last executing test programs: 16m20.463053074s ago: executing program 1 (id=2): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x77, &(0x7f0000000000)=r6, 0x8) r7 = syz_clone(0x890000, &(0x7f0000000500)="de7a251312008b0a8f71014e215d8f963c7adcf44e04783dd2f029deee48c351bb6fd36c0a33c639d90835fbf30bef223510b42773e9a9d488a3812f6e866a89d9786648d89793d21faaf02dd48b825d7a42a5f97255e04a90d9388d2356ebd8722677b628d28e1ee3ce770403c344870199a633472eb74c8c5854ca40", 0x7d, &(0x7f0000000100), &(0x7f0000000580), &(0x7f00000005c0)="4a1181028698dd77d3b2") perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$TUNSETPERSIST(r13, 0x400454cb, 0x1) setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10) sendmsg$inet(r9, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) 16m20.454738615s ago: executing program 4 (id=5): socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1, 0x0, 0xffe0}, 0x80d1) 16m20.452342574s ago: executing program 2 (id=3): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/240, 0x1a, 0xf0, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 16m19.947298651s ago: executing program 4 (id=11): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5411, 0x0) 16m19.68545769s ago: executing program 1 (id=12): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180003", 0x29}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_config_ext={0xe, 0x66c}, 0x106101, 0x8, 0xfffffffe, 0x6, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 16m18.954580964s ago: executing program 2 (id=13): socket$kcm(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008114e00212ba0d8105040a020200030f100b067c55a1bc000900b8000699040000000500160002038178a80015000400014002000e0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x2f, 0xa, 0x0, &(0x7f0000000280)="0100b080cd00002288a8", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 16m18.830300578s ago: executing program 4 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10a602, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r5) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5e", 0x3}], 0x1}, 0x20000001) recvmsg$unix(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0, 0x67, 0x0, 0x0, 0x3}, 0x28) 16m3.871846005s ago: executing program 32 (id=12): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180003", 0x29}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_config_ext={0xe, 0x66c}, 0x106101, 0x8, 0xfffffffe, 0x6, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 16m3.618038013s ago: executing program 33 (id=13): socket$kcm(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008114e00212ba0d8105040a020200030f100b067c55a1bc000900b8000699040000000500160002038178a80015000400014002000e0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x2f, 0xa, 0x0, &(0x7f0000000280)="0100b080cd00002288a8", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 16m3.529528926s ago: executing program 34 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10a602, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) close(r5) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5e", 0x3}], 0x1}, 0x20000001) recvmsg$unix(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0, 0x67, 0x0, 0x0, 0x3}, 0x28) 5.303612117s ago: executing program 5 (id=4108): socket$kcm(0x2, 0x7, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x6}, 0x10c002, 0x89, 0x0, 0x6, 0x8000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000340)=""/180, 0xb4, 0x0, &(0x7f0000000400)=""/100, 0x64}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x10}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x8480}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x4, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], &(0x7f0000000200)='GPL\x00', 0x8001, 0x44, &(0x7f0000000240)=""/68, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x1d, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x2, 0x3}, 0x10, r4, r0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff, r5, r6, r7], &(0x7f00000006c0)=[{0x4, 0x2, 0x1, 0x3}, {0x3, 0x3, 0x10, 0xa}, {0x4, 0x5, 0x4, 0x8}, {0x9, 0x2, 0xa, 0x2}, {0x3, 0x1, 0x2, 0x5}, {0x2, 0x1, 0x2, 0x9}], 0x10, 0xfffff02b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) 5.303406437s ago: executing program 7 (id=4109): r0 = socket$kcm(0x10, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081064e81f782db4cb90402200800067c7c09e8fe0ba10a0004000200142603600e1208001e0003070401a9000600200e02400400027c035c0461c1d67f6f94007134cf6efb80dd9f07a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace8116666562e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 5.196380781s ago: executing program 6 (id=4110): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86f46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10001, 0x5, 0x84, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 5.104187464s ago: executing program 0 (id=4111): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10c0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000040000000200000009"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x1) close(r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001b00850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r4}, 0x38) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x49, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 5.053279875s ago: executing program 3 (id=4112): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000640)="5b6cb9ba2e1b62cc73db8c849bd324a592d82202d54656d9aa4ff3f51ee0ae3368749c7c90b6eb4a0c15c4f4d2ac0687ab9245658c50937dc01dab2b83caa1c52c148e38413fc4fe6788116430e2f3bf3bf9e3e21ea363f882b6c00cdcee0e714ad65486ae3a27f2ca5c4abca0dc270ebd6d5e2110d62692a1cd2459476fff93027105ad8f53b9594325ed3a32d109acd5188b7957e797c45876a49cac55e0c50d7218f317ddbc80c787daacd48ad8a7b999d5d6c109e6087b6424e4518cca15634c36125a00146aaeb09eeb53d209eced95ad769bd21d0e2912b64d0cfb549e9327401454ef42a5", &(0x7f0000000740)=""/75}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000840)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfec2}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x63}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000200)='GPL\x00', 0x0, 0x5f, 0x0, 0x41100, 0xc, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.394400387s ago: executing program 6 (id=4113): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3ff, 0x400}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{}, &(0x7f0000001640), &(0x7f0000001680)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc, 0x0}, 0x0) 3.98270391s ago: executing program 3 (id=4114): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000640)={0xad2655e}, 0x8) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x385c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x5}, 0x8018, 0x4, 0x3, 0x9, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000430033"], 0xfe33) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0xd05f0356202dbcae) recvmsg(r0, 0x0, 0x40000010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.913439592s ago: executing program 7 (id=4115): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001240)={r0}) 3.882801423s ago: executing program 0 (id=4116): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xdb}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90324fc60100c0340", 0x18}], 0x1}, 0x0) (fail_nth: 11) 3.882481533s ago: executing program 6 (id=4117): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='b 0:', @ANYRESDEC], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008700000000000000a6000000ffffff8595", @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x3, 0x105, &(0x7f0000000580)=""/261}, 0x21) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000081"], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x10, 0x0, 0x800, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r6, r2, 0x21, 0x8, 0x0, @void, @value=r1, @void, @void, r5}, 0x20) 3.762309088s ago: executing program 5 (id=4118): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc, 0x0}, 0x0) 3.123608648s ago: executing program 5 (id=4119): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x602, 0x0, 0x8, 0x0, 0x4000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001c000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={r0, r1}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="2d706572665f65a50136b3ca40bf76656e74202b63707573657420"], 0x14) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r4}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x400}, 0x100080, 0x0, 0x0, 0x8, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911a800000000001e000000000000009500000c00000000e8275ffe7f4201"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000300)="360bf17b64914236075b4182c18499df650497284e64d0c771a5cc797f75ecd41d9eebc65715781fd9de3e5ac19b1d478da8278f6cefe8704c9bc428d87aeefcd4245070ad49f73461e6ef6a7f6972e72c8c89caa125151a3ded7c7619f7a2426e72f3084854fcbebe3108d42bbd12b60cf30d75a754406e3f34ab535fec273573bc450714a2948dfcf925756f2ac4643ba15e853e8c98a29e24ffd26ac250e5d30010851a405bb9a82663df9b6a388c7490599df671fb2f2842fb5e7a7943599ab6cc9a6f361fc2d127d5efd7bf4bf7d61b7eb12f6eb758d1cabb4599f539681079", &(0x7f0000001980)=""/4096}, 0x20) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) 2.806398398s ago: executing program 7 (id=4120): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80000001}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x74, 0x2, 0xd5, 0x5, 0x0, 0xf5a, 0x10, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000240), 0x9}, 0x200, 0x6, 0xcc, 0x8, 0x858, 0xff, 0xb21, 0x0, 0x5, 0x0, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000}, 0x18) 1.858790559s ago: executing program 0 (id=4121): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x22, 0x2, 0x21) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r1, 0x7, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 1.817896321s ago: executing program 6 (id=4122): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) write$cgroup_type(r1, &(0x7f0000000240), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) socket$kcm(0xa, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c0000000400000001000084020000000a00000029c3195000000001010000000000000700000000000000000000000b02000000006100302e61306161616100"], 0x0, 0x54}, 0x28) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a18", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd0900000000000000d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xdf, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000200), 0x3}, 0x600, 0x7, 0xc2ba, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a0000007f000000fe0000000900000046200000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002f8ca2680bccb02ad7542b9cfb0000000200000000000000000000008f53c40700000000c814d0ab5dee431bb2e3fe75f224e8d34802063d87820d0cf3dd1c6bf7d62de5c2de793a90523b5e4e40bacf9aa92bc8ed8e70d4c0b607bd17ec3e4c5abc32"], 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='+pi'], 0x6) 1.757316993s ago: executing program 7 (id=4123): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x5, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe000000100005090559eed2b0900000000007300078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000000100"/76], 0x98}, 0x0) sendmsg$kcm(r1, 0x0, 0x4044454) 1.752080573s ago: executing program 5 (id=4124): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86f46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10001, 0x5, 0x84, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.623350437s ago: executing program 3 (id=4125): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000f000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 1) 1.287230028s ago: executing program 0 (id=4126): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000f000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.024353087s ago: executing program 0 (id=4127): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3ff, 0x400}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{}, &(0x7f0000001640), &(0x7f0000001680)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc, 0x0}, 0x0) 901.35948ms ago: executing program 3 (id=4128): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fc55a1180015000600142603600e1209000a00", 0x28}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x9, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x62, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x11002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000180)='%-5lx \x00'}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x3) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x294eb) 900.963611ms ago: executing program 6 (id=4129): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc, 0x0}, 0x0) 900.64911ms ago: executing program 7 (id=4130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) socket$kcm(0x22, 0x2, 0x21) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 887.872271ms ago: executing program 5 (id=4131): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x22, 0x2, 0x21) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r1, 0x7, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 651.187509ms ago: executing program 3 (id=4132): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffffffffc21}, 0x0) sendmsg$unix(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f0", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xe5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) r6 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r1, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x1000}) socketpair(0x9, 0x1, 0x2, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000000680)={&(0x7f00000002c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000240)="a035", 0x2}, {&(0x7f0000000340)="eb9a3c6ab545fcf91c4f664046a904f3661b4276851733be1a2ac36eb6b82967435bad5b2472c1d273b718aff0f05035bcf7325b5d1bc1c87ae45d15702a3928238112fe237326600228b3d01e7889ec0346d5ee7cb92bc0a0efb967cdd22b5024aee541edce7f33605d6bf862ce72ebf3208991c1878a57bec49a25ac1f2edc1234582dbf781ce6a3c1e53d34c6beea304a8ef6fa0a", 0x96}, {&(0x7f0000000580)="67e1e56414bcbbfe547db393a5eee6ec86fb8478e0942d7e14841100ff98c47f795a090390a89e15065df43430f5ec96f0f0f0caad0952df9c1740d1938d4e0cd6bb54b62e94553d31cb6800123efadbfc0b277951af", 0x56}, {&(0x7f0000000400)="f44118dacc3b99a6b12b2b75df31e575a4", 0x11}, {&(0x7f0000000500)="10be38f441a990fe0402d7a4eff88e7b234b588e8267aa3f883825339585da8f", 0x20}, {&(0x7f0000000600)="62044d363712bdfb73c1e16c883d8ff4cc9840823ac0f7078de48be39776bb9f3769799164b6d89e5939376740122f048ed6e2b8b4910dadf55f7e68f0e12aada0755a69fac254", 0x47}, {&(0x7f0000000780)="2a55300ab431af1558c60f9a46cc983bf2b5aca9cdca77a242b9704ffce3540e8e5627916baa2d1d129b0e6fe7e2e6466ada72dc19d80e3e6d66526095947086c8e4ff0424196e0802e1d2e9ef6e9375e115e0184fc68182f7bcb2df9a893e7c2eadf5be46e93f716f6b6aba2fbc0321e4e336d3cc48b58ea20656b470aff2e9a34dadadb838e3cfb47d3f37514934236f596cf43b7cc27ff37cc86811e2400b41d3e46c30edb34eb8511d81714c93d96441f3f012d0d074e44ce966", 0xbc}, {&(0x7f0000000840)="dca2f7404efde9a15afdfb869b0bedef2c00d8ce9c7efaf3f6e863701cfa5b5331aef31549ddc7a2d79f0416faa272dac3ee7d63392e7e6ace1c8cbca7f729ef6ce4959caefb54710f2b13936205b09b10e19c16037e6c495f06491744563dfff3990d767523b1278c126df399", 0x6d}], 0x8}, 0x24000005) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x50) 569.105312ms ago: executing program 6 (id=4133): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0xa5, 0x5, 0x9, 0x6, 0x0, 0x1, 0x10, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x800, 0xfffffffffffffff8, 0x7fff, 0xc, 0x0, 0xfffffffe, 0x80, 0x0, 0x8b, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1954b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x2, @perf_config_ext={0x76, 0x2}, 0x10ff2, 0x5, 0x98, 0x6, 0x2, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x1f}, r0, 0xffffffffffffffff, r1, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r8, 0x84, 0x75, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 509.205463ms ago: executing program 0 (id=4134): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x200001, 0x4}, 0x28) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x2}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000540)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000780)=""/210, 0xd2}], 0x2, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0xe}, {&(0x7f0000002000)="e1c388a8", 0x4}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000001c0)=r7, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000580)='ns/ipc\x00') 176.982644ms ago: executing program 3 (id=4135): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000640)={0xad2655e}, 0x8) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x385c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x5}, 0x8018, 0x4, 0x3, 0x9, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000430033"], 0xfe33) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0xd05f0356202dbcae) recvmsg(r0, 0x0, 0x40000010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 105.768206ms ago: executing program 5 (id=4136): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86f46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x10001, 0x5, 0x84, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 7 (id=4137): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x22, 0x2, 0x21) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) kernel console output (not intermixed with test programs): 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.700253][T16645] RSP: 002b:00007fc0d0004028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.708720][T16645] RAX: ffffffffffffffda RBX: 00007fc0cf416360 RCX: 00007fc0cf19c819 [ 848.716731][T16645] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 848.724897][T16645] RBP: 00007fc0cf232c91 R08: 0000000000000000 R09: 0000000000000000 [ 848.732892][T16645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.740894][T16645] R13: 00007fc0cf4163f8 R14: 00007fc0cf416360 R15: 00007fff45a44c88 [ 848.748944][T16645] [ 849.032671][T16586] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.052282][T16586] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.074583][T16586] device bridge_slave_0 entered promiscuous mode [ 849.115937][T16586] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.123137][T16586] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.173912][T16586] device bridge_slave_1 entered promiscuous mode [ 849.266495][T16661] delete_channel: no stack [ 849.435768][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 849.829997][T16586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.882535][T16586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.702518][T16586] team0: Port device team_slave_0 added [ 851.028104][T16586] team0: Port device team_slave_1 added [ 851.283882][T16586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.335937][T16685] netlink: 'syz.3.3080': attribute type 29 has an invalid length. [ 851.365679][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.530267][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 851.561582][T16586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.958326][T16685] netlink: 'syz.3.3080': attribute type 29 has an invalid length. [ 852.003993][T16586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.040458][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.161583][T16586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.336807][T16683] netlink: 'syz.3.3080': attribute type 29 has an invalid length. [ 852.927038][T16586] device hsr_slave_0 entered promiscuous mode [ 852.982380][T16586] device hsr_slave_1 entered promiscuous mode [ 853.037247][T16586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.044917][T16586] Cannot create hsr debugfs directory [ 853.666064][T16708] delete_channel: no stack [ 854.507268][T16723] netlink: 'syz.5.3089': attribute type 1 has an invalid length. [ 854.515115][T16723] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.3089'. [ 854.644828][T16730] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.3088'. [ 854.680818][T10045] bond0: (slave wlan1): Releasing backup interface [ 855.079151][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3089'. [ 855.563319][T16730] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 855.625971][T16730] CPU: 1 PID: 16730 Comm: syz.7.3088 Not tainted syzkaller #0 [ 855.633697][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.643811][T16730] Call Trace: [ 855.647127][T16730] [ 855.650091][T16730] dump_stack_lvl+0x188/0x24e [ 855.654932][T16730] ? show_regs_print_info+0x12/0x12 [ 855.660173][T16730] ? load_image+0x400/0x400 [ 855.664725][T16730] sysfs_warn_dup+0x8a/0xa0 [ 855.669268][T16730] sysfs_do_create_link_sd+0xc0/0x110 [ 855.674681][T16730] device_add+0x7ed/0xfb0 [ 855.679061][T16730] wiphy_register+0x1d9f/0x2ac0 [ 855.683971][T16730] ? cfg80211_event_work+0x40/0x40 [ 855.689127][T16730] ? minstrel_ht_alloc+0x894/0xa20 [ 855.694282][T16730] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 855.700400][T16730] ieee80211_register_hw+0x2d00/0x39f0 [ 855.705930][T16730] ? ieee80211_register_hw+0xf11/0x39f0 [ 855.711532][T16730] ? ieee80211_register_hw+0xf11/0x39f0 [ 855.717137][T16730] ? ieee80211_tasklet_handler+0x20/0x20 [ 855.722831][T16730] ? memset+0x1e/0x40 [ 855.726870][T16730] ? __hrtimer_init+0x186/0x270 [ 855.731767][T16730] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 855.737565][T16730] hwsim_new_radio_nl+0xafa/0xce0 [ 855.742656][T16730] genl_family_rcv_msg_doit+0x22a/0x330 [ 855.748244][T16730] ? end_current_label_crit_section+0x170/0x170 [ 855.754580][T16730] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 855.760557][T16730] ? bpf_lsm_capable+0x5/0x10 [ 855.765290][T16730] ? security_capable+0x85/0xb0 [ 855.770380][T16730] genl_rcv_msg+0x604/0x790 [ 855.774946][T16730] ? genl_bind+0x360/0x360 [ 855.779403][T16730] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 855.785811][T16730] netlink_rcv_skb+0x1fb/0x450 [ 855.790637][T16730] ? genl_bind+0x360/0x360 [ 855.795094][T16730] ? netlink_ack+0x1170/0x1170 [ 855.799927][T16730] ? down_read+0x1a8/0x2d0 [ 855.804405][T16730] genl_rcv+0x24/0x40 [ 855.808442][T16730] netlink_unicast+0x74d/0x8d0 [ 855.813270][T16730] netlink_sendmsg+0x8ad/0xbd0 [ 855.818117][T16730] ? netlink_getsockopt+0x550/0x550 [ 855.823391][T16730] ? aa_sock_msg_perm+0x94/0x150 [ 855.828393][T16730] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 855.833729][T16730] ? security_socket_sendmsg+0x7c/0xa0 [ 855.839251][T16730] ? netlink_getsockopt+0x550/0x550 [ 855.844584][T16730] ____sys_sendmsg+0x5be/0x970 [ 855.849461][T16730] ? __sys_sendmsg_sock+0x30/0x30 [ 855.854558][T16730] ? __import_iovec+0x315/0x500 [ 855.859484][T16730] ? import_iovec+0x6f/0xa0 [ 855.864043][T16730] ___sys_sendmsg+0x2a2/0x360 [ 855.868762][T16730] ? try_to_wake_up+0x6ae/0x1080 [ 855.873744][T16730] ? __sys_sendmsg+0x290/0x290 [ 855.878616][T16730] __se_sys_sendmsg+0x1bb/0x2a0 [ 855.883521][T16730] ? ct_nmi_exit+0x145/0x1c0 [ 855.888166][T16730] ? __x64_sys_sendmsg+0x80/0x80 [ 855.893174][T16730] ? lockdep_hardirqs_on+0x94/0x140 [ 855.898447][T16730] do_syscall_64+0x4c/0xa0 [ 855.902914][T16730] ? clear_bhb_loop+0x60/0xb0 [ 855.907631][T16730] ? clear_bhb_loop+0x60/0xb0 [ 855.912357][T16730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.918297][T16730] RIP: 0033:0x7f72fc99c819 [ 855.922759][T16730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.942419][T16730] RSP: 002b:00007f72fd7c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.950900][T16730] RAX: ffffffffffffffda RBX: 00007f72fcc16360 RCX: 00007f72fc99c819 [ 855.958923][T16730] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 855.966944][T16730] RBP: 00007f72fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 855.974963][T16730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.983345][T16730] R13: 00007f72fcc163f8 R14: 00007f72fcc16360 R15: 00007ffe162cb098 [ 855.991570][T16730] [ 856.501108][T10045] device team0 left promiscuous mode [ 856.525599][T10045] device team_slave_0 left promiscuous mode [ 856.546719][T10045] device team_slave_1 left promiscuous mode [ 856.573215][T10045] device virt_wifi0 left promiscuous mode [ 856.595800][T10045] device bridge_slave_1 left promiscuous mode [ 856.620761][T10045] bridge0: port 1(team0) entered disabled state [ 856.858367][T10045] device hsr_slave_0 left promiscuous mode [ 856.919377][T10045] device hsr_slave_1 left promiscuous mode [ 857.019072][T10045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.037335][T10045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.215279][T10045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.257520][T10045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.015132][T10045] device veth1_macvtap left promiscuous mode [ 858.557681][T10045] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 858.688277][T10045] team0 (unregistering): Port device virt_wifi0 removed [ 858.698553][T16795] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.3105'. [ 858.959508][T10045] team0 (unregistering): Port device team_slave_1 removed [ 859.019882][T10045] team0 (unregistering): Port device team_slave_0 removed [ 859.074159][T10045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.125204][T10045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.178987][T10045] team0 (unregistering): Port device bridge_slave_1 removed [ 859.404308][T10045] bond0 (unregistering): Released all slaves [ 859.458942][T16782] netlink: 'syz.5.3100': attribute type 6 has an invalid length. [ 859.469958][T16782] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3100'. [ 859.481326][T16786] netlink: 'syz.3.3101': attribute type 39 has an invalid length. [ 859.584523][T16795] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 859.595840][T16795] CPU: 0 PID: 16795 Comm: syz.7.3105 Not tainted syzkaller #0 [ 859.603470][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.613579][T16795] Call Trace: [ 859.616898][T16795] [ 859.619861][T16795] dump_stack_lvl+0x188/0x24e [ 859.624598][T16795] ? show_regs_print_info+0x12/0x12 [ 859.629844][T16795] ? load_image+0x400/0x400 [ 859.634415][T16795] sysfs_warn_dup+0x8a/0xa0 [ 859.638962][T16795] sysfs_do_create_link_sd+0xc0/0x110 [ 859.644380][T16795] device_add+0x7ed/0xfb0 [ 859.648757][T16795] wiphy_register+0x1d9f/0x2ac0 [ 859.653645][T16795] ? cfg80211_event_work+0x40/0x40 [ 859.658776][T16795] ? minstrel_ht_alloc+0x894/0xa20 [ 859.663916][T16795] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 859.669998][T16795] ieee80211_register_hw+0x2d00/0x39f0 [ 859.675495][T16795] ? ieee80211_register_hw+0xf11/0x39f0 [ 859.681163][T16795] ? ieee80211_register_hw+0xf11/0x39f0 [ 859.686731][T16795] ? ieee80211_tasklet_handler+0x20/0x20 [ 859.692389][T16795] ? memset+0x1e/0x40 [ 859.696387][T16795] ? __hrtimer_init+0x186/0x270 [ 859.701258][T16795] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 859.707010][T16795] hwsim_new_radio_nl+0xafa/0xce0 [ 859.712061][T16795] genl_family_rcv_msg_doit+0x22a/0x330 [ 859.717625][T16795] ? end_current_label_crit_section+0x170/0x170 [ 859.723899][T16795] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 859.730098][T16795] ? bpf_lsm_capable+0x5/0x10 [ 859.734822][T16795] ? security_capable+0x85/0xb0 [ 859.739730][T16795] genl_rcv_msg+0x604/0x790 [ 859.744264][T16795] ? lock_chain_count+0x20/0x20 [ 859.749171][T16795] ? genl_bind+0x360/0x360 [ 859.753602][T16795] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 859.759960][T16795] netlink_rcv_skb+0x1fb/0x450 [ 859.764741][T16795] ? genl_bind+0x360/0x360 [ 859.769171][T16795] ? netlink_ack+0x1170/0x1170 [ 859.773961][T16795] ? down_read+0x1a8/0x2d0 [ 859.778532][T16795] genl_rcv+0x24/0x40 [ 859.782613][T16795] netlink_unicast+0x74d/0x8d0 [ 859.787405][T16795] netlink_sendmsg+0x8ad/0xbd0 [ 859.792195][T16795] ? netlink_getsockopt+0x550/0x550 [ 859.797442][T16795] ? aa_sock_msg_perm+0x94/0x150 [ 859.802396][T16795] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 859.807692][T16795] ? security_socket_sendmsg+0x7c/0xa0 [ 859.813172][T16795] ? netlink_getsockopt+0x550/0x550 [ 859.818402][T16795] ____sys_sendmsg+0x5be/0x970 [ 859.823200][T16795] ? __sys_sendmsg_sock+0x30/0x30 [ 859.828238][T16795] ? __import_iovec+0x315/0x500 [ 859.833106][T16795] ? import_iovec+0x6f/0xa0 [ 859.837713][T16795] ___sys_sendmsg+0x2a2/0x360 [ 859.842415][T16795] ? __sys_sendmsg+0x290/0x290 [ 859.847235][T16795] __se_sys_sendmsg+0x1bb/0x2a0 [ 859.852131][T16795] ? __x64_sys_sendmsg+0x80/0x80 [ 859.857118][T16795] ? lockdep_hardirqs_on+0x94/0x140 [ 859.862347][T16795] do_syscall_64+0x4c/0xa0 [ 859.866791][T16795] ? clear_bhb_loop+0x60/0xb0 [ 859.871751][T16795] ? clear_bhb_loop+0x60/0xb0 [ 859.876461][T16795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.882372][T16795] RIP: 0033:0x7f72fc99c819 [ 859.886801][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.906599][T16795] RSP: 002b:00007f72fd849028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.915050][T16795] RAX: ffffffffffffffda RBX: 00007f72fcc15fa0 RCX: 00007f72fc99c819 [ 859.923361][T16795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 859.931542][T16795] RBP: 00007f72fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 859.939561][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.947660][T16795] R13: 00007f72fcc16038 R14: 00007f72fcc15fa0 R15: 00007ffe162cb098 [ 859.955772][T16795] [ 860.804678][T16586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 860.899540][T16586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 860.932370][T16586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 861.032667][T16586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 861.077754][T16825] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3111'. [ 861.655113][T16586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.717668][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 861.740872][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 861.779607][T16586] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.818291][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 861.857046][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 861.897594][T10057] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.904778][T10057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.959183][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 861.987279][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 862.026638][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 862.091262][T10057] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.098530][T10057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.126214][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 862.154599][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 862.209139][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 862.256761][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 862.278342][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 862.327813][T16860] netlink: 'syz.5.3115': attribute type 6 has an invalid length. [ 862.386630][T16860] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3115'. [ 862.416202][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 862.431504][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 862.464337][T16863] netlink: 'syz.6.3118': attribute type 39 has an invalid length. [ 862.526358][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 862.535051][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 862.614396][T16586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.632271][T16586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 862.662486][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 862.686451][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 863.288943][T16871] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3119'. [ 863.363594][T16871] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 863.382306][T16871] CPU: 1 PID: 16871 Comm: syz.3.3119 Not tainted syzkaller #0 [ 863.389839][T16871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.399913][T16871] Call Trace: [ 863.403206][T16871] [ 863.406147][T16871] dump_stack_lvl+0x188/0x24e [ 863.410853][T16871] ? show_regs_print_info+0x12/0x12 [ 863.416067][T16871] ? load_image+0x400/0x400 [ 863.420598][T16871] sysfs_warn_dup+0x8a/0xa0 [ 863.425292][T16871] sysfs_do_create_link_sd+0xc0/0x110 [ 863.430686][T16871] device_add+0x7ed/0xfb0 [ 863.435039][T16871] wiphy_register+0x1d9f/0x2ac0 [ 863.439923][T16871] ? cfg80211_event_work+0x40/0x40 [ 863.445052][T16871] ? minstrel_ht_alloc+0x894/0xa20 [ 863.450186][T16871] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 863.456277][T16871] ieee80211_register_hw+0x2d00/0x39f0 [ 863.461767][T16871] ? ieee80211_register_hw+0xf11/0x39f0 [ 863.467326][T16871] ? ieee80211_register_hw+0xf11/0x39f0 [ 863.472984][T16871] ? ieee80211_tasklet_handler+0x20/0x20 [ 863.478640][T16871] ? memset+0x1e/0x40 [ 863.482644][T16871] ? __hrtimer_init+0x186/0x270 [ 863.487513][T16871] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 863.493276][T16871] hwsim_new_radio_nl+0xafa/0xce0 [ 863.498326][T16871] genl_family_rcv_msg_doit+0x22a/0x330 [ 863.503881][T16871] ? end_current_label_crit_section+0x170/0x170 [ 863.510136][T16871] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 863.516124][T16871] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 863.521689][T16871] ? bpf_lsm_capable+0x5/0x10 [ 863.526376][T16871] ? security_capable+0x85/0xb0 [ 863.531247][T16871] genl_rcv_msg+0x604/0x790 [ 863.535772][T16871] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 863.541943][T16871] ? genl_bind+0x360/0x360 [ 863.546371][T16871] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 863.552819][T16871] ? lock_acquire+0x225/0x4a0 [ 863.557520][T16871] netlink_rcv_skb+0x1fb/0x450 [ 863.562298][T16871] ? genl_bind+0x360/0x360 [ 863.566738][T16871] ? netlink_ack+0x1170/0x1170 [ 863.571600][T16871] ? down_read+0x1a8/0x2d0 [ 863.576039][T16871] genl_rcv+0x24/0x40 [ 863.580029][T16871] netlink_unicast+0x74d/0x8d0 [ 863.584822][T16871] netlink_sendmsg+0x8ad/0xbd0 [ 863.589605][T16871] ? lockdep_hardirqs_on+0x94/0x140 [ 863.594821][T16871] ? netlink_getsockopt+0x550/0x550 [ 863.600153][T16871] ? netlink_sendmsg+0xd/0xbd0 [ 863.604935][T16871] ? netlink_getsockopt+0x550/0x550 [ 863.610153][T16871] ____sys_sendmsg+0x5be/0x970 [ 863.614940][T16871] ? __sys_sendmsg_sock+0x30/0x30 [ 863.619978][T16871] ? __import_iovec+0x315/0x500 [ 863.624844][T16871] ? import_iovec+0x6f/0xa0 [ 863.629382][T16871] ___sys_sendmsg+0x2a2/0x360 [ 863.634108][T16871] ? __sys_sendmsg+0x290/0x290 [ 863.638924][T16871] ? ktime_get_real_ts64+0x440/0x440 [ 863.644259][T16871] __se_sys_sendmsg+0x1bb/0x2a0 [ 863.649138][T16871] ? __x64_sys_sendmsg+0x80/0x80 [ 863.654135][T16871] ? lockdep_hardirqs_on+0x94/0x140 [ 863.659380][T16871] do_syscall_64+0x4c/0xa0 [ 863.663831][T16871] ? clear_bhb_loop+0x60/0xb0 [ 863.668703][T16871] ? clear_bhb_loop+0x60/0xb0 [ 863.673399][T16871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.679303][T16871] RIP: 0033:0x7fb06d39c819 [ 863.683728][T16871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.703392][T16871] RSP: 002b:00007fb06e2e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.711907][T16871] RAX: ffffffffffffffda RBX: 00007fb06d616090 RCX: 00007fb06d39c819 [ 863.719889][T16871] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 863.727878][T16871] RBP: 00007fb06d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 863.736034][T16871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.744020][T16871] R13: 00007fb06d616128 R14: 00007fb06d616090 R15: 00007fffbc1310e8 [ 863.752275][T16871] [ 863.887140][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3122'. [ 863.951671][T16888] netlink: 'syz.6.3122': attribute type 1 has an invalid length. [ 864.011403][T16888] netlink: 112865 bytes leftover after parsing attributes in process `syz.6.3122'. [ 864.141813][T16898] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3124'. [ 864.302003][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 864.311897][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 864.350957][T16586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.494987][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 864.526605][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 864.559457][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 864.591881][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 864.618294][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 864.641255][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 864.663012][T16586] device veth0_vlan entered promiscuous mode [ 864.746845][T16586] device veth1_vlan entered promiscuous mode [ 864.874635][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 864.890842][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 864.919232][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 864.982801][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 865.309915][T16586] device veth0_macvtap entered promiscuous mode [ 865.343067][T16925] netlink: 'syz.3.3129': attribute type 6 has an invalid length. [ 865.398200][T16925] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3129'. [ 865.438241][T16586] device veth1_macvtap entered promiscuous mode [ 865.517620][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.564480][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.597293][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.644695][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.665092][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.710378][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.743810][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.804220][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.852220][T16586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.928343][T16952] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3134'. [ 866.085136][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 866.108808][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 866.223728][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 866.339693][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.369478][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.400784][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.421364][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.445622][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.460714][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.471211][T16586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.492860][T16586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.519612][T16586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.532279][T16952] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 866.543768][T16952] CPU: 1 PID: 16952 Comm: syz.3.3134 Not tainted syzkaller #0 [ 866.551299][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.561410][T16952] Call Trace: [ 866.564736][T16952] [ 866.567705][T16952] dump_stack_lvl+0x188/0x24e [ 866.572469][T16952] ? show_regs_print_info+0x12/0x12 [ 866.577743][T16952] ? load_image+0x400/0x400 [ 866.582325][T16952] sysfs_warn_dup+0x8a/0xa0 [ 866.586894][T16952] sysfs_do_create_link_sd+0xc0/0x110 [ 866.592325][T16952] device_add+0x7ed/0xfb0 [ 866.596719][T16952] wiphy_register+0x1d9f/0x2ac0 [ 866.601658][T16952] ? cfg80211_event_work+0x40/0x40 [ 866.606827][T16952] ? minstrel_ht_alloc+0x894/0xa20 [ 866.612010][T16952] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 866.618148][T16952] ieee80211_register_hw+0x2d00/0x39f0 [ 866.623687][T16952] ? ieee80211_register_hw+0xf11/0x39f0 [ 866.629290][T16952] ? ieee80211_register_hw+0xf11/0x39f0 [ 866.634903][T16952] ? ieee80211_tasklet_handler+0x20/0x20 [ 866.640607][T16952] ? memset+0x1e/0x40 [ 866.644623][T16952] ? __hrtimer_init+0x186/0x270 [ 866.649511][T16952] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 866.655298][T16952] hwsim_new_radio_nl+0xafa/0xce0 [ 866.660369][T16952] genl_family_rcv_msg_doit+0x22a/0x330 [ 866.665930][T16952] ? end_current_label_crit_section+0x170/0x170 [ 866.672281][T16952] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 866.678199][T16952] ? bpf_lsm_capable+0x5/0x10 [ 866.682895][T16952] ? security_capable+0x85/0xb0 [ 866.687769][T16952] genl_rcv_msg+0x604/0x790 [ 866.692295][T16952] ? genl_bind+0x360/0x360 [ 866.696723][T16952] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 866.703088][T16952] netlink_rcv_skb+0x1fb/0x450 [ 866.707876][T16952] ? genl_bind+0x360/0x360 [ 866.712308][T16952] ? netlink_ack+0x1170/0x1170 [ 866.717123][T16952] ? down_read+0x1a8/0x2d0 [ 866.721935][T16952] genl_rcv+0x24/0x40 [ 866.725945][T16952] netlink_unicast+0x74d/0x8d0 [ 866.730770][T16952] netlink_sendmsg+0x8ad/0xbd0 [ 866.735683][T16952] ? netlink_getsockopt+0x550/0x550 [ 866.740939][T16952] ? aa_sock_msg_perm+0x94/0x150 [ 866.745963][T16952] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 866.751275][T16952] ? security_socket_sendmsg+0x7c/0xa0 [ 866.756856][T16952] ? netlink_getsockopt+0x550/0x550 [ 866.762077][T16952] ____sys_sendmsg+0x5be/0x970 [ 866.766890][T16952] ? __sys_sendmsg_sock+0x30/0x30 [ 866.771966][T16952] ? __import_iovec+0x315/0x500 [ 866.776857][T16952] ? import_iovec+0x6f/0xa0 [ 866.781397][T16952] ___sys_sendmsg+0x2a2/0x360 [ 866.786103][T16952] ? try_to_wake_up+0x6ae/0x1080 [ 866.791065][T16952] ? __sys_sendmsg+0x290/0x290 [ 866.795897][T16952] __se_sys_sendmsg+0x1bb/0x2a0 [ 866.800771][T16952] ? __x64_sys_sendmsg+0x80/0x80 [ 866.805747][T16952] ? lockdep_hardirqs_on+0x94/0x140 [ 866.810963][T16952] do_syscall_64+0x4c/0xa0 [ 866.815397][T16952] ? clear_bhb_loop+0x60/0xb0 [ 866.820085][T16952] ? clear_bhb_loop+0x60/0xb0 [ 866.824780][T16952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 866.830805][T16952] RIP: 0033:0x7fb06d39c819 [ 866.835244][T16952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.854875][T16952] RSP: 002b:00007fb06e2c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.863306][T16952] RAX: ffffffffffffffda RBX: 00007fb06d616180 RCX: 00007fb06d39c819 [ 866.871289][T16952] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 866.879311][T16952] RBP: 00007fb06d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 866.887293][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.895271][T16952] R13: 00007fb06d616218 R14: 00007fb06d616180 R15: 00007fffbc1310e8 [ 866.903273][T16952] [ 866.932003][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 866.961477][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 867.004764][T16586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.061089][T16586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.082648][T16586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.093991][T16586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.317213][T10045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.325332][T10045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.381770][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 867.583357][T10045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.609588][T16975] netlink: 'syz.6.3146': attribute type 29 has an invalid length. [ 867.613137][T16980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3138'. [ 867.625043][T10045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.648412][T16975] netlink: 'syz.6.3146': attribute type 29 has an invalid length. [ 867.782745][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 867.973368][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3137'. [ 868.708101][T16971] netlink: 'syz.7.3137': attribute type 1 has an invalid length. [ 868.717851][T16971] netlink: 112865 bytes leftover after parsing attributes in process `syz.7.3137'. [ 869.048197][T17008] IPv6: NLM_F_CREATE should be specified when creating new route [ 869.075731][T17008] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3144'. [ 869.153289][T17008] netlink: 'syz.0.3144': attribute type 2 has an invalid length. [ 869.213932][T17008] netlink: 'syz.0.3144': attribute type 11 has an invalid length. [ 869.302978][T17008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3144'. [ 870.178580][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.184933][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.674048][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 870.683286][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 870.691598][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.731197][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.739858][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 870.747570][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 871.090321][T10047] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.168955][T17039] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3151'. [ 871.349994][T10047] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.212274][T17050] delete_channel: no stack [ 872.607872][T10047] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.795748][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 872.942302][T10047] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.680465][T17087] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3162'. [ 874.875871][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 874.912675][T17034] chnl_net:caif_netlink_parms(): no params data found [ 874.969166][T10047] tipc: Left network mode [ 874.971142][T17092] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3165'. [ 875.750646][T17100] delete_channel: no stack [ 876.976848][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 878.036478][T17142] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3173'. [ 879.035670][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 879.125847][T17034] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.133036][T17034] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.150618][T17034] device bridge_slave_0 entered promiscuous mode [ 879.186783][T17134] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3172'. [ 879.363071][T17034] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.381432][T17034] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.408382][T17034] device bridge_slave_1 entered promiscuous mode [ 879.861287][T17158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3177'. [ 879.887350][T17160] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3176'. [ 879.953718][T17162] netlink: 'syz.3.3177': attribute type 10 has an invalid length. [ 880.084696][T17162] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 880.157611][T17161] device wlan0 entered promiscuous mode [ 880.379858][T17034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.618658][T17034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.418787][T17034] team0: Port device team_slave_0 added [ 881.502879][T17034] team0: Port device team_slave_1 added [ 881.527204][T17173] delete_channel: no stack [ 881.684261][T17034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.710354][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.768518][T17034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.828170][T17034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.849098][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.004996][T17034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.474560][T17207] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3187'. [ 883.683839][T17034] device hsr_slave_0 entered promiscuous mode [ 883.702341][T17034] device hsr_slave_1 entered promiscuous mode [ 883.711891][T17034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 883.723420][T17034] Cannot create hsr debugfs directory [ 884.244020][T17233] device wlan0 entered promiscuous mode [ 884.669616][T10047] bond0: (slave wlan1): Releasing backup interface [ 885.454828][T17258] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3198'. [ 885.658654][T10047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.667072][T17255] delete_channel: no stack [ 885.718570][T10047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.808800][T10047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.823503][T10047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.928233][T10047] device veth1_macvtap left promiscuous mode [ 885.934544][T10047] device veth1_vlan left promiscuous mode [ 885.952544][T10047] device veth0_vlan left promiscuous mode [ 886.606143][T17275] delete_channel: no stack [ 886.767150][T17276] delete_channel: no stack [ 889.896820][T10047] team0 (unregistering): Port device virt_wifi0 removed [ 890.268659][T10047] team0 (unregistering): Port device team_slave_1 removed [ 890.318017][T10047] team0 (unregistering): Port device team_slave_0 removed [ 890.374758][T10047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.428909][T10047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.486113][T10047] team0 (unregistering): Port device bridge_slave_1 removed [ 890.743211][T10047] bond0 (unregistering): (slave team0): Releasing backup interface [ 890.785292][T10047] bond0 (unregistering): Released all slaves [ 891.169106][T17304] FAULT_INJECTION: forcing a failure. [ 891.169106][T17304] name failslab, interval 1, probability 0, space 0, times 0 [ 891.205782][T17304] CPU: 0 PID: 17304 Comm: syz.0.3207 Not tainted syzkaller #0 [ 891.213415][T17304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.223513][T17304] Call Trace: [ 891.226820][T17304] [ 891.229784][T17304] dump_stack_lvl+0x188/0x24e [ 891.234519][T17304] ? show_regs_print_info+0x12/0x12 [ 891.239772][T17304] ? load_image+0x400/0x400 [ 891.244323][T17304] ? __might_sleep+0xd0/0xd0 [ 891.248958][T17304] ? __lock_acquire+0x7d10/0x7d10 [ 891.254038][T17304] should_fail_ex+0x399/0x4d0 [ 891.258761][T17304] should_failslab+0x5/0x20 [ 891.263298][T17304] slab_pre_alloc_hook+0x59/0x310 [ 891.268387][T17304] kmem_cache_alloc_node+0x5a/0x320 [ 891.273621][T17304] ? __alloc_skb+0xfc/0x7e0 [ 891.278157][T17304] __alloc_skb+0xfc/0x7e0 [ 891.282517][T17304] alloc_skb_with_frags+0xa7/0x710 [ 891.287658][T17304] ? trace_event_raw_event_lock+0x250/0x250 [ 891.293578][T17304] sock_alloc_send_pskb+0x87f/0x9a0 [ 891.298813][T17304] ? sock_kzfree_s+0x50/0x50 [ 891.303415][T17304] ? do_raw_spin_lock+0x128/0x2f0 [ 891.308453][T17304] ? __rwlock_init+0x140/0x140 [ 891.313231][T17304] ? do_raw_spin_unlock+0x11d/0x230 [ 891.318444][T17304] unix_dgram_sendmsg+0x539/0x16e0 [ 891.323573][T17304] ? is_dynamic_key+0x260/0x260 [ 891.328445][T17304] ? aa_sk_perm+0x81f/0x950 [ 891.332971][T17304] ? unix_dgram_poll+0x680/0x680 [ 891.337918][T17304] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 891.344361][T17304] ? aa_sock_msg_perm+0x94/0x150 [ 891.349313][T17304] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 891.354968][T17304] ? unix_dgram_peer_wake_me+0x430/0x430 [ 891.360614][T17304] ____sys_sendmsg+0x5be/0x970 [ 891.365404][T17304] ? __sys_sendmsg_sock+0x30/0x30 [ 891.370445][T17304] ? __import_iovec+0x315/0x500 [ 891.375311][T17304] ? import_iovec+0x6f/0xa0 [ 891.379832][T17304] ___sys_sendmsg+0x2a2/0x360 [ 891.384528][T17304] ? __sys_sendmsg+0x290/0x290 [ 891.389330][T17304] ? __lock_acquire+0x7d10/0x7d10 [ 891.394402][T17304] __se_sys_sendmsg+0x1bb/0x2a0 [ 891.399270][T17304] ? __x64_sys_sendmsg+0x80/0x80 [ 891.404237][T17304] ? lockdep_hardirqs_on+0x94/0x140 [ 891.409449][T17304] do_syscall_64+0x4c/0xa0 [ 891.413879][T17304] ? clear_bhb_loop+0x60/0xb0 [ 891.418664][T17304] ? clear_bhb_loop+0x60/0xb0 [ 891.423354][T17304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.429270][T17304] RIP: 0033:0x7feafab9c819 [ 891.433698][T17304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.453400][T17304] RSP: 002b:00007feafbb23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.461832][T17304] RAX: ffffffffffffffda RBX: 00007feafae15fa0 RCX: 00007feafab9c819 [ 891.470333][T17304] RDX: 0000000020000000 RSI: 0000200000001940 RDI: 0000000000000006 [ 891.478314][T17304] RBP: 00007feafbb23090 R08: 0000000000000000 R09: 0000000000000000 [ 891.486299][T17304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.494281][T17304] R13: 00007feafae16038 R14: 00007feafae15fa0 R15: 00007ffd63bfbb18 [ 891.502273][T17304] [ 892.473876][T17324] device wlan0 entered promiscuous mode [ 892.718781][T17034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 892.796805][T17034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 893.006008][T17034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 893.033363][T17034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 893.388332][T17034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.477413][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 893.541299][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 893.589247][T17034] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.719569][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 893.735119][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 893.764285][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.771495][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.963086][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 893.977052][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 894.004677][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 894.027798][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.035021][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.064906][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 894.137902][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 894.187572][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 894.221342][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 894.295170][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 894.304741][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 894.307788][T17370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3222'. [ 894.323054][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 894.353840][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 894.366510][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 894.386207][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 894.398298][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 894.410368][T17034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 894.436189][T17370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3222'. [ 895.491041][T17376] delete_channel: no stack [ 895.864930][T17400] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3226'. [ 895.957713][T17400] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3226'. [ 896.036276][T17402] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3226'. [ 896.141594][T17400] netlink: 'syz.0.3226': attribute type 21 has an invalid length. [ 896.190627][T17400] netlink: 'syz.0.3226': attribute type 22 has an invalid length. [ 896.267338][T17400] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.3226'. [ 896.397482][T17402] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3226'. [ 896.485727][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.503660][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.836411][T17034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.843631][T17400] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3226'. [ 897.978853][T17431] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3235'. [ 898.181732][T17440] device pim6reg1 entered promiscuous mode [ 898.544879][T17453] netlink: 'syz.0.3240': attribute type 10 has an invalid length. [ 898.562689][T17453] device veth0_macvtap left promiscuous mode [ 899.810591][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 899.866700][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.949048][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 899.999363][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.030444][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.066511][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.100654][T17034] device veth0_vlan entered promiscuous mode [ 900.159282][T17034] device veth1_vlan entered promiscuous mode [ 900.246432][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 900.256549][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 900.304162][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 900.342450][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 900.429844][T17034] device veth0_macvtap entered promiscuous mode [ 900.479137][T17034] device veth1_macvtap entered promiscuous mode [ 900.553370][T17034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.608445][T17489] netlink: 'syz.7.3248': attribute type 10 has an invalid length. [ 900.625610][T17034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.659231][T17034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.782051][T17034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.911411][T17489] netlink: 3819 bytes leftover after parsing attributes in process `syz.7.3248'. [ 901.145577][T17034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.166071][T17034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.176727][T17034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.242831][T17034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.293522][T17034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.314002][T17495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.359668][T17495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.441302][T17495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.482308][T17495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.679825][T17497] netlink: 'syz.0.3252': attribute type 21 has an invalid length. [ 901.710296][T17497] netlink: 'syz.0.3252': attribute type 6 has an invalid length. [ 901.750770][T17497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3252'. [ 901.781257][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 901.795279][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 901.825788][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 901.847090][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 901.873932][T17500] netlink: 'syz.5.3254': attribute type 21 has an invalid length. [ 901.892831][T17500] netlink: 'syz.5.3254': attribute type 11 has an invalid length. [ 901.935865][T17034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.977409][T17034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.015665][T17034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.061467][T17034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.095620][T17034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 902.122349][T17034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.180699][T17034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.192834][T17506] netlink: 'syz.7.3248': attribute type 21 has an invalid length. [ 902.221925][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 902.242256][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 902.311110][T17034] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.366171][T17034] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.420701][T17034] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.460835][T17525] netlink: 'syz.0.3258': attribute type 29 has an invalid length. [ 902.472278][T17034] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.631376][T17525] netlink: 'syz.0.3258': attribute type 29 has an invalid length. [ 903.019865][T10071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.045439][T10071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.206694][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 903.270914][T10057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.285124][T10057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.321329][T10045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 904.646561][T17562] netlink: 'syz.5.3266': attribute type 20 has an invalid length. [ 905.246215][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.263795][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.285924][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.295412][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.304474][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 905.311956][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 905.375426][T17583] netlink: 'syz.6.3271': attribute type 21 has an invalid length. [ 905.453320][T17583] IPv6: NLM_F_CREATE should be specified when creating new route [ 905.481700][T17583] IPv6: Can't replace route, no match found [ 905.981408][T17580] chnl_net:caif_netlink_parms(): no params data found [ 906.442023][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.465922][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.562173][T17580] device bridge_slave_0 entered promiscuous mode [ 906.610793][T17606] netlink: 'syz.3.3276': attribute type 6 has an invalid length. [ 906.626375][T17606] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3276'. [ 906.668647][T17618] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.3279'. [ 906.718693][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.746641][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.755397][T17580] device bridge_slave_1 entered promiscuous mode [ 906.765459][T17618] netlink: zone id is out of range [ 906.798348][T17618] netlink: zone id is out of range [ 906.835729][T17618] netlink: zone id is out of range [ 906.856343][T17618] netlink: zone id is out of range [ 906.865283][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.895626][T17618] netlink: zone id is out of range [ 906.900855][T17618] netlink: zone id is out of range [ 906.945216][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.974325][T17618] netlink: zone id is out of range [ 907.033230][T17618] netlink: zone id is out of range [ 907.085788][T17618] netlink: zone id is out of range [ 907.095025][T17618] netlink: zone id is out of range [ 907.106280][T17626] bridge0: port 3(team0) entered blocking state [ 907.127753][T17626] bridge0: port 3(team0) entered disabled state [ 907.152360][T17626] device team0 entered promiscuous mode [ 907.178773][T17626] device team_slave_0 entered promiscuous mode [ 907.247195][T17626] device team_slave_1 entered promiscuous mode [ 907.260898][T17626] device virt_wifi0 entered promiscuous mode [ 907.280580][T17626] bridge0: port 3(team0) entered blocking state [ 907.287572][T17626] bridge0: port 3(team0) entered forwarding state [ 907.365633][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 907.378357][T17580] team0: Port device team_slave_0 added [ 907.657897][T17580] team0: Port device team_slave_1 added [ 907.777737][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.790464][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.818104][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.939401][T10057] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.964413][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.981641][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.105609][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.229090][T10057] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.435800][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 910.268048][T17664] delete_channel: no stack [ 910.278109][T10057] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.309875][T17580] device hsr_slave_0 entered promiscuous mode [ 910.349938][T17580] device hsr_slave_1 entered promiscuous mode [ 910.372843][T17580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.396656][T17580] Cannot create hsr debugfs directory [ 910.417994][T17663] netlink: 'syz.0.3290': attribute type 6 has an invalid length. [ 910.440038][T17663] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3290'. [ 910.502726][T10057] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.554187][T17681] netlink: 'syz.3.3295': attribute type 29 has an invalid length. [ 910.662208][T17681] netlink: 'syz.3.3295': attribute type 29 has an invalid length. [ 910.697648][T17682] netlink: 'syz.3.3295': attribute type 29 has an invalid length. [ 911.173551][T17689] bridge0: port 3(team0) entered blocking state [ 911.213953][T17689] bridge0: port 3(team0) entered disabled state [ 911.301890][T17689] device team0 entered promiscuous mode [ 911.320802][T17689] device team_slave_0 entered promiscuous mode [ 911.369669][T17689] device team_slave_1 entered promiscuous mode [ 911.455297][T17689] bridge0: port 3(team0) entered blocking state [ 911.462052][T17689] bridge0: port 3(team0) entered forwarding state [ 911.519078][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 913.595926][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 913.784428][T17715] delete_channel: no stack [ 914.306709][T17721] delete_channel: no stack [ 914.321818][T17731] netlink: 'syz.5.3307': attribute type 27 has an invalid length. [ 914.483881][T17731] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3307'. [ 914.521355][T17580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 914.624466][T17580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 914.655239][T17580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 914.876749][T17580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 915.041839][T17749] FAULT_INJECTION: forcing a failure. [ 915.041839][T17749] name failslab, interval 1, probability 0, space 0, times 0 [ 915.123972][T17749] CPU: 0 PID: 17749 Comm: syz.6.3309 Not tainted syzkaller #0 [ 915.131610][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 915.141709][T17749] Call Trace: [ 915.145117][T17749] [ 915.148086][T17749] dump_stack_lvl+0x188/0x24e [ 915.152824][T17749] ? show_regs_print_info+0x12/0x12 [ 915.158069][T17749] ? load_image+0x400/0x400 [ 915.162612][T17749] ? perf_trace_lock+0xf8/0x390 [ 915.167520][T17749] ? verify_lock_unused+0x140/0x140 [ 915.172775][T17749] ? perf_trace_lock+0xf8/0x390 [ 915.177672][T17749] should_fail_ex+0x399/0x4d0 [ 915.182379][T17749] should_failslab+0x5/0x20 [ 915.186902][T17749] slab_pre_alloc_hook+0x59/0x310 [ 915.191968][T17749] kmem_cache_alloc+0x56/0x2f0 [ 915.196752][T17749] ? skb_clone+0x1e7/0x370 [ 915.201197][T17749] skb_clone+0x1e7/0x370 [ 915.205465][T17749] __netlink_deliver_tap+0x3ed/0x800 [ 915.210947][T17749] ? netlink_deliver_tap+0x2e/0x1b0 [ 915.216214][T17749] netlink_deliver_tap+0x19c/0x1b0 [ 915.221453][T17749] netlink_unicast+0x728/0x8d0 [ 915.226343][T17749] netlink_sendmsg+0x8ad/0xbd0 [ 915.231141][T17749] ? netlink_getsockopt+0x550/0x550 [ 915.236371][T17749] ? aa_sock_msg_perm+0x94/0x150 [ 915.241325][T17749] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 915.246634][T17749] ? security_socket_sendmsg+0x7c/0xa0 [ 915.252135][T17749] ? netlink_getsockopt+0x550/0x550 [ 915.257367][T17749] ____sys_sendmsg+0x5be/0x970 [ 915.262422][T17749] ? __sys_sendmsg_sock+0x30/0x30 [ 915.267463][T17749] ? __import_iovec+0x315/0x500 [ 915.272341][T17749] ? import_iovec+0x6f/0xa0 [ 915.276874][T17749] ___sys_sendmsg+0x2a2/0x360 [ 915.281668][T17749] ? __sys_sendmsg+0x290/0x290 [ 915.286474][T17749] ? __lock_acquire+0x7d10/0x7d10 [ 915.291545][T17749] __se_sys_sendmsg+0x1bb/0x2a0 [ 915.296513][T17749] ? __x64_sys_sendmsg+0x80/0x80 [ 915.301484][T17749] ? lockdep_hardirqs_on+0x94/0x140 [ 915.306709][T17749] do_syscall_64+0x4c/0xa0 [ 915.311163][T17749] ? clear_bhb_loop+0x60/0xb0 [ 915.315855][T17749] ? clear_bhb_loop+0x60/0xb0 [ 915.320551][T17749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.326457][T17749] RIP: 0033:0x7f035639c819 [ 915.330888][T17749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.350595][T17749] RSP: 002b:00007f0357267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.359025][T17749] RAX: ffffffffffffffda RBX: 00007f0356616090 RCX: 00007f035639c819 [ 915.367010][T17749] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 915.375014][T17749] RBP: 00007f0357267090 R08: 0000000000000000 R09: 0000000000000000 [ 915.383028][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.391010][T17749] R13: 00007f0356616128 R14: 00007f0356616090 R15: 00007ffc648b2a28 [ 915.399022][T17749] [ 915.798208][T10057] bond0: (slave wlan1): Releasing backup interface [ 916.017558][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.323367][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 916.342750][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 916.423836][T17763] device wlan0 left promiscuous mode [ 916.496093][T17760] delete_channel: no stack [ 916.507766][T17766] device wlan0 entered promiscuous mode [ 916.518610][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.526057][T17762] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3313'. [ 916.673407][T10057] device hsr_slave_0 left promiscuous mode [ 916.715872][T10057] device hsr_slave_1 left promiscuous mode [ 916.745572][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.753391][T10057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.790231][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.835050][T10057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.963181][T10057] device team0 left promiscuous mode [ 916.972367][T10057] device team_slave_1 left promiscuous mode [ 916.992914][T10057] device virt_wifi0 left promiscuous mode [ 917.041605][T10057] device bridge_slave_1 left promiscuous mode [ 917.084752][T10057] bridge0: port 3(team0) entered disabled state [ 917.759197][T17775] delete_channel: no stack [ 918.347461][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 919.794078][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.887672][T10057] device veth1_vlan left promiscuous mode [ 919.913547][T10057] device veth0_vlan left promiscuous mode [ 920.954674][T10057] team0 (unregistering): Port device virt_wifi0 removed [ 921.235626][T10057] team0 (unregistering): Port device team_slave_1 removed [ 921.289953][T10057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.341120][T10057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.392144][T10057] team0 (unregistering): Port device bridge_slave_1 removed [ 921.629240][T10057] bond0 (unregistering): Released all slaves [ 921.719887][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 921.728719][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 921.737577][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.745357][T10064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.753102][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.761944][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.770856][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.778042][T10064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.792473][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 921.802425][T17791] netlink: 'syz.3.3320': attribute type 10 has an invalid length. [ 921.815988][T17791] device veth1_macvtap left promiscuous mode [ 921.880833][T17816] netlink: 'syz.5.3324': attribute type 2 has an invalid length. [ 921.962342][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 922.054080][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 922.077473][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 922.106479][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 922.148393][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 922.170309][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 922.244805][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 922.269979][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 922.287175][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 922.307532][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 922.380741][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 922.483908][T17831] delete_channel: no stack [ 922.492632][T17580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 922.576464][T17829] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3328'. [ 922.742692][T17836] device wlan0 entered promiscuous mode [ 924.446731][T17848] delete_channel: no stack [ 924.464540][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.478402][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.498908][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.823962][T17864] netlink: 'syz.3.3337': attribute type 2 has an invalid length. [ 924.905974][T17864] netlink: 'syz.3.3337': attribute type 1 has an invalid length. [ 924.958234][T17864] netlink: 'syz.3.3337': attribute type 8 has an invalid length. [ 925.045931][T17864] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3337'. [ 926.041129][T17887] delete_channel: no stack [ 926.082037][T17891] netlink: 'syz.5.3340': attribute type 6 has an invalid length. [ 926.125369][T17891] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3340'. [ 926.400302][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 926.438000][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 926.486382][T17905] netlink: 'syz.3.3341': attribute type 6 has an invalid length. [ 926.580437][T17905] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3341'. [ 926.694389][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 926.714355][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 926.728191][T17580] device veth0_vlan entered promiscuous mode [ 926.759836][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 926.780867][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 926.796383][T17580] device veth1_vlan entered promiscuous mode [ 926.867737][T17580] device veth0_macvtap entered promiscuous mode [ 926.882903][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 926.892843][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 926.901783][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 926.913054][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 926.929078][T17580] device veth1_macvtap entered promiscuous mode [ 926.943351][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 926.970001][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.989580][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.002321][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.020785][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.032499][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.050801][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.062926][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.076587][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 927.086798][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 927.107773][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.133966][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.144552][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.160847][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.171261][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.186994][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.203355][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.218946][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 927.233275][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 927.260781][T17580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.271451][T17580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.310726][T17580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.334376][T17580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.360220][T17912] delete_channel: no stack [ 927.897146][T10051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.905050][T10051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.012610][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 928.053058][T10045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.068956][T10045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.112221][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 928.137510][T17941] net_ratelimit: 74 callbacks suppressed [ 928.137530][T17941] wlan1: mtu greater than device maximum [ 928.484906][T17948] netlink: 'syz.3.3355': attribute type 2 has an invalid length. [ 928.585310][T17948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3355'. [ 928.716227][T17945] netlink: 'syz.3.3355': attribute type 2 has an invalid length. [ 928.734636][T17936] delete_channel: no stack [ 928.834071][T17945] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3355'. [ 929.410972][T17958] delete_channel: no stack [ 929.719065][T17974] netlink: 'syz.3.3361': attribute type 46 has an invalid length. [ 929.881074][T17967] netlink: 'syz.7.3360': attribute type 6 has an invalid length. [ 929.895181][T17967] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3360'. [ 930.268946][T17968] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3361'. [ 930.335002][T17968] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 930.357499][T17968] CPU: 0 PID: 17968 Comm: syz.3.3361 Not tainted syzkaller #0 [ 930.365313][T17968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 930.375435][T17968] Call Trace: [ 930.378851][T17968] [ 930.381875][T17968] dump_stack_lvl+0x188/0x24e [ 930.386627][T17968] ? show_regs_print_info+0x12/0x12 [ 930.391993][T17968] ? load_image+0x400/0x400 [ 930.396619][T17968] sysfs_warn_dup+0x8a/0xa0 [ 930.401200][T17968] sysfs_do_create_link_sd+0xc0/0x110 [ 930.406759][T17968] device_add+0x7ed/0xfb0 [ 930.411378][T17968] wiphy_register+0x1d9f/0x2ac0 [ 930.416450][T17968] ? cfg80211_event_work+0x40/0x40 [ 930.421641][T17968] ? minstrel_ht_alloc+0x894/0xa20 [ 930.427030][T17968] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 930.433261][T17968] ieee80211_register_hw+0x2d00/0x39f0 [ 930.438818][T17968] ? ieee80211_register_hw+0xf11/0x39f0 [ 930.444437][T17968] ? ieee80211_register_hw+0xf11/0x39f0 [ 930.450086][T17968] ? ieee80211_tasklet_handler+0x20/0x20 [ 930.455810][T17968] ? memset+0x1e/0x40 [ 930.459860][T17968] ? __hrtimer_init+0x186/0x270 [ 930.464827][T17968] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 930.470664][T17968] hwsim_new_radio_nl+0xafa/0xce0 [ 930.475805][T17968] genl_family_rcv_msg_doit+0x22a/0x330 [ 930.481410][T17968] ? end_current_label_crit_section+0x170/0x170 [ 930.487711][T17968] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 930.493673][T17968] ? bpf_lsm_capable+0x5/0x10 [ 930.498410][T17968] ? security_capable+0x85/0xb0 [ 930.503346][T17968] genl_rcv_msg+0x604/0x790 [ 930.507952][T17968] ? genl_bind+0x360/0x360 [ 930.512432][T17968] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 930.518893][T17968] netlink_rcv_skb+0x1fb/0x450 [ 930.523828][T17968] ? genl_bind+0x360/0x360 [ 930.528278][T17968] ? netlink_ack+0x1170/0x1170 [ 930.533184][T17968] ? down_read+0x1a8/0x2d0 [ 930.537729][T17968] genl_rcv+0x24/0x40 [ 930.541831][T17968] netlink_unicast+0x74d/0x8d0 [ 930.546646][T17968] netlink_sendmsg+0x8ad/0xbd0 [ 930.551540][T17968] ? netlink_getsockopt+0x550/0x550 [ 930.556778][T17968] ? aa_sock_msg_perm+0x94/0x150 [ 930.561857][T17968] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 930.567507][T17968] ? security_socket_sendmsg+0x7c/0xa0 [ 930.573001][T17968] ? netlink_getsockopt+0x550/0x550 [ 930.578233][T17968] ____sys_sendmsg+0x5be/0x970 [ 930.583047][T17968] ? __sys_sendmsg_sock+0x30/0x30 [ 930.588095][T17968] ? __import_iovec+0x315/0x500 [ 930.592979][T17968] ? import_iovec+0x6f/0xa0 [ 930.598619][T17968] ___sys_sendmsg+0x2a2/0x360 [ 930.605214][T17968] ? try_to_wake_up+0x67c/0x1080 [ 930.612175][T17968] ? __sys_sendmsg+0x290/0x290 [ 930.617335][T17968] __se_sys_sendmsg+0x1bb/0x2a0 [ 930.623024][T17968] ? __x64_sys_sendmsg+0x80/0x80 [ 930.628374][T17968] ? lockdep_hardirqs_on+0x94/0x140 [ 930.633720][T17968] do_syscall_64+0x4c/0xa0 [ 930.638340][T17968] ? clear_bhb_loop+0x60/0xb0 [ 930.643132][T17968] ? clear_bhb_loop+0x60/0xb0 [ 930.647871][T17968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.653788][T17968] RIP: 0033:0x7fb06d39c819 [ 930.658313][T17968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.678027][T17968] RSP: 002b:00007fb06e302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.686560][T17968] RAX: ffffffffffffffda RBX: 00007fb06d615fa0 RCX: 00007fb06d39c819 [ 930.694550][T17968] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000013 [ 930.702545][T17968] RBP: 00007fb06d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 930.710536][T17968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.718529][T17968] R13: 00007fb06d616038 R14: 00007fb06d615fa0 R15: 00007fffbc1310e8 [ 930.726551][T17968] [ 931.138588][T17997] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3366'. [ 931.533217][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.543076][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.662927][T18010] FAULT_INJECTION: forcing a failure. [ 931.662927][T18010] name failslab, interval 1, probability 0, space 0, times 0 [ 931.684113][T18000] delete_channel: no stack [ 931.745663][T18010] CPU: 1 PID: 18010 Comm: syz.5.3371 Not tainted syzkaller #0 [ 931.753404][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.763595][T18010] Call Trace: [ 931.767001][T18010] [ 931.770003][T18010] dump_stack_lvl+0x188/0x24e [ 931.774831][T18010] ? show_regs_print_info+0x12/0x12 [ 931.780170][T18010] ? load_image+0x400/0x400 [ 931.784895][T18010] ? __might_sleep+0xd0/0xd0 [ 931.789533][T18010] ? __lock_acquire+0x7d10/0x7d10 [ 931.794631][T18010] should_fail_ex+0x399/0x4d0 [ 931.799372][T18010] should_failslab+0x5/0x20 [ 931.803899][T18010] slab_pre_alloc_hook+0x59/0x310 [ 931.808971][T18010] kmem_cache_alloc_node+0x5a/0x320 [ 931.814226][T18010] ? __alloc_skb+0xfc/0x7e0 [ 931.818790][T18010] __alloc_skb+0xfc/0x7e0 [ 931.823204][T18010] ? netlink_autobind+0xda/0x300 [ 931.828374][T18010] netlink_sendmsg+0x654/0xbd0 [ 931.833194][T18010] ? netlink_getsockopt+0x550/0x550 [ 931.838436][T18010] ? aa_sock_msg_perm+0x94/0x150 [ 931.843410][T18010] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 931.848730][T18010] ? security_socket_sendmsg+0x7c/0xa0 [ 931.854322][T18010] ? netlink_getsockopt+0x550/0x550 [ 931.859645][T18010] ____sys_sendmsg+0x5be/0x970 [ 931.864470][T18010] ? __sys_sendmsg_sock+0x30/0x30 [ 931.869530][T18010] ? __import_iovec+0x315/0x500 [ 931.874425][T18010] ? import_iovec+0x6f/0xa0 [ 931.878976][T18010] ___sys_sendmsg+0x2a2/0x360 [ 931.883791][T18010] ? __sys_sendmsg+0x290/0x290 [ 931.888619][T18010] ? __lock_acquire+0x7d10/0x7d10 [ 931.893709][T18010] __se_sys_sendmsg+0x1bb/0x2a0 [ 931.898600][T18010] ? ct_nmi_exit+0x145/0x1c0 [ 931.903332][T18010] ? __x64_sys_sendmsg+0x80/0x80 [ 931.908327][T18010] ? lockdep_hardirqs_on+0x94/0x140 [ 931.913570][T18010] do_syscall_64+0x4c/0xa0 [ 931.918041][T18010] ? clear_bhb_loop+0x60/0xb0 [ 931.922756][T18010] ? clear_bhb_loop+0x60/0xb0 [ 931.927475][T18010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.933403][T18010] RIP: 0033:0x7fb702f9c819 [ 931.937937][T18010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.957595][T18010] RSP: 002b:00007fb703e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.966059][T18010] RAX: ffffffffffffffda RBX: 00007fb703215fa0 RCX: 00007fb702f9c819 [ 931.974155][T18010] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 931.982250][T18010] RBP: 00007fb703e41090 R08: 0000000000000000 R09: 0000000000000000 [ 931.990258][T18010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.998445][T18010] R13: 00007fb703216038 R14: 00007fb703215fa0 R15: 00007ffca3ec8a18 [ 932.006480][T18010] [ 932.986315][T18030] FAULT_INJECTION: forcing a failure. [ 932.986315][T18030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.155891][T18029] netlink: 'syz.5.3376': attribute type 6 has an invalid length. [ 933.184285][T18018] delete_channel: no stack [ 933.189153][T18029] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3376'. [ 933.197421][T18030] CPU: 0 PID: 18030 Comm: syz.6.3378 Not tainted syzkaller #0 [ 933.205795][T18030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 933.215884][T18030] Call Trace: [ 933.219212][T18030] [ 933.222175][T18030] dump_stack_lvl+0x188/0x24e [ 933.226992][T18030] ? show_regs_print_info+0x12/0x12 [ 933.232257][T18030] ? load_image+0x400/0x400 [ 933.236908][T18030] ? __might_fault+0xa6/0x120 [ 933.241636][T18030] should_fail_ex+0x399/0x4d0 [ 933.246353][T18030] copyin+0x1b/0x120 [ 933.250406][T18030] _copy_from_iter+0x447/0x1130 [ 933.255027][T18033] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3378'. [ 933.255307][T18030] ? copyout_mc+0x110/0x110 [ 933.268874][T18030] ? __virt_addr_valid+0x188/0x540 [ 933.274030][T18030] ? __virt_addr_valid+0x188/0x540 [ 933.279190][T18030] ? __virt_addr_valid+0x465/0x540 [ 933.284605][T18030] ? __check_object_size+0x500/0xa40 [ 933.289939][T18030] netlink_sendmsg+0x755/0xbd0 [ 933.294772][T18030] ? netlink_getsockopt+0x550/0x550 [ 933.300014][T18030] ? aa_sock_msg_perm+0x94/0x150 [ 933.305089][T18030] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 933.310414][T18030] ? security_socket_sendmsg+0x7c/0xa0 [ 933.315919][T18030] ? netlink_getsockopt+0x550/0x550 [ 933.321160][T18030] ____sys_sendmsg+0x5be/0x970 [ 933.326065][T18030] ? __sys_sendmsg_sock+0x30/0x30 [ 933.331134][T18030] ? __import_iovec+0x315/0x500 [ 933.336061][T18030] ? import_iovec+0x6f/0xa0 [ 933.340634][T18030] ___sys_sendmsg+0x2a2/0x360 [ 933.345358][T18030] ? __sys_sendmsg+0x290/0x290 [ 933.350192][T18030] ? __lock_acquire+0x7d10/0x7d10 [ 933.355296][T18030] __se_sys_sendmsg+0x1bb/0x2a0 [ 933.360187][T18030] ? ct_nmi_exit+0x145/0x1c0 [ 933.364857][T18030] ? __x64_sys_sendmsg+0x80/0x80 [ 933.369877][T18030] ? lockdep_hardirqs_on+0x94/0x140 [ 933.375214][T18030] do_syscall_64+0x4c/0xa0 [ 933.379660][T18030] ? clear_bhb_loop+0x60/0xb0 [ 933.384546][T18030] ? clear_bhb_loop+0x60/0xb0 [ 933.389296][T18030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 933.395204][T18030] RIP: 0033:0x7f035639c819 [ 933.399630][T18030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.419517][T18030] RSP: 002b:00007f0357267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.428208][T18030] RAX: ffffffffffffffda RBX: 00007f0356616090 RCX: 00007f035639c819 [ 933.436283][T18030] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000d [ 933.444266][T18030] RBP: 00007f0357267090 R08: 0000000000000000 R09: 0000000000000000 [ 933.452331][T18030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.460309][T18030] R13: 00007f0356616128 R14: 00007f0356616090 R15: 00007ffc648b2a28 [ 933.468312][T18030] [ 933.611994][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 935.416445][T18058] delete_channel: no stack [ 935.450822][T18065] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3386'. [ 935.520560][T18065] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3386'. [ 935.570530][T18065] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3386'. [ 935.604105][T18065] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3386'. [ 936.159485][T18069] delete_channel: no stack [ 936.246874][T18076] netlink: 'syz.6.3390': attribute type 6 has an invalid length. [ 936.305430][T18076] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3390'. [ 938.522567][T18112] delete_channel: no stack [ 938.576040][T18118] delete_channel: no stack [ 939.271253][T18140] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3407'. [ 939.339216][T18140] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 939.479268][T18140] CPU: 0 PID: 18140 Comm: syz.3.3407 Not tainted syzkaller #0 [ 939.487069][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 939.497243][T18140] Call Trace: [ 939.500563][T18140] [ 939.503611][T18140] dump_stack_lvl+0x188/0x24e [ 939.508429][T18140] ? show_regs_print_info+0x12/0x12 [ 939.513771][T18140] ? load_image+0x400/0x400 [ 939.518323][T18140] sysfs_warn_dup+0x8a/0xa0 [ 939.523026][T18140] sysfs_do_create_link_sd+0xc0/0x110 [ 939.528535][T18140] device_add+0x7ed/0xfb0 [ 939.533002][T18140] wiphy_register+0x1d9f/0x2ac0 [ 939.537919][T18140] ? cfg80211_event_work+0x40/0x40 [ 939.543085][T18140] ? minstrel_ht_alloc+0x894/0xa20 [ 939.548329][T18140] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 939.554430][T18140] ieee80211_register_hw+0x2d00/0x39f0 [ 939.560037][T18140] ? ieee80211_register_hw+0xf11/0x39f0 [ 939.566056][T18140] ? ieee80211_register_hw+0xf11/0x39f0 [ 939.571650][T18140] ? ieee80211_tasklet_handler+0x20/0x20 [ 939.577344][T18140] ? memset+0x1e/0x40 [ 939.581355][T18140] ? __hrtimer_init+0x186/0x270 [ 939.586244][T18140] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 939.592022][T18140] hwsim_new_radio_nl+0xafa/0xce0 [ 939.597278][T18140] genl_family_rcv_msg_doit+0x22a/0x330 [ 939.606688][T18140] ? end_current_label_crit_section+0x170/0x170 [ 939.613153][T18140] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 939.619101][T18140] ? bpf_lsm_capable+0x5/0x10 [ 939.623898][T18140] ? security_capable+0x85/0xb0 [ 939.628808][T18140] genl_rcv_msg+0x604/0x790 [ 939.633354][T18140] ? genl_bind+0x360/0x360 [ 939.637844][T18140] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 939.644387][T18140] netlink_rcv_skb+0x1fb/0x450 [ 939.649562][T18140] ? genl_bind+0x360/0x360 [ 939.654009][T18140] ? netlink_ack+0x1170/0x1170 [ 939.658886][T18140] ? down_read+0x1a8/0x2d0 [ 939.663369][T18140] genl_rcv+0x24/0x40 [ 939.667395][T18140] netlink_unicast+0x74d/0x8d0 [ 939.672299][T18140] netlink_sendmsg+0x8ad/0xbd0 [ 939.677113][T18140] ? netlink_getsockopt+0x550/0x550 [ 939.682531][T18140] ? aa_sock_msg_perm+0x94/0x150 [ 939.687511][T18140] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 939.692842][T18140] ? security_socket_sendmsg+0x7c/0xa0 [ 939.698359][T18140] ? netlink_getsockopt+0x550/0x550 [ 939.703602][T18140] ____sys_sendmsg+0x5be/0x970 [ 939.708424][T18140] ? __sys_sendmsg_sock+0x30/0x30 [ 939.713484][T18140] ? __import_iovec+0x315/0x500 [ 939.718389][T18140] ? import_iovec+0x6f/0xa0 [ 939.722946][T18140] ___sys_sendmsg+0x2a2/0x360 [ 939.727752][T18140] ? try_to_wake_up+0x67c/0x1080 [ 939.732731][T18140] ? __sys_sendmsg+0x290/0x290 [ 939.737593][T18140] __se_sys_sendmsg+0x1bb/0x2a0 [ 939.742499][T18140] ? __x64_sys_sendmsg+0x80/0x80 [ 939.747732][T18140] ? lockdep_hardirqs_on+0x94/0x140 [ 939.753055][T18140] do_syscall_64+0x4c/0xa0 [ 939.757514][T18140] ? clear_bhb_loop+0x60/0xb0 [ 939.762245][T18140] ? clear_bhb_loop+0x60/0xb0 [ 939.767064][T18140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.773083][T18140] RIP: 0033:0x7fb06d39c819 [ 939.777540][T18140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.797360][T18140] RSP: 002b:00007fb06e29f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.805820][T18140] RAX: ffffffffffffffda RBX: 00007fb06d616270 RCX: 00007fb06d39c819 [ 939.814090][T18140] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 939.822187][T18140] RBP: 00007fb06d432c91 R08: 0000000000000000 R09: 0000000000000000 [ 939.830184][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.838280][T18140] R13: 00007fb06d616308 R14: 00007fb06d616270 R15: 00007fffbc1310e8 [ 939.846566][T18140] [ 939.921349][T18147] netlink: 'syz.0.3408': attribute type 6 has an invalid length. [ 939.941163][T18147] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3408'. [ 942.523296][T18188] delete_channel: no stack [ 942.718441][T18194] netlink: 'syz.3.3420': attribute type 6 has an invalid length. [ 942.745873][T18194] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3420'. [ 943.013112][T18201] netlink: 'syz.6.3422': attribute type 6 has an invalid length. [ 943.065853][T18201] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3422'. [ 943.943037][T18219] netlink: 'syz.5.3426': attribute type 6 has an invalid length. [ 944.008308][T18219] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3426'. [ 945.115432][T18230] delete_channel: no stack [ 945.216611][T18242] delete_channel: no stack [ 945.677463][T18258] delete_channel: no stack [ 945.733896][T18261] netlink: 'syz.0.3438': attribute type 6 has an invalid length. [ 945.764961][T18261] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3438'. [ 946.077987][T18275] netlink: 'syz.3.3440': attribute type 3 has an invalid length. [ 946.095868][T18275] netlink: 'syz.3.3440': attribute type 1 has an invalid length. [ 946.117236][T18275] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3440'. [ 947.800346][T18296] delete_channel: no stack [ 948.417050][T18295] delete_channel: no stack [ 948.737566][T18313] delete_channel: no stack [ 948.854549][T18322] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.3455'. [ 949.098217][T18331] sctp: [Deprecated]: syz.5.3466 (pid 18331) Use of int in max_burst socket option deprecated. [ 949.098217][T18331] Use struct sctp_assoc_value instead [ 949.487821][T18327] delete_channel: no stack [ 949.553549][T18326] netlink: 'syz.0.3454': attribute type 6 has an invalid length. [ 949.580226][T18326] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3454'. [ 949.603237][T18325] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3466'. [ 949.635770][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3466'. [ 950.531587][T18344] delete_channel: no stack [ 950.867551][T18358] delete_channel: no stack [ 951.317009][T18379] netlink: 'syz.0.3471': attribute type 6 has an invalid length. [ 951.350004][T18379] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3471'. [ 951.491804][T18383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3474'. [ 951.572571][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3474'. [ 951.625940][T18383] sctp: [Deprecated]: syz.3.3474 (pid 18383) Use of int in max_burst socket option deprecated. [ 951.625940][T18383] Use struct sctp_assoc_value instead [ 952.125595][T18391] delete_channel: no stack [ 953.198869][T18424] netlink: 'syz.0.3487': attribute type 10 has an invalid length. [ 953.344004][T18436] sctp: [Deprecated]: syz.7.3488 (pid 18436) Use of int in max_burst socket option deprecated. [ 953.344004][T18436] Use struct sctp_assoc_value instead [ 953.362900][T18430] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3488'. [ 953.420684][T18431] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3487'. [ 953.461519][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3488'. [ 953.590156][T18443] netlink: 'syz.6.3490': attribute type 6 has an invalid length. [ 953.779738][T18439] delete_channel: no stack [ 954.316468][T18468] netlink: 'syz.5.3499': attribute type 6 has an invalid length. [ 954.415306][T18468] __nla_validate_parse: 1 callbacks suppressed [ 954.415343][T18468] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3499'. [ 955.106899][T18482] FAULT_INJECTION: forcing a failure. [ 955.106899][T18482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.136977][T18482] CPU: 1 PID: 18482 Comm: syz.7.3513 Not tainted syzkaller #0 [ 955.144601][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 955.154691][T18482] Call Trace: [ 955.158016][T18482] [ 955.161151][T18482] dump_stack_lvl+0x188/0x24e [ 955.165886][T18482] ? show_regs_print_info+0x12/0x12 [ 955.171210][T18482] ? load_image+0x400/0x400 [ 955.175854][T18482] ? __lock_acquire+0x7d10/0x7d10 [ 955.181017][T18482] should_fail_ex+0x399/0x4d0 [ 955.186422][T18482] _copy_from_user+0x2c/0x170 [ 955.191152][T18482] __sys_bpf+0x2ea/0x780 [ 955.195702][T18482] ? bpf_link_show_fdinfo+0x380/0x380 [ 955.201121][T18482] ? lock_chain_count+0x20/0x20 [ 955.206189][T18482] __x64_sys_bpf+0x78/0x90 [ 955.210730][T18482] do_syscall_64+0x4c/0xa0 [ 955.215354][T18482] ? clear_bhb_loop+0x60/0xb0 [ 955.220071][T18482] ? clear_bhb_loop+0x60/0xb0 [ 955.224790][T18482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.230822][T18482] RIP: 0033:0x7f66d3b9c819 [ 955.235455][T18482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.256341][T18482] RSP: 002b:00007f66d1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 955.264824][T18482] RAX: ffffffffffffffda RBX: 00007f66d3e16180 RCX: 00007f66d3b9c819 [ 955.272853][T18482] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 955.281131][T18482] RBP: 00007f66d1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 955.289923][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.298007][T18482] R13: 00007f66d3e16218 R14: 00007f66d3e16180 R15: 00007ffcd55eef58 [ 955.306121][T18482] [ 955.441279][T18476] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3503'. [ 955.678943][T18486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3504'. [ 955.718452][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'. [ 955.734817][T18486] sctp: [Deprecated]: syz.0.3504 (pid 18486) Use of int in max_burst socket option deprecated. [ 955.734817][T18486] Use struct sctp_assoc_value instead [ 956.070672][T18487] delete_channel: no stack [ 956.721537][T18509] FAULT_INJECTION: forcing a failure. [ 956.721537][T18509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.795763][T18509] CPU: 0 PID: 18509 Comm: syz.6.3511 Not tainted syzkaller #0 [ 956.803322][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 956.813420][T18509] Call Trace: [ 956.816715][T18509] [ 956.819661][T18509] dump_stack_lvl+0x188/0x24e [ 956.824366][T18509] ? show_regs_print_info+0x12/0x12 [ 956.829606][T18509] ? load_image+0x400/0x400 [ 956.834163][T18509] ? __lock_acquire+0x7d10/0x7d10 [ 956.839299][T18509] should_fail_ex+0x399/0x4d0 [ 956.844611][T18509] ? 0xffffffff81000000 [ 956.848788][T18509] _copy_to_user+0x2c/0x130 [ 956.853398][T18509] bpf_obj_get_info_by_fd+0x2819/0x2f50 [ 956.858960][T18509] ? __lock_acquire+0x7d10/0x7d10 [ 956.863998][T18509] ? 0xffffffff81000000 [ 956.868170][T18509] ? bpf_map_get_fd_by_id+0x310/0x310 [ 956.873571][T18509] ? get_pid_task+0x1c/0x1e0 [ 956.878224][T18509] ? 0xffffffff81000000 [ 956.882418][T18509] ? __might_fault+0xa6/0x120 [ 956.887117][T18509] ? __might_fault+0xc2/0x120 [ 956.891805][T18509] ? __might_fault+0xa6/0x120 [ 956.896502][T18509] ? bpf_lsm_bpf+0x5/0x10 [ 956.900860][T18509] ? security_bpf+0x7a/0xa0 [ 956.905380][T18509] __sys_bpf+0x505/0x780 [ 956.909642][T18509] ? bpf_link_show_fdinfo+0x380/0x380 [ 956.915161][T18509] ? lock_chain_count+0x20/0x20 [ 956.920058][T18509] __x64_sys_bpf+0x78/0x90 [ 956.924611][T18509] do_syscall_64+0x4c/0xa0 [ 956.929050][T18509] ? clear_bhb_loop+0x60/0xb0 [ 956.933828][T18509] ? clear_bhb_loop+0x60/0xb0 [ 956.938628][T18509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.944715][T18509] RIP: 0033:0x7f035639c819 [ 956.949145][T18509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.968801][T18509] RSP: 002b:00007f0357288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 956.977502][T18509] RAX: ffffffffffffffda RBX: 00007f0356615fa0 RCX: 00007f035639c819 [ 956.985576][T18509] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f [ 956.993740][T18509] RBP: 00007f0357288090 R08: 0000000000000000 R09: 0000000000000000 [ 957.001719][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.009959][T18509] R13: 00007f0356616038 R14: 00007f0356615fa0 R15: 00007ffc648b2a28 [ 957.018042][T18509] [ 957.622737][T18533] netlink: 'syz.6.3517': attribute type 6 has an invalid length. [ 957.713006][T18533] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3517'. [ 959.336211][T18561] netlink: 'syz.3.3526': attribute type 6 has an invalid length. [ 959.346245][T18561] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3526'. [ 960.058046][T18580] netlink: 'syz.6.3532': attribute type 10 has an invalid length. [ 960.073640][T18580] device hsr0 entered promiscuous mode [ 960.111167][T18580] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 961.103831][T18600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'. [ 962.515254][T18600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3541'. [ 963.114564][T18614] netlink: 'syz.0.3544': attribute type 6 has an invalid length. [ 963.125949][T18614] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3544'. [ 964.030773][T18628] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3549'. [ 964.288418][T18641] netlink: 'syz.3.3553': attribute type 39 has an invalid length. [ 964.787385][T18653] netlink: 'syz.0.3564': attribute type 10 has an invalid length. [ 965.517866][T18653] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.567910][T18653] device bridge_slave_1 left promiscuous mode [ 965.585155][T18653] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.648588][T18653] device bridge_slave_1 entered promiscuous mode [ 965.670088][T18653] team0: Port device bridge_slave_1 added [ 965.681024][T18647] netlink: 'syz.0.3564': attribute type 10 has an invalid length. [ 965.720161][T18647] bridge0: port 3(team0) entered disabled state [ 965.746907][T18647] device team0 left promiscuous mode [ 965.756015][T18647] device team_slave_0 left promiscuous mode [ 965.769316][T18647] device team_slave_1 left promiscuous mode [ 965.815896][T18647] device bridge_slave_1 left promiscuous mode [ 965.822407][T18647] bridge0: port 3(team0) entered disabled state [ 965.851036][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.863438][T18647] bond0: (slave team0): Enslaving as an active interface with an up link [ 966.858070][T18669] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3560'. [ 966.942794][T18664] delete_channel: no stack [ 968.666726][T18689] delete_channel: no stack [ 968.900889][T18699] netlink: 'syz.6.3571': attribute type 39 has an invalid length. [ 969.437209][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 970.305258][T18712] delete_channel: no stack [ 971.978071][T18746] delete_channel: no stack [ 972.838557][T18769] delete_channel: no stack [ 972.916048][T18776] netlink: 'syz.5.3591': attribute type 39 has an invalid length. [ 973.834562][T18783] netlink: 'syz.7.3592': attribute type 6 has an invalid length. [ 973.862486][T18783] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3592'. [ 974.891467][T18807] delete_channel: no stack [ 976.064528][T18837] delete_channel: no stack [ 976.374684][T18852] FAULT_INJECTION: forcing a failure. [ 976.374684][T18852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.437503][T18852] CPU: 0 PID: 18852 Comm: syz.5.3609 Not tainted syzkaller #0 [ 976.445221][T18852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.455322][T18852] Call Trace: [ 976.458803][T18852] [ 976.461758][T18852] dump_stack_lvl+0x188/0x24e [ 976.466664][T18852] ? show_regs_print_info+0x12/0x12 [ 976.471909][T18852] ? load_image+0x400/0x400 [ 976.476506][T18852] ? __lock_acquire+0x7d10/0x7d10 [ 976.481551][T18852] ? perf_trace_lock_acquire+0x100/0x3e0 [ 976.487305][T18852] should_fail_ex+0x399/0x4d0 [ 976.492085][T18852] _copy_from_user+0x2c/0x170 [ 976.496959][T18852] ___sys_sendmsg+0x1c3/0x360 [ 976.501748][T18852] ? __sys_sendmsg+0x290/0x290 [ 976.506561][T18852] ? __lock_acquire+0x7d10/0x7d10 [ 976.511626][T18852] __se_sys_sendmsg+0x1bb/0x2a0 [ 976.516584][T18852] ? __x64_sys_sendmsg+0x80/0x80 [ 976.521646][T18852] ? lockdep_hardirqs_on+0x94/0x140 [ 976.527124][T18852] do_syscall_64+0x4c/0xa0 [ 976.531641][T18852] ? clear_bhb_loop+0x60/0xb0 [ 976.536336][T18852] ? clear_bhb_loop+0x60/0xb0 [ 976.541210][T18852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.547142][T18852] RIP: 0033:0x7fb702f9c819 [ 976.551602][T18852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.571505][T18852] RSP: 002b:00007fb703e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.580032][T18852] RAX: ffffffffffffffda RBX: 00007fb703215fa0 RCX: 00007fb702f9c819 [ 976.588020][T18852] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 976.596089][T18852] RBP: 00007fb703e41090 R08: 0000000000000000 R09: 0000000000000000 [ 976.604089][T18852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.612094][T18852] R13: 00007fb703216038 R14: 00007fb703215fa0 R15: 00007ffca3ec8a18 [ 976.620292][T18852] [ 977.176695][T18855] netlink: 'syz.5.3610': attribute type 6 has an invalid length. [ 977.184877][T18855] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3610'. [ 977.334611][T18856] delete_channel: no stack [ 977.635016][T18868] netlink: 'syz.6.3613': attribute type 6 has an invalid length. [ 977.698241][T18868] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3613'. [ 978.868196][T18889] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3618'. [ 979.066498][T18891] delete_channel: no stack [ 980.540599][T18911] delete_channel: no stack [ 980.580013][T18921] delete_channel: no stack [ 980.653253][T18928] netlink: 'syz.7.3629': attribute type 29 has an invalid length. [ 980.727806][T18928] netlink: 'syz.7.3629': attribute type 29 has an invalid length. [ 980.756787][T18930] netlink: 'syz.7.3629': attribute type 29 has an invalid length. [ 980.786884][T18928] netlink: 'syz.7.3629': attribute type 29 has an invalid length. [ 980.824660][T18928] netlink: 'syz.7.3629': attribute type 29 has an invalid length. [ 980.862607][T18928] netlink: 'syz.7.3629': attribute type 29 has an invalid length. [ 981.141520][T18944] netlink: 'syz.5.3632': attribute type 6 has an invalid length. [ 981.318280][T18944] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3632'. [ 981.467487][T18943] delete_channel: no stack [ 982.370091][T18974] delete_channel: no stack [ 982.497507][T18978] delete_channel: no stack [ 983.196022][T18993] delete_channel: no stack [ 983.791870][T19006] IPv6: Can't replace route, no match found [ 983.816561][T19009] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.3655'. [ 984.934777][T19019] mac80211_hwsim hwsim124 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 985.553689][T19028] delete_channel: no stack [ 985.781752][T19030] delete_channel: no stack [ 985.967765][T19046] netlink: 'syz.0.3663': attribute type 11 has an invalid length. [ 985.985733][T19046] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3663'. [ 986.071895][T19046] netlink: 'syz.0.3663': attribute type 2 has an invalid length. [ 986.145776][T19046] netlink: 'syz.0.3663': attribute type 1 has an invalid length. [ 986.182915][T19046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3663'. [ 986.427220][T19033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 986.910217][T19059] IPv6: Can't replace route, no match found [ 987.016330][T19048] delete_channel: no stack [ 987.020921][T19067] netlink: 'syz.0.3671': attribute type 21 has an invalid length. [ 987.063909][T19067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3671'. [ 987.085324][T19067] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3671'. [ 987.217579][T19064] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3670'. [ 987.521304][T19086] netlink: 'syz.0.3675': attribute type 3 has an invalid length. [ 987.595100][T19086] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3675'. [ 987.639682][ T4274] Bluetooth: hci1: ISO packet for unknown connection handle 9 [ 987.840271][T19081] delete_channel: no stack [ 988.211040][T19094] delete_channel: no stack [ 988.219144][T19092] delete_channel: no stack [ 988.840604][T19110] IPv6: Can't replace route, no match found [ 988.890858][T10057] wlan1: Trigger new scan to find an IBSS to join [ 989.119051][T19114] delete_channel: no stack [ 989.727385][T19124] delete_channel: no stack [ 990.146681][T19133] netlink: 'syz.6.3693': attribute type 2 has an invalid length. [ 990.311769][T19134] delete_channel: no stack [ 991.218971][T19163] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3703'. [ 991.497395][T19170] delete_channel: no stack [ 992.190783][T19184] delete_channel: no stack [ 992.959304][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.965914][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.991984][T10051] wlan1: Trigger new scan to find an IBSS to join [ 994.010255][T19225] delete_channel: no stack [ 994.276104][T19239] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3720'. [ 994.978439][T10051] wlan1: Creating new IBSS network, BSSID 2e:6a:28:ae:09:7f [ 995.035589][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 995.870686][T19272] delete_channel: no stack [ 996.611054][T19274] delete_channel: no stack [ 996.757772][T19283] delete_channel: no stack [ 997.017754][T19294] netlink: 'syz.6.3738': attribute type 11 has an invalid length. [ 997.037490][T19294] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3738'. [ 997.084520][T19292] netlink: 'syz.6.3738': attribute type 2 has an invalid length. [ 997.124063][T19292] netlink: 'syz.6.3738': attribute type 1 has an invalid length. [ 997.153055][T19292] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3738'. [ 997.188734][T19301] netlink: 'syz.5.3741': attribute type 2 has an invalid length. [ 997.315812][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.280580][T19326] netlink: 'syz.7.3751': attribute type 2 has an invalid length. [ 998.797862][T19328] delete_channel: no stack [ 999.278939][T19345] delete_channel: no stack [ 999.575368][T19369] netlink: 'syz.0.3761': attribute type 6 has an invalid length. [ 999.675267][T19369] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3761'. [ 999.854452][T19365] netlink: 'syz.6.3760': attribute type 6 has an invalid length. [ 999.907734][T19365] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3760'. [ 1000.983113][T19382] delete_channel: no stack [ 1001.199150][T19402] netlink: 'syz.5.3771': attribute type 2 has an invalid length. [ 1001.333022][T19401] netlink: 'syz.7.3772': attribute type 21 has an invalid length. [ 1001.401610][T19401] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3772'. [ 1001.436998][T19401] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3772'. [ 1001.709217][T19422] netlink: 'syz.3.3776': attribute type 6 has an invalid length. [ 1001.767557][T19422] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1003.232562][T19447] delete_channel: no stack [ 1005.222111][T19491] netlink: 'syz.5.3797': attribute type 11 has an invalid length. [ 1005.265060][T19496] netlink: 'syz.5.3797': attribute type 2 has an invalid length. [ 1005.292133][T19491] netlink: 184220 bytes leftover after parsing attributes in process `syz.5.3797'. [ 1005.423793][T19496] netlink: 'syz.5.3797': attribute type 1 has an invalid length. [ 1005.515703][T19496] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3797'. [ 1006.009386][T19498] delete_channel: no stack [ 1006.014963][T19486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.447384][ T48] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 1007.365268][T19532] netlink: 'syz.3.3808': attribute type 6 has an invalid length. [ 1007.375648][T19532] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1008.521249][T19559] delete_channel: no stack [ 1009.693306][T19599] netlink: 'syz.7.3822': attribute type 6 has an invalid length. [ 1009.785661][T19599] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3822'. [ 1010.557214][T19616] netlink: 'syz.3.3830': attribute type 17 has an invalid length. [ 1010.638231][T19616] netlink: 'syz.3.3830': attribute type 16 has an invalid length. [ 1010.691057][T19616] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1012.273030][T19656] netlink: 'syz.0.3841': attribute type 6 has an invalid length. [ 1012.302591][T19656] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3841'. [ 1012.673012][T19671] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.3846'. [ 1013.076126][T19683] netlink: 'syz.6.3850': attribute type 9 has an invalid length. [ 1014.344737][T19698] netlink: 'syz.7.3855': attribute type 6 has an invalid length. [ 1014.380750][T19698] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3855'. [ 1014.901928][T19715] netlink: 'syz.3.3859': attribute type 6 has an invalid length. [ 1014.986009][T19715] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3859'. [ 1016.741347][T19763] netlink: 'syz.5.3875': attribute type 6 has an invalid length. [ 1016.784724][T19763] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3875'. [ 1016.920037][T19751] device syzkaller0 entered promiscuous mode [ 1019.593308][T19778] netlink: 'syz.5.3878': attribute type 6 has an invalid length. [ 1019.601684][T19778] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3878'. [ 1019.619473][T19779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.627047][T19779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.635190][T19779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.671388][T19779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.297637][T19819] delete_channel: no stack [ 1021.782287][T19837] netlink: 'syz.7.3894': attribute type 6 has an invalid length. [ 1021.836499][T19837] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3894'. [ 1021.885712][T19840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1021.957126][T19842] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1023.810393][T19866] delete_channel: no stack [ 1024.127045][T19881] netlink: 'syz.0.3909': attribute type 6 has an invalid length. [ 1024.187659][T19881] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1024.873256][T19898] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3914'. [ 1025.801495][T19919] delete_channel: no stack [ 1026.403219][T19947] netlink: 'syz.6.3928': attribute type 6 has an invalid length. [ 1026.436943][T19947] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3928'. [ 1026.629527][T19955] netlink: 'syz.3.3932': attribute type 29 has an invalid length. [ 1026.641320][T19955] netlink: 'syz.3.3932': attribute type 29 has an invalid length. [ 1026.891251][T10057] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1026.936949][T19963] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1027.686624][T19971] delete_channel: no stack [ 1028.133684][T19985] device sit0 entered promiscuous mode [ 1028.579110][T19997] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1028.595342][T20001] netlink: 'syz.0.3945': attribute type 6 has an invalid length. [ 1028.621189][T19997] openvswitch: netlink: Message has 6 unknown bytes. [ 1028.658775][T20001] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1029.208909][T20007] netlink: 'syz.6.3951': attribute type 29 has an invalid length. [ 1029.428395][T20022] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3952'. [ 1029.480940][T20007] netlink: 'syz.6.3951': attribute type 29 has an invalid length. [ 1029.605942][T20009] netlink: 'syz.6.3951': attribute type 29 has an invalid length. [ 1029.634632][T20018] netlink: 'syz.6.3951': attribute type 29 has an invalid length. [ 1029.686856][T20020] netlink: 'syz.6.3951': attribute type 29 has an invalid length. [ 1029.766494][T20011] delete_channel: no stack [ 1030.477574][T20040] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3960'. [ 1030.479388][T20041] netlink: 'syz.5.3959': attribute type 6 has an invalid length. [ 1030.594602][T20041] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3959'. [ 1030.875745][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 1031.444475][T20059] delete_channel: no stack [ 1032.860452][T20099] FAULT_INJECTION: forcing a failure. [ 1032.860452][T20099] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.927632][T20099] CPU: 1 PID: 20099 Comm: syz.5.3979 Not tainted syzkaller #0 [ 1032.935295][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1032.945402][T20099] Call Trace: [ 1032.948721][T20099] [ 1032.951693][T20099] dump_stack_lvl+0x188/0x24e [ 1032.956513][T20099] ? show_regs_print_info+0x12/0x12 [ 1032.961764][T20099] ? load_image+0x400/0x400 [ 1032.966334][T20099] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1032.972337][T20099] ? _raw_spin_unlock+0x40/0x40 [ 1032.977324][T20099] should_fail_ex+0x399/0x4d0 [ 1032.982045][T20099] should_failslab+0x5/0x20 [ 1032.986757][T20099] slab_pre_alloc_hook+0x59/0x310 [ 1032.991823][T20099] kmem_cache_alloc_node+0x5a/0x320 [ 1032.997049][T20099] ? __alloc_skb+0xfc/0x7e0 [ 1033.001603][T20099] __alloc_skb+0xfc/0x7e0 [ 1033.006080][T20099] ? __neigh_notify+0x29/0x300 [ 1033.011136][T20099] __neigh_notify+0x15c/0x300 [ 1033.015847][T20099] __neigh_update+0x1c44/0x2510 [ 1033.020751][T20099] ? nla_find+0x12d/0x150 [ 1033.025128][T20099] neigh_delete+0x359/0x4e0 [ 1033.029685][T20099] ? neigh_add+0xe50/0xe50 [ 1033.034225][T20099] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1033.039211][T20099] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1033.044738][T20099] ? rtnetlink_bind+0x80/0x80 [ 1033.049455][T20099] ? __local_bh_enable_ip+0x136/0x1c0 [ 1033.054861][T20099] ? lockdep_hardirqs_on+0x94/0x140 [ 1033.060200][T20099] ? __local_bh_enable_ip+0x136/0x1c0 [ 1033.065610][T20099] ? _local_bh_enable+0xa0/0xa0 [ 1033.070508][T20099] ? __dev_queue_xmit+0x26b/0x37c0 [ 1033.075650][T20099] ? __dev_queue_xmit+0x26b/0x37c0 [ 1033.080792][T20099] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1033.086132][T20099] ? __dev_queue_xmit+0x26b/0x37c0 [ 1033.091304][T20099] ? ref_tracker_free+0x68c/0x840 [ 1033.096636][T20099] ? __copy_skb_header+0x3ba/0x4f0 [ 1033.101787][T20099] ? refcount_inc+0x70/0x70 [ 1033.106328][T20099] ? memcpy+0x3c/0x60 [ 1033.110358][T20099] ? __copy_skb_header+0x3ba/0x4f0 [ 1033.115525][T20099] ? __skb_clone+0x480/0x790 [ 1033.120573][T20099] netlink_rcv_skb+0x1fb/0x450 [ 1033.125397][T20099] ? rtnetlink_bind+0x80/0x80 [ 1033.130124][T20099] ? netlink_ack+0x1170/0x1170 [ 1033.134974][T20099] ? netlink_deliver_tap+0x2e/0x1b0 [ 1033.140234][T20099] netlink_unicast+0x74d/0x8d0 [ 1033.145096][T20099] netlink_sendmsg+0x8ad/0xbd0 [ 1033.150010][T20099] ? netlink_getsockopt+0x550/0x550 [ 1033.155283][T20099] ? aa_sock_msg_perm+0x94/0x150 [ 1033.160282][T20099] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1033.165602][T20099] ? security_socket_sendmsg+0x7c/0xa0 [ 1033.171105][T20099] ? netlink_getsockopt+0x550/0x550 [ 1033.176341][T20099] ____sys_sendmsg+0x5be/0x970 [ 1033.181139][T20099] ? __sys_sendmsg_sock+0x30/0x30 [ 1033.186211][T20099] ? __import_iovec+0x315/0x500 [ 1033.191109][T20099] ? import_iovec+0x6f/0xa0 [ 1033.195738][T20099] ___sys_sendmsg+0x2a2/0x360 [ 1033.200447][T20099] ? __sys_sendmsg+0x290/0x290 [ 1033.205334][T20099] ? __lock_acquire+0x7d10/0x7d10 [ 1033.210405][T20099] __se_sys_sendmsg+0x1bb/0x2a0 [ 1033.215317][T20099] ? __x64_sys_sendmsg+0x80/0x80 [ 1033.220307][T20099] ? lockdep_hardirqs_on+0x94/0x140 [ 1033.225528][T20099] do_syscall_64+0x4c/0xa0 [ 1033.230061][T20099] ? clear_bhb_loop+0x60/0xb0 [ 1033.234866][T20099] ? clear_bhb_loop+0x60/0xb0 [ 1033.239584][T20099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1033.245606][T20099] RIP: 0033:0x7fb702f9c819 [ 1033.250136][T20099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.269854][T20099] RSP: 002b:00007fb703e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.278371][T20099] RAX: ffffffffffffffda RBX: 00007fb703215fa0 RCX: 00007fb702f9c819 [ 1033.286352][T20099] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1033.294332][T20099] RBP: 00007fb703e41090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.302587][T20099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.310586][T20099] R13: 00007fb703216038 R14: 00007fb703215fa0 R15: 00007ffca3ec8a18 [ 1033.318617][T20099] [ 1033.426320][T20101] netlink: 'syz.0.3977': attribute type 6 has an invalid length. [ 1033.475641][T20101] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1034.563410][T20122] delete_channel: no stack [ 1035.018594][T20144] netlink: 'syz.6.3988': attribute type 28 has an invalid length. [ 1035.065496][T20144] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3988'. [ 1035.073645][T20148] netlink: 'syz.6.3988': attribute type 11 has an invalid length. [ 1035.160692][T20148] netlink: 'syz.6.3988': attribute type 11 has an invalid length. [ 1035.205755][T20148] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.3988'. [ 1036.402178][T20182] netlink: 'syz.5.4002': attribute type 19 has an invalid length. [ 1036.454156][T20182] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4002'. [ 1037.316105][T20190] delete_channel: no stack [ 1038.503295][T20225] FAULT_INJECTION: forcing a failure. [ 1038.503295][T20225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.579337][T20225] CPU: 1 PID: 20225 Comm: syz.0.4014 Not tainted syzkaller #0 [ 1038.586884][T20225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1038.597067][T20225] Call Trace: [ 1038.600380][T20225] [ 1038.603454][T20225] dump_stack_lvl+0x188/0x24e [ 1038.608296][T20225] ? show_regs_print_info+0x12/0x12 [ 1038.613625][T20225] ? load_image+0x400/0x400 [ 1038.618169][T20225] ? __lock_acquire+0x7d10/0x7d10 [ 1038.623242][T20225] should_fail_ex+0x399/0x4d0 [ 1038.628053][T20225] _copy_from_user+0x2c/0x170 [ 1038.632769][T20225] __sys_bpf+0x2ea/0x780 [ 1038.637062][T20225] ? bpf_link_show_fdinfo+0x380/0x380 [ 1038.642499][T20225] ? lock_chain_count+0x20/0x20 [ 1038.647403][T20225] __x64_sys_bpf+0x78/0x90 [ 1038.651860][T20225] do_syscall_64+0x4c/0xa0 [ 1038.656348][T20225] ? clear_bhb_loop+0x60/0xb0 [ 1038.661060][T20225] ? clear_bhb_loop+0x60/0xb0 [ 1038.665773][T20225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1038.671707][T20225] RIP: 0033:0x7feafab9c819 [ 1038.676155][T20225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.695806][T20225] RSP: 002b:00007feafbb23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1038.704708][T20225] RAX: ffffffffffffffda RBX: 00007feafae15fa0 RCX: 00007feafab9c819 [ 1038.713147][T20225] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 1038.721292][T20225] RBP: 00007feafbb23090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.729429][T20225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.737523][T20225] R13: 00007feafae16038 R14: 00007feafae15fa0 R15: 00007ffd63bfbb18 [ 1038.745643][T20225] [ 1039.878098][T20246] delete_channel: no stack [ 1040.221990][T20259] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4026'. [ 1040.278872][T20259] openvswitch: netlink: Message has 6 unknown bytes. [ 1045.533506][T20357] device syzkaller0 entered promiscuous mode [ 1046.423778][T20382] delete_channel: no stack [ 1046.939424][T20399] netlink: 'syz.3.4065': attribute type 3 has an invalid length. [ 1046.955509][T20399] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4065'. [ 1049.382976][T20410] netlink: 'syz.0.4069': attribute type 2 has an invalid length. [ 1049.432966][T20410] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 1049.463055][T20410] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1050.347200][T20424] delete_channel: no stack [ 1050.656554][T20438] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1050.684555][T20438] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1050.728322][T10064] bridge0: port 3(team0) entered disabled state [ 1051.468869][T20462] netlink: 'syz.5.4086': attribute type 10 has an invalid length. [ 1051.990392][T20462] team0: Device wg1 is of different type [ 1052.298456][T20481] FAULT_INJECTION: forcing a failure. [ 1052.298456][T20481] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.325787][T20481] CPU: 0 PID: 20481 Comm: syz.3.4090 Not tainted syzkaller #0 [ 1052.333327][T20481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1052.343401][T20481] Call Trace: [ 1052.346694][T20481] [ 1052.349638][T20481] dump_stack_lvl+0x188/0x24e [ 1052.354340][T20481] ? show_regs_print_info+0x12/0x12 [ 1052.359565][T20481] ? load_image+0x400/0x400 [ 1052.364090][T20481] ? __might_sleep+0xd0/0xd0 [ 1052.368872][T20481] ? __lock_acquire+0x7d10/0x7d10 [ 1052.373916][T20481] should_fail_ex+0x399/0x4d0 [ 1052.378611][T20481] should_failslab+0x5/0x20 [ 1052.383211][T20481] slab_pre_alloc_hook+0x59/0x310 [ 1052.388250][T20481] ? __lock_acquire+0x7d10/0x7d10 [ 1052.393286][T20481] ? kvmalloc_node+0x6c/0x180 [ 1052.397981][T20481] __kmem_cache_alloc_node+0x4f/0x260 [ 1052.403426][T20481] ? schedule_delayed_monitor_work+0x160/0x160 [ 1052.409599][T20481] ? kvmalloc_node+0x6c/0x180 [ 1052.414296][T20481] __kmalloc_node+0xa0/0x240 [ 1052.419052][T20481] kvmalloc_node+0x6c/0x180 [ 1052.423582][T20481] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 1052.428994][T20481] ? 0xffffffffa00041c0 [ 1052.433159][T20481] ? text_poke_copy+0x79/0x90 [ 1052.437857][T20481] ? 0xffffffffa00041c0 [ 1052.442047][T20481] ? 0xffffffffa00041c0 [ 1052.446262][T20481] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1052.452189][T20481] ? 0xffffffffa00041c0 [ 1052.456366][T20481] ? xdp_convert_md_to_buff+0x330/0x330 [ 1052.461964][T20481] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1052.468225][T20481] ? bpf_test_init+0x119/0x140 [ 1052.473004][T20481] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1052.478478][T20481] bpf_prog_test_run_xdp+0x736/0xf10 [ 1052.483880][T20481] ? dev_put+0x80/0x80 [ 1052.488097][T20481] ? dev_put+0x80/0x80 [ 1052.492202][T20481] bpf_prog_test_run+0x31e/0x390 [ 1052.497196][T20481] __sys_bpf+0x62b/0x780 [ 1052.501462][T20481] ? bpf_link_show_fdinfo+0x380/0x380 [ 1052.506871][T20481] ? lock_chain_count+0x20/0x20 [ 1052.511761][T20481] __x64_sys_bpf+0x78/0x90 [ 1052.516281][T20481] do_syscall_64+0x4c/0xa0 [ 1052.520719][T20481] ? clear_bhb_loop+0x60/0xb0 [ 1052.525503][T20481] ? clear_bhb_loop+0x60/0xb0 [ 1052.530303][T20481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.536214][T20481] RIP: 0033:0x7fb06d39c819 [ 1052.540668][T20481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.560484][T20481] RSP: 002b:00007fb06e2e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1052.569067][T20481] RAX: ffffffffffffffda RBX: 00007fb06d616090 RCX: 00007fb06d39c819 [ 1052.577661][T20481] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1052.586270][T20481] RBP: 00007fb06e2e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.594429][T20481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.602498][T20481] R13: 00007fb06d616128 R14: 00007fb06d616090 R15: 00007fffbc1310e8 [ 1052.610505][T20481] [ 1052.792776][T20475] delete_channel: no stack [ 1053.825033][T20513] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4102'. [ 1054.244305][T20512] netlink: 'syz.3.4103': attribute type 29 has an invalid length. [ 1054.343982][T20512] netlink: 'syz.3.4103': attribute type 29 has an invalid length. [ 1055.335957][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.342390][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.478119][T20519] netlink: 'syz.3.4103': attribute type 29 has an invalid length. [ 1055.487120][T20524] delete_channel: no stack [ 1056.943544][T20557] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1057.055728][T20557] FAULT_INJECTION: forcing a failure. [ 1057.055728][T20557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.115373][T20557] CPU: 1 PID: 20557 Comm: syz.0.4116 Not tainted syzkaller #0 [ 1057.123091][T20557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.133281][T20557] Call Trace: [ 1057.136694][T20557] [ 1057.139748][T20557] dump_stack_lvl+0x188/0x24e [ 1057.144570][T20557] ? show_regs_print_info+0x12/0x12 [ 1057.149934][T20557] ? load_image+0x400/0x400 [ 1057.154484][T20557] ? __lock_acquire+0x7d10/0x7d10 [ 1057.159559][T20557] ? snprintf+0xe5/0x140 [ 1057.163845][T20557] should_fail_ex+0x399/0x4d0 [ 1057.168661][T20557] _copy_to_user+0x2c/0x130 [ 1057.173206][T20557] simple_read_from_buffer+0xe3/0x150 [ 1057.178623][T20557] proc_fail_nth_read+0x1a6/0x220 [ 1057.183693][T20557] ? proc_fault_inject_write+0x310/0x310 [ 1057.189368][T20557] ? fsnotify_perm+0x248/0x550 [ 1057.194178][T20557] ? proc_fault_inject_write+0x310/0x310 [ 1057.199921][T20557] vfs_read+0x2de/0xa00 [ 1057.204130][T20557] ? kernel_read+0x1e0/0x1e0 [ 1057.208775][T20557] ? __fget_files+0x28/0x4b0 [ 1057.213417][T20557] ? __fget_files+0x28/0x4b0 [ 1057.218057][T20557] ? __fget_files+0x43d/0x4b0 [ 1057.222879][T20557] ? __fdget_pos+0x2ae/0x360 [ 1057.227505][T20557] ? ksys_read+0x71/0x250 [ 1057.231880][T20557] ksys_read+0x14c/0x250 [ 1057.236168][T20557] ? vfs_write+0xa30/0xa30 [ 1057.240631][T20557] ? lockdep_hardirqs_on+0x94/0x140 [ 1057.245968][T20557] do_syscall_64+0x4c/0xa0 [ 1057.250425][T20557] ? clear_bhb_loop+0x60/0xb0 [ 1057.255144][T20557] ? clear_bhb_loop+0x60/0xb0 [ 1057.259867][T20557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.266328][T20557] RIP: 0033:0x7feafab5d04e [ 1057.270790][T20557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1057.290439][T20557] RSP: 002b:00007feafbb22fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1057.298898][T20557] RAX: ffffffffffffffda RBX: 00007feafbb236c0 RCX: 00007feafab5d04e [ 1057.306994][T20557] RDX: 000000000000000f RSI: 00007feafbb230a0 RDI: 0000000000000006 [ 1057.314999][T20557] RBP: 00007feafbb23090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.323007][T20557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1057.331093][T20557] R13: 00007feafae16038 R14: 00007feafae15fa0 R15: 00007ffd63bfbb18 [ 1057.339120][T20557] [ 1058.236401][T10047] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1059.083002][T20572] delete_channel: no stack [ 1059.125060][T20575] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4122'. [ 1059.162048][T20575] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1059.192116][T20581] FAULT_INJECTION: forcing a failure. [ 1059.192116][T20581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.245704][T20581] CPU: 0 PID: 20581 Comm: syz.3.4125 Not tainted syzkaller #0 [ 1059.253254][T20581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.263563][T20581] Call Trace: [ 1059.266868][T20581] [ 1059.269812][T20581] dump_stack_lvl+0x188/0x24e [ 1059.274520][T20581] ? show_regs_print_info+0x12/0x12 [ 1059.279745][T20581] ? load_image+0x400/0x400 [ 1059.284462][T20581] ? __lock_acquire+0x7d10/0x7d10 [ 1059.289594][T20581] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1059.295435][T20581] should_fail_ex+0x399/0x4d0 [ 1059.300139][T20581] _copy_from_user+0x2c/0x170 [ 1059.304839][T20581] ___sys_sendmsg+0x1c3/0x360 [ 1059.309538][T20581] ? __sys_sendmsg+0x290/0x290 [ 1059.314335][T20581] ? __lock_acquire+0x7d10/0x7d10 [ 1059.319484][T20581] __se_sys_sendmsg+0x1bb/0x2a0 [ 1059.324365][T20581] ? __x64_sys_sendmsg+0x80/0x80 [ 1059.329344][T20581] ? lockdep_hardirqs_on+0x94/0x140 [ 1059.334561][T20581] do_syscall_64+0x4c/0xa0 [ 1059.339011][T20581] ? clear_bhb_loop+0x60/0xb0 [ 1059.343731][T20581] ? clear_bhb_loop+0x60/0xb0 [ 1059.348428][T20581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.354334][T20581] RIP: 0033:0x7fb06d39c819 [ 1059.358793][T20581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.378501][T20581] RSP: 002b:00007fb06e302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.387015][T20581] RAX: ffffffffffffffda RBX: 00007fb06d615fa0 RCX: 00007fb06d39c819 [ 1059.395087][T20581] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1059.403417][T20581] RBP: 00007fb06e302090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.411493][T20581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.419475][T20581] R13: 00007fb06d616038 R14: 00007fb06d615fa0 R15: 00007fffbc1310e8 [ 1059.427576][T20581] [ 1060.575210][T20590] delete_channel: no stack [ 1060.577483][T20592] delete_channel: no stack [ 1060.732621][T20607] ================================================================== [ 1060.741023][T20607] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1060.749115][T20607] Write of size 48 at addr ffff88801c3f1d90 by task syz.6.4133/20607 [ 1060.757318][T20607] [ 1060.759668][T20607] CPU: 0 PID: 20607 Comm: syz.6.4133 Not tainted syzkaller #0 [ 1060.767157][T20607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.777425][T20607] Call Trace: [ 1060.780745][T20607] [ 1060.783724][T20607] dump_stack_lvl+0x188/0x24e [ 1060.788453][T20607] ? __lock_acquire+0x7d10/0x7d10 [ 1060.793525][T20607] ? show_regs_print_info+0x12/0x12 [ 1060.798804][T20607] ? load_image+0x400/0x400 [ 1060.803443][T20607] ? __virt_addr_valid+0x465/0x540 [ 1060.808600][T20607] ? __bpf_get_stackid+0x6c9/0x920 [ 1060.813765][T20607] print_report+0xa8/0x210 [ 1060.818431][T20607] kasan_report+0x10b/0x140 [ 1060.823026][T20607] ? __bpf_get_stackid+0x6c9/0x920 [ 1060.828196][T20607] kasan_check_range+0x235/0x290 [ 1060.833196][T20607] ? __bpf_get_stackid+0x6c9/0x920 [ 1060.838365][T20607] memcpy+0x3c/0x60 [ 1060.842213][T20607] __bpf_get_stackid+0x6c9/0x920 [ 1060.847208][T20607] bpf_get_stackid_pe+0x33f/0x400 [ 1060.852281][T20607] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 1060.857784][T20607] bpf_overflow_handler+0x6e8/0x7c0 [ 1060.863024][T20607] ? bpf_overflow_handler+0xd9/0x7c0 [ 1060.868341][T20607] ? perf_swevent_overflow+0x230/0x230 [ 1060.873818][T20607] ? ct_irq_exit_irqson+0x113/0x170 [ 1060.879126][T20607] ? __perf_event_account_interrupt+0x187/0x280 [ 1060.885510][T20607] __perf_event_overflow+0x448/0x610 [ 1060.890836][T20607] perf_swevent_event+0x315/0x570 [ 1060.895977][T20607] ? perf_tp_event+0xc30/0xc30 [ 1060.900919][T20607] ___perf_sw_event+0x49e/0x6e0 [ 1060.905808][T20607] ? ___perf_sw_event+0x180/0x6e0 [ 1060.910937][T20607] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1060.917383][T20607] ? __lock_acquire+0x13cf/0x7d10 [ 1060.922526][T20607] ? verify_lock_unused+0x140/0x140 [ 1060.927744][T20607] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1060.933739][T20607] ? lock_chain_count+0x20/0x20 [ 1060.938631][T20607] __perf_sw_event+0x135/0x260 [ 1060.943434][T20607] do_user_addr_fault+0xaea/0xb10 [ 1060.948582][T20607] ? trace_hardirqs_off_finish+0x86/0x180 [ 1060.954674][T20607] exc_page_fault+0x60/0x100 [ 1060.959365][T20607] asm_exc_page_fault+0x22/0x30 [ 1060.964407][T20607] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1060.970240][T20607] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 1060.989877][T20607] RSP: 0018:ffffc9000d4c7e80 EFLAGS: 00050293 [ 1060.996065][T20607] RAX: 0000000000000008 RBX: 00007fffffffeffd RCX: 0000200000000040 [ 1061.004259][T20607] RDX: 0000000000000000 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 1061.012339][T20607] RBP: 0000000000000008 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 1061.020590][T20607] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: 0000000000000000 [ 1061.028603][T20607] R13: 0000200000000040 R14: 0000000000000001 R15: 0000000000000005 [ 1061.036687][T20607] __sys_socketpair+0xb4/0x540 [ 1061.041477][T20607] __x64_sys_socketpair+0x97/0xb0 [ 1061.046548][T20607] do_syscall_64+0x4c/0xa0 [ 1061.050982][T20607] ? clear_bhb_loop+0x60/0xb0 [ 1061.055674][T20607] ? clear_bhb_loop+0x60/0xb0 [ 1061.060367][T20607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.066278][T20607] RIP: 0033:0x7f035639c819 [ 1061.070703][T20607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.090408][T20607] RSP: 002b:00007f0357288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1061.098968][T20607] RAX: ffffffffffffffda RBX: 00007f0356615fa0 RCX: 00007f035639c819 [ 1061.107026][T20607] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1061.115094][T20607] RBP: 00007f0356432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1061.123074][T20607] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1061.131058][T20607] R13: 00007f0356616038 R14: 00007f0356615fa0 R15: 00007ffc648b2a28 [ 1061.139051][T20607] [ 1061.142080][T20607] [ 1061.144413][T20607] Allocated by task 20607: [ 1061.148832][T20607] kasan_set_track+0x4b/0x70 [ 1061.153439][T20607] __kasan_kmalloc+0x8e/0xa0 [ 1061.158078][T20607] __kmalloc_node+0xb0/0x240 [ 1061.162686][T20607] bpf_map_area_alloc+0x47/0xe0 [ 1061.168096][T20607] prealloc_elems_and_freelist+0x86/0x1c0 [ 1061.173878][T20607] stack_map_alloc+0x390/0x520 [ 1061.178714][T20607] map_create+0x534/0x1000 [ 1061.183161][T20607] __sys_bpf+0x38b/0x780 [ 1061.187413][T20607] __x64_sys_bpf+0x78/0x90 [ 1061.192025][T20607] do_syscall_64+0x4c/0xa0 [ 1061.196467][T20607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.202369][T20607] [ 1061.204743][T20607] Last potentially related work creation: [ 1061.210559][T20607] kasan_save_stack+0x3a/0x60 [ 1061.215251][T20607] __kasan_record_aux_stack+0xb2/0xc0 [ 1061.220673][T20607] call_rcu+0x14f/0x990 [ 1061.224901][T20607] nf_unregister_net_hooks+0xc7/0x130 [ 1061.230280][T20607] cleanup_net+0x706/0xba0 [ 1061.234709][T20607] process_one_work+0x8a2/0x1160 [ 1061.239657][T20607] worker_thread+0xaa2/0x1270 [ 1061.244347][T20607] kthread+0x29d/0x330 [ 1061.248419][T20607] ret_from_fork+0x1f/0x30 [ 1061.252845][T20607] [ 1061.255174][T20607] Second to last potentially related work creation: [ 1061.261941][T20607] kasan_save_stack+0x3a/0x60 [ 1061.266633][T20607] __kasan_record_aux_stack+0xb2/0xc0 [ 1061.272059][T20607] call_rcu+0x14f/0x990 [ 1061.276227][T20607] __nf_register_net_hook+0x788/0x910 [ 1061.281717][T20607] nf_register_net_hook+0xae/0x190 [ 1061.286907][T20607] nf_register_net_hooks+0x40/0x1a0 [ 1061.292304][T20607] ebt_register_table+0xc97/0x1020 [ 1061.297620][T20607] find_inlist_lock_noload+0x178/0x260 [ 1061.303125][T20607] do_ebt_get_ctl+0x2c7/0x1cf0 [ 1061.307941][T20607] nf_getsockopt+0x25e/0x280 [ 1061.312734][T20607] ip_getsockopt+0x19b/0x230 [ 1061.317528][T20607] __sys_getsockopt+0x1b0/0x230 [ 1061.322512][T20607] __x64_sys_getsockopt+0xb1/0xc0 [ 1061.327757][T20607] do_syscall_64+0x4c/0xa0 [ 1061.332198][T20607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.338194][T20607] [ 1061.340524][T20607] The buggy address belongs to the object at ffff88801c3f1d80 [ 1061.340524][T20607] which belongs to the cache kmalloc-cg-64 of size 64 [ 1061.354681][T20607] The buggy address is located 16 bytes inside of [ 1061.354681][T20607] 64-byte region [ffff88801c3f1d80, ffff88801c3f1dc0) [ 1061.367805][T20607] [ 1061.370138][T20607] The buggy address belongs to the physical page: [ 1061.376732][T20607] page:ffffea000070fc40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801c3f1e00 pfn:0x1c3f1 [ 1061.388542][T20607] memcg:ffff888018a68801 [ 1061.392899][T20607] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1061.400576][T20607] raw: 00fff00000000200 ffffea00017f69c0 dead000000000003 ffff888017442780 [ 1061.409258][T20607] raw: ffff88801c3f1e00 000000008020001e 00000001ffffffff ffff888018a68801 [ 1061.418005][T20607] page dumped because: kasan: bad access detected [ 1061.424422][T20607] page_owner tracks the page as allocated [ 1061.430157][T20607] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 6764042695, free_ts 0 [ 1061.446921][T20607] post_alloc_hook+0x173/0x1a0 [ 1061.451703][T20607] get_page_from_freelist+0x1a1e/0x1ab0 [ 1061.457272][T20607] __alloc_pages+0x1ec/0x4f0 [ 1061.461876][T20607] alloc_page_interleave+0x24/0x1e0 [ 1061.467112][T20607] alloc_slab_page+0x5d/0x160 [ 1061.471803][T20607] new_slab+0x87/0x2c0 [ 1061.475895][T20607] ___slab_alloc+0xbc6/0x1240 [ 1061.480576][T20607] __kmem_cache_alloc_node+0x1a0/0x260 [ 1061.486040][T20607] __kmalloc_node+0xa0/0x240 [ 1061.490649][T20607] kvmalloc_node+0x6c/0x180 [ 1061.495263][T20607] nf_hook_entries_grow+0x309/0x730 [ 1061.500467][T20607] __nf_register_net_hook+0x2c9/0x910 [ 1061.505843][T20607] nf_register_net_hook+0xae/0x190 [ 1061.510965][T20607] nf_register_net_hooks+0x40/0x1a0 [ 1061.516172][T20607] ops_init+0x355/0x5f0 [ 1061.520339][T20607] register_pernet_operations+0x2af/0x610 [ 1061.526076][T20607] page_owner free stack trace missing [ 1061.531530][T20607] [ 1061.533857][T20607] Memory state around the buggy address: [ 1061.539575][T20607] ffff88801c3f1c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1061.547728][T20607] ffff88801c3f1d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1061.555793][T20607] >ffff88801c3f1d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1061.563853][T20607] ^ [ 1061.569224][T20607] ffff88801c3f1e00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1061.577404][T20607] ffff88801c3f1e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1061.586177][T20607] ================================================================== [ 1061.594512][T20607] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1061.601710][T20607] CPU: 0 PID: 20607 Comm: syz.6.4133 Not tainted syzkaller #0 [ 1061.609262][T20607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.619717][T20607] Call Trace: [ 1061.623024][T20607] [ 1061.625973][T20607] dump_stack_lvl+0x188/0x24e [ 1061.630770][T20607] ? memcpy+0x3c/0x60 [ 1061.634761][T20607] ? show_regs_print_info+0x12/0x12 [ 1061.639976][T20607] ? load_image+0x400/0x400 [ 1061.644595][T20607] panic+0x2e5/0x730 [ 1061.648509][T20607] ? bpf_jit_dump+0xd0/0xd0 [ 1061.653108][T20607] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1061.659030][T20607] ? _raw_spin_unlock+0x40/0x40 [ 1061.664070][T20607] ? print_memory_metadata+0x314/0x400 [ 1061.669578][T20607] check_panic_on_warn+0x80/0xa0 [ 1061.674542][T20607] ? __bpf_get_stackid+0x6c9/0x920 [ 1061.679662][T20607] end_report+0x66/0x110 [ 1061.683916][T20607] kasan_report+0x118/0x140 [ 1061.688449][T20607] ? __bpf_get_stackid+0x6c9/0x920 [ 1061.693574][T20607] kasan_check_range+0x235/0x290 [ 1061.698522][T20607] ? __bpf_get_stackid+0x6c9/0x920 [ 1061.703643][T20607] memcpy+0x3c/0x60 [ 1061.707469][T20607] __bpf_get_stackid+0x6c9/0x920 [ 1061.712508][T20607] bpf_get_stackid_pe+0x33f/0x400 [ 1061.717634][T20607] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 1061.723104][T20607] bpf_overflow_handler+0x6e8/0x7c0 [ 1061.728489][T20607] ? bpf_overflow_handler+0xd9/0x7c0 [ 1061.733790][T20607] ? perf_swevent_overflow+0x230/0x230 [ 1061.739253][T20607] ? ct_irq_exit_irqson+0x113/0x170 [ 1061.744468][T20607] ? __perf_event_account_interrupt+0x187/0x280 [ 1061.750729][T20607] __perf_event_overflow+0x448/0x610 [ 1061.756041][T20607] perf_swevent_event+0x315/0x570 [ 1061.761078][T20607] ? perf_tp_event+0xc30/0xc30 [ 1061.765975][T20607] ___perf_sw_event+0x49e/0x6e0 [ 1061.770874][T20607] ? ___perf_sw_event+0x180/0x6e0 [ 1061.776033][T20607] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1061.782573][T20607] ? __lock_acquire+0x13cf/0x7d10 [ 1061.787814][T20607] ? verify_lock_unused+0x140/0x140 [ 1061.793042][T20607] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1061.799035][T20607] ? lock_chain_count+0x20/0x20 [ 1061.803900][T20607] __perf_sw_event+0x135/0x260 [ 1061.808688][T20607] do_user_addr_fault+0xaea/0xb10 [ 1061.813728][T20607] ? trace_hardirqs_off_finish+0x86/0x180 [ 1061.819486][T20607] exc_page_fault+0x60/0x100 [ 1061.824083][T20607] asm_exc_page_fault+0x22/0x30 [ 1061.828947][T20607] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1061.834692][T20607] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 1061.855179][T20607] RSP: 0018:ffffc9000d4c7e80 EFLAGS: 00050293 [ 1061.861270][T20607] RAX: 0000000000000008 RBX: 00007fffffffeffd RCX: 0000200000000040 [ 1061.869509][T20607] RDX: 0000000000000000 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 1061.877677][T20607] RBP: 0000000000000008 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 1061.885754][T20607] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: 0000000000000000 [ 1061.893750][T20607] R13: 0000200000000040 R14: 0000000000000001 R15: 0000000000000005 [ 1061.901739][T20607] __sys_socketpair+0xb4/0x540 [ 1061.906614][T20607] __x64_sys_socketpair+0x97/0xb0 [ 1061.911735][T20607] do_syscall_64+0x4c/0xa0 [ 1061.916164][T20607] ? clear_bhb_loop+0x60/0xb0 [ 1061.921026][T20607] ? clear_bhb_loop+0x60/0xb0 [ 1061.925742][T20607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.931682][T20607] RIP: 0033:0x7f035639c819 [ 1061.936202][T20607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.956080][T20607] RSP: 002b:00007f0357288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1061.964590][T20607] RAX: ffffffffffffffda RBX: 00007f0356615fa0 RCX: 00007f035639c819 [ 1061.972653][T20607] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1061.980729][T20607] RBP: 00007f0356432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1061.988720][T20607] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1061.996715][T20607] R13: 00007f0356616038 R14: 00007f0356615fa0 R15: 00007ffc648b2a28 [ 1062.004857][T20607] [ 1062.008359][T20607] Kernel Offset: disabled [ 1062.012681][T20607] Rebooting in 86400 seconds..