last executing test programs:

16.327039619s ago: executing program 2 (id=7383):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

11.422574401s ago: executing program 2 (id=7405):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001ffeffff7f000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000000000000)

7.615883681s ago: executing program 1 (id=7416):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7473, '\x00', 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000)
recvmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000022)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x429}, {&(0x7f0000000740)}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x4080)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x9)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"})
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f8484300", 0x16}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)

7.558071793s ago: executing program 2 (id=7417):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902})
ioctl$TUNSETVNETHDRSZ(r3, 0x800454e0, &(0x7f0000000480)=0x70dfd79b)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x3, [@fwd={0x6}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3}, @float={0xc, 0x0, 0x0, 0x10, 0x2}, @volatile={0x8, 0x0, 0x0, 0x9, 0x4}, @var={0x8, 0x0, 0x0, 0xe, 0x4, 0x2}, @float={0xe, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x4}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0xf, 0x3}, {0xc, 0x5}, {0xc, 0x1}, {0xb, 0x2}, {0xb, 0x3}, {0xd, 0x3}, {0xb}, {0x4, 0x5}, {0x9, 0x5}]}, @struct={0xb, 0x4, 0x0, 0x4, 0x1, 0x5, [{0xa, 0x1, 0x1}, {0x9, 0x2, 0x5}, {0x8, 0x4, 0x824}, {0xd, 0x2, 0x8001}]}]}, {0x0, [0x30]}}, &(0x7f0000000680)=""/227, 0x11f, 0xe3, 0x0, 0x8, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', r4, r5, 0x0, 0x4}, 0x50)

7.550357154s ago: executing program 4 (id=7418):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@i, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e", 0x2c}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
sendmsg$inet(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000009c0)="34388c8f440ea24846e16299ea1e09b20c20bf3b26b8e309237e5cde63affc68d026f10ded518ba1484819183a5ce83b4fe1bee03a20f41b16e07ee81e3fb21a44164333cdaa3219d1e672780eb8c38d5b1770994c3977dd609cb197e2ced9d92d7c6552107595ca3a69843d354e5c74f17533c69ad2728d5277ec065d9568f6d77d6115a73d632d36cd191152eeb34ce24a4e336cda9f9bda1f0fc559039c7c66550d1c1ccfdbe0a82c8f6c325663ededab0fefcf07585ef424e5b0e15e326a3c4e1c582596a81be2f5be14073f0b92882e553b06d830077e44564cdfed450358a60ccdab59af47de6a6000e9d14f85f06a485dac885efa", 0xf8}, {&(0x7f0000000b00)="a4449ba1250deed8a2de7d6de8d7835b51a859f2060773ad246a11b03cd07deb5b3a", 0x22}, {&(0x7f0000000b80)="dc89ac3f3e569bd4eeb4d3e4ea4f8bca602424514ff9a0acf65b0272209338ac09cc01cf61eee598278503a9870c2f497c474403c87b0ab4f3bafea7f0815cde79c7f3ce80e1ee2158b72e3666", 0x4d}, {&(0x7f0000000c00)="97bc1f2785cd1e26ceb44053ad6ce881b427514127a482fb8d2e00e1be3dd9b3b33eb4e2433c09276ff48eff7b25bf3e19052fafc4cc71a9fd7e931d398a56acf5d667c33d63d495cb99011f4d7128b7930a0f735dd2fc60a01909699f4892d51c2f345c11dfa8445159538bb31317c4c4cbcde67691f470043acccf8904109845dbab708df46d04e8d5ef91570043d9d7a676727244718b78fef3be", 0x9c}, {&(0x7f0000000cc0)="a08d60fb94133b3466f79592f8d5c0da1f6482cd7a020013c183d902a9aaa9b7c2552b3a6c8d8fd861ece117224dd8a78da30e3af8f9fd6a0a682eb31b67f375b0d4df13ac1b0132117ca393b99f0a04638208d689126bc351955554e8c5fa3368fe3903198763ea12a0b59691e563b2b0c288ca0c78116f676ee8cc7baf96a8386273078b611cbf98dc0b171f207057", 0x90}], 0x5}, 0x4000891)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc6a}, 0x0)
recvmsg$kcm(r2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010)
socket$kcm(0x10, 0x2, 0x4)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x40, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = socket$kcm(0xa, 0x1, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r9}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r9, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x7, [@datasec={0xd, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x200, 0x2}], "434bbd"}, @fwd={0xb}, @restrict={0x9, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x8}}, @float={0xf, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x2e]}}, &(0x7f0000000340)=""/28, 0x77, 0x1c, 0x1, 0x1}, 0x28)
r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x2, 0x480000, 0x2, 0x14048, r9, 0xfffffff8, '\x00', 0x0, r10, 0x1, 0x1, 0x0, 0xf, @void, @value, @value=r11}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000680)={&(0x7f00000000c0)="105108ff", &(0x7f0000000140)=""/58, &(0x7f0000000480)="44d77840e87625871224650656005712a165e6e83a03b7009973259edb62543fd5b1053053ac797c284d76de0d1b9b03ad34faf75a9d29b5ad7673562614fdc2f8474b36f8f8647bca644fb7334da1fe97f9f6c92b6e628fad286f6053dae8558d781fe2de8f1a52d8679dd2dd0fcfde053c0e920a3efa39d35bda420b997e8300b2f5d48995733bd54d8aeb494920a9af5bf3bfb0c9", &(0x7f00000005c0)="83dcc6c6a2371d2dfa906c2d6178fbb9e6ff5303417081a08e5c0d6aa81d85203eb07c3f1e48b38d558fade52d7e7887c53b05408ac4bc200790599f618c231992f65173c747cf071639003f8cb83ffea5f28aa71d7c7ea3a994536a79d80efe4c662c3b50bbec9b03ee34d02e6b08953b4ca12ef5392c34aff0fa96dd9bb4d9afc64d12b25f8abd739b83ee8c67800525bc1eb12acd044b5feea207665dccfc3b9e", 0x4d, r8, 0x4}, 0x38)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

7.429976049s ago: executing program 3 (id=7420):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

7.330576524s ago: executing program 1 (id=7421):
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a0603000000"], 0xfdef) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22"], 0xfdef) (async)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000001580)=@in={0x2, 0x4e20, @multicast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}], 0x18}, 0x40)

7.20583836s ago: executing program 2 (id=7423):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

7.065486407s ago: executing program 3 (id=7424):
perf_event_open(&(0x7f0000000100)={0x2c1a205c06258c37, 0x80, 0x6, 0x7, 0x8, 0xe2, 0x0, 0x9, 0x2001, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x4, @perf_config_ext={0xc300, 0x1}, 0x20, 0x3ff, 0x7fff, 0x4, 0x4, 0x6, 0xa983, 0x0, 0x2, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x41449ce2479ef461)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33)

7.028234438s ago: executing program 0 (id=7425):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$sock(r0, 0x0, 0x2004c0c0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000080)=0xd0)

6.951016512s ago: executing program 2 (id=7426):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r4)
write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

6.639084557s ago: executing program 3 (id=7427):
r0 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000031e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

6.511969493s ago: executing program 4 (id=7428):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0xd5, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xd6, 0x8, 0x0, 0x0}}, 0x10) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000000000000000000390000000000009500000000000000cd1a00000000000095000000f7b548b858676d9a994fa3a08086729bc0f672d1dfc6abc11a9060304d4e7f5004eb10fa757df9d17cb8d9cd777b8ebc6a23bb48ab2b78d1730f1248d8fb8b2627d6a1a551ae8b131ec9adcaca2a9a8a9c1780b5ea7146921820ebaeccaea1737cf15b8f3bfd4fe87e7aa2836900000000000062596cf83352a8246a7d0bf6d141225af71dbdc5823bfa0838cfba7f0217b5796e09a5d33c275cd69adc5641a56253a8174de9431c149f54bc"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', r3}, 0x94) (async)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}}}}], 0x20}, 0x8840)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x41}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64)
r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
close(0xffffffffffffffff) (async, rerun: 32)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) (async)
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x0) (async)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000500)=r8, 0x4) (async)
setsockopt$sock_attach_bpf(r9, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) (rerun: 64)
sendmsg$kcm(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000000c0)="dff85775ab7ae5690477da4631eb64ecf19a324c62afa711e800906b2a2aa9c39aba4369021f73b7d5cd8acfa7b2148de4646ae6af882b2df0746b9eef5864bbe212c888b43c26b2d59fde263a30459029313a7aa7dffcfa0a9c6d830c3f3172c8444ace53752a38ad721da4fba484ff16d3d9971d80711cf8274b1d2b8aa49fb011eb193cbd055dd0aa35c443f2d9dd7a5047c3453de3d32ea979bd7a3d8de23e67656fdd7201137ae24d03e9474dbf6e7222ee31ac353f8c35fa55684d783f20a3e26050cd408080033412edce42797d25e29c43e1467d3585b31833209f36e50b304737620f", 0xe7}, {&(0x7f00000001c0)="2d9fe6590a618fb6b587d2199746b76ed1bce5b937b9c3381092b4981b716008a5b1a530562e2274fd59996badc1e0fab631289f27264d4114d8a146cb2b78b9cccd64f97492aabf72032654bf02ac82ae2525800fbe4a921f71e4580d678c373bed9810d5b2c70d2a0e25", 0x6b}, {&(0x7f0000000240)="001ee48c162ea5081ee837f34ba0a942472ed8ef5047024f3921d585fc6ca187855113ac9a744d223045c67255e05fbca4bfba18dc31e887f5bfdeb4c6fc784f0aa41c7dfbf2cf17b7def9893966e51cc7d88d34a253df96307366f6db07e0ac2b286049b9a1a0696649e3e3a4079e7be008fff73f20e832ac56bb02388feb2afe555c5e4b17fbc96e7946806cea792915de746697d00ab1210c867802bebfc03447d878ed6124daee191f32144e1326c7e9f82b5049c370e3e25b13", 0xbc}, {&(0x7f0000000700)="bfd1ac154a1b7e30d56b521dc94ee96155d58290354b357a71dba1069855d8600175fdb7c8562ad22d36d06af96664fb1ead5fef79107d69f5f297e7fab5cc5d5faadc082ac94df8b4ab1f83d5880a92f234db6416777a1a97a351359aa3f3b29143d89a021af90b9c097c8bd7a46f2376541020ba5eae0231879b2c76fb810d4f300f5da97040edcb99be4792f1edae4deee8cb57ae4082f948f259a0683561efb9345c9974d3c6a7db7b42b96b05408d1e49cc5bee3ea0b73c40e00163152396a22c262b81e4bf98449770f8c03eecbcd5341aa05124f4751ab63c8bbd4fbea8d28e9beea425b24818877b63eb04d23aa2814bc1bf3b20924d100851de498e9f5bc23e6179c888e413c643abe1c9ead2c206bf03185ef7adfb4dee60ab956697db889ac456eb6c5f7d0ce93dfb65fb006da29c9e22618c61e3ec583c12feaab28d7f1cd53348372c2d03299c93d13dbd68508dae5b207c1a29a9781c4136cc72edea0c8db69fa068d8b729d6e06e1f2a4b0fa6fefb8f8cb55c7c80b12b6472cff90235463a6e6c4dc3a60c10cf08e899866cfcf5ba46f3b5d8c4cc6cbbdfa9ae6bd375e1855448a1e280e6a4401178a91d9124ace17623ffc9b0003e260c8cc6de32f567d03b60d1fc02b236e1c3d2c7555d45025d6a6bb557224c37f4388ef761f1b11592203bac54133f76f2a26b858160c33e4283bbe3bc7f7d566bcbb0fd6202cb056260a586dc31f4ac597dc46fa85bb97e8161fb353acfc97c3bcdf3e8271f650b1a1327662642cd5a4a24be7c754fef3294609c8e6b0385ebfcbb253048451b8aff463c7a7b031f6c8a2624719b86ab6c1ef6b81b0e8816b206e4900f697d9aa92c8bf6e76d4773c705a38ba1f57d2058c230107c0adf507faf4170942802d8fd29cdbdc386c675e7162783202ee97c46c4a3635fe4aaa1c2dc2c6893768f97c643b2fb9fd45b9a55774ed1de89d0e9ed5ca0ebecf2171a8998f2a2bc81b8933ea6ec122c7b5488a5ae4983e1d6ffec5415d26ce76c2979adb8ee1302d6b306b6434a3505739eb53d24a2867cdf2c486055151a849eadb4a7ab549124b9ddfa3811082b975efe39e85cab59cf472f5eb9430317e1c6bc3258c27c13679bcf863b6241fa3fcdabc789ba2789c81c41bfb6300f88421c63ce8aaa08cc910b113e935747a8b515e76771efcef5c7b29306dbc620d9898b8355feb619c68033dae72434a7dacce15134f87cf0b752162981b3072438f2345ba71e5c6c", 0x37f}], 0x4}, 0x4000000)

6.511351093s ago: executing program 0 (id=7429):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2000000}, 0x80)

6.233852056s ago: executing program 0 (id=7430):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x101008, 0x0, 0x0, 0x8, 0x100002, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000080080000000100000080000000280cfdcf850ef2fa818c0a2b1bdbc5a579efa1a1b1894e004127fa34a02581d4d067876b6d0bcf9d3aefe6f9bd6d83673fe1794c075ba18582f389f836c25ccda27299187dde813b7ff66ea1a7581212ce18bb795f93ff82af88caa9aec0d9032e47ca7917fab48a05ab3957d931c9cfbdf8982f3e014f3009d67b04d679c15caaa64130200fd9c3367d9180ce80710c8902ee08ed7ffc746ec0208249186fe6191e5c97e9b44b7044af447c89203c98f68f63b2e68285e7a988f44df2c8eaceca0c8ad01b456ad5fdd3096476939c325938be0c7be6b552457f128a33c2d779dd46", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/27], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000c80)={r4, &(0x7f0000000b00)="d1f1f43ace2e025994e0da067940afd593eefbb237b9c7b47566d9a99a63afbc43972e28232fc82ee2ca26e22e9a1d6aa6910f641818213087660061d636b5b10848de1f91b817444ab011e9187c88591f57432674a3844dbd5935b829dfc47cca77b109fe4577e89ca09aad09f74904848ef17566383319b09f870f576721ca0abac4b11c1d5de5c8048954b83f10a3551c777f09d6fa6d34bf352ab3d409e9ce70662d668468c9c338a281eb5c2d142c356ce48ade00aa331a203a220a6acc3a2add66cd0156c563d3508289f8", &(0x7f0000000c00)=""/114}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2.739798551s ago: executing program 3 (id=7431):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x100000000000000)

2.703241793s ago: executing program 1 (id=7432):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000140)) (async)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x102) (async)
r2 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmsg$kcm(r2, 0x0, 0x10000) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x5b, 0x8, 0x0, 0x0}}, 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1d) (async)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
socket$kcm(0x2b, 0x1, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa27, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xc2ba, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc)

2.54498362s ago: executing program 0 (id=7433):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB    \x00'}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r1}, 0xc)

2.471005163s ago: executing program 4 (id=7434):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b1f00000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

817.251062ms ago: executing program 1 (id=7435):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0xe8, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc3", 0x2b}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

779.834524ms ago: executing program 3 (id=7436):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

670.030939ms ago: executing program 4 (id=7437):
perf_event_open(&(0x7f0000000100)={0x2c1a205c06258c37, 0x80, 0x6, 0x7, 0x8, 0xe2, 0x0, 0x9, 0x2001, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x4, @perf_config_ext={0xc300, 0x1}, 0x20, 0x3ff, 0x7fff, 0x4, 0x4, 0x6, 0xa983, 0x0, 0x2, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x41449ce2479ef461)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33)

669.639119ms ago: executing program 2 (id=7438):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7"], 0xfdef)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x2, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x3170fdf7a924cfe9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x22, 0x2, 0x24)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x100000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080))

657.419069ms ago: executing program 1 (id=7439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (fail_nth: 1)

599.990002ms ago: executing program 0 (id=7440):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x26}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffff0001, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x0, 0x26, 0x0, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r6, 0x0, 0x0}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3}, 0x2000, 0xac5d, 0x20, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0)

538.026125ms ago: executing program 4 (id=7441):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc)
r1 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=r5, 0x4)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="2d84756765746c6220"], 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400d0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0a2363b4438a55d1a5e47b8bffc", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r8], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r9}, &(0x7f0000000200), &(0x7f00000009c0)=r8}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r9, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20)
socket$kcm(0x10, 0x3, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r10}, 0x18)

524.377376ms ago: executing program 3 (id=7442):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002040)={r3, 0x0, 0x0}, 0x10)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000004000008500", @ANYRES32=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700040005"], 0xfe33)

193.809461ms ago: executing program 1 (id=7443):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x101008, 0x0, 0x0, 0x8, 0x100002, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0200000004000080080000000100000080000000280cfdcf850ef2fa818c0a2b1bdbc5a579efa1a1b1894e004127fa34a02581d4d067876b6d0bcf9d3aefe6f9bd6d83673fe1794c075ba18582f389f836c25ccda27299187dde813b7ff66ea1a7581212ce18bb795f93ff82af88caa9aec0d9032e47ca7917fab48a05ab3957d931c9cfbdf8982f3e014f3009d67b04d679c15caaa64130200fd9c3367d9180ce80710c8902ee08ed7ffc746ec0208249186fe6191e5c97e9b44b7044af447c89203c98f68f63b2e68285e7a988f44df2c8eaceca0c8ad01b456ad5fdd3096476939c325938be0c7be6b552457f128a33c2d779dd46", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/27], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000c80)={r4, &(0x7f0000000b00)="d1f1f43ace2e025994e0da067940afd593eefbb237b9c7b47566d9a99a63afbc43972e28232fc82ee2ca26e22e9a1d6aa6910f641818213087660061d636b5b10848de1f91b817444ab011e9187c88591f57432674a3844dbd5935b829dfc47cca77b109fe4577e89ca09aad09f74904848ef17566383319b09f870f576721ca0abac4b11c1d5de5c8048954b83f10a3551c777f09d6fa6d34bf352ab3d409e9ce70662d668468c9c338a281eb5c2d142c356ce48ade00aa331a203a220a6acc3a2add66cd0156c563d3508289f8", &(0x7f0000000c00)=""/114}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

98.016376ms ago: executing program 0 (id=7444):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180020008f000000000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21)
bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 4 (id=7445):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(0x0, 0x0, 0x0, r0, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x25, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000140)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="02000000590200000600002fb96dbcf710e1050000008864", 0x18}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="97cafebcb71250cb5d687d010e088fee0f13fd7ddde44c52cc8a5ee41e78cb0a3605521895df02a9c30ff52a2101328f8732eb4680875283fd16a6d00000000000000000635988ffffdb99a5ba5625f9c1ca0937ab32e0f075568b0000000000000000c6ece05d746534ec4a866371ccc5bcc1bdd797d985661769f7c42b5db6746eaf4301f7210fec0e5915c5b894207f73894db7d996610e14d7e4512e22814fc91974b6a95cd5b24a75aef2104dc415a2ee4eaa13fd2e2843c7ca7a86a7c2c6ab59611ed7981df623eee2ae51c716c5834fe56adca7ba7e153ef389b044bc9d5ae5cf9db9825d5f596ae76a83bfdc36d7f7d0791c1124e560904f2114a21174268073ae24e5283c68d82829d99e5be9f972a2fb0000000000000100000099653fa970ea29738db9fa", 0x12a}, {&(0x7f0000000740)}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000000000000000000ff830000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)

kernel console output (not intermixed with test programs):

_current_label_crit_section+0x170/0x170
[ 1465.922549][T27045]  ? trace_call_bpf+0xbf/0x6b0
[ 1465.927332][T27045]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1465.933220][T27045]  ? bpf_lsm_capable+0x5/0x10
[ 1465.937887][T27045]  ? security_capable+0x85/0xb0
[ 1465.942735][T27045]  genl_rcv_msg+0x601/0x790
[ 1465.947262][T27045]  ? genl_bind+0x360/0x360
[ 1465.951668][T27045]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1465.958021][T27045]  netlink_rcv_skb+0x1ef/0x440
[ 1465.962821][T27045]  ? genl_bind+0x360/0x360
[ 1465.967252][T27045]  ? netlink_ack+0x1160/0x1160
[ 1465.972034][T27045]  ? down_read+0x1a8/0x2d0
[ 1465.976459][T27045]  genl_rcv+0x24/0x40
[ 1465.980443][T27045]  netlink_unicast+0x7ad/0x920
[ 1465.985215][T27045]  netlink_sendmsg+0x8ad/0xbd0
[ 1465.989988][T27045]  ? netlink_getsockopt+0x550/0x550
[ 1465.995194][T27045]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1466.000749][T27045]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1466.006038][T27045]  ? security_socket_sendmsg+0x7c/0xa0
[ 1466.011497][T27045]  ? netlink_getsockopt+0x550/0x550
[ 1466.016697][T27045]  ____sys_sendmsg+0x5ed/0x9a0
[ 1466.021468][T27045]  ? __sys_sendmsg_sock+0x30/0x30
[ 1466.026491][T27045]  ? __import_iovec+0x306/0x510
[ 1466.031369][T27045]  ? import_iovec+0x6f/0xa0
[ 1466.035893][T27045]  ___sys_sendmsg+0x2a2/0x360
[ 1466.040580][T27045]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1466.045383][T27045]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1466.050269][T27045]  ? __x64_sys_sendmsg+0x80/0x80
[ 1466.055218][T27045]  ? lockdep_hardirqs_on+0x94/0x140
[ 1466.060426][T27045]  do_syscall_64+0x4c/0xa0
[ 1466.064841][T27045]  ? clear_bhb_loop+0x60/0xb0
[ 1466.069513][T27045]  ? clear_bhb_loop+0x60/0xb0
[ 1466.074190][T27045]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1466.080083][T27045] RIP: 0033:0x7f980799e159
[ 1466.084499][T27045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1466.104102][T27045] RSP: 002b:00007f980883f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1466.112515][T27045] RAX: ffffffffffffffda RBX: 00007f9807c25fa0 RCX: 00007f980799e159
[ 1466.120482][T27045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1466.128449][T27045] RBP: 00007f9807a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1466.136415][T27045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1466.144382][T27045] R13: 00007f9807c26038 R14: 00007f9807c25fa0 R15: 00007fff08f27608
[ 1466.152364][T27045]  </TASK>
[ 1466.159358][T27060] netlink: 'syz.0.7000': attribute type 10 has an invalid length.
[ 1466.167266][T27060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7000'.
[ 1466.185830][T27060] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1466.247106][T27068] device syzkaller0 entered promiscuous mode
[ 1466.294040][T27076] device syzkaller0 entered promiscuous mode
[ 1470.294563][T27111] netlink: 'syz.1.7015': attribute type 29 has an invalid length.
[ 1470.685961][T27130] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7018'.
[ 1472.178332][T27112] device syzkaller0 entered promiscuous mode
[ 1472.205274][T27111] netlink: 'syz.1.7015': attribute type 29 has an invalid length.
[ 1472.250585][T27130] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1472.261481][T27130] CPU: 0 PID: 27130 Comm: syz.2.7018 Not tainted syzkaller #0
[ 1472.268966][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1472.279010][T27130] Call Trace:
[ 1472.282287][T27130]  <TASK>
[ 1472.285208][T27130]  dump_stack_lvl+0x188/0x24e
[ 1472.289893][T27130]  ? show_regs_print_info+0x12/0x12
[ 1472.295097][T27130]  ? load_image+0x410/0x410
[ 1472.299596][T27130]  sysfs_warn_dup+0x8a/0xa0
[ 1472.304095][T27130]  sysfs_do_create_link_sd+0xc0/0x110
[ 1472.309461][T27130]  device_add+0x83b/0x1050
[ 1472.313880][T27130]  wiphy_register+0x1d8b/0x2aa0
[ 1472.318742][T27130]  ? cfg80211_event_work+0x40/0x40
[ 1472.323850][T27130]  ? minstrel_ht_alloc+0x894/0xa20
[ 1472.328949][T27130]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1472.335030][T27130]  ieee80211_register_hw+0x2d48/0x39f0
[ 1472.340575][T27130]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1472.346107][T27130]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1472.351643][T27130]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1472.357263][T27130]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1472.363168][T27130]  ? __debug_object_init+0xed/0x440
[ 1472.368371][T27130]  ? memset+0x1e/0x40
[ 1472.372356][T27130]  ? __hrtimer_init+0x189/0x270
[ 1472.377207][T27130]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1472.382939][T27130]  ? memcpy+0x3c/0x60
[ 1472.386920][T27130]  hwsim_new_radio_nl+0xab7/0xc90
[ 1472.391957][T27130]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1472.397499][T27130]  ? end_current_label_crit_section+0x170/0x170
[ 1472.403742][T27130]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1472.409663][T27130]  ? bpf_lsm_capable+0x5/0x10
[ 1472.414338][T27130]  ? security_capable+0x85/0xb0
[ 1472.419190][T27130]  genl_rcv_msg+0x601/0x790
[ 1472.423697][T27130]  ? genl_bind+0x360/0x360
[ 1472.428108][T27130]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1472.434471][T27130]  netlink_rcv_skb+0x1ef/0x440
[ 1472.439235][T27130]  ? genl_bind+0x360/0x360
[ 1472.443651][T27130]  ? netlink_ack+0x1160/0x1160
[ 1472.448418][T27130]  ? down_read+0x1a8/0x2d0
[ 1472.452835][T27130]  genl_rcv+0x24/0x40
[ 1472.456811][T27130]  netlink_unicast+0x7ad/0x920
[ 1472.461579][T27130]  netlink_sendmsg+0x8ad/0xbd0
[ 1472.466345][T27130]  ? netlink_getsockopt+0x550/0x550
[ 1472.471539][T27130]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1472.477085][T27130]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1472.482362][T27130]  ? security_socket_sendmsg+0x7c/0xa0
[ 1472.487815][T27130]  ? netlink_getsockopt+0x550/0x550
[ 1472.493013][T27130]  ____sys_sendmsg+0x5ed/0x9a0
[ 1472.497778][T27130]  ? __sys_sendmsg_sock+0x30/0x30
[ 1472.502800][T27130]  ? __import_iovec+0x306/0x510
[ 1472.507657][T27130]  ? import_iovec+0x6f/0xa0
[ 1472.512166][T27130]  ___sys_sendmsg+0x2a2/0x360
[ 1472.516840][T27130]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1472.521634][T27130]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1472.526481][T27130]  ? __x64_sys_sendmsg+0x80/0x80
[ 1472.531425][T27130]  ? lockdep_hardirqs_on+0x94/0x140
[ 1472.536624][T27130]  do_syscall_64+0x4c/0xa0
[ 1472.541034][T27130]  ? clear_bhb_loop+0x60/0xb0
[ 1472.545711][T27130]  ? clear_bhb_loop+0x60/0xb0
[ 1472.550385][T27130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1472.556279][T27130] RIP: 0033:0x7f784bd9e159
[ 1472.560717][T27130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1472.580333][T27130] RSP: 002b:00007f7849ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1472.588745][T27130] RAX: ffffffffffffffda RBX: 00007f784c025fa0 RCX: 00007f784bd9e159
[ 1472.596796][T27130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1472.604780][T27130] RBP: 00007f784be3506b R08: 0000000000000000 R09: 0000000000000000
[ 1472.612743][T27130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1472.620709][T27130] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1472.628714][T27130]  </TASK>
[ 1474.645321][T27165] netlink: 'syz.1.7026': attribute type 10 has an invalid length.
[ 1474.653361][T27165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7026'.
[ 1474.766909][T27165] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[ 1476.035298][T27194] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7034'.
[ 1476.127985][T27193] device syzkaller0 entered promiscuous mode
[ 1477.003334][T27194] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1477.015378][T27194] CPU: 0 PID: 27194 Comm: syz.0.7034 Not tainted syzkaller #0
[ 1477.022876][T27194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1477.032958][T27194] Call Trace:
[ 1477.036254][T27194]  <TASK>
[ 1477.039200][T27194]  dump_stack_lvl+0x188/0x24e
[ 1477.043906][T27194]  ? show_regs_print_info+0x12/0x12
[ 1477.049131][T27194]  ? load_image+0x410/0x410
[ 1477.053671][T27194]  sysfs_warn_dup+0x8a/0xa0
[ 1477.058221][T27194]  sysfs_do_create_link_sd+0xc0/0x110
[ 1477.063624][T27194]  device_add+0x83b/0x1050
[ 1477.068072][T27194]  wiphy_register+0x1d8b/0x2aa0
[ 1477.072959][T27194]  ? cfg80211_event_work+0x40/0x40
[ 1477.078091][T27194]  ? minstrel_ht_alloc+0x894/0xa20
[ 1477.083229][T27194]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1477.089322][T27194]  ieee80211_register_hw+0x2d48/0x39f0
[ 1477.094814][T27194]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1477.100409][T27194]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1477.105987][T27194]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1477.111638][T27194]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1477.117557][T27194]  ? __debug_object_init+0xed/0x440
[ 1477.122775][T27194]  ? memset+0x1e/0x40
[ 1477.126784][T27194]  ? __hrtimer_init+0x189/0x270
[ 1477.131665][T27194]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1477.137423][T27194]  ? memcpy+0x3c/0x60
[ 1477.141428][T27194]  hwsim_new_radio_nl+0xab7/0xc90
[ 1477.146497][T27194]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1477.152066][T27194]  ? end_current_label_crit_section+0x170/0x170
[ 1477.158340][T27194]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1477.164266][T27194]  ? bpf_lsm_capable+0x5/0x10
[ 1477.168966][T27194]  ? security_capable+0x85/0xb0
[ 1477.173841][T27194]  genl_rcv_msg+0x601/0x790
[ 1477.178370][T27194]  ? genl_bind+0x360/0x360
[ 1477.182804][T27194]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1477.189180][T27194]  netlink_rcv_skb+0x1ef/0x440
[ 1477.193959][T27194]  ? genl_bind+0x360/0x360
[ 1477.198395][T27194]  ? netlink_ack+0x1160/0x1160
[ 1477.203184][T27194]  ? down_read+0x1a8/0x2d0
[ 1477.207628][T27194]  genl_rcv+0x24/0x40
[ 1477.211629][T27194]  netlink_unicast+0x7ad/0x920
[ 1477.216418][T27194]  netlink_sendmsg+0x8ad/0xbd0
[ 1477.221208][T27194]  ? netlink_getsockopt+0x550/0x550
[ 1477.226428][T27194]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1477.231999][T27194]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1477.237340][T27194]  ? security_socket_sendmsg+0x7c/0xa0
[ 1477.242827][T27194]  ? netlink_getsockopt+0x550/0x550
[ 1477.248046][T27194]  ____sys_sendmsg+0x5ed/0x9a0
[ 1477.252861][T27194]  ? __sys_sendmsg_sock+0x30/0x30
[ 1477.257905][T27194]  ? __import_iovec+0x306/0x510
[ 1477.262790][T27194]  ? import_iovec+0x6f/0xa0
[ 1477.267326][T27194]  ___sys_sendmsg+0x2a2/0x360
[ 1477.272029][T27194]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1477.276870][T27194]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1477.281747][T27194]  ? __x64_sys_sendmsg+0x80/0x80
[ 1477.286724][T27194]  ? lockdep_hardirqs_on+0x94/0x140
[ 1477.291952][T27194]  do_syscall_64+0x4c/0xa0
[ 1477.296387][T27194]  ? clear_bhb_loop+0x60/0xb0
[ 1477.301081][T27194]  ? clear_bhb_loop+0x60/0xb0
[ 1477.305781][T27194]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1477.311707][T27194] RIP: 0033:0x7f9fbcb9e159
[ 1477.316137][T27194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1477.335765][T27194] RSP: 002b:00007f9fbda2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1477.344209][T27194] RAX: ffffffffffffffda RBX: 00007f9fbce25fa0 RCX: 00007f9fbcb9e159
[ 1477.352199][T27194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1477.360186][T27194] RBP: 00007f9fbcc3506b R08: 0000000000000000 R09: 0000000000000000
[ 1477.368174][T27194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1477.376166][T27194] R13: 00007f9fbce26038 R14: 00007f9fbce25fa0 R15: 00007fff0ceacee8
[ 1477.384174][T27194]  </TASK>
[ 1477.416860][T27201] device syzkaller0 entered promiscuous mode
[ 1480.519317][T27223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7041'.
[ 1481.194928][T27244] device syzkaller0 entered promiscuous mode
[ 1481.346796][T27252] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7051'.
[ 1483.307267][T27256] device syzkaller0 entered promiscuous mode
[ 1483.317474][T27252] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1483.328745][T27252] CPU: 0 PID: 27252 Comm: syz.2.7051 Not tainted syzkaller #0
[ 1483.336236][T27252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1483.346305][T27252] Call Trace:
[ 1483.349601][T27252]  <TASK>
[ 1483.352558][T27252]  dump_stack_lvl+0x188/0x24e
[ 1483.357256][T27252]  ? show_regs_print_info+0x12/0x12
[ 1483.362456][T27252]  ? load_image+0x410/0x410
[ 1483.366968][T27252]  sysfs_warn_dup+0x8a/0xa0
[ 1483.371471][T27252]  sysfs_do_create_link_sd+0xc0/0x110
[ 1483.376845][T27252]  device_add+0x83b/0x1050
[ 1483.381266][T27252]  wiphy_register+0x1d8b/0x2aa0
[ 1483.386129][T27252]  ? cfg80211_event_work+0x40/0x40
[ 1483.391242][T27252]  ? minstrel_ht_alloc+0x894/0xa20
[ 1483.396376][T27252]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1483.402446][T27252]  ieee80211_register_hw+0x2d48/0x39f0
[ 1483.407912][T27252]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1483.413451][T27252]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1483.418994][T27252]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1483.424622][T27252]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1483.430543][T27252]  ? __debug_object_init+0xed/0x440
[ 1483.435745][T27252]  ? memset+0x1e/0x40
[ 1483.439742][T27252]  ? __hrtimer_init+0x189/0x270
[ 1483.444590][T27252]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1483.450318][T27252]  ? memcpy+0x3c/0x60
[ 1483.454317][T27252]  hwsim_new_radio_nl+0xab7/0xc90
[ 1483.459358][T27252]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1483.464899][T27252]  ? end_current_label_crit_section+0x170/0x170
[ 1483.471139][T27252]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1483.477033][T27252]  ? bpf_lsm_capable+0x5/0x10
[ 1483.481704][T27252]  ? security_capable+0x85/0xb0
[ 1483.486560][T27252]  genl_rcv_msg+0x601/0x790
[ 1483.491066][T27252]  ? genl_bind+0x360/0x360
[ 1483.495477][T27252]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1483.501816][T27252]  netlink_rcv_skb+0x1ef/0x440
[ 1483.506575][T27252]  ? genl_bind+0x360/0x360
[ 1483.510988][T27252]  ? netlink_ack+0x1160/0x1160
[ 1483.515757][T27252]  ? down_read+0x1a8/0x2d0
[ 1483.520174][T27252]  genl_rcv+0x24/0x40
[ 1483.524149][T27252]  netlink_unicast+0x7ad/0x920
[ 1483.528916][T27252]  netlink_sendmsg+0x8ad/0xbd0
[ 1483.533678][T27252]  ? netlink_getsockopt+0x550/0x550
[ 1483.538874][T27252]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1483.544420][T27252]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1483.549706][T27252]  ? security_socket_sendmsg+0x7c/0xa0
[ 1483.555161][T27252]  ? netlink_getsockopt+0x550/0x550
[ 1483.560358][T27252]  ____sys_sendmsg+0x5ed/0x9a0
[ 1483.565127][T27252]  ? __sys_sendmsg_sock+0x30/0x30
[ 1483.570142][T27252]  ? __import_iovec+0x306/0x510
[ 1483.574998][T27252]  ? import_iovec+0x6f/0xa0
[ 1483.579502][T27252]  ___sys_sendmsg+0x2a2/0x360
[ 1483.584184][T27252]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1483.588979][T27252]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1483.593828][T27252]  ? __x64_sys_sendmsg+0x80/0x80
[ 1483.598771][T27252]  ? lockdep_hardirqs_on+0x94/0x140
[ 1483.603972][T27252]  do_syscall_64+0x4c/0xa0
[ 1483.608396][T27252]  ? clear_bhb_loop+0x60/0xb0
[ 1483.613070][T27252]  ? clear_bhb_loop+0x60/0xb0
[ 1483.617740][T27252]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1483.623636][T27252] RIP: 0033:0x7f784bd9e159
[ 1483.628048][T27252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1483.647648][T27252] RSP: 002b:00007f7849ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1483.656083][T27252] RAX: ffffffffffffffda RBX: 00007f784c025fa0 RCX: 00007f784bd9e159
[ 1483.664050][T27252] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1483.672014][T27252] RBP: 00007f784be3506b R08: 0000000000000000 R09: 0000000000000000
[ 1483.679976][T27252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1483.687944][T27252] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1483.695925][T27252]  </TASK>
[ 1484.292552][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.299199][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.254104][T27286] device syzkaller0 entered promiscuous mode
[ 1485.600261][T27295] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7067'.
[ 1487.083237][T27295] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1487.092323][T27295] CPU: 0 PID: 27295 Comm: syz.2.7067 Not tainted syzkaller #0
[ 1487.099794][T27295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1487.109862][T27295] Call Trace:
[ 1487.113132][T27295]  <TASK>
[ 1487.116052][T27295]  dump_stack_lvl+0x188/0x24e
[ 1487.120724][T27295]  ? show_regs_print_info+0x12/0x12
[ 1487.125907][T27295]  ? load_image+0x410/0x410
[ 1487.130428][T27295]  sysfs_warn_dup+0x8a/0xa0
[ 1487.134942][T27295]  sysfs_do_create_link_sd+0xc0/0x110
[ 1487.140306][T27295]  device_add+0x83b/0x1050
[ 1487.144728][T27295]  wiphy_register+0x1d8b/0x2aa0
[ 1487.149581][T27295]  ? cfg80211_event_work+0x40/0x40
[ 1487.154677][T27295]  ? minstrel_ht_alloc+0x894/0xa20
[ 1487.159776][T27295]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1487.165832][T27295]  ieee80211_register_hw+0x2d48/0x39f0
[ 1487.171285][T27295]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1487.176832][T27295]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1487.182385][T27295]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1487.188000][T27295]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1487.193892][T27295]  ? __debug_object_init+0xed/0x440
[ 1487.199110][T27295]  ? memset+0x1e/0x40
[ 1487.203095][T27295]  ? __hrtimer_init+0x189/0x270
[ 1487.207952][T27295]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1487.213683][T27295]  ? memcpy+0x3c/0x60
[ 1487.217665][T27295]  hwsim_new_radio_nl+0xab7/0xc90
[ 1487.222701][T27295]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1487.228243][T27295]  ? end_current_label_crit_section+0x170/0x170
[ 1487.234486][T27295]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1487.240384][T27295]  ? bpf_lsm_capable+0x5/0x10
[ 1487.245058][T27295]  ? security_capable+0x85/0xb0
[ 1487.249911][T27295]  genl_rcv_msg+0x601/0x790
[ 1487.254416][T27295]  ? genl_bind+0x360/0x360
[ 1487.258826][T27295]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1487.265170][T27295]  netlink_rcv_skb+0x1ef/0x440
[ 1487.269931][T27295]  ? genl_bind+0x360/0x360
[ 1487.274342][T27295]  ? netlink_ack+0x1160/0x1160
[ 1487.279115][T27295]  ? down_read+0x1a8/0x2d0
[ 1487.283528][T27295]  genl_rcv+0x24/0x40
[ 1487.287504][T27295]  netlink_unicast+0x7ad/0x920
[ 1487.292269][T27295]  netlink_sendmsg+0x8ad/0xbd0
[ 1487.297033][T27295]  ? netlink_getsockopt+0x550/0x550
[ 1487.302230][T27295]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1487.307774][T27295]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1487.313051][T27295]  ? security_socket_sendmsg+0x7c/0xa0
[ 1487.318505][T27295]  ? netlink_getsockopt+0x550/0x550
[ 1487.323698][T27295]  ____sys_sendmsg+0x5ed/0x9a0
[ 1487.328461][T27295]  ? __sys_sendmsg_sock+0x30/0x30
[ 1487.333474][T27295]  ? __import_iovec+0x306/0x510
[ 1487.338330][T27295]  ? import_iovec+0x6f/0xa0
[ 1487.342831][T27295]  ___sys_sendmsg+0x2a2/0x360
[ 1487.347505][T27295]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1487.352298][T27295]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1487.357155][T27295]  ? __x64_sys_sendmsg+0x80/0x80
[ 1487.362095][T27295]  ? lockdep_hardirqs_on+0x94/0x140
[ 1487.367299][T27295]  do_syscall_64+0x4c/0xa0
[ 1487.371707][T27295]  ? clear_bhb_loop+0x60/0xb0
[ 1487.376401][T27295]  ? clear_bhb_loop+0x60/0xb0
[ 1487.381073][T27295]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1487.386967][T27295] RIP: 0033:0x7f784bd9e159
[ 1487.391375][T27295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1487.410993][T27295] RSP: 002b:00007f7849ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1487.419425][T27295] RAX: ffffffffffffffda RBX: 00007f784c025fa0 RCX: 00007f784bd9e159
[ 1487.427391][T27295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1487.435353][T27295] RBP: 00007f784be3506b R08: 0000000000000000 R09: 0000000000000000
[ 1487.443316][T27295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1487.451279][T27295] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1487.459258][T27295]  </TASK>
[ 1487.536708][T27300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'.
[ 1487.899540][T27315] FAULT_INJECTION: forcing a failure.
[ 1487.899540][T27315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1487.926784][T27315] CPU: 0 PID: 27315 Comm: syz.0.7066 Not tainted syzkaller #0
[ 1487.934296][T27315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1487.944392][T27315] Call Trace:
[ 1487.947681][T27315]  <TASK>
[ 1487.950621][T27315]  dump_stack_lvl+0x188/0x24e
[ 1487.955324][T27315]  ? show_regs_print_info+0x12/0x12
[ 1487.960547][T27315]  ? load_image+0x410/0x410
[ 1487.965077][T27315]  ? __lock_acquire+0x7c40/0x7c40
[ 1487.970129][T27315]  should_fail_ex+0x390/0x4c0
[ 1487.974846][T27315]  _copy_from_user+0x2c/0x170
[ 1487.979553][T27315]  __sys_bpf+0x2ea/0x780
[ 1487.983824][T27315]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1487.989227][T27315]  ? lock_chain_count+0x20/0x20
[ 1487.994110][T27315]  __x64_sys_bpf+0x78/0x90
[ 1487.998547][T27315]  do_syscall_64+0x4c/0xa0
[ 1488.002975][T27315]  ? clear_bhb_loop+0x60/0xb0
[ 1488.007672][T27315]  ? clear_bhb_loop+0x60/0xb0
[ 1488.012372][T27315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1488.018289][T27315] RIP: 0033:0x7f9fbcb9e159
[ 1488.022717][T27315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1488.042345][T27315] RSP: 002b:00007f9fbda2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1488.050775][T27315] RAX: ffffffffffffffda RBX: 00007f9fbce25fa0 RCX: 00007f9fbcb9e159
[ 1488.058761][T27315] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[ 1488.066752][T27315] RBP: 00007f9fbda2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1488.074743][T27315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1488.082728][T27315] R13: 00007f9fbce26038 R14: 00007f9fbce25fa0 R15: 00007fff0ceacee8
[ 1488.090734][T27315]  </TASK>
[ 1488.335920][T27322] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7069'.
[ 1488.571841][T27316] device syzkaller0 entered promiscuous mode
[ 1488.580323][T27324] netlink: 'syz.0.7070': attribute type 10 has an invalid length.
[ 1488.588760][T27324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7070'.
[ 1488.607926][T27324] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1488.626343][T27322] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1488.640789][T27322] CPU: 1 PID: 27322 Comm: syz.1.7069 Not tainted syzkaller #0
[ 1488.648293][T27322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1488.658370][T27322] Call Trace:
[ 1488.661664][T27322]  <TASK>
[ 1488.664611][T27322]  dump_stack_lvl+0x188/0x24e
[ 1488.669313][T27322]  ? show_regs_print_info+0x12/0x12
[ 1488.674540][T27322]  ? load_image+0x410/0x410
[ 1488.679103][T27322]  sysfs_warn_dup+0x8a/0xa0
[ 1488.683747][T27322]  sysfs_do_create_link_sd+0xc0/0x110
[ 1488.689158][T27322]  device_add+0x83b/0x1050
[ 1488.693609][T27322]  wiphy_register+0x1d8b/0x2aa0
[ 1488.698505][T27322]  ? cfg80211_event_work+0x40/0x40
[ 1488.703636][T27322]  ? minstrel_ht_alloc+0x894/0xa20
[ 1488.708783][T27322]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1488.714882][T27322]  ieee80211_register_hw+0x2d48/0x39f0
[ 1488.720379][T27322]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1488.725945][T27322]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1488.731526][T27322]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1488.737179][T27322]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1488.743101][T27322]  ? __debug_object_init+0xed/0x440
[ 1488.748327][T27322]  ? memset+0x1e/0x40
[ 1488.752346][T27322]  ? __hrtimer_init+0x189/0x270
[ 1488.757222][T27322]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1488.762991][T27322]  ? memcpy+0x3c/0x60
[ 1488.767002][T27322]  hwsim_new_radio_nl+0xab7/0xc90
[ 1488.772073][T27322]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1488.777661][T27322]  ? end_current_label_crit_section+0x170/0x170
[ 1488.783935][T27322]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1488.789871][T27322]  ? bpf_lsm_capable+0x5/0x10
[ 1488.794569][T27322]  ? security_capable+0x85/0xb0
[ 1488.799447][T27322]  genl_rcv_msg+0x601/0x790
[ 1488.803990][T27322]  ? genl_bind+0x360/0x360
[ 1488.808430][T27322]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1488.814808][T27322]  netlink_rcv_skb+0x1ef/0x440
[ 1488.819595][T27322]  ? genl_bind+0x360/0x360
[ 1488.824034][T27322]  ? netlink_ack+0x1160/0x1160
[ 1488.828859][T27322]  ? down_read+0x1a8/0x2d0
[ 1488.833302][T27322]  genl_rcv+0x24/0x40
[ 1488.837306][T27322]  netlink_unicast+0x7ad/0x920
[ 1488.842105][T27322]  netlink_sendmsg+0x8ad/0xbd0
[ 1488.846900][T27322]  ? netlink_getsockopt+0x550/0x550
[ 1488.852129][T27322]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1488.857716][T27322]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1488.863107][T27322]  ? security_socket_sendmsg+0x7c/0xa0
[ 1488.868593][T27322]  ? netlink_getsockopt+0x550/0x550
[ 1488.873813][T27322]  ____sys_sendmsg+0x5ed/0x9a0
[ 1488.878607][T27322]  ? __sys_sendmsg_sock+0x30/0x30
[ 1488.883656][T27322]  ? __import_iovec+0x306/0x510
[ 1488.888547][T27322]  ? import_iovec+0x6f/0xa0
[ 1488.893082][T27322]  ___sys_sendmsg+0x2a2/0x360
[ 1488.897792][T27322]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1488.902633][T27322]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1488.907513][T27322]  ? __x64_sys_sendmsg+0x80/0x80
[ 1488.912498][T27322]  ? lockdep_hardirqs_on+0x94/0x140
[ 1488.917729][T27322]  do_syscall_64+0x4c/0xa0
[ 1488.922168][T27322]  ? clear_bhb_loop+0x60/0xb0
[ 1488.926866][T27322]  ? clear_bhb_loop+0x60/0xb0
[ 1488.931563][T27322]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1488.937484][T27322] RIP: 0033:0x7efc3e79e159
[ 1488.941922][T27322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1488.961554][T27322] RSP: 002b:00007efc3f6cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1488.969993][T27322] RAX: ffffffffffffffda RBX: 00007efc3ea25fa0 RCX: 00007efc3e79e159
[ 1488.977989][T27322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1488.985984][T27322] RBP: 00007efc3e83506b R08: 0000000000000000 R09: 0000000000000000
[ 1488.993976][T27322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1489.001971][T27322] R13: 00007efc3ea26038 R14: 00007efc3ea25fa0 R15: 00007ffd1d206fd8
[ 1489.009977][T27322]  </TASK>
[ 1489.816190][T27353] netlink: 'syz.2.7076': attribute type 29 has an invalid length.
[ 1491.435056][T27347] netlink: 'syz.4.7074': attribute type 10 has an invalid length.
[ 1491.442926][T27347] team0: Device veth0_vlan is up. Set it down before adding it as a team port
[ 1491.485046][T27336] device syzkaller0 entered promiscuous mode
[ 1491.507053][T27350] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1491.539657][T27350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1492.191601][T27376] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7085'.
[ 1493.556013][T27353] netlink: 'syz.2.7076': attribute type 29 has an invalid length.
[ 1493.567226][T27376] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1493.580440][T27376] CPU: 0 PID: 27376 Comm: syz.3.7085 Not tainted syzkaller #0
[ 1493.587941][T27376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1493.598016][T27376] Call Trace:
[ 1493.601309][T27376]  <TASK>
[ 1493.604253][T27376]  dump_stack_lvl+0x188/0x24e
[ 1493.608959][T27376]  ? show_regs_print_info+0x12/0x12
[ 1493.614184][T27376]  ? load_image+0x410/0x410
[ 1493.618730][T27376]  sysfs_warn_dup+0x8a/0xa0
[ 1493.623266][T27376]  sysfs_do_create_link_sd+0xc0/0x110
[ 1493.628669][T27376]  device_add+0x83b/0x1050
[ 1493.633118][T27376]  wiphy_register+0x1d8b/0x2aa0
[ 1493.638013][T27376]  ? cfg80211_event_work+0x40/0x40
[ 1493.643148][T27376]  ? minstrel_ht_alloc+0x894/0xa20
[ 1493.648289][T27376]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1493.654381][T27376]  ieee80211_register_hw+0x2d48/0x39f0
[ 1493.659874][T27376]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1493.665445][T27376]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1493.671020][T27376]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1493.672187][T27381] netlink: 'syz.4.7086': attribute type 3 has an invalid length.
[ 1493.676656][T27376]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1493.676691][T27376]  ? __debug_object_init+0xed/0x440
[ 1493.676716][T27376]  ? memset+0x1e/0x40
[ 1493.676735][T27376]  ? __hrtimer_init+0x189/0x270
[ 1493.684884][T27381] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7086'.
[ 1493.690315][T27376]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1493.719290][T27376]  ? memcpy+0x3c/0x60
[ 1493.723305][T27376]  hwsim_new_radio_nl+0xab7/0xc90
[ 1493.728373][T27376]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1493.733939][T27376]  ? end_current_label_crit_section+0x170/0x170
[ 1493.740206][T27376]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1493.746118][T27376]  ? bpf_lsm_capable+0x5/0x10
[ 1493.750796][T27376]  ? security_capable+0x85/0xb0
[ 1493.755659][T27376]  genl_rcv_msg+0x601/0x790
[ 1493.760157][T27376]  ? genl_bind+0x360/0x360
[ 1493.764571][T27376]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1493.770913][T27376]  netlink_rcv_skb+0x1ef/0x440
[ 1493.775665][T27376]  ? genl_bind+0x360/0x360
[ 1493.780070][T27376]  ? netlink_ack+0x1160/0x1160
[ 1493.784852][T27376]  ? down_read+0x1a8/0x2d0
[ 1493.789257][T27376]  genl_rcv+0x24/0x40
[ 1493.793228][T27376]  netlink_unicast+0x7ad/0x920
[ 1493.797982][T27376]  netlink_sendmsg+0x8ad/0xbd0
[ 1493.802740][T27376]  ? netlink_getsockopt+0x550/0x550
[ 1493.807927][T27376]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1493.813464][T27376]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1493.818733][T27376]  ? security_socket_sendmsg+0x7c/0xa0
[ 1493.824183][T27376]  ? netlink_getsockopt+0x550/0x550
[ 1493.829374][T27376]  ____sys_sendmsg+0x5ed/0x9a0
[ 1493.834144][T27376]  ? __sys_sendmsg_sock+0x30/0x30
[ 1493.839171][T27376]  ? __import_iovec+0x306/0x510
[ 1493.844020][T27376]  ? import_iovec+0x6f/0xa0
[ 1493.848517][T27376]  ___sys_sendmsg+0x2a2/0x360
[ 1493.853209][T27376]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1493.857990][T27376]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1493.862862][T27376]  ? __x64_sys_sendmsg+0x80/0x80
[ 1493.867807][T27376]  ? lockdep_hardirqs_on+0x94/0x140
[ 1493.873004][T27376]  do_syscall_64+0x4c/0xa0
[ 1493.877408][T27376]  ? clear_bhb_loop+0x60/0xb0
[ 1493.882074][T27376]  ? clear_bhb_loop+0x60/0xb0
[ 1493.886742][T27376]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1493.892627][T27376] RIP: 0033:0x7f1566b9e159
[ 1493.897028][T27376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1493.916623][T27376] RSP: 002b:00007f1567b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1493.925031][T27376] RAX: ffffffffffffffda RBX: 00007f1566e25fa0 RCX: 00007f1566b9e159
[ 1493.932998][T27376] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1493.940963][T27376] RBP: 00007f1566c3506b R08: 0000000000000000 R09: 0000000000000000
[ 1493.948938][T27376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1493.956921][T27376] R13: 00007f1566e26038 R14: 00007f1566e25fa0 R15: 00007fff01e90748
[ 1493.964897][T27376]  </TASK>
[ 1494.150904][T27385] device syzkaller0 entered promiscuous mode
[ 1494.474746][T27395] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7093'.
[ 1494.504883][T27395] openvswitch: netlink: Flow key attr not present in new flow.
[ 1496.564713][T27412] netlink: 'syz.1.7096': attribute type 10 has an invalid length.
[ 1496.598009][T27412] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1496.781255][T27423] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1496.794555][T27425] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7101'.
[ 1496.845236][T27425] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1496.875568][T27425] CPU: 1 PID: 27425 Comm: syz.2.7101 Not tainted syzkaller #0
[ 1496.883078][T27425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1496.893153][T27425] Call Trace:
[ 1496.896459][T27425]  <TASK>
[ 1496.899412][T27425]  dump_stack_lvl+0x188/0x24e
[ 1496.904122][T27425]  ? show_regs_print_info+0x12/0x12
[ 1496.909327][T27425]  ? load_image+0x410/0x410
[ 1496.913855][T27425]  sysfs_warn_dup+0x8a/0xa0
[ 1496.918371][T27425]  sysfs_do_create_link_sd+0xc0/0x110
[ 1496.923750][T27425]  device_add+0x83b/0x1050
[ 1496.928176][T27425]  wiphy_register+0x1d8b/0x2aa0
[ 1496.933039][T27425]  ? cfg80211_event_work+0x40/0x40
[ 1496.938149][T27425]  ? minstrel_ht_alloc+0x894/0xa20
[ 1496.943266][T27425]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1496.949367][T27425]  ieee80211_register_hw+0x2d48/0x39f0
[ 1496.954861][T27425]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1496.960405][T27425]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1496.965954][T27425]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1496.971582][T27425]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1496.977477][T27425]  ? __debug_object_init+0xed/0x440
[ 1496.982674][T27425]  ? memset+0x1e/0x40
[ 1496.986653][T27425]  ? __hrtimer_init+0x189/0x270
[ 1496.991504][T27425]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1496.997235][T27425]  ? memcpy+0x3c/0x60
[ 1497.001217][T27425]  hwsim_new_radio_nl+0xab7/0xc90
[ 1497.006256][T27425]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1497.011801][T27425]  ? end_current_label_crit_section+0x170/0x170
[ 1497.018044][T27425]  ? lockdep_hardirqs_on+0x94/0x140
[ 1497.023243][T27425]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1497.029144][T27425]  ? bpf_lsm_capable+0x5/0x10
[ 1497.033820][T27425]  ? security_capable+0x85/0xb0
[ 1497.038678][T27425]  genl_rcv_msg+0x601/0x790
[ 1497.043186][T27425]  ? genl_bind+0x360/0x360
[ 1497.047599][T27425]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1497.053942][T27425]  netlink_rcv_skb+0x1ef/0x440
[ 1497.058707][T27425]  ? genl_bind+0x360/0x360
[ 1497.063121][T27425]  ? netlink_ack+0x1160/0x1160
[ 1497.067904][T27425]  ? down_read+0x1a8/0x2d0
[ 1497.072339][T27425]  genl_rcv+0x24/0x40
[ 1497.076335][T27425]  netlink_unicast+0x7ad/0x920
[ 1497.081114][T27425]  netlink_sendmsg+0x8ad/0xbd0
[ 1497.085886][T27425]  ? netlink_getsockopt+0x550/0x550
[ 1497.091098][T27425]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1497.096652][T27425]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1497.101936][T27425]  ? security_socket_sendmsg+0x7c/0xa0
[ 1497.107392][T27425]  ? netlink_getsockopt+0x550/0x550
[ 1497.112591][T27425]  ____sys_sendmsg+0x5ed/0x9a0
[ 1497.117360][T27425]  ? __sys_sendmsg_sock+0x30/0x30
[ 1497.122379][T27425]  ? __import_iovec+0x306/0x510
[ 1497.127237][T27425]  ? import_iovec+0x6f/0xa0
[ 1497.131750][T27425]  ___sys_sendmsg+0x2a2/0x360
[ 1497.136433][T27425]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1497.141233][T27425]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1497.146080][T27425]  ? __x64_sys_sendmsg+0x80/0x80
[ 1497.151023][T27425]  ? lockdep_hardirqs_on+0x94/0x140
[ 1497.156229][T27425]  do_syscall_64+0x4c/0xa0
[ 1497.160642][T27425]  ? clear_bhb_loop+0x60/0xb0
[ 1497.165313][T27425]  ? clear_bhb_loop+0x60/0xb0
[ 1497.169987][T27425]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1497.175884][T27425] RIP: 0033:0x7f784bd9e159
[ 1497.180294][T27425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1497.199893][T27425] RSP: 002b:00007f7849ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1497.208305][T27425] RAX: ffffffffffffffda RBX: 00007f784c025fa0 RCX: 00007f784bd9e159
[ 1497.216272][T27425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1497.224234][T27425] RBP: 00007f784be3506b R08: 0000000000000000 R09: 0000000000000000
[ 1497.232197][T27425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1497.240163][T27425] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1497.248142][T27425]  </TASK>
[ 1497.645741][T27458] netlink: 'syz.3.7109': attribute type 10 has an invalid length.
[ 1497.818590][T27460] device syzkaller0 entered promiscuous mode
[ 1498.186311][T27474] netlink: 'syz.0.7114': attribute type 10 has an invalid length.
[ 1498.436472][T27474] team0: Device gre0 is of different type
[ 1499.098394][T27491] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7121'.
[ 1500.255741][T27510] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1501.505121][T27522] netlink: 'syz.1.7130': attribute type 3 has an invalid length.
[ 1501.513604][T27522] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7130'.
[ 1502.535236][T27491] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1502.544648][T27491] CPU: 0 PID: 27491 Comm: syz.0.7121 Not tainted syzkaller #0
[ 1502.552139][T27491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1502.562211][T27491] Call Trace:
[ 1502.565511][T27491]  <TASK>
[ 1502.568462][T27491]  dump_stack_lvl+0x188/0x24e
[ 1502.573168][T27491]  ? show_regs_print_info+0x12/0x12
[ 1502.578385][T27491]  ? load_image+0x410/0x410
[ 1502.582917][T27491]  sysfs_warn_dup+0x8a/0xa0
[ 1502.587450][T27491]  sysfs_do_create_link_sd+0xc0/0x110
[ 1502.592848][T27491]  device_add+0x83b/0x1050
[ 1502.597292][T27491]  wiphy_register+0x1d8b/0x2aa0
[ 1502.602266][T27491]  ? cfg80211_event_work+0x40/0x40
[ 1502.607397][T27491]  ? minstrel_ht_alloc+0x894/0xa20
[ 1502.612515][T27491]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1502.618594][T27491]  ieee80211_register_hw+0x2d48/0x39f0
[ 1502.624066][T27491]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1502.629603][T27491]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1502.635156][T27491]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1502.640784][T27491]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1502.646676][T27491]  ? __debug_object_init+0xed/0x440
[ 1502.651876][T27491]  ? memset+0x1e/0x40
[ 1502.655856][T27491]  ? __hrtimer_init+0x189/0x270
[ 1502.660733][T27491]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1502.666463][T27491]  ? memcpy+0x3c/0x60
[ 1502.670443][T27491]  hwsim_new_radio_nl+0xab7/0xc90
[ 1502.675477][T27491]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1502.681021][T27491]  ? end_current_label_crit_section+0x170/0x170
[ 1502.687266][T27491]  ? trace_call_bpf+0xbf/0x6b0
[ 1502.692028][T27491]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1502.697924][T27491]  ? bpf_lsm_capable+0x5/0x10
[ 1502.702595][T27491]  ? security_capable+0x85/0xb0
[ 1502.707446][T27491]  genl_rcv_msg+0x601/0x790
[ 1502.711953][T27491]  ? genl_bind+0x360/0x360
[ 1502.716362][T27491]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1502.722725][T27491]  netlink_rcv_skb+0x1ef/0x440
[ 1502.727482][T27491]  ? genl_bind+0x360/0x360
[ 1502.731894][T27491]  ? netlink_ack+0x1160/0x1160
[ 1502.736659][T27491]  ? down_read+0x1a8/0x2d0
[ 1502.741074][T27491]  genl_rcv+0x24/0x40
[ 1502.745054][T27491]  netlink_unicast+0x7ad/0x920
[ 1502.749822][T27491]  netlink_sendmsg+0x8ad/0xbd0
[ 1502.754593][T27491]  ? netlink_getsockopt+0x550/0x550
[ 1502.759790][T27491]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1502.765354][T27491]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1502.770665][T27491]  ? security_socket_sendmsg+0x7c/0xa0
[ 1502.776137][T27491]  ? netlink_getsockopt+0x550/0x550
[ 1502.781344][T27491]  ____sys_sendmsg+0x5ed/0x9a0
[ 1502.786121][T27491]  ? __sys_sendmsg_sock+0x30/0x30
[ 1502.791137][T27491]  ? __import_iovec+0x306/0x510
[ 1502.796001][T27491]  ? import_iovec+0x6f/0xa0
[ 1502.800504][T27491]  ___sys_sendmsg+0x2a2/0x360
[ 1502.805186][T27491]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1502.809991][T27491]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1502.814846][T27491]  ? ct_nmi_exit+0x145/0x1c0
[ 1502.819434][T27491]  ? __x64_sys_sendmsg+0x80/0x80
[ 1502.824376][T27491]  ? lockdep_hardirqs_on+0x94/0x140
[ 1502.829589][T27491]  do_syscall_64+0x4c/0xa0
[ 1502.834014][T27491]  ? clear_bhb_loop+0x60/0xb0
[ 1502.838687][T27491]  ? clear_bhb_loop+0x60/0xb0
[ 1502.843393][T27491]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1502.849292][T27491] RIP: 0033:0x7f9fbcb9e159
[ 1502.853708][T27491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1502.873316][T27491] RSP: 002b:00007f9fbda2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1502.881747][T27491] RAX: ffffffffffffffda RBX: 00007f9fbce25fa0 RCX: 00007f9fbcb9e159
[ 1502.889714][T27491] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1502.897695][T27491] RBP: 00007f9fbcc3506b R08: 0000000000000000 R09: 0000000000000000
[ 1502.905680][T27491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1502.913644][T27491] R13: 00007f9fbce26038 R14: 00007f9fbce25fa0 R15: 00007fff0ceacee8
[ 1502.921625][T27491]  </TASK>
[ 1503.349343][T27538] device syzkaller0 entered promiscuous mode
[ 1503.366232][T27539] netlink: 'syz.3.7138': attribute type 10 has an invalid length.
[ 1503.390551][T27539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7138'.
[ 1504.730868][T27585] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7148'.
[ 1506.163033][T27562] device syzkaller0 entered promiscuous mode
[ 1506.192536][T27585] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7148'.
[ 1508.332287][T27589] netlink: 'syz.2.7149': attribute type 21 has an invalid length.
[ 1508.340389][T27589] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1508.348238][T27589] IPv6: Can't replace route, no match found
[ 1508.355210][T27600] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7154'.
[ 1508.416280][T27600] team0: Port device team_slave_0 removed
[ 1508.469263][T27601] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7154'.
[ 1508.488167][T27621] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1508.497671][T27621] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1508.581546][T27622] device bridge_slave_1 left promiscuous mode
[ 1508.635554][T27622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1508.693412][T27622] device bridge_slave_0 left promiscuous mode
[ 1508.714275][T27622] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1510.434929][T27645] device syzkaller0 entered promiscuous mode
[ 1512.255912][T27670] netlink: 'syz.3.7172': attribute type 11 has an invalid length.
[ 1512.264748][T27670] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7172'.
[ 1512.304552][T27669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1514.883340][T27667] mac80211_hwsim hwsim250 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1514.896364][T27681] netlink: 'syz.3.7175': attribute type 12 has an invalid length.
[ 1514.915011][T27681] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.7175'.
[ 1515.073005][T27689] FAULT_INJECTION: forcing a failure.
[ 1515.073005][T27689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1515.114656][T27689] CPU: 0 PID: 27689 Comm: syz.2.7178 Not tainted syzkaller #0
[ 1515.122178][T27689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1515.132254][T27689] Call Trace:
[ 1515.135569][T27689]  <TASK>
[ 1515.138525][T27689]  dump_stack_lvl+0x188/0x24e
[ 1515.143242][T27689]  ? show_regs_print_info+0x12/0x12
[ 1515.148467][T27689]  ? load_image+0x410/0x410
[ 1515.152163][T27684] device syzkaller0 entered promiscuous mode
[ 1515.152984][T27689]  ? __lock_acquire+0x7c40/0x7c40
[ 1515.153014][T27689]  ? snprintf+0xe5/0x140
[ 1515.168283][T27689]  should_fail_ex+0x390/0x4c0
[ 1515.172997][T27689]  _copy_to_user+0x2c/0x130
[ 1515.177521][T27689]  simple_read_from_buffer+0xe3/0x150
[ 1515.182927][T27689]  proc_fail_nth_read+0x1a6/0x220
[ 1515.187972][T27689]  ? proc_fault_inject_write+0x310/0x310
[ 1515.193631][T27689]  ? fsnotify_perm+0x248/0x550
[ 1515.198417][T27689]  ? proc_fault_inject_write+0x310/0x310
[ 1515.204081][T27689]  vfs_read+0x2db/0x960
[ 1515.208272][T27689]  ? kernel_read+0x1e0/0x1e0
[ 1515.212892][T27689]  ? __fget_files+0x28/0x460
[ 1515.217505][T27689]  ? __fget_files+0x3fc/0x460
[ 1515.222224][T27689]  ? __fdget_pos+0x2ae/0x360
[ 1515.226838][T27689]  ? ksys_read+0x70/0x260
[ 1515.231202][T27689]  ksys_read+0x14d/0x260
[ 1515.235473][T27689]  ? vfs_write+0x9a0/0x9a0
[ 1515.239941][T27689]  ? lockdep_hardirqs_on+0x94/0x140
[ 1515.245213][T27689]  do_syscall_64+0x4c/0xa0
[ 1515.249649][T27689]  ? clear_bhb_loop+0x60/0xb0
[ 1515.254345][T27689]  ? clear_bhb_loop+0x60/0xb0
[ 1515.259034][T27689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1515.264935][T27689] RIP: 0033:0x7f784bd5e98e
[ 1515.269357][T27689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1515.288970][T27689] RSP: 002b:00007f7849ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1515.297400][T27689] RAX: ffffffffffffffda RBX: 00007f7849ff66c0 RCX: 00007f784bd5e98e
[ 1515.305368][T27689] RDX: 000000000000000f RSI: 00007f7849ff60a0 RDI: 0000000000000004
[ 1515.313338][T27689] RBP: 00007f7849ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1515.321314][T27689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1515.329279][T27689] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1515.337258][T27689]  </TASK>
[ 1515.392286][T27697] netlink: 'syz.4.7180': attribute type 4 has an invalid length.
[ 1515.423967][T27697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7180'.
[ 1517.390973][T27710] netlink: 'syz.2.7188': attribute type 25 has an invalid length.
[ 1517.399247][T27710] netlink: 'syz.2.7188': attribute type 29 has an invalid length.
[ 1517.644034][T20329] wlan1: Trigger new scan to find an IBSS to join
[ 1517.745301][T27727] netlink: 'syz.4.7196': attribute type 10 has an invalid length.
[ 1517.775429][T27727] team0: Device veth1_vlan failed to register rx_handler
[ 1517.826721][T27728] netlink: 'syz.2.7194': attribute type 41 has an invalid length.
[ 1517.880654][T27727] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.7196'.
[ 1518.372162][T27742] netlink: 'syz.0.7199': attribute type 25 has an invalid length.
[ 1518.474134][T27742] netlink: 'syz.0.7199': attribute type 3 has an invalid length.
[ 1518.491602][T27737] device syzkaller0 entered promiscuous mode
[ 1518.530420][T27742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7199'.
[ 1518.806543][T27749] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7200'.
[ 1518.869601][T27749] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1518.882483][T27749] CPU: 1 PID: 27749 Comm: syz.1.7200 Not tainted syzkaller #0
[ 1518.889986][T27749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1518.900064][T27749] Call Trace:
[ 1518.903362][T27749]  <TASK>
[ 1518.906313][T27749]  dump_stack_lvl+0x188/0x24e
[ 1518.911024][T27749]  ? show_regs_print_info+0x12/0x12
[ 1518.916248][T27749]  ? load_image+0x410/0x410
[ 1518.920798][T27749]  sysfs_warn_dup+0x8a/0xa0
[ 1518.925331][T27749]  sysfs_do_create_link_sd+0xc0/0x110
[ 1518.930736][T27749]  device_add+0x83b/0x1050
[ 1518.935199][T27749]  wiphy_register+0x1d8b/0x2aa0
[ 1518.940096][T27749]  ? cfg80211_event_work+0x40/0x40
[ 1518.945230][T27749]  ? minstrel_ht_alloc+0x894/0xa20
[ 1518.950372][T27749]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1518.956472][T27749]  ieee80211_register_hw+0x2d48/0x39f0
[ 1518.961967][T27749]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1518.967535][T27749]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1518.973115][T27749]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1518.978771][T27749]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1518.984695][T27749]  ? __debug_object_init+0xed/0x440
[ 1518.989927][T27749]  ? memset+0x1e/0x40
[ 1518.993930][T27749]  ? __hrtimer_init+0x189/0x270
[ 1518.998808][T27749]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1519.004570][T27749]  ? memcpy+0x3c/0x60
[ 1519.008582][T27749]  hwsim_new_radio_nl+0xab7/0xc90
[ 1519.013655][T27749]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1519.019234][T27749]  ? end_current_label_crit_section+0x170/0x170
[ 1519.025511][T27749]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1519.031436][T27749]  ? bpf_lsm_capable+0x5/0x10
[ 1519.036125][T27749]  ? security_capable+0x85/0xb0
[ 1519.040986][T27749]  genl_rcv_msg+0x601/0x790
[ 1519.045493][T27749]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1519.051658][T27749]  ? genl_bind+0x360/0x360
[ 1519.056077][T27749]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1519.062417][T27749]  ? lock_acquire+0x225/0x4a0
[ 1519.067108][T27749]  netlink_rcv_skb+0x1ef/0x440
[ 1519.071873][T27749]  ? genl_bind+0x360/0x360
[ 1519.076291][T27749]  ? netlink_ack+0x1160/0x1160
[ 1519.081063][T27749]  ? down_read+0x1a8/0x2d0
[ 1519.085480][T27749]  genl_rcv+0x24/0x40
[ 1519.089474][T27749]  netlink_unicast+0x7ad/0x920
[ 1519.094243][T27749]  netlink_sendmsg+0x8ad/0xbd0
[ 1519.099010][T27749]  ? netlink_getsockopt+0x550/0x550
[ 1519.104209][T27749]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1519.109759][T27749]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1519.115040][T27749]  ? security_socket_sendmsg+0x7c/0xa0
[ 1519.120496][T27749]  ? netlink_getsockopt+0x550/0x550
[ 1519.125692][T27749]  ____sys_sendmsg+0x5ed/0x9a0
[ 1519.130461][T27749]  ? __sys_sendmsg_sock+0x30/0x30
[ 1519.135477][T27749]  ? __import_iovec+0x306/0x510
[ 1519.140339][T27749]  ? import_iovec+0x6f/0xa0
[ 1519.144852][T27749]  ___sys_sendmsg+0x2a2/0x360
[ 1519.149528][T27749]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1519.154305][T27749]  ? bpf_prog_free_id+0x1d0/0x1d0
[ 1519.159347][T27749]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1519.164195][T27749]  ? __x64_sys_sendmsg+0x80/0x80
[ 1519.169144][T27749]  ? lockdep_hardirqs_on+0x94/0x140
[ 1519.174348][T27749]  do_syscall_64+0x4c/0xa0
[ 1519.178759][T27749]  ? clear_bhb_loop+0x60/0xb0
[ 1519.183430][T27749]  ? clear_bhb_loop+0x60/0xb0
[ 1519.188104][T27749]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1519.193999][T27749] RIP: 0033:0x7efc3e79e159
[ 1519.198408][T27749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1519.218010][T27749] RSP: 002b:00007efc3f6cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1519.226419][T27749] RAX: ffffffffffffffda RBX: 00007efc3ea25fa0 RCX: 00007efc3e79e159
[ 1519.234388][T27749] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1519.242354][T27749] RBP: 00007efc3e83506b R08: 0000000000000000 R09: 0000000000000000
[ 1519.250321][T27749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1519.258287][T27749] R13: 00007efc3ea26038 R14: 00007efc3ea25fa0 R15: 00007ffd1d206fd8
[ 1519.266269][T27749]  </TASK>
[ 1519.355449][T27751] netlink: 'syz.2.7201': attribute type 3 has an invalid length.
[ 1519.373235][T27751] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7201'.
[ 1519.419927][T27754] netlink: 'syz.2.7201': attribute type 6 has an invalid length.
[ 1519.442227][T27754] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7201'.
[ 1520.685333][T26724] wlan1: Trigger new scan to find an IBSS to join
[ 1522.044122][T27756] netlink: 'syz.4.7203': attribute type 10 has an invalid length.
[ 1522.726661][T27775] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7210'.
[ 1522.753089][T27775] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1522.793988][T27775] CPU: 1 PID: 27775 Comm: syz.2.7210 Not tainted syzkaller #0
[ 1522.801514][T27775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1522.811590][T27775] Call Trace:
[ 1522.814900][T27775]  <TASK>
[ 1522.817854][T27775]  dump_stack_lvl+0x188/0x24e
[ 1522.822559][T27775]  ? show_regs_print_info+0x12/0x12
[ 1522.827779][T27775]  ? load_image+0x410/0x410
[ 1522.832319][T27775]  sysfs_warn_dup+0x8a/0xa0
[ 1522.836852][T27775]  sysfs_do_create_link_sd+0xc0/0x110
[ 1522.842274][T27775]  device_add+0x83b/0x1050
[ 1522.846706][T27775]  wiphy_register+0x1d8b/0x2aa0
[ 1522.851575][T27775]  ? cfg80211_event_work+0x40/0x40
[ 1522.856684][T27775]  ? minstrel_ht_alloc+0x894/0xa20
[ 1522.861806][T27775]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1522.867892][T27775]  ieee80211_register_hw+0x2d48/0x39f0
[ 1522.873374][T27775]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1522.878925][T27775]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1522.884476][T27775]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1522.890134][T27775]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1522.896035][T27775]  ? __debug_object_init+0xed/0x440
[ 1522.901238][T27775]  ? memset+0x1e/0x40
[ 1522.905215][T27775]  ? __hrtimer_init+0x189/0x270
[ 1522.910064][T27775]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1522.915799][T27775]  ? memcpy+0x3c/0x60
[ 1522.919781][T27775]  hwsim_new_radio_nl+0xab7/0xc90
[ 1522.924819][T27775]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1522.930362][T27775]  ? end_current_label_crit_section+0x170/0x170
[ 1522.936607][T27775]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1522.942501][T27775]  ? bpf_lsm_capable+0x5/0x10
[ 1522.947178][T27775]  ? security_capable+0x85/0xb0
[ 1522.952030][T27775]  genl_rcv_msg+0x601/0x790
[ 1522.956547][T27775]  ? genl_bind+0x360/0x360
[ 1522.960957][T27775]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1522.967303][T27775]  netlink_rcv_skb+0x1ef/0x440
[ 1522.972061][T27775]  ? genl_bind+0x360/0x360
[ 1522.976475][T27775]  ? netlink_ack+0x1160/0x1160
[ 1522.981240][T27775]  ? down_read+0x1a8/0x2d0
[ 1522.985672][T27775]  genl_rcv+0x24/0x40
[ 1522.989668][T27775]  netlink_unicast+0x7ad/0x920
[ 1522.994450][T27775]  netlink_sendmsg+0x8ad/0xbd0
[ 1522.999229][T27775]  ? netlink_getsockopt+0x550/0x550
[ 1523.004429][T27775]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1523.009982][T27775]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1523.015262][T27775]  ? security_socket_sendmsg+0x7c/0xa0
[ 1523.020719][T27775]  ? netlink_getsockopt+0x550/0x550
[ 1523.025924][T27775]  ____sys_sendmsg+0x5ed/0x9a0
[ 1523.030691][T27775]  ? __sys_sendmsg_sock+0x30/0x30
[ 1523.035713][T27775]  ? __import_iovec+0x306/0x510
[ 1523.040569][T27775]  ? import_iovec+0x6f/0xa0
[ 1523.045074][T27775]  ___sys_sendmsg+0x2a2/0x360
[ 1523.049749][T27775]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1523.054550][T27775]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1523.059397][T27775]  ? __x64_sys_sendmsg+0x80/0x80
[ 1523.064343][T27775]  ? lockdep_hardirqs_on+0x94/0x140
[ 1523.069543][T27775]  do_syscall_64+0x4c/0xa0
[ 1523.073954][T27775]  ? clear_bhb_loop+0x60/0xb0
[ 1523.078625][T27775]  ? clear_bhb_loop+0x60/0xb0
[ 1523.083294][T27775]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1523.089196][T27775] RIP: 0033:0x7f784bd9e159
[ 1523.093612][T27775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1523.113216][T27775] RSP: 002b:00007f7849ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1523.121628][T27775] RAX: ffffffffffffffda RBX: 00007f784c025fa0 RCX: 00007f784bd9e159
[ 1523.129617][T27775] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1523.137581][T27775] RBP: 00007f784be3506b R08: 0000000000000000 R09: 0000000000000000
[ 1523.145543][T27775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1523.153505][T27775] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1523.161482][T27775]  </TASK>
[ 1523.237198][T27777] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7211'.
[ 1523.268558][T27777] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1523.314373][T27777] CPU: 1 PID: 27777 Comm: syz.0.7211 Not tainted syzkaller #0
[ 1523.321887][T27777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1523.331969][T27777] Call Trace:
[ 1523.335269][T27777]  <TASK>
[ 1523.338213][T27777]  dump_stack_lvl+0x188/0x24e
[ 1523.342921][T27777]  ? show_regs_print_info+0x12/0x12
[ 1523.348143][T27777]  ? load_image+0x410/0x410
[ 1523.352686][T27777]  sysfs_warn_dup+0x8a/0xa0
[ 1523.357219][T27777]  sysfs_do_create_link_sd+0xc0/0x110
[ 1523.362620][T27777]  device_add+0x83b/0x1050
[ 1523.367058][T27777]  wiphy_register+0x1d8b/0x2aa0
[ 1523.371928][T27777]  ? cfg80211_event_work+0x40/0x40
[ 1523.377047][T27777]  ? minstrel_ht_alloc+0x894/0xa20
[ 1523.382163][T27777]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1523.388236][T27777]  ieee80211_register_hw+0x2d48/0x39f0
[ 1523.393702][T27777]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1523.399242][T27777]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1523.404789][T27777]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1523.410416][T27777]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1523.416312][T27777]  ? __debug_object_init+0xed/0x440
[ 1523.421507][T27777]  ? memset+0x1e/0x40
[ 1523.425481][T27777]  ? __hrtimer_init+0x189/0x270
[ 1523.430331][T27777]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1523.436061][T27777]  ? memcpy+0x3c/0x60
[ 1523.440045][T27777]  hwsim_new_radio_nl+0xab7/0xc90
[ 1523.445081][T27777]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1523.450626][T27777]  ? end_current_label_crit_section+0x170/0x170
[ 1523.456871][T27777]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1523.462773][T27777]  ? bpf_lsm_capable+0x5/0x10
[ 1523.467448][T27777]  ? security_capable+0x85/0xb0
[ 1523.472298][T27777]  genl_rcv_msg+0x601/0x790
[ 1523.476806][T27777]  ? genl_bind+0x360/0x360
[ 1523.481217][T27777]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1523.487559][T27777]  netlink_rcv_skb+0x1ef/0x440
[ 1523.492318][T27777]  ? genl_bind+0x360/0x360
[ 1523.496746][T27777]  ? netlink_ack+0x1160/0x1160
[ 1523.501512][T27777]  ? down_read+0x1a8/0x2d0
[ 1523.505935][T27777]  genl_rcv+0x24/0x40
[ 1523.510263][T27777]  netlink_unicast+0x7ad/0x920
[ 1523.515031][T27777]  netlink_sendmsg+0x8ad/0xbd0
[ 1523.519795][T27777]  ? netlink_getsockopt+0x550/0x550
[ 1523.524991][T27777]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1523.530542][T27777]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1523.535820][T27777]  ? security_socket_sendmsg+0x7c/0xa0
[ 1523.541276][T27777]  ? netlink_getsockopt+0x550/0x550
[ 1523.546469][T27777]  ____sys_sendmsg+0x5ed/0x9a0
[ 1523.551237][T27777]  ? __sys_sendmsg_sock+0x30/0x30
[ 1523.556252][T27777]  ? __import_iovec+0x306/0x510
[ 1523.561116][T27777]  ? import_iovec+0x6f/0xa0
[ 1523.565624][T27777]  ___sys_sendmsg+0x2a2/0x360
[ 1523.570302][T27777]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1523.575094][T27777]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1523.579941][T27777]  ? __x64_sys_sendmsg+0x80/0x80
[ 1523.584888][T27777]  ? lockdep_hardirqs_on+0x94/0x140
[ 1523.590085][T27777]  do_syscall_64+0x4c/0xa0
[ 1523.594497][T27777]  ? clear_bhb_loop+0x60/0xb0
[ 1523.599167][T27777]  ? clear_bhb_loop+0x60/0xb0
[ 1523.603849][T27777]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1523.609749][T27777] RIP: 0033:0x7f9fbcb9e159
[ 1523.614162][T27777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1523.633764][T27777] RSP: 002b:00007f9fbda2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1523.642174][T27777] RAX: ffffffffffffffda RBX: 00007f9fbce25fa0 RCX: 00007f9fbcb9e159
[ 1523.650141][T27777] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1523.658110][T27777] RBP: 00007f9fbcc3506b R08: 0000000000000000 R09: 0000000000000000
[ 1523.666073][T27777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1523.674041][T27777] R13: 00007f9fbce26038 R14: 00007f9fbce25fa0 R15: 00007fff0ceacee8
[ 1523.682019][T27777]  </TASK>
[ 1523.689819][T20350] wlan1: Trigger new scan to find an IBSS to join
[ 1523.788207][T27791] netlink: 'syz.4.7214': attribute type 16 has an invalid length.
[ 1523.820855][T27794] netlink: 'syz.4.7214': attribute type 11 has an invalid length.
[ 1523.829135][T27794] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7214'.
[ 1523.838604][T27791] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7214'.
[ 1523.848596][T27791] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1523.953121][T27785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.608343][T27817] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.7222'.
[ 1524.977165][T27830] netlink: 'syz.4.7226': attribute type 3 has an invalid length.
[ 1524.982602][T27833] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7227'.
[ 1525.014107][T27830] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7226'.
[ 1525.028253][T27833] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1525.042996][T27833] CPU: 0 PID: 27833 Comm: syz.3.7227 Not tainted syzkaller #0
[ 1525.050503][T27833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1525.060597][T27833] Call Trace:
[ 1525.063892][T27833]  <TASK>
[ 1525.066838][T27833]  dump_stack_lvl+0x188/0x24e
[ 1525.071542][T27833]  ? show_regs_print_info+0x12/0x12
[ 1525.076764][T27833]  ? load_image+0x410/0x410
[ 1525.081313][T27833]  sysfs_warn_dup+0x8a/0xa0
[ 1525.085847][T27833]  sysfs_do_create_link_sd+0xc0/0x110
[ 1525.091253][T27833]  device_add+0x83b/0x1050
[ 1525.095705][T27833]  wiphy_register+0x1d8b/0x2aa0
[ 1525.100687][T27833]  ? cfg80211_event_work+0x40/0x40
[ 1525.105822][T27833]  ? minstrel_ht_alloc+0x894/0xa20
[ 1525.110965][T27833]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1525.117103][T27833]  ieee80211_register_hw+0x2d48/0x39f0
[ 1525.122603][T27833]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1525.128174][T27833]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1525.133751][T27833]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1525.139415][T27833]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1525.145343][T27833]  ? __debug_object_init+0xed/0x440
[ 1525.150569][T27833]  ? memset+0x1e/0x40
[ 1525.154571][T27833]  ? __hrtimer_init+0x189/0x270
[ 1525.159460][T27833]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1525.165221][T27833]  ? memcpy+0x3c/0x60
[ 1525.169232][T27833]  hwsim_new_radio_nl+0xab7/0xc90
[ 1525.174314][T27833]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1525.179886][T27833]  ? end_current_label_crit_section+0x170/0x170
[ 1525.186164][T27833]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1525.192091][T27833]  ? bpf_lsm_capable+0x5/0x10
[ 1525.196797][T27833]  ? security_capable+0x85/0xb0
[ 1525.201680][T27833]  genl_rcv_msg+0x601/0x790
[ 1525.206211][T27833]  ? genl_bind+0x360/0x360
[ 1525.210637][T27833]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1525.216986][T27833]  netlink_rcv_skb+0x1ef/0x440
[ 1525.221749][T27833]  ? genl_bind+0x360/0x360
[ 1525.226174][T27833]  ? netlink_ack+0x1160/0x1160
[ 1525.230941][T27833]  ? down_read+0x1a8/0x2d0
[ 1525.235360][T27833]  genl_rcv+0x24/0x40
[ 1525.239343][T27833]  netlink_unicast+0x7ad/0x920
[ 1525.244123][T27833]  netlink_sendmsg+0x8ad/0xbd0
[ 1525.248907][T27833]  ? netlink_getsockopt+0x550/0x550
[ 1525.254198][T27833]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1525.259758][T27833]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1525.265040][T27833]  ? security_socket_sendmsg+0x7c/0xa0
[ 1525.270495][T27833]  ? netlink_getsockopt+0x550/0x550
[ 1525.275688][T27833]  ____sys_sendmsg+0x5ed/0x9a0
[ 1525.280459][T27833]  ? __sys_sendmsg_sock+0x30/0x30
[ 1525.285486][T27833]  ? __import_iovec+0x306/0x510
[ 1525.290351][T27833]  ? import_iovec+0x6f/0xa0
[ 1525.294861][T27833]  ___sys_sendmsg+0x2a2/0x360
[ 1525.299541][T27833]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1525.304339][T27833]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1525.309183][T27833]  ? ct_nmi_exit+0x145/0x1c0
[ 1525.313776][T27833]  ? __x64_sys_sendmsg+0x80/0x80
[ 1525.318722][T27833]  ? lockdep_hardirqs_on+0x94/0x140
[ 1525.323924][T27833]  do_syscall_64+0x4c/0xa0
[ 1525.328332][T27833]  ? clear_bhb_loop+0x60/0xb0
[ 1525.333001][T27833]  ? clear_bhb_loop+0x60/0xb0
[ 1525.337672][T27833]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1525.343566][T27833] RIP: 0033:0x7f1566b9e159
[ 1525.347976][T27833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1525.367598][T27833] RSP: 002b:00007f1567b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1525.376008][T27833] RAX: ffffffffffffffda RBX: 00007f1566e25fa0 RCX: 00007f1566b9e159
[ 1525.383974][T27833] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1525.391936][T27833] RBP: 00007f1566c3506b R08: 0000000000000000 R09: 0000000000000000
[ 1525.399898][T27833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1525.407861][T27833] R13: 00007f1566e26038 R14: 00007f1566e25fa0 R15: 00007fff01e90748
[ 1525.415839][T27833]  </TASK>
[ 1525.446976][T27837] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7228'.
[ 1525.800602][T27858] FAULT_INJECTION: forcing a failure.
[ 1525.800602][T27858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1525.898724][T27858] CPU: 1 PID: 27858 Comm: syz.1.7233 Not tainted syzkaller #0
[ 1525.906247][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1525.916322][T27858] Call Trace:
[ 1525.919619][T27858]  <TASK>
[ 1525.922571][T27858]  dump_stack_lvl+0x188/0x24e
[ 1525.927280][T27858]  ? show_regs_print_info+0x12/0x12
[ 1525.932503][T27858]  ? load_image+0x410/0x410
[ 1525.937035][T27858]  ? __might_fault+0xa6/0x120
[ 1525.941735][T27858]  should_fail_ex+0x390/0x4c0
[ 1525.946448][T27858]  copyin+0x1b/0x120
[ 1525.950368][T27858]  _copy_from_iter+0x447/0x1130
[ 1525.955239][T27858]  ? sock_alloc_send_pskb+0x89d/0x9a0
[ 1525.960641][T27858]  ? copyout_mc+0x110/0x110
[ 1525.965163][T27858]  ? __virt_addr_valid+0x188/0x540
[ 1525.970297][T27858]  ? __virt_addr_valid+0x188/0x540
[ 1525.975434][T27858]  ? __virt_addr_valid+0x467/0x540
[ 1525.980580][T27858]  ? __check_object_size+0x4f6/0xa70
[ 1525.985897][T27858]  skb_copy_datagram_from_iter+0xee/0x6b0
[ 1525.991651][T27858]  ? unix_scm_to_skb+0x336/0x4e0
[ 1525.996612][T27858]  ? skb_put+0x10e/0x200
[ 1526.000878][T27858]  unix_stream_sendmsg+0x4d5/0xa70
[ 1526.006031][T27858]  ? unix_show_fdinfo+0x2c0/0x2c0
[ 1526.011076][T27858]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1526.017516][T27858]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1526.023092][T27858]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1526.028396][T27858]  ? security_socket_sendmsg+0x7c/0xa0
[ 1526.033879][T27858]  ? unix_show_fdinfo+0x2c0/0x2c0
[ 1526.038931][T27858]  ____sys_sendmsg+0x5ed/0x9a0
[ 1526.043722][T27858]  ? __sys_sendmsg_sock+0x30/0x30
[ 1526.048765][T27858]  ? __import_iovec+0x306/0x510
[ 1526.053648][T27858]  ? import_iovec+0x6f/0xa0
[ 1526.058184][T27858]  ___sys_sendmsg+0x2a2/0x360
[ 1526.062875][T27858]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1526.067657][T27858]  ? __lock_acquire+0x7c40/0x7c40
[ 1526.072705][T27858]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1526.077564][T27858]  ? __x64_sys_sendmsg+0x80/0x80
[ 1526.082509][T27858]  ? lockdep_hardirqs_on+0x94/0x140
[ 1526.087711][T27858]  do_syscall_64+0x4c/0xa0
[ 1526.092128][T27858]  ? clear_bhb_loop+0x60/0xb0
[ 1526.096803][T27858]  ? clear_bhb_loop+0x60/0xb0
[ 1526.101481][T27858]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1526.107378][T27858] RIP: 0033:0x7efc3e79e159
[ 1526.111795][T27858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1526.131400][T27858] RSP: 002b:00007efc3f6cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1526.139810][T27858] RAX: ffffffffffffffda RBX: 00007efc3ea25fa0 RCX: 00007efc3e79e159
[ 1526.147778][T27858] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004
[ 1526.155750][T27858] RBP: 00007efc3f6cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1526.163716][T27858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1526.171680][T27858] R13: 00007efc3ea26038 R14: 00007efc3ea25fa0 R15: 00007ffd1d206fd8
[ 1526.179666][T27858]  </TASK>
[ 1526.684044][T26722] wlan1: Creating new IBSS network, BSSID de:fe:1c:61:8e:a5
[ 1527.004435][T27879] netlink: 'syz.4.7240': attribute type 12 has an invalid length.
[ 1527.034150][T27879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7240'.
[ 1527.522803][T27889] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7241'.
[ 1527.566136][T27889] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1527.595208][T27889] CPU: 1 PID: 27889 Comm: syz.3.7241 Not tainted syzkaller #0
[ 1527.602728][T27889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1527.612810][T27889] Call Trace:
[ 1527.616102][T27889]  <TASK>
[ 1527.619033][T27889]  dump_stack_lvl+0x188/0x24e
[ 1527.623717][T27889]  ? show_regs_print_info+0x12/0x12
[ 1527.628912][T27889]  ? load_image+0x410/0x410
[ 1527.633420][T27889]  sysfs_warn_dup+0x8a/0xa0
[ 1527.637922][T27889]  sysfs_do_create_link_sd+0xc0/0x110
[ 1527.643293][T27889]  device_add+0x83b/0x1050
[ 1527.647712][T27889]  wiphy_register+0x1d8b/0x2aa0
[ 1527.652570][T27889]  ? cfg80211_event_work+0x40/0x40
[ 1527.657682][T27889]  ? minstrel_ht_alloc+0x894/0xa20
[ 1527.662796][T27889]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1527.668868][T27889]  ieee80211_register_hw+0x2d48/0x39f0
[ 1527.674333][T27889]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1527.679870][T27889]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1527.685410][T27889]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1527.691037][T27889]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1527.696934][T27889]  ? __debug_object_init+0xed/0x440
[ 1527.702128][T27889]  ? memset+0x1e/0x40
[ 1527.706105][T27889]  ? __hrtimer_init+0x189/0x270
[ 1527.710955][T27889]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1527.716680][T27889]  ? memcpy+0x3c/0x60
[ 1527.720661][T27889]  hwsim_new_radio_nl+0xab7/0xc90
[ 1527.725697][T27889]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1527.731242][T27889]  ? end_current_label_crit_section+0x170/0x170
[ 1527.737480][T27889]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1527.743375][T27889]  ? bpf_lsm_capable+0x5/0x10
[ 1527.748050][T27889]  ? security_capable+0x85/0xb0
[ 1527.752905][T27889]  genl_rcv_msg+0x601/0x790
[ 1527.757415][T27889]  ? genl_bind+0x360/0x360
[ 1527.761829][T27889]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1527.768171][T27889]  netlink_rcv_skb+0x1ef/0x440
[ 1527.772933][T27889]  ? genl_bind+0x360/0x360
[ 1527.777348][T27889]  ? netlink_ack+0x1160/0x1160
[ 1527.782119][T27889]  ? down_read+0x1a8/0x2d0
[ 1527.786534][T27889]  genl_rcv+0x24/0x40
[ 1527.790509][T27889]  netlink_unicast+0x7ad/0x920
[ 1527.795276][T27889]  netlink_sendmsg+0x8ad/0xbd0
[ 1527.800042][T27889]  ? netlink_getsockopt+0x550/0x550
[ 1527.805233][T27889]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1527.810782][T27889]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1527.816081][T27889]  ? security_socket_sendmsg+0x7c/0xa0
[ 1527.821537][T27889]  ? netlink_getsockopt+0x550/0x550
[ 1527.826733][T27889]  ____sys_sendmsg+0x5ed/0x9a0
[ 1527.831497][T27889]  ? __sys_sendmsg_sock+0x30/0x30
[ 1527.836514][T27889]  ? __import_iovec+0x306/0x510
[ 1527.841368][T27889]  ? import_iovec+0x6f/0xa0
[ 1527.845902][T27889]  ___sys_sendmsg+0x2a2/0x360
[ 1527.850579][T27889]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1527.855381][T27889]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1527.861216][T27889]  ? __x64_sys_sendmsg+0x80/0x80
[ 1527.866246][T27889]  ? lockdep_hardirqs_on+0x94/0x140
[ 1527.871709][T27889]  do_syscall_64+0x4c/0xa0
[ 1527.876121][T27889]  ? clear_bhb_loop+0x60/0xb0
[ 1527.880792][T27889]  ? clear_bhb_loop+0x60/0xb0
[ 1527.885464][T27889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1527.891357][T27889] RIP: 0033:0x7f1566b9e159
[ 1527.895769][T27889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1527.915368][T27889] RSP: 002b:00007f1567b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1527.923775][T27889] RAX: ffffffffffffffda RBX: 00007f1566e25fa0 RCX: 00007f1566b9e159
[ 1527.931739][T27889] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1527.939723][T27889] RBP: 00007f1566c3506b R08: 0000000000000000 R09: 0000000000000000
[ 1527.947687][T27889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1527.955652][T27889] R13: 00007f1566e26038 R14: 00007f1566e25fa0 R15: 00007fff01e90748
[ 1527.963631][T27889]  </TASK>
[ 1529.080132][T27885] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7244'.
[ 1529.175492][T27885] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1529.298995][T27885] CPU: 0 PID: 27885 Comm: syz.4.7244 Not tainted syzkaller #0
[ 1529.306527][T27885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1529.316601][T27885] Call Trace:
[ 1529.319891][T27885]  <TASK>
[ 1529.322832][T27885]  dump_stack_lvl+0x188/0x24e
[ 1529.327543][T27885]  ? show_regs_print_info+0x12/0x12
[ 1529.332770][T27885]  ? load_image+0x410/0x410
[ 1529.337319][T27885]  sysfs_warn_dup+0x8a/0xa0
[ 1529.341856][T27885]  sysfs_do_create_link_sd+0xc0/0x110
[ 1529.347257][T27885]  device_add+0x83b/0x1050
[ 1529.351708][T27885]  wiphy_register+0x1d8b/0x2aa0
[ 1529.356575][T27885]  ? cfg80211_event_work+0x40/0x40
[ 1529.361690][T27885]  ? minstrel_ht_alloc+0x894/0xa20
[ 1529.366806][T27885]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1529.372883][T27885]  ieee80211_register_hw+0x2d48/0x39f0
[ 1529.378377][T27885]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1529.383920][T27885]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1529.389473][T27885]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1529.395105][T27885]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1529.401008][T27885]  ? __debug_object_init+0xed/0x440
[ 1529.406209][T27885]  ? memset+0x1e/0x40
[ 1529.410186][T27885]  ? __hrtimer_init+0x189/0x270
[ 1529.415040][T27885]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1529.420772][T27885]  ? memcpy+0x3c/0x60
[ 1529.424755][T27885]  hwsim_new_radio_nl+0xab7/0xc90
[ 1529.429791][T27885]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1529.435335][T27885]  ? end_current_label_crit_section+0x170/0x170
[ 1529.441581][T27885]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1529.447482][T27885]  ? bpf_lsm_capable+0x5/0x10
[ 1529.452164][T27885]  ? security_capable+0x85/0xb0
[ 1529.457017][T27885]  genl_rcv_msg+0x601/0x790
[ 1529.461528][T27885]  ? genl_bind+0x360/0x360
[ 1529.465939][T27885]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1529.472289][T27885]  netlink_rcv_skb+0x1ef/0x440
[ 1529.477048][T27885]  ? genl_bind+0x360/0x360
[ 1529.481462][T27885]  ? netlink_ack+0x1160/0x1160
[ 1529.486230][T27885]  ? down_read+0x1a8/0x2d0
[ 1529.490648][T27885]  genl_rcv+0x24/0x40
[ 1529.494630][T27885]  netlink_unicast+0x7ad/0x920
[ 1529.499440][T27885]  netlink_sendmsg+0x8ad/0xbd0
[ 1529.504233][T27885]  ? netlink_getsockopt+0x550/0x550
[ 1529.509432][T27885]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1529.514983][T27885]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1529.520260][T27885]  ? security_socket_sendmsg+0x7c/0xa0
[ 1529.525719][T27885]  ? netlink_getsockopt+0x550/0x550
[ 1529.530915][T27885]  ____sys_sendmsg+0x5ed/0x9a0
[ 1529.535689][T27885]  ? __sys_sendmsg_sock+0x30/0x30
[ 1529.540732][T27885]  ? __import_iovec+0x306/0x510
[ 1529.545592][T27885]  ? import_iovec+0x6f/0xa0
[ 1529.550115][T27885]  ___sys_sendmsg+0x2a2/0x360
[ 1529.554796][T27885]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1529.559596][T27885]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1529.564442][T27885]  ? __x64_sys_sendmsg+0x80/0x80
[ 1529.569388][T27885]  ? lockdep_hardirqs_on+0x94/0x140
[ 1529.574591][T27885]  do_syscall_64+0x4c/0xa0
[ 1529.579003][T27885]  ? clear_bhb_loop+0x60/0xb0
[ 1529.583673][T27885]  ? clear_bhb_loop+0x60/0xb0
[ 1529.588344][T27885]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1529.594239][T27885] RIP: 0033:0x7f980799e159
[ 1529.598656][T27885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1529.618262][T27885] RSP: 002b:00007f980883f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1529.626670][T27885] RAX: ffffffffffffffda RBX: 00007f9807c25fa0 RCX: 00007f980799e159
[ 1529.634635][T27885] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1529.642621][T27885] RBP: 00007f9807a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1529.650589][T27885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1529.658553][T27885] R13: 00007f9807c26038 R14: 00007f9807c25fa0 R15: 00007fff08f27608
[ 1529.666625][T27885]  </TASK>
[ 1530.993942][T27919] netlink: 'syz.0.7248': attribute type 10 has an invalid length.
[ 1531.038827][T27919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7248'.
[ 1531.101975][T27919] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1531.224710][T27940] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[ 1532.623736][T27974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7262'.
[ 1532.728012][T27976] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7264'.
[ 1532.788630][T27971] netlink: 'syz.2.7262': attribute type 3 has an invalid length.
[ 1532.839956][T27974] netlink: 'syz.2.7262': attribute type 3 has an invalid length.
[ 1532.845924][T27971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7262'.
[ 1532.871175][T27974] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7262'.
[ 1532.890071][T27976] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1533.024323][T27976] CPU: 0 PID: 27976 Comm: syz.0.7264 Not tainted syzkaller #0
[ 1533.031885][T27976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1533.042007][T27976] Call Trace:
[ 1533.045375][T27976]  <TASK>
[ 1533.048375][T27976]  dump_stack_lvl+0x188/0x24e
[ 1533.053152][T27976]  ? show_regs_print_info+0x12/0x12
[ 1533.058428][T27976]  ? load_image+0x410/0x410
[ 1533.063083][T27976]  sysfs_warn_dup+0x8a/0xa0
[ 1533.067667][T27976]  sysfs_do_create_link_sd+0xc0/0x110
[ 1533.073125][T27976]  device_add+0x83b/0x1050
[ 1533.077629][T27976]  wiphy_register+0x1d8b/0x2aa0
[ 1533.082597][T27976]  ? cfg80211_event_work+0x40/0x40
[ 1533.087746][T27976]  ? minstrel_ht_alloc+0x894/0xa20
[ 1533.092926][T27976]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1533.099050][T27976]  ieee80211_register_hw+0x2d48/0x39f0
[ 1533.104592][T27976]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1533.110161][T27976]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1533.115766][T27976]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1533.121421][T27976]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1533.127368][T27976]  ? __debug_object_init+0xed/0x440
[ 1533.132638][T27976]  ? memset+0x1e/0x40
[ 1533.136654][T27976]  ? __hrtimer_init+0x189/0x270
[ 1533.141558][T27976]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1533.147361][T27976]  ? memcpy+0x3c/0x60
[ 1533.151398][T27976]  hwsim_new_radio_nl+0xab7/0xc90
[ 1533.156522][T27976]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1533.162188][T27976]  ? end_current_label_crit_section+0x170/0x170
[ 1533.168493][T27976]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1533.174487][T27976]  ? bpf_lsm_capable+0x5/0x10
[ 1533.179207][T27976]  ? security_capable+0x85/0xb0
[ 1533.184121][T27976]  genl_rcv_msg+0x601/0x790
[ 1533.188715][T27976]  ? genl_bind+0x360/0x360
[ 1533.193161][T27976]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1533.199590][T27976]  netlink_rcv_skb+0x1ef/0x440
[ 1533.204389][T27976]  ? genl_bind+0x360/0x360
[ 1533.208848][T27976]  ? netlink_ack+0x1160/0x1160
[ 1533.213688][T27976]  ? down_read+0x1a8/0x2d0
[ 1533.218151][T27976]  genl_rcv+0x24/0x40
[ 1533.222163][T27976]  netlink_unicast+0x7ad/0x920
[ 1533.227005][T27976]  netlink_sendmsg+0x8ad/0xbd0
[ 1533.231842][T27976]  ? netlink_getsockopt+0x550/0x550
[ 1533.237084][T27976]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1533.242697][T27976]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1533.248008][T27976]  ? security_socket_sendmsg+0x7c/0xa0
[ 1533.253516][T27976]  ? netlink_getsockopt+0x550/0x550
[ 1533.258759][T27976]  ____sys_sendmsg+0x5ed/0x9a0
[ 1533.263624][T27976]  ? __sys_sendmsg_sock+0x30/0x30
[ 1533.268696][T27976]  ? __import_iovec+0x306/0x510
[ 1533.273630][T27976]  ? import_iovec+0x6f/0xa0
[ 1533.278193][T27976]  ___sys_sendmsg+0x2a2/0x360
[ 1533.282924][T27976]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1533.287931][T27976]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1533.292832][T27976]  ? __x64_sys_sendmsg+0x80/0x80
[ 1533.297879][T27976]  ? lockdep_hardirqs_on+0x94/0x140
[ 1533.303128][T27976]  do_syscall_64+0x4c/0xa0
[ 1533.307569][T27976]  ? clear_bhb_loop+0x60/0xb0
[ 1533.312291][T27976]  ? clear_bhb_loop+0x60/0xb0
[ 1533.317007][T27976]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1533.322934][T27976] RIP: 0033:0x7f9fbcb9e159
[ 1533.327383][T27976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1533.347038][T27976] RSP: 002b:00007f9fbda2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1533.355486][T27976] RAX: ffffffffffffffda RBX: 00007f9fbce25fa0 RCX: 00007f9fbcb9e159
[ 1533.363483][T27976] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1533.371480][T27976] RBP: 00007f9fbcc3506b R08: 0000000000000000 R09: 0000000000000000
[ 1533.379473][T27976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1533.387480][T27976] R13: 00007f9fbce26038 R14: 00007f9fbce25fa0 R15: 00007fff0ceacee8
[ 1533.395549][T27976]  </TASK>
[ 1533.673343][T27981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7265'.
[ 1533.693083][T27981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7265'.
[ 1533.724728][T27982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7265'.
[ 1534.249823][T27992] netlink: 'syz.2.7267': attribute type 29 has an invalid length.
[ 1534.278460][T27992] netlink: 'syz.2.7267': attribute type 16 has an invalid length.
[ 1534.307158][T27992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7267'.
[ 1535.740222][T28024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7277'.
[ 1535.826372][T28028] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7278'.
[ 1535.834683][T28030] netlink: 'syz.1.7277': attribute type 3 has an invalid length.
[ 1535.938292][T28028] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1536.030099][T28028] CPU: 1 PID: 28028 Comm: syz.2.7278 Not tainted syzkaller #0
[ 1536.037649][T28028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1536.047751][T28028] Call Trace:
[ 1536.051064][T28028]  <TASK>
[ 1536.054027][T28028]  dump_stack_lvl+0x188/0x24e
[ 1536.058761][T28028]  ? show_regs_print_info+0x12/0x12
[ 1536.059769][T28024] netlink: 'syz.1.7277': attribute type 3 has an invalid length.
[ 1536.063993][T28028]  ? load_image+0x410/0x410
[ 1536.064075][T28028]  sysfs_warn_dup+0x8a/0xa0
[ 1536.064112][T28028]  sysfs_do_create_link_sd+0xc0/0x110
[ 1536.086341][T28028]  device_add+0x83b/0x1050
[ 1536.090839][T28028]  wiphy_register+0x1d8b/0x2aa0
[ 1536.095592][T28030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7277'.
[ 1536.095768][T28028]  ? cfg80211_event_work+0x40/0x40
[ 1536.109907][T28028]  ? minstrel_ht_alloc+0x894/0xa20
[ 1536.114813][T28024] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7277'.
[ 1536.115067][T28028]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1536.130454][T28028]  ieee80211_register_hw+0x2d48/0x39f0
[ 1536.136008][T28028]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1536.141590][T28028]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1536.147202][T28028]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1536.152875][T28028]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1536.158830][T28028]  ? __debug_object_init+0xed/0x440
[ 1536.164093][T28028]  ? memset+0x1e/0x40
[ 1536.168119][T28028]  ? __hrtimer_init+0x189/0x270
[ 1536.173039][T28028]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1536.178833][T28028]  ? memcpy+0x3c/0x60
[ 1536.182877][T28028]  hwsim_new_radio_nl+0xab7/0xc90
[ 1536.188002][T28028]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1536.193592][T28028]  ? end_current_label_crit_section+0x170/0x170
[ 1536.199880][T28028]  ? lockdep_hardirqs_on+0x94/0x140
[ 1536.205134][T28028]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1536.211100][T28028]  ? bpf_lsm_capable+0x5/0x10
[ 1536.215815][T28028]  ? security_capable+0x85/0xb0
[ 1536.220735][T28028]  genl_rcv_msg+0x601/0x790
[ 1536.225315][T28028]  ? genl_bind+0x360/0x360
[ 1536.229768][T28028]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1536.236192][T28028]  netlink_rcv_skb+0x1ef/0x440
[ 1536.241006][T28028]  ? genl_bind+0x360/0x360
[ 1536.245482][T28028]  ? netlink_ack+0x1160/0x1160
[ 1536.250329][T28028]  ? down_read+0x1a8/0x2d0
[ 1536.254803][T28028]  genl_rcv+0x24/0x40
[ 1536.258823][T28028]  netlink_unicast+0x7ad/0x920
[ 1536.263666][T28028]  netlink_sendmsg+0x8ad/0xbd0
[ 1536.268503][T28028]  ? netlink_getsockopt+0x550/0x550
[ 1536.273751][T28028]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1536.279349][T28028]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1536.284669][T28028]  ? security_socket_sendmsg+0x7c/0xa0
[ 1536.290172][T28028]  ? netlink_getsockopt+0x550/0x550
[ 1536.295419][T28028]  ____sys_sendmsg+0x5ed/0x9a0
[ 1536.300251][T28028]  ? __sys_sendmsg_sock+0x30/0x30
[ 1536.305313][T28028]  ? __import_iovec+0x306/0x510
[ 1536.310240][T28028]  ? import_iovec+0x6f/0xa0
[ 1536.314803][T28028]  ___sys_sendmsg+0x2a2/0x360
[ 1536.319541][T28028]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1536.324510][T28028]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1536.329410][T28028]  ? __x64_sys_sendmsg+0x80/0x80
[ 1536.334475][T28028]  ? lockdep_hardirqs_on+0x94/0x140
[ 1536.339734][T28028]  do_syscall_64+0x4c/0xa0
[ 1536.344191][T28028]  ? clear_bhb_loop+0x60/0xb0
[ 1536.348902][T28028]  ? clear_bhb_loop+0x60/0xb0
[ 1536.353631][T28028]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1536.359568][T28028] RIP: 0033:0x7f784bd9e159
[ 1536.364025][T28028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1536.383672][T28028] RSP: 002b:00007f7849ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1536.392132][T28028] RAX: ffffffffffffffda RBX: 00007f784c025fa0 RCX: 00007f784bd9e159
[ 1536.400136][T28028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1536.408142][T28028] RBP: 00007f784be3506b R08: 0000000000000000 R09: 0000000000000000
[ 1536.416162][T28028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1536.424162][T28028] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1536.432224][T28028]  </TASK>
[ 1538.719208][T28051] FAULT_INJECTION: forcing a failure.
[ 1538.719208][T28051] name failslab, interval 1, probability 0, space 0, times 0
[ 1538.794103][T28051] CPU: 1 PID: 28051 Comm: syz.4.7284 Not tainted syzkaller #0
[ 1538.801622][T28051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1538.811696][T28051] Call Trace:
[ 1538.814982][T28051]  <TASK>
[ 1538.817920][T28051]  dump_stack_lvl+0x188/0x24e
[ 1538.822617][T28051]  ? sctp_sendmsg+0x1686/0x2940
[ 1538.827485][T28051]  ? ___sys_sendmsg+0x2a2/0x360
[ 1538.832356][T28051]  ? show_regs_print_info+0x12/0x12
[ 1538.837572][T28051]  ? load_image+0x410/0x410
[ 1538.842116][T28051]  should_fail_ex+0x390/0x4c0
[ 1538.846824][T28051]  should_failslab+0x5/0x20
[ 1538.851348][T28051]  slab_pre_alloc_hook+0x59/0x300
[ 1538.856399][T28051]  ? sctp_add_bind_addr+0x89/0x350
[ 1538.861543][T28051]  __kmem_cache_alloc_node+0x4f/0x270
[ 1538.866916][T28051]  ? sctp_add_bind_addr+0x89/0x350
[ 1538.872027][T28051]  kmalloc_trace+0x26/0xe0
[ 1538.876439][T28051]  sctp_add_bind_addr+0x89/0x350
[ 1538.881372][T28051]  sctp_copy_local_addr_list+0x317/0x4d0
[ 1538.886998][T28051]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[ 1538.892711][T28051]  ? sctp_do_8_2_transport_strike+0x900/0x900
[ 1538.898778][T28051]  ? sctp_v4_is_any+0x31/0x50
[ 1538.903447][T28051]  ? sctp_copy_one_addr+0x93/0x660
[ 1538.908552][T28051]  sctp_bind_addr_copy+0xaf/0x3c0
[ 1538.913569][T28051]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[ 1538.919914][T28051]  sctp_connect_new_asoc+0x2f5/0x6a0
[ 1538.925205][T28051]  ? __sctp_connect+0xd80/0xd80
[ 1538.930049][T28051]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1538.935413][T28051]  ? _local_bh_enable+0xa0/0xa0
[ 1538.940280][T28051]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1538.946079][T28051]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1538.951879][T28051]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1538.957417][T28051]  ? security_sctp_bind_connect+0x85/0xb0
[ 1538.963166][T28051]  sctp_sendmsg+0x1686/0x2940
[ 1538.967852][T28051]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1538.972782][T28051]  ? __might_fault+0xa6/0x120
[ 1538.977454][T28051]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1538.983879][T28051]  ? aa_sock_msg_perm+0x94/0x150
[ 1538.988835][T28051]  ? inet_sendmsg+0x7a/0x2a0
[ 1538.993425][T28051]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1538.998709][T28051]  ? inet_send_prepare+0x250/0x250
[ 1539.003833][T28051]  ____sys_sendmsg+0x5ed/0x9a0
[ 1539.008616][T28051]  ? __sys_sendmsg_sock+0x30/0x30
[ 1539.013643][T28051]  ? __import_iovec+0x306/0x510
[ 1539.018501][T28051]  ? import_iovec+0x6f/0xa0
[ 1539.023005][T28051]  ___sys_sendmsg+0x2a2/0x360
[ 1539.027682][T28051]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1539.032457][T28051]  ? __lock_acquire+0x7c40/0x7c40
[ 1539.037500][T28051]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1539.042345][T28051]  ? __x64_sys_sendmsg+0x80/0x80
[ 1539.047286][T28051]  ? lockdep_hardirqs_on+0x94/0x140
[ 1539.052487][T28051]  do_syscall_64+0x4c/0xa0
[ 1539.056900][T28051]  ? clear_bhb_loop+0x60/0xb0
[ 1539.061571][T28051]  ? clear_bhb_loop+0x60/0xb0
[ 1539.066244][T28051]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1539.072139][T28051] RIP: 0033:0x7f980799e159
[ 1539.076552][T28051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1539.096155][T28051] RSP: 002b:00007f980881e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1539.104566][T28051] RAX: ffffffffffffffda RBX: 00007f9807c26090 RCX: 00007f980799e159
[ 1539.112533][T28051] RDX: 0000000004008010 RSI: 0000200000000ac0 RDI: 0000000000000003
[ 1539.120498][T28051] RBP: 00007f980881e090 R08: 0000000000000000 R09: 0000000000000000
[ 1539.128461][T28051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1539.136425][T28051] R13: 00007f9807c26128 R14: 00007f9807c26090 R15: 00007fff08f27608
[ 1539.144407][T28051]  </TASK>
[ 1539.638172][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7291'.
[ 1539.729759][T28069] netlink: 279 bytes leftover after parsing attributes in process `syz.2.7290'.
[ 1540.138987][T28084] netlink: 'syz.1.7292': attribute type 3 has an invalid length.
[ 1540.165393][T28084] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7292'.
[ 1540.303462][T28085] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7296'.
[ 1540.980687][T28093] netlink: 'syz.3.7295': attribute type 3 has an invalid length.
[ 1541.012395][T28093] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7295'.
[ 1541.462126][T28096] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7297'.
[ 1542.946536][T28079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7292'.
[ 1542.972818][T28096] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1543.006127][T28096] CPU: 1 PID: 28096 Comm: syz.0.7297 Not tainted syzkaller #0
[ 1543.013662][T28096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1543.023746][T28096] Call Trace:
[ 1543.027053][T28096]  <TASK>
[ 1543.030003][T28096]  dump_stack_lvl+0x188/0x24e
[ 1543.034712][T28096]  ? show_regs_print_info+0x12/0x12
[ 1543.039939][T28096]  ? load_image+0x410/0x410
[ 1543.044485][T28096]  sysfs_warn_dup+0x8a/0xa0
[ 1543.049022][T28096]  sysfs_do_create_link_sd+0xc0/0x110
[ 1543.054428][T28096]  device_add+0x83b/0x1050
[ 1543.058882][T28096]  wiphy_register+0x1d8b/0x2aa0
[ 1543.063776][T28096]  ? cfg80211_event_work+0x40/0x40
[ 1543.068905][T28096]  ? minstrel_ht_alloc+0x894/0xa20
[ 1543.074058][T28096]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1543.080162][T28096]  ieee80211_register_hw+0x2d48/0x39f0
[ 1543.085658][T28096]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1543.091233][T28096]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1543.096823][T28096]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1543.102479][T28096]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1543.108397][T28096]  ? __debug_object_init+0xed/0x440
[ 1543.113634][T28096]  ? memset+0x1e/0x40
[ 1543.117616][T28096]  ? __hrtimer_init+0x189/0x270
[ 1543.122478][T28096]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1543.128213][T28096]  ? memcpy+0x3c/0x60
[ 1543.132219][T28096]  hwsim_new_radio_nl+0xab7/0xc90
[ 1543.137266][T28096]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1543.142844][T28096]  ? end_current_label_crit_section+0x170/0x170
[ 1543.149098][T28096]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1543.155045][T28096]  ? bpf_lsm_capable+0x5/0x10
[ 1543.159722][T28096]  ? security_capable+0x85/0xb0
[ 1543.164594][T28096]  genl_rcv_msg+0x601/0x790
[ 1543.169123][T28096]  ? genl_bind+0x360/0x360
[ 1543.173558][T28096]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1543.179917][T28096]  netlink_rcv_skb+0x1ef/0x440
[ 1543.184693][T28096]  ? genl_bind+0x360/0x360
[ 1543.189115][T28096]  ? netlink_ack+0x1160/0x1160
[ 1543.193890][T28096]  ? down_read+0x1a8/0x2d0
[ 1543.198314][T28096]  genl_rcv+0x24/0x40
[ 1543.202296][T28096]  netlink_unicast+0x7ad/0x920
[ 1543.207066][T28096]  netlink_sendmsg+0x8ad/0xbd0
[ 1543.211836][T28096]  ? netlink_getsockopt+0x550/0x550
[ 1543.217036][T28096]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1543.222609][T28096]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1543.227894][T28096]  ? security_socket_sendmsg+0x7c/0xa0
[ 1543.233355][T28096]  ? netlink_getsockopt+0x550/0x550
[ 1543.238553][T28096]  ____sys_sendmsg+0x5ed/0x9a0
[ 1543.243342][T28096]  ? __sys_sendmsg_sock+0x30/0x30
[ 1543.248375][T28096]  ? __import_iovec+0x306/0x510
[ 1543.253239][T28096]  ? import_iovec+0x6f/0xa0
[ 1543.257750][T28096]  ___sys_sendmsg+0x2a2/0x360
[ 1543.262427][T28096]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1543.267227][T28096]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1543.272103][T28096]  ? __x64_sys_sendmsg+0x80/0x80
[ 1543.277051][T28096]  ? lockdep_hardirqs_on+0x94/0x140
[ 1543.282275][T28096]  do_syscall_64+0x4c/0xa0
[ 1543.286706][T28096]  ? clear_bhb_loop+0x60/0xb0
[ 1543.291399][T28096]  ? clear_bhb_loop+0x60/0xb0
[ 1543.296075][T28096]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1543.301969][T28096] RIP: 0033:0x7f9fbcb9e159
[ 1543.306383][T28096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1543.325988][T28096] RSP: 002b:00007f9fbda2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1543.334418][T28096] RAX: ffffffffffffffda RBX: 00007f9fbce25fa0 RCX: 00007f9fbcb9e159
[ 1543.342391][T28096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1543.350354][T28096] RBP: 00007f9fbcc3506b R08: 0000000000000000 R09: 0000000000000000
[ 1543.358318][T28096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1543.366283][T28096] R13: 00007f9fbce26038 R14: 00007f9fbce25fa0 R15: 00007fff0ceacee8
[ 1543.374265][T28096]  </TASK>
[ 1543.953521][T28117] netlink: 'syz.4.7304': attribute type 39 has an invalid length.
[ 1545.793185][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.799652][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.674986][T28143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7310'.
[ 1546.846366][T28144] netlink: 'syz.0.7310': attribute type 3 has an invalid length.
[ 1546.873956][T28144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7310'.
[ 1546.967523][T28144] netlink: 'syz.0.7310': attribute type 3 has an invalid length.
[ 1546.989430][T28150] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7313'.
[ 1546.989523][T28144] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7310'.
[ 1547.128495][T28150] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1547.146065][T28150] CPU: 0 PID: 28150 Comm: syz.3.7313 Not tainted syzkaller #0
[ 1547.153607][T28150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1547.163716][T28150] Call Trace:
[ 1547.167034][T28150]  <TASK>
[ 1547.170000][T28150]  dump_stack_lvl+0x188/0x24e
[ 1547.174742][T28150]  ? show_regs_print_info+0x12/0x12
[ 1547.179992][T28150]  ? load_image+0x410/0x410
[ 1547.184590][T28150]  sysfs_warn_dup+0x8a/0xa0
[ 1547.189151][T28150]  sysfs_do_create_link_sd+0xc0/0x110
[ 1547.194581][T28150]  device_add+0x83b/0x1050
[ 1547.199072][T28150]  wiphy_register+0x1d8b/0x2aa0
[ 1547.204038][T28150]  ? cfg80211_event_work+0x40/0x40
[ 1547.209192][T28150]  ? minstrel_ht_alloc+0x894/0xa20
[ 1547.214375][T28150]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1547.220509][T28150]  ieee80211_register_hw+0x2d48/0x39f0
[ 1547.226055][T28150]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1547.231639][T28150]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1547.237259][T28150]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1547.242929][T28150]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1547.248884][T28150]  ? __debug_object_init+0xed/0x440
[ 1547.254138][T28150]  ? memset+0x1e/0x40
[ 1547.258159][T28150]  ? __hrtimer_init+0x189/0x270
[ 1547.263062][T28150]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1547.268865][T28150]  ? memcpy+0x3c/0x60
[ 1547.272909][T28150]  hwsim_new_radio_nl+0xab7/0xc90
[ 1547.278037][T28150]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1547.283620][T28150]  ? end_current_label_crit_section+0x170/0x170
[ 1547.289884][T28150]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[ 1547.295798][T28150]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1547.301732][T28150]  ? bpf_lsm_capable+0x5/0x10
[ 1547.306427][T28150]  ? security_capable+0x85/0xb0
[ 1547.311307][T28150]  genl_rcv_msg+0x601/0x790
[ 1547.315848][T28150]  ? genl_bind+0x360/0x360
[ 1547.320276][T28150]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1547.326661][T28150]  netlink_rcv_skb+0x1ef/0x440
[ 1547.331451][T28150]  ? genl_bind+0x360/0x360
[ 1547.335895][T28150]  ? netlink_ack+0x1160/0x1160
[ 1547.340705][T28150]  ? down_read+0x1a8/0x2d0
[ 1547.345147][T28150]  genl_rcv+0x24/0x40
[ 1547.349144][T28150]  netlink_unicast+0x7ad/0x920
[ 1547.353966][T28150]  netlink_sendmsg+0x8ad/0xbd0
[ 1547.358782][T28150]  ? netlink_getsockopt+0x550/0x550
[ 1547.364001][T28150]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1547.369569][T28150]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1547.374866][T28150]  ? security_socket_sendmsg+0x7c/0xa0
[ 1547.380338][T28150]  ? netlink_getsockopt+0x550/0x550
[ 1547.385559][T28150]  ____sys_sendmsg+0x5ed/0x9a0
[ 1547.390360][T28150]  ? __sys_sendmsg_sock+0x30/0x30
[ 1547.395395][T28150]  ? __import_iovec+0x306/0x510
[ 1547.400290][T28150]  ? import_iovec+0x6f/0xa0
[ 1547.404821][T28150]  ___sys_sendmsg+0x2a2/0x360
[ 1547.409528][T28150]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1547.414430][T28150]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1547.419300][T28150]  ? __x64_sys_sendmsg+0x80/0x80
[ 1547.424290][T28150]  ? lockdep_hardirqs_on+0x94/0x140
[ 1547.429525][T28150]  do_syscall_64+0x4c/0xa0
[ 1547.433947][T28150]  ? clear_bhb_loop+0x60/0xb0
[ 1547.438628][T28150]  ? clear_bhb_loop+0x60/0xb0
[ 1547.443318][T28150]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1547.449223][T28150] RIP: 0033:0x7f1566b9e159
[ 1547.453650][T28150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1547.473272][T28150] RSP: 002b:00007f1567b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1547.481706][T28150] RAX: ffffffffffffffda RBX: 00007f1566e25fa0 RCX: 00007f1566b9e159
[ 1547.489691][T28150] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1547.497671][T28150] RBP: 00007f1566c3506b R08: 0000000000000000 R09: 0000000000000000
[ 1547.505654][T28150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1547.513639][T28150] R13: 00007f1566e26038 R14: 00007f1566e25fa0 R15: 00007fff01e90748
[ 1547.521665][T28150]  </TASK>
[ 1547.973638][T28156] netlink: 'syz.4.7314': attribute type 10 has an invalid length.
[ 1547.991624][T28156] team0: Device veth0_vlan is up. Set it down before adding it as a team port
[ 1549.912704][T28180] device syzkaller0 entered promiscuous mode
[ 1549.994810][T28184] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1550.048142][T28184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1550.881183][T28209] netlink: 'syz.2.7328': attribute type 3 has an invalid length.
[ 1550.972930][T28209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7328'.
[ 1551.195575][T28209] netlink: 'syz.2.7328': attribute type 3 has an invalid length.
[ 1551.234798][T28209] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7328'.
[ 1551.537341][T28213] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7331'.
[ 1554.795317][T26722] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1554.924638][T28205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7328'.
[ 1554.947013][T28213] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1554.992964][T28213] CPU: 0 PID: 28213 Comm: syz.3.7331 Not tainted syzkaller #0
[ 1555.000485][T28213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1555.010565][T28213] Call Trace:
[ 1555.013866][T28213]  <TASK>
[ 1555.016808][T28213]  dump_stack_lvl+0x188/0x24e
[ 1555.021510][T28213]  ? show_regs_print_info+0x12/0x12
[ 1555.026729][T28213]  ? load_image+0x410/0x410
[ 1555.031283][T28213]  sysfs_warn_dup+0x8a/0xa0
[ 1555.035805][T28213]  sysfs_do_create_link_sd+0xc0/0x110
[ 1555.041193][T28213]  device_add+0x83b/0x1050
[ 1555.045628][T28213]  wiphy_register+0x1d8b/0x2aa0
[ 1555.050505][T28213]  ? cfg80211_event_work+0x40/0x40
[ 1555.055617][T28213]  ? minstrel_ht_alloc+0x894/0xa20
[ 1555.060734][T28213]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1555.066817][T28213]  ieee80211_register_hw+0x2d48/0x39f0
[ 1555.072282][T28213]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1555.077818][T28213]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1555.083362][T28213]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1555.088987][T28213]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1555.094882][T28213]  ? __debug_object_init+0xed/0x440
[ 1555.100083][T28213]  ? memset+0x1e/0x40
[ 1555.104063][T28213]  ? __hrtimer_init+0x189/0x270
[ 1555.108919][T28213]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1555.114656][T28213]  ? memcpy+0x3c/0x60
[ 1555.118647][T28213]  hwsim_new_radio_nl+0xab7/0xc90
[ 1555.123682][T28213]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1555.129227][T28213]  ? end_current_label_crit_section+0x170/0x170
[ 1555.135473][T28213]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1555.141372][T28213]  ? bpf_lsm_capable+0x5/0x10
[ 1555.146052][T28213]  ? security_capable+0x85/0xb0
[ 1555.150905][T28213]  genl_rcv_msg+0x601/0x790
[ 1555.155413][T28213]  ? genl_bind+0x360/0x360
[ 1555.159822][T28213]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1555.166165][T28213]  netlink_rcv_skb+0x1ef/0x440
[ 1555.170924][T28213]  ? genl_bind+0x360/0x360
[ 1555.175344][T28213]  ? netlink_ack+0x1160/0x1160
[ 1555.180109][T28213]  ? down_read+0x1a8/0x2d0
[ 1555.184527][T28213]  genl_rcv+0x24/0x40
[ 1555.188501][T28213]  netlink_unicast+0x7ad/0x920
[ 1555.193273][T28213]  netlink_sendmsg+0x8ad/0xbd0
[ 1555.198039][T28213]  ? netlink_getsockopt+0x550/0x550
[ 1555.203238][T28213]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1555.208783][T28213]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1555.214067][T28213]  ? security_socket_sendmsg+0x7c/0xa0
[ 1555.219523][T28213]  ? netlink_getsockopt+0x550/0x550
[ 1555.224718][T28213]  ____sys_sendmsg+0x5ed/0x9a0
[ 1555.229484][T28213]  ? __sys_sendmsg_sock+0x30/0x30
[ 1555.234502][T28213]  ? __import_iovec+0x306/0x510
[ 1555.239358][T28213]  ? import_iovec+0x6f/0xa0
[ 1555.243871][T28213]  ___sys_sendmsg+0x2a2/0x360
[ 1555.248559][T28213]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1555.253360][T28213]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1555.259599][T28213]  ? trace_call_bpf+0xbf/0x6b0
[ 1555.264381][T28213]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1555.269227][T28213]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1555.275469][T28213]  ? __x64_sys_sendmsg+0x80/0x80
[ 1555.280412][T28213]  ? lockdep_hardirqs_on+0x94/0x140
[ 1555.285611][T28213]  do_syscall_64+0x4c/0xa0
[ 1555.290025][T28213]  ? clear_bhb_loop+0x60/0xb0
[ 1555.294695][T28213]  ? clear_bhb_loop+0x60/0xb0
[ 1555.299374][T28213]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1555.305267][T28213] RIP: 0033:0x7f1566b9e159
[ 1555.309676][T28213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1555.329276][T28213] RSP: 002b:00007f1567b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1555.337683][T28213] RAX: ffffffffffffffda RBX: 00007f1566e25fa0 RCX: 00007f1566b9e159
[ 1555.345653][T28213] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1555.353622][T28213] RBP: 00007f1566c3506b R08: 0000000000000000 R09: 0000000000000000
[ 1555.361592][T28213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1555.369561][T28213] R13: 00007f1566e26038 R14: 00007f1566e25fa0 R15: 00007fff01e90748
[ 1555.377542][T28213]  </TASK>
[ 1556.280126][T28250] device syzkaller0 entered promiscuous mode
[ 1556.577369][T28256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7345'.
[ 1556.600537][T28254] netlink: 'syz.1.7345': attribute type 3 has an invalid length.
[ 1556.631578][T28256] netlink: 'syz.1.7345': attribute type 3 has an invalid length.
[ 1556.664775][T28254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7345'.
[ 1556.735851][T28256] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7345'.
[ 1559.984766][T28259] netlink: 'syz.3.7337': attribute type 10 has an invalid length.
[ 1560.023574][T28265] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7347'.
[ 1560.043678][T28265] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1560.063902][T28265] CPU: 1 PID: 28265 Comm: syz.4.7347 Not tainted syzkaller #0
[ 1560.071412][T28265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1560.081485][T28265] Call Trace:
[ 1560.084786][T28265]  <TASK>
[ 1560.087744][T28265]  dump_stack_lvl+0x188/0x24e
[ 1560.092447][T28265]  ? show_regs_print_info+0x12/0x12
[ 1560.097667][T28265]  ? load_image+0x410/0x410
[ 1560.102230][T28265]  sysfs_warn_dup+0x8a/0xa0
[ 1560.106765][T28265]  sysfs_do_create_link_sd+0xc0/0x110
[ 1560.112255][T28265]  device_add+0x83b/0x1050
[ 1560.116705][T28265]  wiphy_register+0x1d8b/0x2aa0
[ 1560.121601][T28265]  ? cfg80211_event_work+0x40/0x40
[ 1560.126744][T28265]  ? minstrel_ht_alloc+0x894/0xa20
[ 1560.131884][T28265]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1560.137981][T28265]  ieee80211_register_hw+0x2d48/0x39f0
[ 1560.143476][T28265]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1560.149041][T28265]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1560.154615][T28265]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1560.160269][T28265]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1560.166204][T28265]  ? __debug_object_init+0xed/0x440
[ 1560.171426][T28265]  ? memset+0x1e/0x40
[ 1560.175426][T28265]  ? __hrtimer_init+0x189/0x270
[ 1560.180306][T28265]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1560.186061][T28265]  ? memcpy+0x3c/0x60
[ 1560.190067][T28265]  hwsim_new_radio_nl+0xab7/0xc90
[ 1560.195123][T28265]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1560.200805][T28265]  ? end_current_label_crit_section+0x170/0x170
[ 1560.207054][T28265]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1560.212943][T28265]  ? bpf_lsm_capable+0x5/0x10
[ 1560.217620][T28265]  ? security_capable+0x85/0xb0
[ 1560.222478][T28265]  genl_rcv_msg+0x601/0x790
[ 1560.226994][T28265]  ? genl_bind+0x360/0x360
[ 1560.231402][T28265]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1560.237759][T28265]  netlink_rcv_skb+0x1ef/0x440
[ 1560.242534][T28265]  ? genl_bind+0x360/0x360
[ 1560.246947][T28265]  ? netlink_ack+0x1160/0x1160
[ 1560.251708][T28265]  ? down_read+0x1a8/0x2d0
[ 1560.256120][T28265]  genl_rcv+0x24/0x40
[ 1560.260090][T28265]  netlink_unicast+0x7ad/0x920
[ 1560.264850][T28265]  netlink_sendmsg+0x8ad/0xbd0
[ 1560.269611][T28265]  ? netlink_getsockopt+0x550/0x550
[ 1560.274802][T28265]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1560.280343][T28265]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1560.285618][T28265]  ? security_socket_sendmsg+0x7c/0xa0
[ 1560.291082][T28265]  ? netlink_getsockopt+0x550/0x550
[ 1560.296277][T28265]  ____sys_sendmsg+0x5ed/0x9a0
[ 1560.301042][T28265]  ? __sys_sendmsg_sock+0x30/0x30
[ 1560.306050][T28265]  ? __import_iovec+0x306/0x510
[ 1560.310898][T28265]  ? import_iovec+0x6f/0xa0
[ 1560.315395][T28265]  ___sys_sendmsg+0x2a2/0x360
[ 1560.320083][T28265]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1560.324909][T28265]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1560.329785][T28265]  ? __x64_sys_sendmsg+0x80/0x80
[ 1560.334766][T28265]  ? lockdep_hardirqs_on+0x94/0x140
[ 1560.339994][T28265]  do_syscall_64+0x4c/0xa0
[ 1560.344428][T28265]  ? clear_bhb_loop+0x60/0xb0
[ 1560.349124][T28265]  ? clear_bhb_loop+0x60/0xb0
[ 1560.353820][T28265]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1560.359745][T28265] RIP: 0033:0x7f980799e159
[ 1560.364172][T28265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1560.383793][T28265] RSP: 002b:00007f980883f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1560.392228][T28265] RAX: ffffffffffffffda RBX: 00007f9807c25fa0 RCX: 00007f980799e159
[ 1560.400216][T28265] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1560.408198][T28265] RBP: 00007f9807a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1560.416177][T28265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1560.424156][T28265] R13: 00007f9807c26038 R14: 00007f9807c25fa0 R15: 00007fff08f27608
[ 1560.432159][T28265]  </TASK>
[ 1561.050469][T28293] netlink: 'syz.2.7355': attribute type 15 has an invalid length.
[ 1561.297020][T28301] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7362'.
[ 1561.349046][T28301] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1561.373987][T28301] CPU: 1 PID: 28301 Comm: syz.2.7362 Not tainted syzkaller #0
[ 1561.381501][T28301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1561.391571][T28301] Call Trace:
[ 1561.394858][T28301]  <TASK>
[ 1561.397798][T28301]  dump_stack_lvl+0x188/0x24e
[ 1561.402500][T28301]  ? show_regs_print_info+0x12/0x12
[ 1561.407710][T28301]  ? load_image+0x410/0x410
[ 1561.412248][T28301]  sysfs_warn_dup+0x8a/0xa0
[ 1561.416769][T28301]  sysfs_do_create_link_sd+0xc0/0x110
[ 1561.422163][T28301]  device_add+0x83b/0x1050
[ 1561.426612][T28301]  wiphy_register+0x1d8b/0x2aa0
[ 1561.431496][T28301]  ? cfg80211_event_work+0x40/0x40
[ 1561.436623][T28301]  ? minstrel_ht_alloc+0x894/0xa20
[ 1561.441753][T28301]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1561.447843][T28301]  ieee80211_register_hw+0x2d48/0x39f0
[ 1561.453334][T28301]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1561.458893][T28301]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1561.464460][T28301]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1561.470104][T28301]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1561.476027][T28301]  ? __debug_object_init+0xed/0x440
[ 1561.481245][T28301]  ? memset+0x1e/0x40
[ 1561.485238][T28301]  ? __hrtimer_init+0x189/0x270
[ 1561.490115][T28301]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1561.495872][T28301]  ? memcpy+0x3c/0x60
[ 1561.499874][T28301]  hwsim_new_radio_nl+0xab7/0xc90
[ 1561.504937][T28301]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1561.510508][T28301]  ? end_current_label_crit_section+0x170/0x170
[ 1561.516773][T28301]  ? lockdep_hardirqs_on+0x94/0x140
[ 1561.521993][T28301]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1561.527910][T28301]  ? bpf_lsm_capable+0x5/0x10
[ 1561.532604][T28301]  ? security_capable+0x85/0xb0
[ 1561.537478][T28301]  genl_rcv_msg+0x601/0x790
[ 1561.542011][T28301]  ? genl_bind+0x360/0x360
[ 1561.546442][T28301]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1561.552819][T28301]  netlink_rcv_skb+0x1ef/0x440
[ 1561.557599][T28301]  ? genl_bind+0x360/0x360
[ 1561.562031][T28301]  ? netlink_ack+0x1160/0x1160
[ 1561.566822][T28301]  ? down_read+0x1a8/0x2d0
[ 1561.571257][T28301]  genl_rcv+0x24/0x40
[ 1561.575249][T28301]  netlink_unicast+0x7ad/0x920
[ 1561.580037][T28301]  netlink_sendmsg+0x8ad/0xbd0
[ 1561.584823][T28301]  ? netlink_getsockopt+0x550/0x550
[ 1561.590041][T28301]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1561.595609][T28301]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1561.600906][T28301]  ? security_socket_sendmsg+0x7c/0xa0
[ 1561.606387][T28301]  ? netlink_getsockopt+0x550/0x550
[ 1561.611602][T28301]  ____sys_sendmsg+0x5ed/0x9a0
[ 1561.616424][T28301]  ? __sys_sendmsg_sock+0x30/0x30
[ 1561.621460][T28301]  ? __import_iovec+0x306/0x510
[ 1561.626352][T28301]  ? import_iovec+0x6f/0xa0
[ 1561.630880][T28301]  ___sys_sendmsg+0x2a2/0x360
[ 1561.635579][T28301]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1561.640409][T28301]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1561.645276][T28301]  ? __x64_sys_sendmsg+0x80/0x80
[ 1561.650248][T28301]  ? lockdep_hardirqs_on+0x94/0x140
[ 1561.655469][T28301]  do_syscall_64+0x4c/0xa0
[ 1561.659897][T28301]  ? clear_bhb_loop+0x60/0xb0
[ 1561.664584][T28301]  ? clear_bhb_loop+0x60/0xb0
[ 1561.669278][T28301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1561.675195][T28301] RIP: 0033:0x7f784bd9e159
[ 1561.679623][T28301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1561.699251][T28301] RSP: 002b:00007f7849ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1561.707671][T28301] RAX: ffffffffffffffda RBX: 00007f784c025fa0 RCX: 00007f784bd9e159
[ 1561.715645][T28301] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1561.723618][T28301] RBP: 00007f784be3506b R08: 0000000000000000 R09: 0000000000000000
[ 1561.731593][T28301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1561.739558][T28301] R13: 00007f784c026038 R14: 00007f784c025fa0 R15: 00007ffdaa0ec068
[ 1561.747543][T28301]  </TASK>
[ 1561.781590][T28310] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7359'.
[ 1561.816254][T28311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7363'.
[ 1561.829704][T28306] netlink: 'syz.1.7359': attribute type 3 has an invalid length.
[ 1561.875790][T28306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7359'.
[ 1561.910795][T28310] netlink: 'syz.1.7359': attribute type 3 has an invalid length.
[ 1561.969244][T28310] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7359'.
[ 1562.461444][T28332] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.7369'.
[ 1562.950143][T28365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7377'.
[ 1563.032363][T28360] netlink: 'syz.1.7377': attribute type 3 has an invalid length.
[ 1563.079423][T28360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7377'.
[ 1563.079824][T28365] netlink: 'syz.1.7377': attribute type 3 has an invalid length.
[ 1563.121667][T28365] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7377'.
[ 1563.219986][T28372] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1563.239576][T28372] CPU: 1 PID: 28372 Comm: syz.4.7381 Not tainted syzkaller #0
[ 1563.247098][T28372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1563.257190][T28372] Call Trace:
[ 1563.260494][T28372]  <TASK>
[ 1563.263452][T28372]  dump_stack_lvl+0x188/0x24e
[ 1563.268167][T28372]  ? show_regs_print_info+0x12/0x12
[ 1563.273398][T28372]  ? load_image+0x410/0x410
[ 1563.277959][T28372]  sysfs_warn_dup+0x8a/0xa0
[ 1563.282501][T28372]  sysfs_do_create_link_sd+0xc0/0x110
[ 1563.287916][T28372]  device_add+0x83b/0x1050
[ 1563.292475][T28372]  wiphy_register+0x1d8b/0x2aa0
[ 1563.297384][T28372]  ? cfg80211_event_work+0x40/0x40
[ 1563.302525][T28372]  ? minstrel_ht_alloc+0x894/0xa20
[ 1563.307670][T28372]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1563.313780][T28372]  ieee80211_register_hw+0x2d48/0x39f0
[ 1563.319278][T28372]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1563.324840][T28372]  ? ieee80211_register_hw+0xf41/0x39f0
[ 1563.330398][T28372]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1563.336033][T28372]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1563.341944][T28372]  ? __debug_object_init+0xed/0x440
[ 1563.347148][T28372]  ? memset+0x1e/0x40
[ 1563.351130][T28372]  ? __hrtimer_init+0x189/0x270
[ 1563.355990][T28372]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1563.361725][T28372]  ? memcpy+0x3c/0x60
[ 1563.365712][T28372]  hwsim_new_radio_nl+0xab7/0xc90
[ 1563.370755][T28372]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1563.376303][T28372]  ? end_current_label_crit_section+0x170/0x170
[ 1563.382554][T28372]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1563.388461][T28372]  ? bpf_lsm_capable+0x5/0x10
[ 1563.393142][T28372]  ? security_capable+0x85/0xb0
[ 1563.398005][T28372]  genl_rcv_msg+0x601/0x790
[ 1563.402520][T28372]  ? genl_bind+0x360/0x360
[ 1563.406942][T28372]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1563.413293][T28372]  netlink_rcv_skb+0x1ef/0x440
[ 1563.418056][T28372]  ? genl_bind+0x360/0x360
[ 1563.422475][T28372]  ? netlink_ack+0x1160/0x1160
[ 1563.427244][T28372]  ? down_read+0x1a8/0x2d0
[ 1563.431666][T28372]  genl_rcv+0x24/0x40
[ 1563.435645][T28372]  netlink_unicast+0x7ad/0x920
[ 1563.440435][T28372]  netlink_sendmsg+0x8ad/0xbd0
[ 1563.445217][T28372]  ? netlink_getsockopt+0x550/0x550
[ 1563.450421][T28372]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1563.455979][T28372]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1563.461294][T28372]  ? security_socket_sendmsg+0x7c/0xa0
[ 1563.466760][T28372]  ? netlink_getsockopt+0x550/0x550
[ 1563.471964][T28372]  ____sys_sendmsg+0x5ed/0x9a0
[ 1563.476741][T28372]  ? __sys_sendmsg_sock+0x30/0x30
[ 1563.481784][T28372]  ? __import_iovec+0x306/0x510
[ 1563.486647][T28372]  ? import_iovec+0x6f/0xa0
[ 1563.491157][T28372]  ___sys_sendmsg+0x2a2/0x360
[ 1563.495841][T28372]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1563.500648][T28372]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1563.505500][T28372]  ? __x64_sys_sendmsg+0x80/0x80
[ 1563.510453][T28372]  ? lockdep_hardirqs_on+0x94/0x140
[ 1563.515656][T28372]  do_syscall_64+0x4c/0xa0
[ 1563.520071][T28372]  ? clear_bhb_loop+0x60/0xb0
[ 1563.524745][T28372]  ? clear_bhb_loop+0x60/0xb0
[ 1563.529418][T28372]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1563.535313][T28372] RIP: 0033:0x7f980799e159
[ 1563.539729][T28372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1563.559337][T28372] RSP: 002b:00007f980883f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1563.567752][T28372] RAX: ffffffffffffffda RBX: 00007f9807c25fa0 RCX: 00007f980799e159
[ 1563.575721][T28372] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1563.583683][T28372] RBP: 00007f9807a3506b R08: 0000000000000000 R09: 0000000000000000
[ 1563.591647][T28372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1563.599610][T28372] R13: 00007f9807c26038 R14: 00007f9807c25fa0 R15: 00007fff08f27608
[ 1563.607592][T28372]  </TASK>
[ 1563.778901][T28377] device syzkaller0 entered promiscuous mode
[ 1565.050996][T28430] netlink: 'syz.0.7395': attribute type 3 has an invalid length.
[ 1565.074351][T28430] __nla_validate_parse: 1 callbacks suppressed
[ 1565.074369][T28430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7395'.
[ 1568.435645][T28429] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7395'.
[ 1568.467231][T28419] device syzkaller0 entered promiscuous mode
[ 1568.528096][T28435] netlink: 'syz.3.7400': attribute type 21 has an invalid length.
[ 1568.539967][T28435] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1568.548494][T28435] IPv6: Can't replace route, no match found
[ 1570.234113][T28479] netlink: 'syz.0.7414': attribute type 3 has an invalid length.
[ 1570.252614][T28479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7414'.
[ 1570.284636][T28479] netlink: 'syz.0.7414': attribute type 3 has an invalid length.
[ 1570.303155][T28479] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7414'.
[ 1572.245620][T28447] netlink: 'syz.2.7405': attribute type 10 has an invalid length.
[ 1572.253573][T28447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7405'.
[ 1572.263105][T28447] bridge0: port 3(veth0_vlan) entered blocking state
[ 1572.269992][T28447] bridge0: port 3(veth0_vlan) entered disabled state
[ 1572.277821][T28447] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1572.310324][T28476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7414'.
[ 1572.345956][T28478] netlink: 'syz.3.7415': attribute type 10 has an invalid length.
[ 1572.442031][T28483] mac80211_hwsim hwsim259 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1573.989773][T28527] netlink: 'syz.0.7430': attribute type 3 has an invalid length.
[ 1573.998667][T28527] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7430'.
[ 1574.023545][T28527] netlink: 'syz.0.7430': attribute type 3 has an invalid length.
[ 1574.032204][T28527] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7430'.
[ 1574.693063][T20329] wlan1: Trigger new scan to find an IBSS to join
[ 1577.162318][T28513] netlink: 'syz.3.7427': attribute type 25 has an invalid length.
[ 1577.170423][T28513] netlink: 'syz.3.7427': attribute type 29 has an invalid length.
[ 1577.202445][T28507] device syzkaller0 entered promiscuous mode
[ 1577.209968][T28521] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7428'.
[ 1577.244243][T28521] device hsr_slave_0 left promiscuous mode
[ 1577.251057][T28521] device hsr_slave_1 left promiscuous mode
[ 1577.296521][T28531] netlink: 'syz.3.7431': attribute type 29 has an invalid length.
[ 1577.318929][T28526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7430'.
[ 1579.084619][T28537] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7432'.
[ 1579.094129][T28531] netlink: 'syz.3.7431': attribute type 29 has an invalid length.
[ 1579.102214][T28541] netlink: 'syz.4.7434': attribute type 10 has an invalid length.
[ 1579.122965][T28541] device macvlan0 entered promiscuous mode
[ 1579.176025][T28541] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1579.197944][T28539] netlink: 'syz.0.7433': attribute type 10 has an invalid length.
[ 1579.262481][T28539] team0: Device veth1_vlan failed to register rx_handler
[ 1579.422541][T28552] FAULT_INJECTION: forcing a failure.
[ 1579.422541][T28552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1579.451037][T28552] CPU: 0 PID: 28552 Comm: syz.1.7439 Not tainted syzkaller #0
[ 1579.458580][T28552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1579.468644][T28552] Call Trace:
[ 1579.471924][T28552]  <TASK>
[ 1579.474851][T28552]  dump_stack_lvl+0x188/0x24e
[ 1579.479568][T28552]  ? show_regs_print_info+0x12/0x12
[ 1579.484759][T28552]  ? load_image+0x410/0x410
[ 1579.489263][T28552]  ? __lock_acquire+0x7c40/0x7c40
[ 1579.494290][T28552]  should_fail_ex+0x390/0x4c0
[ 1579.498967][T28552]  _copy_from_user+0x2c/0x170
[ 1579.503640][T28552]  __sys_bpf+0x2ea/0x780
[ 1579.507889][T28552]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1579.513275][T28552]  ? lock_chain_count+0x20/0x20
[ 1579.518130][T28552]  __x64_sys_bpf+0x78/0x90
[ 1579.522670][T28552]  do_syscall_64+0x4c/0xa0
[ 1579.527110][T28552]  ? clear_bhb_loop+0x60/0xb0
[ 1579.531826][T28552]  ? clear_bhb_loop+0x60/0xb0
[ 1579.536495][T28552]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1579.542381][T28552] RIP: 0033:0x7efc3e79e159
[ 1579.546817][T28552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1579.567546][T28552] RSP: 002b:00007efc3f6cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1579.575981][T28552] RAX: ffffffffffffffda RBX: 00007efc3ea25fa0 RCX: 00007efc3e79e159
[ 1579.584036][T28552] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[ 1579.592173][T28552] RBP: 00007efc3f6cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1579.600223][T28552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1579.608310][T28552] R13: 00007efc3ea26038 R14: 00007efc3ea25fa0 R15: 00007ffd1d206fd8
[ 1579.616305][T28552]  </TASK>
[ 1579.654141][T20350] wlan1: Trigger new scan to find an IBSS to join
[ 1579.676267][T28548] delete_channel: no stack
[ 1579.919748][T28566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7443'.
[ 1579.989230][T28561] netlink: 'syz.1.7443': attribute type 3 has an invalid length.
[ 1580.020186][T28561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7443'.
[ 1580.155611][T28566] netlink: 'syz.1.7443': attribute type 3 has an invalid length.
[ 1580.245732][T28566] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7443'.
[ 1580.270115][    C0] 
[ 1580.270125][    C0] ================================
[ 1580.270130][    C0] WARNING: inconsistent lock state
[ 1580.270151][    C0] syzkaller #0 Not tainted
[ 1580.270160][    C0] --------------------------------
[ 1580.270165][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 1580.270172][    C0] syz.0.7444/28565 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 1580.270190][    C0] ffffffff8cc844b8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x84/0xd60
[ 1580.270244][    C0] {INITIAL USE} state was registered at:
[ 1580.270251][    C0]   lock_acquire+0x1bb/0x4a0
[ 1580.270271][    C0]   _raw_spin_lock_irq+0xab/0xf0
[ 1580.270289][    C0]   kernfs_rename_ns+0x55d/0x990
[ 1580.270307][    C0]   sysfs_rename_link_ns+0x171/0x1b0
[ 1580.270326][    C0]   device_rename+0x11c/0x1a0
[ 1580.270424][    C0]   dev_change_name+0x37b/0x910
[ 1580.270440][    C0]   do_setlink+0x967/0x29c0
[ 1580.270454][    C0]   rtnl_newlink+0x16e4/0x1f90
[ 1580.270467][    C0]   rtnetlink_rcv_msg+0x863/0xfb0
[ 1580.270482][    C0]   netlink_rcv_skb+0x1ef/0x440
[ 1580.270498][    C0]   netlink_unicast+0x7ad/0x920
[ 1580.270511][    C0]   netlink_sendmsg+0x8ad/0xbd0
[ 1580.270526][    C0]   __sys_sendto+0x497/0x650
[ 1580.270539][    C0]   __x64_sys_sendto+0xda/0xf0
[ 1580.270552][    C0]   do_syscall_64+0x4c/0xa0
[ 1580.270567][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1580.270595][    C0] irq event stamp: 15672
[ 1580.270601][    C0] hardirqs last  enabled at (15671): [<ffffffff8a400d46>] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1580.270622][    C0] hardirqs last disabled at (15672): [<ffffffff8a325bce>] exc_debug+0x6e/0x130
[ 1580.270642][    C0] softirqs last  enabled at (15470): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230
[ 1580.270662][    C0] softirqs last disabled at (15459): [<ffffffff814f4aab>] __irq_exit_rcu+0x13b/0x230
[ 1580.270681][    C0] 
[ 1580.270681][    C0] other info that might help us debug this:
[ 1580.270686][    C0]  Possible unsafe locking scenario:
[ 1580.270686][    C0] 
[ 1580.270691][    C0]        CPU0
[ 1580.270694][    C0]        ----
[ 1580.270697][    C0]   lock(kernfs_rename_lock);
[ 1580.270707][    C0]   <Interrupt>
[ 1580.270710][    C0]     lock(kernfs_rename_lock);
[ 1580.270720][    C0] 
[ 1580.270720][    C0]  *** DEADLOCK ***
[ 1580.270720][    C0] 
[ 1580.270724][    C0] no locks held by syz.0.7444/28565.
[ 1580.270731][    C0] 
[ 1580.270731][    C0] stack backtrace:
[ 1580.270736][    C0] CPU: 0 PID: 28565 Comm: syz.0.7444 Not tainted syzkaller #0
[ 1580.270751][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1580.270761][    C0] Call Trace:
[ 1580.270767][    C0]  <#DB>
[ 1580.270775][    C0]  dump_stack_lvl+0x188/0x24e
[ 1580.270797][    C0]  ? show_regs_print_info+0x12/0x12
[ 1580.270822][    C0]  ? print_usage_bug+0x42a/0x690
[ 1580.270845][    C0]  ? verify_lock_unused+0x15/0x140
[ 1580.270871][    C0]  lock_acquire+0x2df/0x4a0
[ 1580.270892][    C0]  ? perf_trace_lock_acquire+0x342/0x3f0
[ 1580.270915][    C0]  ? kernfs_path_from_node+0x84/0xd60
[ 1580.270936][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1580.270963][    C0]  ? trace_event_raw_event_lock+0x230/0x230
[ 1580.270980][    C0]  ? fixup_exception+0xdf4/0x1e80
[ 1580.271001][    C0]  ? look_up_lock_class+0x75/0x140
[ 1580.271026][    C0]  _raw_spin_lock_irqsave+0xb0/0x100
[ 1580.271048][    C0]  ? kernfs_path_from_node+0x84/0xd60
[ 1580.271066][    C0]  ? _raw_spin_lock+0x40/0x40
[ 1580.271086][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1580.271111][    C0]  ? lock_release+0xcf/0x920
[ 1580.271134][    C0]  ? percpu_ref_tryget+0x15/0x180
[ 1580.271225][    C0]  kernfs_path_from_node+0x84/0xd60
[ 1580.271245][    C0]  ? __lock_acquire+0x7c40/0x7c40
[ 1580.271275][    C0]  ? kernfs_name+0x140/0x140
[ 1580.271294][    C0]  ? get_mem_cgroup_from_mm+0x34/0x290
[ 1580.271316][    C0]  ? get_mem_cgroup_from_mm+0x1ae/0x290
[ 1580.271339][    C0]  get_mm_memcg_path+0xb9/0x360
[ 1580.271366][    C0]  __mmap_lock_do_trace_acquire_returned+0xe7/0x390
[ 1580.271395][    C0]  ? get_mm_memcg_path+0x360/0x360
[ 1580.271444][    C0]  ? __init_rwsem+0x160/0x160
[ 1580.271474][    C0]  stack_map_get_build_id_offset+0x699/0x9d0
[ 1580.271499][    C0]  ? pcpu_freelist_pop+0x126/0x180
[ 1580.271555][    C0]  ? __pcpu_freelist_pop+0x850/0x850
[ 1580.271578][    C0]  ? __bpf_get_stackid+0x920/0x920
[ 1580.271607][    C0]  __bpf_get_stackid+0x55d/0x920
[ 1580.271637][    C0]  bpf_prog_12712c88fd19bd5b+0x21/0x25
[ 1580.271656][    C0]  bpf_overflow_handler+0x6d1/0x790
[ 1580.271680][    C0]  ? bpf_overflow_handler+0xd9/0x790
[ 1580.271698][    C0]  ? perf_swevent_overflow+0x230/0x230
[ 1580.271725][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1580.271754][    C0]  __perf_event_overflow+0x457/0x630
[ 1580.271785][    C0]  perf_swevent_event+0x315/0x570
[ 1580.271812][    C0]  ? perf_tp_event+0xc10/0xc10
[ 1580.271849][    C0]  perf_bp_event+0x311/0x3f0
[ 1580.271875][    C0]  ? perf_trace_lock_acquire+0x342/0x3f0
[ 1580.271896][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[ 1580.271952][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1580.272001][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1580.272032][    C0]  hw_breakpoint_exceptions_notify+0x14d/0x470
[ 1580.272094][    C0]  atomic_notifier_call_chain+0x17a/0x2b0
[ 1580.272112][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1580.272135][    C0]  notify_die+0x141/0x1a0
[ 1580.272157][    C0]  ? srcu_init_notifier_head+0x90/0x90
[ 1580.272204][    C0]  notify_debug+0x20/0x30
[ 1580.272231][    C0]  exc_debug+0xd9/0x130
[ 1580.272253][    C0]  asm_exc_debug+0x1a/0x40
[ 1580.272267][    C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[ 1580.272286][    C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[ 1580.272300][    C0] RSP: 0018:ffffc900053ffd48 EFLAGS: 00050202
[ 1580.272314][    C0] RAX: ffffffff84164501 RBX: 0000000000000050 RCX: 000000000000004f
[ 1580.272325][    C0] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc900053ffdc1
[ 1580.272337][    C0] RBP: 0000000000000000 R08: ffffc900053ffe0f R09: 1ffff92000a7ffc1
[ 1580.272348][    C0] R10: dffffc0000000000 R11: fffff52000a7ffc2 R12: 00007fffffffefb0
[ 1580.272360][    C0] R13: 0000000000000050 R14: ffffc900053ffdc0 R15: 0000200000000300
[ 1580.272379][    C0]  ? _copy_from_user+0x21/0x170
[ 1580.272405][    C0]  </#DB>
[ 1580.272410][    C0]  <TASK>
[ 1580.272414][    C0]  _copy_from_user+0xf4/0x170
[ 1580.272435][    C0]  __sys_bpf+0x2ea/0x780
[ 1580.272460][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1580.272499][    C0]  ? lock_chain_count+0x20/0x20
[ 1580.272519][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1580.272551][    C0]  __x64_sys_bpf+0x78/0x90
[ 1580.272574][    C0]  do_syscall_64+0x4c/0xa0
[ 1580.272589][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1580.272604][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1580.272622][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1580.272645][    C0] RIP: 0033:0x7f9fbcb9e159
[ 1580.272660][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1580.272672][    C0] RSP: 002b:00007f9fbda2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1580.272688][    C0] RAX: ffffffffffffffda RBX: 00007f9fbce25fa0 RCX: 00007f9fbcb9e159
[ 1580.272699][    C0] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1580.272709][    C0] RBP: 00007f9fbcc3506b R08: 0000000000000000 R09: 0000000000000000
[ 1580.272718][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1580.272728][    C0] R13: 00007f9fbce26038 R14: 00007f9fbce25fa0 R15: 00007fff0ceacee8
[ 1580.272756][    C0]  </TASK>
[ 1581.324928][T26724] wlan1: Creating new IBSS network, BSSID be:70:cb:8e:54:b0
[ 1586.232069][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)