.073046][T24089] ? netlink_getsockopt+0x570/0x570 [ 1170.078475][T24089] ? aa_sock_msg_perm+0x94/0x150 [ 1170.083719][T24089] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1170.089147][T24089] ? security_socket_sendmsg+0x7c/0xa0 [ 1170.095024][T24089] ? netlink_getsockopt+0x570/0x570 [ 1170.100519][T24089] ____sys_sendmsg+0x5b7/0x8f0 [ 1170.105495][T24089] ? __sys_sendmsg_sock+0x30/0x30 [ 1170.110645][T24089] ? import_iovec+0x6f/0xa0 [ 1170.115251][T24089] ___sys_sendmsg+0x236/0x2e0 [ 1170.121471][T24089] ? __sys_sendmsg+0x2a0/0x2a0 [ 1170.126265][T24089] ? trace_event_raw_event_lock+0x270/0x270 [ 1170.132395][T24089] __se_sys_sendmsg+0x1af/0x290 [ 1170.137520][T24089] ? __x64_sys_sendmsg+0x80/0x80 [ 1170.142580][T24089] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1170.148678][T24089] ? lockdep_hardirqs_on+0x94/0x140 [ 1170.153888][T24089] do_syscall_64+0x4c/0xa0 [ 1170.158323][T24089] ? clear_bhb_loop+0x30/0x80 [ 1170.163283][T24089] ? clear_bhb_loop+0x30/0x80 [ 1170.168143][T24089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1170.174209][T24089] RIP: 0033:0x7f3642af0799 [ 1170.178712][T24089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.198432][T24089] RSP: 002b:00007f3640d4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.206944][T24089] RAX: ffffffffffffffda RBX: 00007f3642d69fa0 RCX: 00007f3642af0799 [ 1170.215110][T24089] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1170.223900][T24089] RBP: 00007f3642b86c99 R08: 0000000000000000 R09: 0000000000000000 [ 1170.232144][T24089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.240295][T24089] R13: 00007f3642d6a038 R14: 00007f3642d69fa0 R15: 00007ffd5e6957c8 [ 1170.248469][T24089] [ 1177.330592][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.337363][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.775855][T24221] FAULT_INJECTION: forcing a failure. [ 1179.775855][T24221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.813264][T24221] CPU: 0 PID: 24221 Comm: syz.2.7164 Not tainted syzkaller #0 [ 1179.821003][T24221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.831073][T24221] Call Trace: [ 1179.834363][T24221] [ 1179.837297][T24221] dump_stack_lvl+0x188/0x250 [ 1179.842090][T24221] ? show_regs_print_info+0x20/0x20 [ 1179.847405][T24221] ? load_image+0x400/0x400 [ 1179.852018][T24221] ? __lock_acquire+0x7d10/0x7d10 [ 1179.857205][T24221] should_fail+0x38c/0x4c0 [ 1179.861641][T24221] _copy_from_user+0x2e/0x170 [ 1179.866329][T24221] __copy_msghdr_from_user+0xc9/0x630 [ 1179.872493][T24221] ? verify_lock_unused+0x140/0x140 [ 1179.877892][T24221] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1179.883377][T24221] ___sys_sendmsg+0x19a/0x2e0 [ 1179.888350][T24221] ? __sys_sendmsg+0x2a0/0x2a0 [ 1179.893160][T24221] ? vfs_write+0x8b2/0xd60 [ 1179.897599][T24221] __se_sys_sendmsg+0x1af/0x290 [ 1179.902544][T24221] ? __x64_sys_sendmsg+0x80/0x80 [ 1179.907730][T24221] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1179.913828][T24221] ? lockdep_hardirqs_on+0x94/0x140 [ 1179.919257][T24221] do_syscall_64+0x4c/0xa0 [ 1179.923679][T24221] ? clear_bhb_loop+0x30/0x80 [ 1179.928466][T24221] ? clear_bhb_loop+0x30/0x80 [ 1179.933173][T24221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1179.939269][T24221] RIP: 0033:0x7ff2207fd799 [ 1179.943691][T24221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.963914][T24221] RSP: 002b:00007ff21ea57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1179.972344][T24221] RAX: ffffffffffffffda RBX: 00007ff220a76fa0 RCX: 00007ff2207fd799 [ 1179.980318][T24221] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1179.988377][T24221] RBP: 00007ff21ea57090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.996807][T24221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.005136][T24221] R13: 00007ff220a77038 R14: 00007ff220a76fa0 R15: 00007ffd4b86f478 [ 1180.013234][T24221] [ 1180.386293][T24236] netlink: 'syz.3.7170': attribute type 10 has an invalid length. [ 1180.422088][T24236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1180.476407][T24236] batman_adv: batadv0: Adding interface: veth0_vlan [ 1180.508411][T24236] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.706350][T24236] batman_adv: batadv0: Interface activated: veth0_vlan [ 1180.769141][T24243] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7172'. [ 1181.312443][T24243] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1181.321392][T24243] CPU: 0 PID: 24243 Comm: syz.0.7172 Not tainted syzkaller #0 [ 1181.329069][T24243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1181.339229][T24243] Call Trace: [ 1181.342531][T24243] [ 1181.345480][T24243] dump_stack_lvl+0x188/0x250 [ 1181.350187][T24243] ? show_regs_print_info+0x20/0x20 [ 1181.355407][T24243] ? load_image+0x400/0x400 [ 1181.359958][T24243] sysfs_warn_dup+0x8a/0xa0 [ 1181.364517][T24243] sysfs_do_create_link_sd+0xc0/0x110 [ 1181.370007][T24243] device_add+0x7ed/0xfb0 [ 1181.374458][T24243] wiphy_register+0x1e81/0x2c30 [ 1181.379540][T24243] ? cfg80211_event_work+0x40/0x40 [ 1181.384768][T24243] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1181.391007][T24243] ieee80211_register_hw+0x2aa1/0x3af0 [ 1181.396788][T24243] ? ieee80211_tasklet_handler+0x20/0x20 [ 1181.402617][T24243] ? lockdep_hardirqs_on+0x94/0x140 [ 1181.407927][T24243] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1181.414218][T24243] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1181.420246][T24243] hwsim_new_radio_nl+0xa6f/0xc40 [ 1181.425487][T24243] genl_rcv_msg+0xcea/0xf90 [ 1181.430113][T24243] ? genl_bind+0x380/0x380 [ 1181.434566][T24243] ? mark_lock+0x94/0x320 [ 1181.439008][T24243] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1181.445017][T24243] ? lock_chain_count+0x20/0x20 [ 1181.449911][T24243] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1181.456095][T24243] ? lockdep_hardirqs_on+0x94/0x140 [ 1181.461836][T24243] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1181.468386][T24243] netlink_rcv_skb+0x1f5/0x440 [ 1181.473262][T24243] ? genl_bind+0x380/0x380 [ 1181.477799][T24243] ? netlink_ack+0xb50/0xb50 [ 1181.482417][T24243] ? __lock_acquire+0x7d10/0x7d10 [ 1181.487658][T24243] ? down_read+0x1aa/0x2e0 [ 1181.492192][T24243] genl_rcv+0x24/0x40 [ 1181.496291][T24243] netlink_unicast+0x774/0x920 [ 1181.501086][T24243] netlink_sendmsg+0x8ba/0xbe0 [ 1181.506053][T24243] ? netlink_getsockopt+0x570/0x570 [ 1181.511370][T24243] ? aa_sock_msg_perm+0x94/0x150 [ 1181.516421][T24243] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1181.521902][T24243] ? security_socket_sendmsg+0x7c/0xa0 [ 1181.527713][T24243] ? netlink_getsockopt+0x570/0x570 [ 1181.533285][T24243] ____sys_sendmsg+0x5b7/0x8f0 [ 1181.538257][T24243] ? __sys_sendmsg_sock+0x30/0x30 [ 1181.543318][T24243] ? import_iovec+0x6f/0xa0 [ 1181.547848][T24243] ___sys_sendmsg+0x236/0x2e0 [ 1181.552560][T24243] ? __sys_sendmsg+0x2a0/0x2a0 [ 1181.557363][T24243] ? trace_event_raw_event_lock+0x270/0x270 [ 1181.563504][T24243] __se_sys_sendmsg+0x1af/0x290 [ 1181.568380][T24243] ? __x64_sys_sendmsg+0x80/0x80 [ 1181.573870][T24243] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1181.580167][T24243] ? lockdep_hardirqs_on+0x94/0x140 [ 1181.585578][T24243] do_syscall_64+0x4c/0xa0 [ 1181.590009][T24243] ? clear_bhb_loop+0x30/0x80 [ 1181.594700][T24243] ? clear_bhb_loop+0x30/0x80 [ 1181.599401][T24243] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1181.605399][T24243] RIP: 0033:0x7f54b0f39799 [ 1181.609915][T24243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.629896][T24243] RSP: 002b:00007f54af193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1181.638434][T24243] RAX: ffffffffffffffda RBX: 00007f54b11b2fa0 RCX: 00007f54b0f39799 [ 1181.646527][T24243] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1181.654621][T24243] RBP: 00007f54b0fcfc99 R08: 0000000000000000 R09: 0000000000000000 [ 1181.662706][T24243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.671047][T24243] R13: 00007f54b11b3038 R14: 00007f54b11b2fa0 R15: 00007ffd0e858058 [ 1181.679174][T24243] [ 1183.633456][T24271] FAULT_INJECTION: forcing a failure. [ 1183.633456][T24271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.665167][T24271] CPU: 1 PID: 24271 Comm: syz.0.7181 Not tainted syzkaller #0 [ 1183.672923][T24271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1183.683258][T24271] Call Trace: [ 1183.686528][T24271] [ 1183.689519][T24271] dump_stack_lvl+0x188/0x250 [ 1183.694371][T24271] ? show_regs_print_info+0x20/0x20 [ 1183.699564][T24271] ? load_image+0x400/0x400 [ 1183.704064][T24271] ? __lock_acquire+0x7d10/0x7d10 [ 1183.709351][T24271] should_fail+0x38c/0x4c0 [ 1183.713766][T24271] _copy_from_user+0x2e/0x170 [ 1183.718530][T24271] __copy_msghdr_from_user+0x48a/0x630 [ 1183.724081][T24271] ? verify_lock_unused+0x140/0x140 [ 1183.729377][T24271] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1183.734672][T24271] ___sys_sendmsg+0x19a/0x2e0 [ 1183.739432][T24271] ? __sys_sendmsg+0x2a0/0x2a0 [ 1183.744277][T24271] ? vfs_write+0x8b2/0xd60 [ 1183.748808][T24271] __se_sys_sendmsg+0x1af/0x290 [ 1183.753685][T24271] ? __x64_sys_sendmsg+0x80/0x80 [ 1183.758645][T24271] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1183.764870][T24271] ? lockdep_hardirqs_on+0x94/0x140 [ 1183.770063][T24271] do_syscall_64+0x4c/0xa0 [ 1183.774497][T24271] ? clear_bhb_loop+0x30/0x80 [ 1183.779284][T24271] ? clear_bhb_loop+0x30/0x80 [ 1183.784059][T24271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1183.790116][T24271] RIP: 0033:0x7f54b0f39799 [ 1183.794692][T24271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.814410][T24271] RSP: 002b:00007f54af193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.822936][T24271] RAX: ffffffffffffffda RBX: 00007f54b11b2fa0 RCX: 00007f54b0f39799 [ 1183.831157][T24271] RDX: 000000000004c810 RSI: 0000200000001280 RDI: 0000000000000003 [ 1183.839200][T24271] RBP: 00007f54af193090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.847340][T24271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.855404][T24271] R13: 00007f54b11b3038 R14: 00007f54b11b2fa0 R15: 00007ffd0e858058 [ 1183.863383][T24271] [ 1184.215096][T24292] netlink: 'syz.0.7188': attribute type 10 has an invalid length. [ 1184.276190][T24292] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7188'. [ 1184.383818][T24292] batman_adv: batadv0: Adding interface: veth0_vlan [ 1184.505855][T24292] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.663467][T24294] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7189'. [ 1184.672671][T24292] batman_adv: batadv0: Interface activated: veth0_vlan [ 1185.068221][T24294] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1185.076908][T24294] CPU: 1 PID: 24294 Comm: syz.4.7189 Not tainted syzkaller #0 [ 1185.084701][T24294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1185.095259][T24294] Call Trace: [ 1185.098567][T24294] [ 1185.101602][T24294] dump_stack_lvl+0x188/0x250 [ 1185.106297][T24294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1185.112561][T24294] ? show_regs_print_info+0x20/0x20 [ 1185.117780][T24294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1185.124164][T24294] sysfs_warn_dup+0x8a/0xa0 [ 1185.129018][T24294] sysfs_do_create_link_sd+0xc0/0x110 [ 1185.134512][T24294] device_add+0x7ed/0xfb0 [ 1185.138884][T24294] wiphy_register+0x1e81/0x2c30 [ 1185.144055][T24294] ? cfg80211_event_work+0x40/0x40 [ 1185.149286][T24294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1185.155897][T24294] ieee80211_register_hw+0x2aa1/0x3af0 [ 1185.161595][T24294] ? ieee80211_tasklet_handler+0x20/0x20 [ 1185.167261][T24294] ? debug_init+0x8f/0x1d0 [ 1185.171803][T24294] ? memset+0x1e/0x40 [ 1185.176105][T24294] ? hrtimer_init+0x10c/0x220 [ 1185.180809][T24294] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1185.186888][T24294] hwsim_new_radio_nl+0xa6f/0xc40 [ 1185.192267][T24294] genl_rcv_msg+0xcea/0xf90 [ 1185.197067][T24294] ? genl_bind+0x380/0x380 [ 1185.201737][T24294] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1185.207923][T24294] ? lock_chain_count+0x20/0x20 [ 1185.213119][T24294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1185.219538][T24294] ? lockdep_hardirqs_on+0x94/0x140 [ 1185.224771][T24294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1185.231134][T24294] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1185.238057][T24294] ? lock_acquire+0x208/0x400 [ 1185.242884][T24294] netlink_rcv_skb+0x1f5/0x440 [ 1185.247725][T24294] ? genl_bind+0x380/0x380 [ 1185.252420][T24294] ? netlink_ack+0xb50/0xb50 [ 1185.257039][T24294] ? __lock_acquire+0x7d10/0x7d10 [ 1185.262092][T24294] ? down_read+0x1aa/0x2e0 [ 1185.266663][T24294] genl_rcv+0x24/0x40 [ 1185.270751][T24294] netlink_unicast+0x774/0x920 [ 1185.275721][T24294] netlink_sendmsg+0x8ba/0xbe0 [ 1185.280514][T24294] ? netlink_getsockopt+0x570/0x570 [ 1185.285915][T24294] ? aa_sock_msg_perm+0x94/0x150 [ 1185.290974][T24294] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1185.296286][T24294] ? security_socket_sendmsg+0x7c/0xa0 [ 1185.301861][T24294] ? netlink_getsockopt+0x570/0x570 [ 1185.307192][T24294] ____sys_sendmsg+0x5b7/0x8f0 [ 1185.312274][T24294] ? __sys_sendmsg_sock+0x30/0x30 [ 1185.317446][T24294] ? ___sys_sendmsg+0x21b/0x2e0 [ 1185.322440][T24294] ___sys_sendmsg+0x236/0x2e0 [ 1185.327155][T24294] ? __sys_sendmsg+0x2a0/0x2a0 [ 1185.331997][T24294] ? trace_event_raw_event_lock+0x270/0x270 [ 1185.338130][T24294] __se_sys_sendmsg+0x1af/0x290 [ 1185.343025][T24294] ? __x64_sys_sendmsg+0x80/0x80 [ 1185.347982][T24294] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1185.354381][T24294] ? lockdep_hardirqs_on+0x94/0x140 [ 1185.359704][T24294] do_syscall_64+0x4c/0xa0 [ 1185.364332][T24294] ? clear_bhb_loop+0x30/0x80 [ 1185.369029][T24294] ? clear_bhb_loop+0x30/0x80 [ 1185.373725][T24294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1185.380001][T24294] RIP: 0033:0x7f3642af0799 [ 1185.384468][T24294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.404354][T24294] RSP: 002b:00007f3640d4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.412792][T24294] RAX: ffffffffffffffda RBX: 00007f3642d69fa0 RCX: 00007f3642af0799 [ 1185.420917][T24294] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1185.429611][T24294] RBP: 00007f3642b86c99 R08: 0000000000000000 R09: 0000000000000000 [ 1185.437702][T24294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.445785][T24294] R13: 00007f3642d6a038 R14: 00007f3642d69fa0 R15: 00007ffd5e6957c8 [ 1185.453882][T24294] [ 1186.558306][T24313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7193'. [ 1187.555306][T24341] netlink: 'syz.2.7206': attribute type 10 has an invalid length. [ 1187.598182][T24341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7206'. [ 1187.632710][T24341] batman_adv: batadv0: Adding interface: veth0_vlan [ 1187.661681][T24341] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.704355][T24341] batman_adv: batadv0: Interface activated: veth0_vlan [ 1187.771660][T24340] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7207'. [ 1188.399731][T24340] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1188.408643][T24340] CPU: 1 PID: 24340 Comm: syz.1.7207 Not tainted syzkaller #0 [ 1188.416311][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1188.426856][T24340] Call Trace: [ 1188.430232][T24340] [ 1188.433176][T24340] dump_stack_lvl+0x188/0x250 [ 1188.437990][T24340] ? show_regs_print_info+0x20/0x20 [ 1188.443220][T24340] ? load_image+0x400/0x400 [ 1188.447862][T24340] sysfs_warn_dup+0x8a/0xa0 [ 1188.452823][T24340] sysfs_do_create_link_sd+0xc0/0x110 [ 1188.458611][T24340] device_add+0x7ed/0xfb0 [ 1188.462982][T24340] wiphy_register+0x1e81/0x2c30 [ 1188.467979][T24340] ? cfg80211_event_work+0x40/0x40 [ 1188.473173][T24340] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1188.479453][T24340] ? rtnl_unlock+0x5/0x10 [ 1188.483816][T24340] ieee80211_register_hw+0x2aa1/0x3af0 [ 1188.489532][T24340] ? ieee80211_tasklet_handler+0x20/0x20 [ 1188.495406][T24340] ? rcu_is_watching+0x11/0xa0 [ 1188.500289][T24340] ? memset+0x1e/0x40 [ 1188.504291][T24340] ? hrtimer_init+0x10c/0x220 [ 1188.508992][T24340] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1188.515077][T24340] hwsim_new_radio_nl+0xa6f/0xc40 [ 1188.520230][T24340] genl_rcv_msg+0xcea/0xf90 [ 1188.525158][T24340] ? genl_bind+0x380/0x380 [ 1188.529878][T24340] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1188.535979][T24340] ? verify_lock_unused+0x140/0x140 [ 1188.541441][T24340] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1188.547507][T24340] ? perf_trace_lock+0x301/0x390 [ 1188.552945][T24340] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1188.559586][T24340] netlink_rcv_skb+0x1f5/0x440 [ 1188.564614][T24340] ? genl_bind+0x380/0x380 [ 1188.569436][T24340] ? netlink_ack+0xb50/0xb50 [ 1188.574062][T24340] ? __lock_acquire+0x7d10/0x7d10 [ 1188.579123][T24340] ? down_read+0x1aa/0x2e0 [ 1188.583837][T24340] genl_rcv+0x24/0x40 [ 1188.587935][T24340] netlink_unicast+0x774/0x920 [ 1188.592732][T24340] netlink_sendmsg+0x8ba/0xbe0 [ 1188.597802][T24340] ? netlink_getsockopt+0x570/0x570 [ 1188.603212][T24340] ? aa_sock_msg_perm+0x94/0x150 [ 1188.608169][T24340] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1188.613470][T24340] ? security_socket_sendmsg+0x7c/0xa0 [ 1188.618959][T24340] ? netlink_getsockopt+0x570/0x570 [ 1188.624276][T24340] ____sys_sendmsg+0x5b7/0x8f0 [ 1188.629167][T24340] ? __sys_sendmsg_sock+0x30/0x30 [ 1188.634255][T24340] ? import_iovec+0x6f/0xa0 [ 1188.638786][T24340] ___sys_sendmsg+0x236/0x2e0 [ 1188.643608][T24340] ? __sys_sendmsg+0x2a0/0x2a0 [ 1188.648538][T24340] __se_sys_sendmsg+0x1af/0x290 [ 1188.653419][T24340] ? __x64_sys_sendmsg+0x80/0x80 [ 1188.658389][T24340] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1188.664669][T24340] ? lockdep_hardirqs_on+0x94/0x140 [ 1188.669891][T24340] do_syscall_64+0x4c/0xa0 [ 1188.674361][T24340] ? clear_bhb_loop+0x30/0x80 [ 1188.679145][T24340] ? clear_bhb_loop+0x30/0x80 [ 1188.684026][T24340] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1188.689932][T24340] RIP: 0033:0x7faf3747c799 [ 1188.694376][T24340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.714346][T24340] RSP: 002b:00007faf356d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1188.722971][T24340] RAX: ffffffffffffffda RBX: 00007faf376f5fa0 RCX: 00007faf3747c799 [ 1188.730970][T24340] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1188.739082][T24340] RBP: 00007faf37512c99 R08: 0000000000000000 R09: 0000000000000000 [ 1188.747402][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.755827][T24340] R13: 00007faf376f6038 R14: 00007faf376f5fa0 R15: 00007fff7343ce28 [ 1188.763917][T24340] [ 1190.074454][T24374] FAULT_INJECTION: forcing a failure. [ 1190.074454][T24374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.135930][T24374] CPU: 0 PID: 24374 Comm: syz.1.7227 Not tainted syzkaller #0 [ 1190.143424][T24374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1190.154002][T24374] Call Trace: [ 1190.157289][T24374] [ 1190.160393][T24374] dump_stack_lvl+0x188/0x250 [ 1190.165108][T24374] ? show_regs_print_info+0x20/0x20 [ 1190.170492][T24374] ? load_image+0x400/0x400 [ 1190.175000][T24374] ? __lock_acquire+0x7d10/0x7d10 [ 1190.180299][T24374] should_fail+0x38c/0x4c0 [ 1190.184879][T24374] _copy_to_user+0x2e/0x130 [ 1190.189408][T24374] simple_read_from_buffer+0xe3/0x150 [ 1190.194908][T24374] proc_fail_nth_read+0x1a6/0x220 [ 1190.199948][T24374] ? proc_fault_inject_write+0x310/0x310 [ 1190.205586][T24374] ? fsnotify_perm+0x254/0x560 [ 1190.210363][T24374] ? proc_fault_inject_write+0x310/0x310 [ 1190.216012][T24374] vfs_read+0x301/0xd60 [ 1190.220283][T24374] ? kernel_read+0x1e0/0x1e0 [ 1190.224982][T24374] ? __fget_files+0x40f/0x480 [ 1190.229677][T24374] ? mutex_lock_nested+0x17/0x20 [ 1190.234715][T24374] ? __fdget_pos+0x2bf/0x370 [ 1190.239393][T24374] ? ksys_read+0x71/0x260 [ 1190.243911][T24374] ksys_read+0x152/0x260 [ 1190.248255][T24374] ? vfs_write+0xd60/0xd60 [ 1190.252693][T24374] ? lockdep_hardirqs_on+0x94/0x140 [ 1190.257898][T24374] do_syscall_64+0x4c/0xa0 [ 1190.262326][T24374] ? clear_bhb_loop+0x30/0x80 [ 1190.267021][T24374] ? clear_bhb_loop+0x30/0x80 [ 1190.271794][T24374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1190.277780][T24374] RIP: 0033:0x7faf3743cfce [ 1190.282292][T24374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1190.305290][T24374] RSP: 002b:00007faf356d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1190.313818][T24374] RAX: ffffffffffffffda RBX: 00007faf356d66c0 RCX: 00007faf3743cfce [ 1190.321831][T24374] RDX: 000000000000000f RSI: 00007faf356d60a0 RDI: 0000000000000005 [ 1190.329834][T24374] RBP: 00007faf356d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.337813][T24374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.346011][T24374] R13: 00007faf376f6038 R14: 00007faf376f5fa0 R15: 00007fff7343ce28 [ 1190.354125][T24374] [ 1190.714788][T24389] netlink: 'syz.1.7221': attribute type 10 has an invalid length. [ 1190.772029][T24389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7221'. [ 1190.824851][T24389] device veth0_vlan left promiscuous mode [ 1190.857544][T24389] device veth0_vlan entered promiscuous mode [ 1190.911494][T24389] batman_adv: batadv0: Adding interface: veth0_vlan [ 1190.933169][T24389] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.176854][T24389] batman_adv: batadv0: Interface activated: veth0_vlan [ 1191.235960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.271126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.330753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1193.805120][T24410] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7232'. [ 1194.157750][T24432] netlink: 'syz.2.7243': attribute type 10 has an invalid length. [ 1194.171700][T24432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7243'. [ 1197.092493][T24459] device wlan0 entered promiscuous mode [ 1197.139527][T24466] netlink: 'syz.0.7257': attribute type 10 has an invalid length. [ 1197.174399][T24466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7257'. [ 1197.207296][T24470] netlink: 1403 bytes leftover after parsing attributes in process `syz.2.7259'. [ 1200.096273][T24509] netlink: 'syz.0.7275': attribute type 10 has an invalid length. [ 1200.118972][T24509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1200.182564][T24513] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7277'. [ 1200.254349][T24516] netlink: 'syz.0.7279': attribute type 29 has an invalid length. [ 1200.281057][T24516] netlink: 'syz.0.7279': attribute type 29 has an invalid length. [ 1200.326470][T24522] netlink: 'syz.0.7279': attribute type 29 has an invalid length. [ 1200.580318][T24535] netlink: 'syz.4.7281': attribute type 41 has an invalid length. [ 1201.652240][T24557] netlink: 'syz.4.7291': attribute type 10 has an invalid length. [ 1201.681810][T24557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7291'. [ 1201.735313][T24557] batman_adv: batadv0: Adding interface: veth0_vlan [ 1201.755235][T24557] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.789860][T24557] batman_adv: batadv0: Interface activated: veth0_vlan [ 1204.512616][T24574] netlink: 'syz.3.7300': attribute type 41 has an invalid length. [ 1204.835114][T24599] netlink: 'syz.3.7309': attribute type 10 has an invalid length. [ 1204.865853][T24599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7309'. [ 1206.420093][T24644] netlink: 'syz.4.7325': attribute type 10 has an invalid length. [ 1206.435821][T24644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7325'. [ 1206.473899][T24628] netlink: 'syz.1.7320': attribute type 41 has an invalid length. [ 1208.889602][T24675] netlink: 'syz.1.7338': attribute type 10 has an invalid length. [ 1208.924348][T24675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7338'. [ 1209.221223][T24696] netlink: 'syz.2.7340': attribute type 41 has an invalid length. [ 1212.238813][T24708] netlink: 'syz.3.7351': attribute type 10 has an invalid length. [ 1212.281429][T24708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7351'. [ 1212.381595][T24718] netlink: 'syz.1.7354': attribute type 10 has an invalid length. [ 1212.415407][T24718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7354'. [ 1214.937288][T24760] netlink: 'syz.1.7370': attribute type 10 has an invalid length. [ 1214.952526][T24760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7370'. [ 1217.023838][T24779] device sit0 entered promiscuous mode [ 1217.452987][T24785] ------------[ cut here ]------------ [ 1217.458576][T24785] WARNING: CPU: 1 PID: 24785 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 1217.468632][T24785] Modules linked in: [ 1217.472730][T24785] CPU: 1 PID: 24785 Comm: syz.3.7380 Not tainted syzkaller #0 [ 1217.480474][T24785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.491205][T24785] RIP: 0010:perf_pending_task+0x358/0x470 [ 1217.498275][T24785] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 1217.518637][T24785] RSP: 0018:ffffc9000309f9d8 EFLAGS: 00010293 [ 1217.525027][T24785] RAX: ffffffff819ad468 RBX: ffff888079989c30 RCX: ffff888029148000 [ 1217.533194][T24785] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1217.541225][T24785] RBP: 0000000000000001 R08: ffff888029148a13 R09: 1ffff11005229142 [ 1217.549543][T24785] R10: dffffc0000000000 R11: ffffed1005229143 R12: ffff888029148000 [ 1217.557670][T24785] R13: ffff888079be4558 R14: ffff888079989a00 R15: 1ffff1100f331340 [ 1217.566058][T24785] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1217.575279][T24785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.582109][T24785] CR2: 0000000100000001 CR3: 000000000c08e000 CR4: 00000000003506e0 [ 1217.590334][T24785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1217.598651][T24785] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1217.607452][T24785] Call Trace: [ 1217.610931][T24785] [ 1217.613981][T24785] task_work_run+0x125/0x1a0 [ 1217.619050][T24785] do_exit+0x626/0x20c0 [ 1217.623624][T24785] ? put_task_struct+0x80/0x80 [ 1217.628732][T24785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1217.634922][T24785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1217.641236][T24785] do_group_exit+0x12e/0x300 [ 1217.646081][T24785] get_signal+0x6ca/0x12c0 [ 1217.650550][T24785] arch_do_signal_or_restart+0xe7/0x12c0 [ 1217.656350][T24785] ? irqentry_enter+0x33/0x50 [ 1217.661146][T24785] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1217.667197][T24785] ? get_sigframe_size+0x10/0x10 [ 1217.672364][T24785] ? rcu_is_watching+0x11/0xa0 [ 1217.677232][T24785] exit_to_user_mode_loop+0x9e/0x130 [ 1217.682618][T24785] exit_to_user_mode_prepare+0xee/0x180 [ 1217.688237][T24785] syscall_exit_to_user_mode+0x16/0x40 [ 1217.693892][T24785] do_syscall_64+0x58/0xa0 [ 1217.698446][T24785] ? clear_bhb_loop+0x30/0x80 [ 1217.703227][T24785] ? clear_bhb_loop+0x30/0x80 [ 1217.708032][T24785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1217.714063][T24785] RIP: 0033:0x7f6cb5cb0799 [ 1217.718652][T24785] Code: Unable to access opcode bytes at RIP 0x7f6cb5cb076f. [ 1217.726086][T24785] RSP: 002b:00007f6cb3ee90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1217.734712][T24785] RAX: fffffffffffffe00 RBX: 00007f6cb5f2a098 RCX: 00007f6cb5cb0799 [ 1217.743108][T24785] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6cb5f2a098 [ 1217.751211][T24785] RBP: 00007f6cb5f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.759531][T24785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.767846][T24785] R13: 00007f6cb5f2a128 R14: 00007fff7bdf0110 R15: 00007fff7bdf01f8 [ 1217.776224][T24785] [ 1217.779264][T24785] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1217.786645][T24785] CPU: 1 PID: 24785 Comm: syz.3.7380 Not tainted syzkaller #0 [ 1217.794302][T24785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.804349][T24785] Call Trace: [ 1217.807725][T24785] [ 1217.810676][T24785] dump_stack_lvl+0x188/0x250 [ 1217.815350][T24785] ? show_regs_print_info+0x20/0x20 [ 1217.820636][T24785] ? load_image+0x400/0x400 [ 1217.825255][T24785] panic+0x2e5/0x810 [ 1217.829170][T24785] ? bpf_jit_dump+0xd0/0xd0 [ 1217.833842][T24785] ? perf_pending_task+0x358/0x470 [ 1217.838970][T24785] __warn+0x248/0x2b0 [ 1217.843060][T24785] ? perf_pending_task+0x358/0x470 [ 1217.848276][T24785] report_bug+0x1b7/0x2e0 [ 1217.852795][T24785] handle_bug+0x3a/0x70 [ 1217.857162][T24785] exc_invalid_op+0x16/0x40 [ 1217.861770][T24785] asm_exc_invalid_op+0x16/0x20 [ 1217.866617][T24785] RIP: 0010:perf_pending_task+0x358/0x470 [ 1217.872673][T24785] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 1217.892654][T24785] RSP: 0018:ffffc9000309f9d8 EFLAGS: 00010293 [ 1217.898728][T24785] RAX: ffffffff819ad468 RBX: ffff888079989c30 RCX: ffff888029148000 [ 1217.906691][T24785] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1217.914959][T24785] RBP: 0000000000000001 R08: ffff888029148a13 R09: 1ffff11005229142 [ 1217.923124][T24785] R10: dffffc0000000000 R11: ffffed1005229143 R12: ffff888029148000 [ 1217.931293][T24785] R13: ffff888079be4558 R14: ffff888079989a00 R15: 1ffff1100f331340 [ 1217.939485][T24785] ? perf_pending_task+0x358/0x470 [ 1217.944705][T24785] ? perf_pending_task+0x358/0x470 [ 1217.950008][T24785] task_work_run+0x125/0x1a0 [ 1217.954595][T24785] do_exit+0x626/0x20c0 [ 1217.959030][T24785] ? put_task_struct+0x80/0x80 [ 1217.963899][T24785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1217.970146][T24785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1217.976298][T24785] do_group_exit+0x12e/0x300 [ 1217.981008][T24785] get_signal+0x6ca/0x12c0 [ 1217.985679][T24785] arch_do_signal_or_restart+0xe7/0x12c0 [ 1217.991343][T24785] ? irqentry_enter+0x33/0x50 [ 1217.996051][T24785] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1218.002411][T24785] ? get_sigframe_size+0x10/0x10 [ 1218.007364][T24785] ? rcu_is_watching+0x11/0xa0 [ 1218.012350][T24785] exit_to_user_mode_loop+0x9e/0x130 [ 1218.017640][T24785] exit_to_user_mode_prepare+0xee/0x180 [ 1218.023274][T24785] syscall_exit_to_user_mode+0x16/0x40 [ 1218.028764][T24785] do_syscall_64+0x58/0xa0 [ 1218.033167][T24785] ? clear_bhb_loop+0x30/0x80 [ 1218.037852][T24785] ? clear_bhb_loop+0x30/0x80 [ 1218.042617][T24785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1218.048509][T24785] RIP: 0033:0x7f6cb5cb0799 [ 1218.052924][T24785] Code: Unable to access opcode bytes at RIP 0x7f6cb5cb076f. [ 1218.060356][T24785] RSP: 002b:00007f6cb3ee90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1218.068984][T24785] RAX: fffffffffffffe00 RBX: 00007f6cb5f2a098 RCX: 00007f6cb5cb0799 [ 1218.077042][T24785] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6cb5f2a098 [ 1218.085105][T24785] RBP: 00007f6cb5f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.093077][T24785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.101039][T24785] R13: 00007f6cb5f2a128 R14: 00007fff7bdf0110 R15: 00007fff7bdf01f8 [ 1218.109282][T24785] [ 1218.112920][T24785] Kernel Offset: disabled [ 1218.117240][T24785] Rebooting in 86400 seconds..