last executing test programs: 22m26.840978925s ago: executing program 2 (id=202): socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) ioctl$TUNGETVNETLE(r1, 0x8955, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="7587b20dae0fd557a8550d8175eb4e24ff604ce6a0806b7060ffb9eb747a423b2505b15d9aa48c1a102a910d41bd08019abb71987378aca6bcc66ce58b35c46365f69af35dfa4fe63dafabc4e24c39a4f067a88f278e321dd001e6eab4f02e7a4316339904ebd76130125bfca72a5936e3c32200f7b973a4391c39851bf13a37c2ec8113c30d3df3e5296589202315c8b8a057dd3c31748cbd80e1b3dc69cdffd8824e51ee5ac57793266f8ffc95773143fc3b2048c34f0c19496a3b727bdaca", 0xc0}, {&(0x7f0000000200)="22cf2aaf1776ca9495aac8678f43b37affe2957a956a2b7ed772d9068ffc6948d061fd57fc", 0x25}, {&(0x7f0000000240)="ea294c3b6a7c77b2694c6d6017b109287a9a3747837ce14dd7073425c296daa254b943519d7e52650e16f6fa4940a3a77b3dfa8a3ca14fccddaef9c840ae7b19f6c837e07b8ead9e8025240a2091c9e6b6b9601a22", 0x55}], 0x3, &(0x7f0000000500)=[{0x10, 0x10f, 0x8}, {0xb0, 0x117, 0x8, "8883ab9b85354bf324a7f8bee4c3a6bd06a0751d3d4a3bde0e4933ee2f990b7fe89b5c8a2429b30cbd674a11bee09305766c87c08978a340546d0307259a902756cadbe8e861566bfe634844bf35864d348181ed910e3c9ec57161089f3dcf28021e2d68856ae9a1d5e00f5873af5383a6e0327876c4868179302ca0af973db97f1631b4c912f62a6fccacb70f8a30b5ce29a96520469bfbd0"}, {0x30, 0xff, 0x401, "3383512b508638d7556930cf1611f878eef565ebe693d4596ac9"}, {0x88, 0x110, 0x8, "d726bf3ddac4ba4ef2faac0222d5c4c84249c2e4150d0403b5fee47101f721e7a164a356faac65633be685af45bad32525de9484158c632f6bf05557f80b45d29b9e6cf14d342a42de902d11718470f385f4de5e652f171d05596192b78d770413fb9089d425268f122c6acbe231b4a679d8e2"}, {0xd0, 0x119, 0x7, "3d07a64b08f76520ea766405759fcb359afb5b650bd86c4d68a31e35686ca2813db6e2dca4fb0c8a1531581579290fb0c420849803104f2c23f8bcc219b79468febe4465b24064bcd4309fa87cbad5ed27bee3102389f440ffbd724e0a5c418a139bd352d3ffc0a9fadf7425396c5eb0aab594278ba6809ba5764919804c6bf4c9bf8b350cb6a48419e0078e1254b57452e399265126a2d3545a257970d11edc2965c0318b1923e16c0903300be80ebe3c619e5f54cef0c35bc4176c6360"}], 0x248}, 0x800) (async) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="7587b20dae0fd557a8550d8175eb4e24ff604ce6a0806b7060ffb9eb747a423b2505b15d9aa48c1a102a910d41bd08019abb71987378aca6bcc66ce58b35c46365f69af35dfa4fe63dafabc4e24c39a4f067a88f278e321dd001e6eab4f02e7a4316339904ebd76130125bfca72a5936e3c32200f7b973a4391c39851bf13a37c2ec8113c30d3df3e5296589202315c8b8a057dd3c31748cbd80e1b3dc69cdffd8824e51ee5ac57793266f8ffc95773143fc3b2048c34f0c19496a3b727bdaca", 0xc0}, {&(0x7f0000000200)="22cf2aaf1776ca9495aac8678f43b37affe2957a956a2b7ed772d9068ffc6948d061fd57fc", 0x25}, {&(0x7f0000000240)="ea294c3b6a7c77b2694c6d6017b109287a9a3747837ce14dd7073425c296daa254b943519d7e52650e16f6fa4940a3a77b3dfa8a3ca14fccddaef9c840ae7b19f6c837e07b8ead9e8025240a2091c9e6b6b9601a22", 0x55}], 0x3, &(0x7f0000000500)=[{0x10, 0x10f, 0x8}, {0xb0, 0x117, 0x8, "8883ab9b85354bf324a7f8bee4c3a6bd06a0751d3d4a3bde0e4933ee2f990b7fe89b5c8a2429b30cbd674a11bee09305766c87c08978a340546d0307259a902756cadbe8e861566bfe634844bf35864d348181ed910e3c9ec57161089f3dcf28021e2d68856ae9a1d5e00f5873af5383a6e0327876c4868179302ca0af973db97f1631b4c912f62a6fccacb70f8a30b5ce29a96520469bfbd0"}, {0x30, 0xff, 0x401, "3383512b508638d7556930cf1611f878eef565ebe693d4596ac9"}, {0x88, 0x110, 0x8, "d726bf3ddac4ba4ef2faac0222d5c4c84249c2e4150d0403b5fee47101f721e7a164a356faac65633be685af45bad32525de9484158c632f6bf05557f80b45d29b9e6cf14d342a42de902d11718470f385f4de5e652f171d05596192b78d770413fb9089d425268f122c6acbe231b4a679d8e2"}, {0xd0, 0x119, 0x7, "3d07a64b08f76520ea766405759fcb359afb5b650bd86c4d68a31e35686ca2813db6e2dca4fb0c8a1531581579290fb0c420849803104f2c23f8bcc219b79468febe4465b24064bcd4309fa87cbad5ed27bee3102389f440ffbd724e0a5c418a139bd352d3ffc0a9fadf7425396c5eb0aab594278ba6809ba5764919804c6bf4c9bf8b350cb6a48419e0078e1254b57452e399265126a2d3545a257970d11edc2965c0318b1923e16c0903300be80ebe3c619e5f54cef0c35bc4176c6360"}], 0x248}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 22m26.508727254s ago: executing program 2 (id=206): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xfe33) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xfe33) (async) 22m26.29057493s ago: executing program 2 (id=209): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) syz_clone(0x81000, &(0x7f0000000580), 0x0, &(0x7f00000000c0), &(0x7f0000000600), &(0x7f00000006c0)="475c86a97ab4c5938c440959f866a458cbe9b98dec4c7c7ff455bb83b6edccd925c6df390afc008ed60a0950d53839a2f707fe92d3054efb9b9165237bc8bf471e656b8e15dd") bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x3e, 0x101, 0x6}, 0x28) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 22m24.971148156s ago: executing program 2 (id=219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180f00244ca14091bb647c0000f3a90018100000381d2a5b422224172b69e3b3a1439a4b6e9dd84540e041410e02e623c1127e9fe70b410b0a468fa35856712065f61cbb84b0eca1c95a", @ANYRES32, @ANYBLOB="00000000000000000f08000000000000180000000000000000000000000000009500000000000000d50a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) sendmsg$unix(0xffffffffffffffff, 0x0, 0xce14bb669f64130a) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e105000000894f000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa631", 0x51}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00000000000000", 0x80}, {&(0x7f0000000280)="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", 0x193}], 0x3}, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/233, 0xe9}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/180, 0xb4}], 0x4, &(0x7f0000001fc0)=""/219, 0xdb}, 0x21) (async, rerun: 64) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r1}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d00)={&(0x7f0000000300)="09716a75091dfdcfb08c050b0a79ae1f8bfcb4264d95", &(0x7f0000000a40)=""/173, &(0x7f0000000b00)="85b255068675e600e9d2f4c812c86762b57d8cb0340965ac3cbdbfa23919bf9e504d2d61b9f6ee5e2d2309c18a29a7d287446fd86c3d24169e7b41c140e150a719be1d1c9d667c7e3a8feff3c6a242eea629f017d7add0f8898a08d89ee113a1e663f21d79ab7e2f7ac28afde848c3f81ce48d627f784f8a6a48abceeadcde0d08c8c43309dbb79d88d20091ebf61d1c74ec16300b7bf7a4c2a09ec5436f831d9f37b1a3547152158efc7d141de0ebacccac13260980501d2a96f6a4b454bdbf", &(0x7f0000000bc0)="f0caff22b6b7a48dc6b0478acccac63909aac0d8da426796a7a8c41588b26226b48c2a6c5b3a62aced116ef6b96531f5d35d3cb834239fbebc6885d97fec4f9ba5877afefb86b02d81e17398e489522d7aec4de7c9ccc99cb1d164cf4124a08937b70319ae8616b2a0146d6e", 0x4c, r4, 0x4}, 0x38) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000000900189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000100)="c43235c41fc2e18d7a9d01313448438bb35c459d00757770ad6ac23bf49760649dc0e5dae79bb5a59a1b3fee98154762bef6caa48fb6c7c0788627679f93796d8a1be5175c3d28aa76c198dd36834348c50c76f1699f33daa5e166526c382f5f641544f76f4576c67d5e35", 0x6b}, {&(0x7f0000000180)="9eeb3e2be0eee5ec5de8b6888ed1f649a2ec0da527ef5afb7ffb535a0109dddce70d3d911a9c8043a6c35d57a1bdc2428c243cf5406e3e7829b5e6a796d23b0edc2ae1c2cb4c07067cf56f8978e3ee0f4bcd759203ad8b1077993d607f1b8a6fb447e0a45c831af7c2e0c97cad04f62decb18ebf74ad7ad9c6a004e4d438d835b66a12ed666027be6e3501e4d58d", 0x8e}, {&(0x7f0000000240)="75a853563947534f75964a13564551653a17d05f85482e8b7f9cf2e80e8ba37580bce67e32e9214efe84c66b0a6bdd590d74b5ceed731f91008b474387c82279e821253a9f4be85560e93a1e5f1bd390351759953c164b2861e3ba92cd5194b15bdae30e6c2cb88cdab93e06140ed8cfb6b48730d0a168121df6ba53ee945fc8701655cea0ab79c3cf7760293d85b8d09971c575149202d0fbb6478f5d4c7e76740181251dca8fd9cf7c84efddb9dfae1e932df9e6e0d9cc74fd", 0xba}, {&(0x7f0000000500)="a848089ecca7bad13bec95f152742aadc502f4a139733d7794ca0788c8c39d49feba3551b2434a79618ea882202d49687baad3549a6bb667487e6d72c99c855aef7e7fa05f46bbf097c226c488769af8c81f64c5928b5625015e84b38ded41d0e006c6e21ee468282260beb8763093082460", 0x72}, {&(0x7f00000006c0)="ad3fd28534b0e3fe3962419694d379b2c9a04474130fc5a183f011a40e6ad1c5869b094da495323ae4524e34253e55674c1db5fef8d8a3ffe4ebc715951f64b820810fe1a42839457b79faab6e3c6d769a61186b560eac3836a8eb03dcc28766e0fa5e56723a3c569fc8c9d1ff255bb456dcd151bbac46bd4e24c6e190c63c8078738ebdfd6a7fb1e3d75c15e83f1234d725692c569f49d333985e01473347c9ad96a0be99d54c7ae14521f668ef02466062987313c55ae2c9cd7b25e5c772e2ccdfcabd085206d9c1eb0bab07ce0f49dadaf5e07133541a606ec068cca861632b93c3", 0xe3}, {&(0x7f00000007c0)="964e015a880813edda579538e23578f7c1140c08cb3f954ea6877a678320e4418734233489361112d106585abaac4cd4b4c7d3713a764dfee6671929c702e24911aa77104cd85f8412241bc0e25c9c1a2c7d4d3b979f995f5626c7d165e48a777595e8f2776a8a15dc4b36526a302fa3ad00b186e5d7047cb1224588d538fd5799f47bbd700e7dc5e4ada1804546acd3237675fee39c62353cb44a93f31d7a1c90004f1b765b92eca11f8fe49f4749d823bdb7f7e634e49e", 0xb8}], 0x6, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd4a0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf4}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xf7, 0x1, 0x0, [{@multicast2, 0x9}, {@multicast2, 0x10001}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x70}, 0x8801) (rerun: 32) 22m24.001463172s ago: executing program 2 (id=224): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000f8ff8500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22m23.414301168s ago: executing program 2 (id=229): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) socket$kcm(0x18, 0x0, 0x2) syz_clone(0x40000200, &(0x7f0000001240)="debbc77c8009a6286cd47c16f5b5b7e02b7902552abeacdd5e15611d14c77b5c0154e546b8b5ee20cab0853a6d780a40ed31b669b155ca3e489cd4dded4272fd8261f770d6a89919b5a90fd26f07fded52a73b196c112f05253070e00c4ae7fc", 0x60, 0x0, 0x0, &(0x7f0000001340)="543d74d8054e54e391d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f60fb2b8c750ceac8f90620d21fad6587297325ea") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 22m7.851160683s ago: executing program 32 (id=229): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) socket$kcm(0x18, 0x0, 0x2) syz_clone(0x40000200, &(0x7f0000001240)="debbc77c8009a6286cd47c16f5b5b7e02b7902552abeacdd5e15611d14c77b5c0154e546b8b5ee20cab0853a6d780a40ed31b669b155ca3e489cd4dded4272fd8261f770d6a89919b5a90fd26f07fded52a73b196c112f05253070e00c4ae7fc", 0x60, 0x0, 0x0, &(0x7f0000001340)="543d74d8054e54e391d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f60fb2b8c750ceac8f90620d21fad6587297325ea") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 25.096030622s ago: executing program 1 (id=7776): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x400}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 24.455415729s ago: executing program 1 (id=7780): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000ffffffff6112640000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.364512037s ago: executing program 3 (id=7794): socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 18.664216616s ago: executing program 1 (id=7796): r0 = socket$kcm(0x2, 0x200000000000006, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f080102200e000000000000000300000000000000000000002e"], 0x0, 0x3a}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x801c581f, 0x7fffffffefff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000080)=@raw=[@exit, @alu={0x7, 0x1, 0xb, 0x2, 0xb, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41100}, 0x94) 18.648010285s ago: executing program 5 (id=7798): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x876, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x1410, 0x0, 0xfffffffd, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="d0b4db55e7f5ceae9fbd0c0df6469c0c894dd6c99d52d9", 0x17}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="440000000000000000000000070000000101830bfa0a010101ffffffff9404090000005c0a010101000000000144146000000070ab0000003100000007000070a1000000000000001400000000000000000000007f0000000800000000000000"], 0x60}, 0x80) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (rerun: 64) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c034002560100053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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"/1305, 0x519}, {&(0x7f0000001b80)="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", 0x52b}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000002c0)}, {0x0}], 0x2, 0x0, 0x0, 0x40000}, 0x4c891) (rerun: 32) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01b40018000000000000000000000000000000020000000000f1759d9da98aba80935874d05c22d042d00bf3ca8f28ba3481d8ffef9d3cc2ac5fdab01a8c16b0180479dde2eb19df52cc6abe405ed658115c0021d4791730af4436a5eea2fc1b1f40f52fcacaaf8172a319365c9b6111dae8841ae20387805f79f4de31cf"], 0x0, 0x1a}, 0x28) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000280)=0x1ffff) openat$cgroup_subtree(r2, &(0x7f00000003c0), 0x2, 0x0) (async, rerun: 64) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.546877858s ago: executing program 0 (id=7799): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000a1509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.302953855s ago: executing program 5 (id=7801): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000325c000000040900000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000b05d25a806f8c6394f90224fc602f000000010c01", 0x1b}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000000)={r4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a820ff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={0x0, &(0x7f0000000240)=""/88, 0x0, 0x0, 0x101}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100d4fa5da24625695569087218000000000000000c0000000c000000040000000300000000"], &(0x7f0000002200)=""/4110, 0x28, 0x100e, 0x1}, 0x28) r5 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3d4, 0x6301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x7ff, 0x97f4, 0x5, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000540)='(pu&00\t||') unlink(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002000000000c005b8f862df600568935b4f272f1b0cb36000000008800007370a152689cda000000"], 0x48) 18.10699252s ago: executing program 0 (id=7802): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x18}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xb}, {0x2, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x9, 0x9, 0xfc, 0x0, 0x0, 0x800000000057d, 0x20860, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x4, 0x7}, 0x100804, 0xca, 0x200000, 0x7, 0x5, 0xffff, 0x3, 0x0, 0xe, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x11, &(0x7f0000000000)=r9, 0x8) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) 17.883257296s ago: executing program 3 (id=7803): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff1000"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{}], "a5c18c"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'g'}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e, 0x5f, 0x61, 0x18]}}, &(0x7f0000000c40)=""/4096, 0x4a, 0x1000, 0x1}, 0x20) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5c}, 0x8000, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e000000114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 17.124064917s ago: executing program 1 (id=7805): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000002000000000000000000000001"], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000580)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r5, r0, 0x0, 0x13, &(0x7f0000000080)='cgroup.controllers\x00'}, 0x30) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001a80)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/239, 0xef}], 0x6, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x2000) 17.123202747s ago: executing program 3 (id=7806): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000ffffffff6112640000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17.01640682s ago: executing program 5 (id=7807): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x72cd2ffa4b754971) 16.531206843s ago: executing program 0 (id=7808): r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0xb, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x3835, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) close(r0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f00000000009500000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6c6d63746d4718199e27e846890350a4dd2e99a28a4c4a4229d4aa68f1e2cb03aa1a6c16ec5869d8c1f721d6269c9bbba01cf9c7a2bdb8539344783e4327d13f6a8608c78125858a66b2c1566a601a87acd39420000bf85f0ce795aa0e1bfc07979b4a27b8422b00c8527d2cbc65414e9ff9278", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'veth0_to_bond\x00', 0x500}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2128}, 0x20000804) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 16.236424411s ago: executing program 5 (id=7809): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1863}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x64, &(0x7f00000009c0)=r3, 0x4) r4 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x2, 0xe23, @loopback}, 0x7, 0x0}, 0x4000000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xe38, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7, r5}, 0xc) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xe4, '\x00', r10, r2, 0x2, 0x2, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 16.215380271s ago: executing program 4 (id=7810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x1, 0x8, 0xf8, 0x0, 0x80, 0x4800, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xdb, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x40, 0x6, 0x0, 0x7, 0x8, 0x7fffffff, 0x100, 0x0, 0x2c6, 0x0, 0xff}, r1, 0xa, r2, 0xe) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) 16.038143196s ago: executing program 3 (id=7811): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$kcm(0x2, 0x922000000001, 0x106) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async) 15.955417108s ago: executing program 0 (id=7812): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000c1509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.954531198s ago: executing program 1 (id=7813): socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 15.857028671s ago: executing program 4 (id=7814): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r2 = syz_clone(0x24050000, &(0x7f0000000380)="92c5eddcfb6665bd6ccad93905456dd3832c8621062ea7d377cd07e4bd254a76ebe45e3f2bd071a6b717b625e378ad7e429241acb14f6d2543c25bfad788947a4b80d0821c107e0d4149b6cd39c7bc1475aff9d546d48755479b76e20d5648a940fc98ca4999c0e0181205d6d9aeae83b8905465247c80b3198e4367ec92637199d42c99995823f2984f3bdec6a5f4eb8459", 0x92, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000580)) perf_event_open(0x0, r2, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81000000000000070800c0f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x230, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) 15.735109744s ago: executing program 3 (id=7815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) 15.636149717s ago: executing program 0 (id=7816): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r3, 0x29, 0x36, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x40000) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r4) socket$kcm(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02007aa8cadf6c24140006234c033457ed4d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r7}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.481077541s ago: executing program 4 (id=7817): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x400001c0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)}, {&(0x7f0000001400)}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x78}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 15.443084352s ago: executing program 3 (id=7818): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000001580)) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f", 0x7}, {&(0x7f0000000140)="78cafb73fc02010700000000ef01048f2e440ab8f9", 0x15}], 0x2}, 0x4000000) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000000300dba904000000000400000000000056f5636aa4b3455813a3eb313f39f64bc7f10878dc09fda0a69c3a29f070f4dd3ecabbe1b8100936dbe82a35407b471c37c99c137ae2907c1201219b42055b8632f8079e9659892203564fabc4ee18edd0db13353962aa8b08d96e740faf6b0b79811e6d6b300bff645b8a8135c6812cf0b0572997304c773b7cb425293725cdb61dce3acb3f142aa25d8ad3efb20da470db254d8548364cd2d5d3704e2d6e39cdb3d3b0da772762f9382a6d910f746b19cb371b8da5e4a7a2e087a8010e023112b4d69bba183462b1ec0541c09598a4d8fb42c45159cedc2c2650545d43143bed", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r7, 0x0, 0x0}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, @perf_config_ext={0x8, 0x1ff}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x71, &(0x7f0000000000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x6, '\x00', r10, r11, 0x4, 0x3, 0x1}, 0x50) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 15.379757504s ago: executing program 4 (id=7819): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x72cd2ffa4b754971) 15.293005046s ago: executing program 0 (id=7820): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d", 0x8a}], 0x1}, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) close(0x4) recvmsg(r3, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0xc, 0xac5d, 0x0, 0x0, 0x8000, 0x2, 0xffff, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a06000000ffff8137", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.261115337s ago: executing program 5 (id=7821): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000ffffffff6112640000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 14.815760619s ago: executing program 1 (id=7822): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c0340", 0x18}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)) close(r2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3}, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xa, 0x24, 0xa2, 0x6, 0x0, 0x5, 0x420, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x388, 0x8, 0x8, 0x4, 0xffff36a3, 0x5, 0x0, 0xfffffffa, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x3, 0x6, 0x99, 0x0, 0x2, 0x1000, 0x19, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x10, 0x1dc385d6, 0xff, 0x1, 0x1, 0x65, 0x6, 0x0, 0x2, 0x0, 0x3}, r5, 0x7, r6, 0x1) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xc9, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffa43, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x10001}, 0x105014, 0x8, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x20040d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000001540)=[{0x0}], 0x1}, 0x4004045) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4140, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) 14.815266719s ago: executing program 4 (id=7823): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) socket$kcm(0x1e, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) (async) socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, &(0x7f0000001540)=""/155}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@o_path={0x0, r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc, 0xffffffffffffd059}, 0x0, 0x2000003, 0x0, 0x5, 0x0, 0x48e7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='cpu==0||!') close(r4) ioctl$TUNGETVNETLE(r4, 0x40107446, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.169013877s ago: executing program 4 (id=7824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000002000000000000000000000001"], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000580)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) r4 = socket$kcm(0x2, 0x5, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r5, r0, 0x0, 0x13, &(0x7f0000000080)='cgroup.controllers\x00'}, 0x30) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001a80)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/90, 0x5a}, {&(0x7f0000001840)=""/239, 0xef}], 0x6, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x2000) 14.128771978s ago: executing program 5 (id=7825): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x73, 0x0, 0x4, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x7}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10, 0x32, 0x43ba, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4000, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x300, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) socketpair(0x1e, 0x1, 0x0, 0x0) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x2, 0x4, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) 0s ago: executing program 33 (id=7820): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d", 0x8a}], 0x1}, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) close(0x4) recvmsg(r3, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0xc, 0xac5d, 0x0, 0x0, 0x8000, 0x2, 0xffff, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a06000000ffff8137", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ing attributes in process `syz.0.6612'. [ 1254.047292][T14570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1254.082280][T14570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1254.092280][T14570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1254.101741][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1254.111714][T14570] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1254.119908][T14570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1254.308534][ T8425] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.526012][ T8425] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.562368][T26887] netlink: 'syz.3.6622': attribute type 19 has an invalid length. [ 1254.562516][T26889] netlink: 'syz.0.6621': attribute type 3 has an invalid length. [ 1254.562544][T26889] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1254.659130][T26887] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1255.539691][ T8425] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.729388][ T8425] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.150654][ T8425] device 0 left promiscuous mode [ 1256.164162][T24343] Bluetooth: hci4: command 0x0409 tx timeout [ 1256.268038][T26932] netlink: 'syz.1.6633': attribute type 9 has an invalid length. [ 1256.403684][T24343] Bluetooth: hci5: command 0x0406 tx timeout [ 1256.415284][ T8425] tipc: Left network mode [ 1256.429063][T26876] chnl_net:caif_netlink_parms(): no params data found [ 1257.012703][T26959] netlink: 'syz.0.6635': attribute type 3 has an invalid length. [ 1257.169660][T26959] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1257.255318][T26961] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1257.779588][T26961] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1258.148391][T26876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.194546][T26876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.202929][T26876] device bridge_slave_0 entered promiscuous mode [ 1258.242290][T26876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.249932][T24343] Bluetooth: hci4: command 0x041b tx timeout [ 1258.264634][T26876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.272899][T26876] device bridge_slave_1 entered promiscuous mode [ 1258.525415][T26876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.632370][T26876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.829214][T26876] team0: Port device team_slave_0 added [ 1259.021191][T26876] team0: Port device team_slave_1 added [ 1259.148609][T26876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.192439][T26876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.273287][T26876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.413922][T26876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.420986][T26876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.483336][T26876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.676577][T26876] device hsr_slave_0 entered promiscuous mode [ 1259.696515][T26876] device hsr_slave_1 entered promiscuous mode [ 1259.726080][T26876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.739712][T26876] Cannot create hsr debugfs directory [ 1260.337685][T24343] Bluetooth: hci4: command 0x040f tx timeout [ 1261.268512][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.289005][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.312971][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.338418][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.428457][ T8425] device veth1_macvtap left promiscuous mode [ 1262.274282][T27057] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6661'. [ 1262.407761][T24343] Bluetooth: hci4: command 0x0419 tx timeout [ 1263.226332][T27057] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1263.259283][T27057] CPU: 1 PID: 27057 Comm: syz.0.6661 Not tainted syzkaller #0 [ 1263.266844][T27057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.276953][T27057] Call Trace: [ 1263.280285][T27057] [ 1263.283294][T27057] dump_stack_lvl+0x188/0x24e [ 1263.288135][T27057] ? show_regs_print_info+0x12/0x12 [ 1263.293391][T27057] ? load_image+0x400/0x400 [ 1263.298054][T27057] sysfs_warn_dup+0x8a/0xa0 [ 1263.302791][T27057] sysfs_do_create_link_sd+0xc0/0x110 [ 1263.308394][T27057] device_add+0x7ed/0xfb0 [ 1263.312856][T27057] wiphy_register+0x1d9f/0x2ac0 [ 1263.317771][T27057] ? cfg80211_event_work+0x40/0x40 [ 1263.322906][T27057] ? minstrel_ht_alloc+0x894/0xa20 [ 1263.328051][T27057] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1263.334175][T27057] ieee80211_register_hw+0x2d00/0x39f0 [ 1263.339759][T27057] ? ieee80211_register_hw+0xf21/0x39f0 [ 1263.345413][T27057] ? ieee80211_register_hw+0xf21/0x39f0 [ 1263.351083][T27057] ? ieee80211_tasklet_handler+0x20/0x20 [ 1263.356750][T27057] ? memset+0x1e/0x40 [ 1263.360747][T27057] ? __hrtimer_init+0x186/0x270 [ 1263.365619][T27057] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1263.371551][T27057] hwsim_new_radio_nl+0xafa/0xce0 [ 1263.376613][T27057] genl_family_rcv_msg_doit+0x22a/0x330 [ 1263.382265][T27057] ? end_current_label_crit_section+0x170/0x170 [ 1263.388617][T27057] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1263.394555][T27057] ? bpf_lsm_capable+0x5/0x10 [ 1263.399250][T27057] ? security_capable+0x85/0xb0 [ 1263.404133][T27057] genl_rcv_msg+0x604/0x790 [ 1263.408764][T27057] ? genl_bind+0x360/0x360 [ 1263.413284][T27057] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1263.420048][T27057] netlink_rcv_skb+0x1fb/0x450 [ 1263.424847][T27057] ? genl_bind+0x360/0x360 [ 1263.429282][T27057] ? netlink_ack+0x1170/0x1170 [ 1263.434089][T27057] ? down_read+0x1a8/0x2d0 [ 1263.438532][T27057] genl_rcv+0x24/0x40 [ 1263.442619][T27057] netlink_unicast+0x74d/0x8d0 [ 1263.447421][T27057] netlink_sendmsg+0x8ad/0xbd0 [ 1263.452222][T27057] ? netlink_getsockopt+0x550/0x550 [ 1263.457472][T27057] ? aa_sock_msg_perm+0x94/0x150 [ 1263.462432][T27057] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1263.467844][T27057] ? security_socket_sendmsg+0x7c/0xa0 [ 1263.473505][T27057] ? netlink_getsockopt+0x550/0x550 [ 1263.478725][T27057] ____sys_sendmsg+0x5be/0x970 [ 1263.483558][T27057] ? __sys_sendmsg_sock+0x30/0x30 [ 1263.488758][T27057] ? __import_iovec+0x315/0x500 [ 1263.493642][T27057] ? import_iovec+0x6f/0xa0 [ 1263.498168][T27057] ___sys_sendmsg+0x2a2/0x360 [ 1263.502873][T27057] ? __sys_sendmsg+0x290/0x290 [ 1263.507716][T27057] __se_sys_sendmsg+0x1bb/0x2a0 [ 1263.512589][T27057] ? ct_nmi_exit+0x145/0x1c0 [ 1263.517214][T27057] ? __x64_sys_sendmsg+0x80/0x80 [ 1263.522191][T27057] ? lockdep_hardirqs_on+0x94/0x140 [ 1263.527410][T27057] do_syscall_64+0x4c/0xa0 [ 1263.531846][T27057] ? clear_bhb_loop+0x60/0xb0 [ 1263.536545][T27057] ? clear_bhb_loop+0x60/0xb0 [ 1263.541248][T27057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1263.547178][T27057] RIP: 0033:0x7f57a5d9cdd9 [ 1263.551624][T27057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.571336][T27057] RSP: 002b:00007f57a6c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.579766][T27057] RAX: ffffffffffffffda RBX: 00007f57a6015fa0 RCX: 00007f57a5d9cdd9 [ 1263.587760][T27057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1263.595748][T27057] RBP: 00007f57a5e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1263.603735][T27057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.611738][T27057] R13: 00007f57a6016038 R14: 00007f57a6015fa0 R15: 00007ffda07636e8 [ 1263.619874][T27057] [ 1263.630644][T27071] netlink: 'syz.3.6664': attribute type 20 has an invalid length. [ 1263.640415][T27072] netlink: 'syz.3.6664': attribute type 46 has an invalid length. [ 1264.171396][T27085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6668'. [ 1264.807942][T26876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1264.858971][T26876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1264.924279][T26876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1264.947399][T26876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1265.235258][T26876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.287893][T24232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1265.312932][T24232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1265.385874][T26876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.436667][T27119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1265.467340][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1265.484492][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1265.533057][T24227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.540513][T24227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.654973][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1265.690330][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1265.744476][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1265.811561][T24227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.818878][T24227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.921112][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1265.939704][T27111] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6676'. [ 1266.051382][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1266.104360][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1266.193399][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1266.328341][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1266.344875][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1266.394894][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1266.404302][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1266.413680][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1266.445354][T27111] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1266.493989][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1266.534224][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1266.560776][T26876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1266.617074][T27135] netlink: 'syz.0.6680': attribute type 29 has an invalid length. [ 1266.679140][T27135] netlink: 'syz.0.6680': attribute type 29 has an invalid length. [ 1266.997198][T27146] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6683'. [ 1267.035947][T27146] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1267.063790][T27146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1267.828011][T24232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1267.847159][T24232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1267.910355][T26876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.507419][T27181] netlink: 22 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1268.626848][T27188] netlink: 'syz.0.6695': attribute type 11 has an invalid length. [ 1268.669194][T27188] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6695'. [ 1269.098819][T27185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1269.770448][T24235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1269.796140][T24235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1269.927317][T24235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1269.994137][T24235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1270.077960][T24235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1270.114679][T24235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1270.140359][T26876] device veth0_vlan entered promiscuous mode [ 1270.210086][T26876] device veth1_vlan entered promiscuous mode [ 1270.300085][T24214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1270.310718][T24214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1270.336965][T26876] device veth0_macvtap entered promiscuous mode [ 1270.358112][T26876] device veth1_macvtap entered promiscuous mode [ 1270.475485][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.532328][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.566483][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.607678][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.643606][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.690806][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.710346][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1270.728457][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.740695][T26876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.758535][T24225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1270.802761][T24225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1270.830340][T24225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1270.840240][T24225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1270.866430][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.903330][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.943297][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.960632][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.983382][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.005611][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.017178][T26876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1271.028002][T26876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1271.040574][T26876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.062582][T24225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1271.080600][T24225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1271.122019][T26876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.153706][T26876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.189318][T26876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.226935][T26876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.487542][T24214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.515362][T24214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.557307][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1271.604390][T24227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.613022][T24227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.631481][T24214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1272.230451][T27292] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.6716'. [ 1273.051142][T27320] netlink: 'syz.5.6721': attribute type 2 has an invalid length. [ 1273.109237][T27320] netlink: 'syz.5.6721': attribute type 8 has an invalid length. [ 1273.136037][T27320] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6721'. [ 1273.611130][T27334] netlink: 'syz.0.6726': attribute type 8 has an invalid length. [ 1273.639120][T27334] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6726'. [ 1274.219586][T27351] netlink: 'syz.3.6731': attribute type 29 has an invalid length. [ 1274.267341][T27351] netlink: 'syz.3.6731': attribute type 29 has an invalid length. [ 1274.298224][T27353] netlink: 'syz.3.6731': attribute type 29 has an invalid length. [ 1274.318859][T27351] netlink: 'syz.3.6731': attribute type 29 has an invalid length. [ 1275.682954][T27387] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6743'. [ 1275.792380][T27393] netlink: 'syz.3.6745': attribute type 17 has an invalid length. [ 1275.831832][T27393] netlink: 'syz.3.6745': attribute type 16 has an invalid length. [ 1275.863621][T27393] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1276.348989][T27409] netlink: 'syz.5.6748': attribute type 2 has an invalid length. [ 1276.438751][T27409] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6748'. [ 1277.938953][T27431] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6756'. [ 1279.186301][T27449] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6760'. [ 1279.199898][T27450] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1279.217438][T27450] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1279.523538][T27449] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6760'. [ 1279.554431][T27454] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6760'. [ 1282.196443][T27519] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.6782'. [ 1282.284045][T27503] validate_nla: 1 callbacks suppressed [ 1282.284068][T27503] netlink: 'syz.1.6777': attribute type 10 has an invalid length. [ 1282.379571][T27503] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6777'. [ 1287.136492][T14570] Bluetooth: hci0: command 0x0406 tx timeout [ 1288.475266][T27556] device wlan1 entered promiscuous mode [ 1289.149040][T27588] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6806'. [ 1291.277135][T27613] FAULT_INJECTION: forcing a failure. [ 1291.277135][T27613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.320645][T27613] CPU: 1 PID: 27613 Comm: syz.4.6816 Not tainted syzkaller #0 [ 1291.325341][T27610] netlink: 'syz.0.6814': attribute type 23 has an invalid length. [ 1291.328437][T27613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1291.328454][T27613] Call Trace: [ 1291.328463][T27613] [ 1291.328473][T27613] dump_stack_lvl+0x188/0x24e [ 1291.328515][T27613] ? show_regs_print_info+0x12/0x12 [ 1291.328545][T27613] ? load_image+0x400/0x400 [ 1291.328573][T27613] ? __might_fault+0xa6/0x120 [ 1291.328605][T27613] should_fail_ex+0x399/0x4d0 [ 1291.328633][T27613] copyout+0x1b/0x120 [ 1291.328664][T27613] _copy_to_iter+0x48b/0x1040 [ 1291.328717][T27613] ? iov_iter_init+0x1f0/0x1f0 [ 1291.328745][T27613] ? __virt_addr_valid+0x188/0x540 [ 1291.328774][T27613] ? __virt_addr_valid+0x465/0x540 [ 1291.328802][T27613] ? __phys_addr_symbol+0x2b/0x70 [ 1291.328829][T27613] ? __check_object_size+0x500/0xa40 [ 1291.328860][T27613] __skb_datagram_iter+0xde/0x740 [ 1291.328888][T27613] ? skb_copy_datagram_iter+0x290/0x290 [ 1291.328920][T27613] skb_copy_datagram_iter+0xd7/0x290 [ 1291.328952][T27613] netlink_recvmsg+0x2d0/0xe00 [ 1291.432925][T27613] ? netlink_sendmsg+0xbd0/0xbd0 [ 1291.438011][T27613] ? aa_af_perm+0x340/0x340 [ 1291.442649][T27613] ? __might_fault+0xa6/0x120 [ 1291.447459][T27613] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1291.452782][T27613] ? security_socket_recvmsg+0x85/0xb0 [ 1291.458288][T27613] ? netlink_sendmsg+0xbd0/0xbd0 [ 1291.463375][T27613] ____sys_recvmsg+0x2cb/0x5e0 [ 1291.468195][T27613] ? __sys_recvmsg_sock+0x40/0x40 [ 1291.473450][T27613] ? import_iovec+0x6f/0xa0 [ 1291.477994][T27613] ___sys_recvmsg+0x212/0x590 [ 1291.482932][T27613] ? __sys_recvmsg+0x290/0x290 [ 1291.487925][T27613] ? common_file_perm+0x171/0x1c0 [ 1291.493003][T27613] ? __fget_files+0x43d/0x4b0 [ 1291.497763][T27613] __x64_sys_recvmsg+0x205/0x2e0 [ 1291.502782][T27613] ? ___sys_recvmsg+0x590/0x590 [ 1291.507683][T27613] ? lockdep_hardirqs_on+0x94/0x140 [ 1291.512982][T27613] do_syscall_64+0x4c/0xa0 [ 1291.517434][T27613] ? clear_bhb_loop+0x60/0xb0 [ 1291.522154][T27613] ? clear_bhb_loop+0x60/0xb0 [ 1291.526982][T27613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1291.532926][T27613] RIP: 0033:0x7f100539cdd9 [ 1291.537393][T27613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.557229][T27613] RSP: 002b:00007f10062b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1291.565757][T27613] RAX: ffffffffffffffda RBX: 00007f1005615fa0 RCX: 00007f100539cdd9 [ 1291.573925][T27613] RDX: 0000000040010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1291.581932][T27613] RBP: 00007f10062b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.590125][T27613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.598310][T27613] R13: 00007f1005616038 R14: 00007f1005615fa0 R15: 00007ffde1ddabe8 [ 1291.606342][T27613] [ 1293.664652][T27652] netlink: 'syz.0.6827': attribute type 10 has an invalid length. [ 1293.673050][T27652] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6827'. [ 1294.745827][T27660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6830'. [ 1294.761974][T27660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1294.798338][T27660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1295.060384][T27695] netlink: 'syz.4.6841': attribute type 21 has an invalid length. [ 1295.060595][T27693] FAULT_INJECTION: forcing a failure. [ 1295.060595][T27693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1295.078368][T27692] netlink: 'syz.4.6841': attribute type 21 has an invalid length. [ 1295.113847][T27693] CPU: 0 PID: 27693 Comm: syz.0.6842 Not tainted syzkaller #0 [ 1295.121472][T27693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1295.131557][T27693] Call Trace: [ 1295.135038][T27693] [ 1295.138186][T27693] dump_stack_lvl+0x188/0x24e [ 1295.142903][T27693] ? show_regs_print_info+0x12/0x12 [ 1295.148301][T27693] ? load_image+0x400/0x400 [ 1295.152997][T27693] ? __lock_acquire+0x7d10/0x7d10 [ 1295.158229][T27693] should_fail_ex+0x399/0x4d0 [ 1295.163010][T27693] prepare_alloc_pages+0x1e2/0x5f0 [ 1295.168238][T27693] __alloc_pages+0x130/0x4f0 [ 1295.172871][T27693] ? zone_statistics+0x170/0x170 [ 1295.178013][T27693] ? trace_event_raw_event_lock+0x250/0x250 [ 1295.183930][T27693] __folio_alloc+0xe/0x30 [ 1295.188380][T27693] vma_alloc_folio+0x4a3/0x900 [ 1295.193177][T27693] wp_page_copy+0x28b/0x1680 [ 1295.197787][T27693] ? do_wp_page+0x67f/0x1680 [ 1295.202421][T27693] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 1295.208187][T27693] handle_mm_fault+0x1d19/0x3ee0 [ 1295.213153][T27693] ? mt_find+0x157/0x830 [ 1295.217451][T27693] ? numa_migrate_prep+0x250/0x250 [ 1295.222769][T27693] ? lock_chain_count+0x20/0x20 [ 1295.227761][T27693] ? lock_mm_and_find_vma+0xae/0x2f0 [ 1295.233059][T27693] do_user_addr_fault+0x51f/0xb10 [ 1295.238114][T27693] exc_page_fault+0x60/0x100 [ 1295.242737][T27693] asm_exc_page_fault+0x22/0x30 [ 1295.247698][T27693] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1295.254310][T27693] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1295.274110][T27693] RSP: 0018:ffffc9000d81f628 EFLAGS: 00050202 [ 1295.280191][T27693] RAX: ffffffff840f0c01 RBX: 0000000000000e5c RCX: 000000000000061c [ 1295.288184][T27693] RDX: 0000000000000e5c RSI: ffff888062faa840 RDI: 0000200000002000 [ 1295.296605][T27693] RBP: 0000000000000000 R08: ffff888062faae5b R09: 1ffff1100c5f55cb [ 1295.304618][T27693] R10: dffffc0000000000 R11: ffffed100c5f55cc R12: 00007fffffffe1a4 [ 1295.312694][T27693] R13: 0000000000000e5c R14: ffff888062faa000 R15: 00002000000017c0 [ 1295.320693][T27693] ? copy_pipe_to_iter+0x171/0x180 [ 1295.325834][T27693] copyout+0xe7/0x120 [ 1295.329841][T27693] _copy_to_iter+0x48b/0x1040 [ 1295.334550][T27693] ? iov_iter_init+0x1f0/0x1f0 [ 1295.339345][T27693] ? __virt_addr_valid+0x188/0x540 [ 1295.344475][T27693] ? __virt_addr_valid+0x465/0x540 [ 1295.349788][T27693] ? __phys_addr_symbol+0x2b/0x70 [ 1295.354830][T27693] ? __check_object_size+0x500/0xa40 [ 1295.360168][T27693] __skb_datagram_iter+0xde/0x740 [ 1295.365319][T27693] ? skb_copy_datagram_iter+0x290/0x290 [ 1295.370929][T27693] skb_copy_datagram_iter+0xd7/0x290 [ 1295.376328][T27693] netlink_recvmsg+0x2d0/0xe00 [ 1295.381128][T27693] ? netlink_sendmsg+0xbd0/0xbd0 [ 1295.386122][T27693] ? aa_af_perm+0x340/0x340 [ 1295.390646][T27693] ? __might_fault+0xa6/0x120 [ 1295.395359][T27693] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1295.400667][T27693] ? security_socket_recvmsg+0x85/0xb0 [ 1295.406156][T27693] ? netlink_sendmsg+0xbd0/0xbd0 [ 1295.411116][T27693] ____sys_recvmsg+0x2cb/0x5e0 [ 1295.415916][T27693] ? __sys_recvmsg_sock+0x40/0x40 [ 1295.421004][T27693] ? import_iovec+0x6f/0xa0 [ 1295.425530][T27693] ___sys_recvmsg+0x212/0x590 [ 1295.430322][T27693] ? __sys_recvmsg+0x290/0x290 [ 1295.435113][T27693] ? common_file_perm+0x171/0x1c0 [ 1295.440163][T27693] ? __fget_files+0x43d/0x4b0 [ 1295.444894][T27693] __x64_sys_recvmsg+0x205/0x2e0 [ 1295.449948][T27693] ? ___sys_recvmsg+0x590/0x590 [ 1295.454954][T27693] ? lockdep_hardirqs_on+0x94/0x140 [ 1295.460173][T27693] do_syscall_64+0x4c/0xa0 [ 1295.464608][T27693] ? clear_bhb_loop+0x60/0xb0 [ 1295.469305][T27693] ? clear_bhb_loop+0x60/0xb0 [ 1295.474091][T27693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.480024][T27693] RIP: 0033:0x7f57a5d9cdd9 [ 1295.484549][T27693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.504531][T27693] RSP: 002b:00007f57a6c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1295.512960][T27693] RAX: ffffffffffffffda RBX: 00007f57a6015fa0 RCX: 00007f57a5d9cdd9 [ 1295.520947][T27693] RDX: 0000000040010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1295.529024][T27693] RBP: 00007f57a6c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.537094][T27693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.545249][T27693] R13: 00007f57a6016038 R14: 00007f57a6015fa0 R15: 00007ffda07636e8 [ 1295.553447][T27693] [ 1296.666623][T27716] netlink: 'syz.0.6849': attribute type 9 has an invalid length. [ 1296.702212][T27716] netlink: 399 bytes leftover after parsing attributes in process `syz.0.6849'. [ 1296.871877][T27726] netlink: 'syz.4.6852': attribute type 21 has an invalid length. [ 1299.054576][T27781] netlink: 16182 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1300.438584][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.445264][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.524313][T27803] FAULT_INJECTION: forcing a failure. [ 1300.524313][T27803] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.541310][T27803] CPU: 0 PID: 27803 Comm: syz.3.6881 Not tainted syzkaller #0 [ 1300.549272][T27803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1300.559375][T27803] Call Trace: [ 1300.562689][T27803] [ 1300.565665][T27803] dump_stack_lvl+0x188/0x24e [ 1300.570399][T27803] ? show_regs_print_info+0x12/0x12 [ 1300.575652][T27803] ? load_image+0x400/0x400 [ 1300.580192][T27803] ? neightbl_dump_info+0x1895/0x1a70 [ 1300.585731][T27803] should_fail_ex+0x399/0x4d0 [ 1300.590467][T27803] should_failslab+0x5/0x20 [ 1300.595190][T27803] slab_pre_alloc_hook+0x59/0x310 [ 1300.600290][T27803] kmem_cache_alloc+0x56/0x2f0 [ 1300.605103][T27803] ? skb_clone+0x1e7/0x370 [ 1300.609580][T27803] skb_clone+0x1e7/0x370 [ 1300.613885][T27803] __netlink_deliver_tap+0x3ed/0x800 [ 1300.619243][T27803] ? netlink_deliver_tap+0x2e/0x1b0 [ 1300.624496][T27803] netlink_deliver_tap+0x19c/0x1b0 [ 1300.629655][T27803] netlink_dump+0x832/0xd00 [ 1300.634216][T27803] ? netlink_lookup+0x200/0x200 [ 1300.639122][T27803] ? netlink_recvmsg+0x5e3/0xe00 [ 1300.644107][T27803] ? kmem_cache_free+0xf7/0x290 [ 1300.649002][T27803] netlink_recvmsg+0x68f/0xe00 [ 1300.653825][T27803] ? netlink_sendmsg+0xbd0/0xbd0 [ 1300.658824][T27803] ? aa_af_perm+0x340/0x340 [ 1300.663382][T27803] ? __might_fault+0xa6/0x120 [ 1300.668098][T27803] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1300.673434][T27803] ? security_socket_recvmsg+0x85/0xb0 [ 1300.679135][T27803] ? netlink_sendmsg+0xbd0/0xbd0 [ 1300.684212][T27803] ____sys_recvmsg+0x2cb/0x5e0 [ 1300.689131][T27803] ? __sys_recvmsg_sock+0x40/0x40 [ 1300.694228][T27803] ? import_iovec+0x6f/0xa0 [ 1300.698780][T27803] ___sys_recvmsg+0x212/0x590 [ 1300.703516][T27803] ? __sys_recvmsg+0x290/0x290 [ 1300.708594][T27803] ? common_file_perm+0x171/0x1c0 [ 1300.713750][T27803] ? __fget_files+0x43d/0x4b0 [ 1300.718498][T27803] __x64_sys_recvmsg+0x205/0x2e0 [ 1300.723585][T27803] ? ___sys_recvmsg+0x590/0x590 [ 1300.728507][T27803] ? lockdep_hardirqs_on+0x94/0x140 [ 1300.733756][T27803] do_syscall_64+0x4c/0xa0 [ 1300.738405][T27803] ? clear_bhb_loop+0x60/0xb0 [ 1300.743307][T27803] ? clear_bhb_loop+0x60/0xb0 [ 1300.748033][T27803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.753972][T27803] RIP: 0033:0x7fe63b39cdd9 [ 1300.758437][T27803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.778105][T27803] RSP: 002b:00007fe63c1a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1300.786748][T27803] RAX: ffffffffffffffda RBX: 00007fe63b615fa0 RCX: 00007fe63b39cdd9 [ 1300.794947][T27803] RDX: 0000000040010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1300.803050][T27803] RBP: 00007fe63c1a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.811156][T27803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.819169][T27803] R13: 00007fe63b616038 R14: 00007fe63b615fa0 R15: 00007ffc7e088b68 [ 1300.827210][T27803] [ 1301.236931][T27822] netlink: 'syz.0.6889': attribute type 1 has an invalid length. [ 1301.301174][T27822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6889'. [ 1301.920303][T27844] FAULT_INJECTION: forcing a failure. [ 1301.920303][T27844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.959273][T27844] CPU: 1 PID: 27844 Comm: syz.1.6897 Not tainted syzkaller #0 [ 1301.966834][T27844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1301.977024][T27844] Call Trace: [ 1301.980348][T27844] [ 1301.983317][T27844] dump_stack_lvl+0x188/0x24e [ 1301.988056][T27844] ? show_regs_print_info+0x12/0x12 [ 1301.993303][T27844] ? load_image+0x400/0x400 [ 1301.997921][T27844] ? __lock_acquire+0x7d10/0x7d10 [ 1302.003245][T27844] ? snprintf+0xe5/0x140 [ 1302.007514][T27844] should_fail_ex+0x399/0x4d0 [ 1302.012400][T27844] _copy_to_user+0x2c/0x130 [ 1302.017111][T27844] simple_read_from_buffer+0xe3/0x150 [ 1302.022530][T27844] proc_fail_nth_read+0x1a6/0x220 [ 1302.027575][T27844] ? proc_fault_inject_write+0x310/0x310 [ 1302.033407][T27844] ? fsnotify_perm+0x248/0x550 [ 1302.038280][T27844] ? proc_fault_inject_write+0x310/0x310 [ 1302.043931][T27844] vfs_read+0x2de/0xa00 [ 1302.048124][T27844] ? kernel_read+0x1e0/0x1e0 [ 1302.052861][T27844] ? __fget_files+0x28/0x4b0 [ 1302.057494][T27844] ? __fget_files+0x28/0x4b0 [ 1302.062105][T27844] ? __fget_files+0x43d/0x4b0 [ 1302.066834][T27844] ? __fdget_pos+0x2ae/0x360 [ 1302.071795][T27844] ? ksys_read+0x71/0x250 [ 1302.076333][T27844] ksys_read+0x14c/0x250 [ 1302.080600][T27844] ? vfs_write+0xa30/0xa30 [ 1302.085037][T27844] ? lockdep_hardirqs_on+0x94/0x140 [ 1302.090258][T27844] do_syscall_64+0x4c/0xa0 [ 1302.094703][T27844] ? clear_bhb_loop+0x60/0xb0 [ 1302.099407][T27844] ? clear_bhb_loop+0x60/0xb0 [ 1302.104109][T27844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1302.110227][T27844] RIP: 0033:0x7f2f7815d60e [ 1302.114748][T27844] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1302.134543][T27844] RSP: 002b:00007f2f79083fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1302.142985][T27844] RAX: ffffffffffffffda RBX: 00007f2f790846c0 RCX: 00007f2f7815d60e [ 1302.151151][T27844] RDX: 000000000000000f RSI: 00007f2f790840a0 RDI: 0000000000000004 [ 1302.159224][T27844] RBP: 00007f2f79084090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.167299][T27844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.175286][T27844] R13: 00007f2f78416038 R14: 00007f2f78415fa0 R15: 00007fffbcf51b88 [ 1302.183285][T27844] [ 1302.489070][T14570] Bluetooth: hci1: command 0x0406 tx timeout [ 1302.569275][T27859] netlink: 'syz.3.6902': attribute type 10 has an invalid length. [ 1302.636007][T27859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.358296][T27877] netlink: 'syz.4.6906': attribute type 29 has an invalid length. [ 1303.407890][T27859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.767341][T27859] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1305.782381][T27877] netlink: 'syz.4.6906': attribute type 29 has an invalid length. [ 1306.572465][T27900] netlink: 'syz.1.6914': attribute type 21 has an invalid length. [ 1308.451185][T27948] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6927'. [ 1308.944047][T27966] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1309.733372][T27990] tap0: tun_chr_ioctl cmd 1074812117 [ 1310.554325][T27998] netlink: 'syz.5.6943': attribute type 10 has an invalid length. [ 1310.632078][T27998] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1312.815906][T27988] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6940'. [ 1314.706257][T28072] netlink: 'syz.1.6964': attribute type 10 has an invalid length. [ 1314.745561][T28072] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1317.894619][T28124] netlink: 'syz.0.6978': attribute type 10 has an invalid length. [ 1318.144032][T28124] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6978'. [ 1321.726254][T28164] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1321.812732][T28164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1322.964924][T24343] Bluetooth: hci2: command 0x0406 tx timeout [ 1323.689259][T28188] netlink: 'syz.3.7002': attribute type 10 has an invalid length. [ 1323.895850][T28188] bridge0: port 3(team0) entered disabled state [ 1324.177893][T28188] bridge0: port 3(team0) entered disabled state [ 1324.227083][T28198] netlink: 'syz.1.7003': attribute type 29 has an invalid length. [ 1324.274788][T28199] netlink: 'syz.5.7004': attribute type 2 has an invalid length. [ 1324.313914][T28199] netlink: 'syz.5.7004': attribute type 1 has an invalid length. [ 1324.364236][T28188] device team_slave_0 left promiscuous mode [ 1324.487312][T28188] team0 (unregistering): Port device team_slave_0 removed [ 1324.524159][T28188] device team_slave_1 left promiscuous mode [ 1324.598205][T28188] team0 (unregistering): Port device team_slave_1 removed [ 1324.651611][T28198] netlink: 'syz.1.7003': attribute type 29 has an invalid length. [ 1325.594111][T28225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1329.756027][T28258] netlink: 'syz.5.7021': attribute type 29 has an invalid length. [ 1329.835600][T28258] netlink: 'syz.5.7021': attribute type 29 has an invalid length. [ 1330.821412][T28280] netlink: 'syz.4.7025': attribute type 153 has an invalid length. [ 1330.948709][T28280] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.7025'. [ 1331.633653][T28285] netlink: 'syz.0.7027': attribute type 10 has an invalid length. [ 1331.674490][T28285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1332.069852][T28285] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1332.100068][T28285] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.150200][T28285] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1332.185997][T28312] netlink: 'syz.4.7035': attribute type 29 has an invalid length. [ 1332.228153][T28305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7034'. [ 1332.266630][T28312] netlink: 'syz.4.7035': attribute type 29 has an invalid length. [ 1333.747007][T28343] netlink: 'syz.3.7040': attribute type 10 has an invalid length. [ 1333.855977][T28347] netlink: 'syz.5.7049': attribute type 3 has an invalid length. [ 1333.893344][T28343] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7040'. [ 1333.930143][T28347] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7049'. [ 1335.404350][T28376] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7058'. [ 1336.163526][T28395] ref_ctr_offset mismatch. inode: 0x1a0 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1336.462830][T28408] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.7070'. [ 1336.893086][T28414] netlink: 'syz.5.7071': attribute type 2 has an invalid length. [ 1336.921781][T28411] device syzkaller0 entered promiscuous mode [ 1336.959437][T28414] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7071'. [ 1337.269112][T28410] netlink: 'syz.5.7071': attribute type 14 has an invalid length. [ 1338.191384][T28437] netlink: 'syz.0.7078': attribute type 3 has an invalid length. [ 1338.314257][T28437] netlink: 'syz.0.7078': attribute type 1 has an invalid length. [ 1338.322342][T28437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7078'. [ 1346.950476][T28488] FAULT_INJECTION: forcing a failure. [ 1346.950476][T28488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.981761][T28488] CPU: 0 PID: 28488 Comm: syz.4.7098 Not tainted syzkaller #0 [ 1346.989318][T28488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1346.999428][T28488] Call Trace: [ 1347.002784][T28488] [ 1347.005751][T28488] dump_stack_lvl+0x188/0x24e [ 1347.010481][T28488] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1347.016688][T28488] ? show_regs_print_info+0x12/0x12 [ 1347.021949][T28488] ? load_image+0x400/0x400 [ 1347.026594][T28488] should_fail_ex+0x399/0x4d0 [ 1347.031320][T28488] strncpy_from_user+0x32/0x350 [ 1347.036227][T28488] bpf_prog_load+0x1f3/0x1560 [ 1347.041056][T28488] ? map_freeze+0x390/0x390 [ 1347.045698][T28488] ? __might_fault+0xa6/0x120 [ 1347.050521][T28488] ? __might_fault+0xa6/0x120 [ 1347.055250][T28488] ? __might_fault+0xc2/0x120 [ 1347.060070][T28488] ? __might_fault+0xa6/0x120 [ 1347.064797][T28488] ? bpf_lsm_bpf+0x5/0x10 [ 1347.069424][T28488] ? security_bpf+0x7a/0xa0 [ 1347.074054][T28488] __sys_bpf+0x5b8/0x780 [ 1347.078440][T28488] ? bpf_link_show_fdinfo+0x380/0x380 [ 1347.083971][T28488] ? lock_chain_count+0x20/0x20 [ 1347.088874][T28488] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1347.094916][T28488] __x64_sys_bpf+0x78/0x90 [ 1347.099386][T28488] do_syscall_64+0x4c/0xa0 [ 1347.103854][T28488] ? clear_bhb_loop+0x60/0xb0 [ 1347.108586][T28488] ? clear_bhb_loop+0x60/0xb0 [ 1347.113324][T28488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.119362][T28488] RIP: 0033:0x7f100539cdd9 [ 1347.123832][T28488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.144965][T28488] RSP: 002b:00007f10062b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1347.153627][T28488] RAX: ffffffffffffffda RBX: 00007f1005615fa0 RCX: 00007f100539cdd9 [ 1347.161741][T28488] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1347.169763][T28488] RBP: 00007f10062b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.177779][T28488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.185882][T28488] R13: 00007f1005616038 R14: 00007f1005615fa0 R15: 00007ffde1ddabe8 [ 1347.193916][T28488] [ 1347.222725][T28504] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 1348.061110][T28529] netlink: 'syz.4.7107': attribute type 17 has an invalid length. [ 1348.083416][T28529] netlink: 'syz.4.7107': attribute type 16 has an invalid length. [ 1348.091328][T28529] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7107'. [ 1348.379766][T28535] netlink: 'syz.5.7110': attribute type 21 has an invalid length. [ 1348.398720][T28535] netlink: 'syz.5.7110': attribute type 4 has an invalid length. [ 1349.342228][T28558] FAULT_INJECTION: forcing a failure. [ 1349.342228][T28558] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.356076][T28558] CPU: 0 PID: 28558 Comm: syz.5.7118 Not tainted syzkaller #0 [ 1349.363715][T28558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.373789][T28558] Call Trace: [ 1349.377171][T28558] [ 1349.380121][T28558] dump_stack_lvl+0x188/0x24e [ 1349.384832][T28558] ? show_regs_print_info+0x12/0x12 [ 1349.390209][T28558] ? load_image+0x400/0x400 [ 1349.394920][T28558] should_fail_ex+0x399/0x4d0 [ 1349.399633][T28558] should_failslab+0x5/0x20 [ 1349.404154][T28558] slab_pre_alloc_hook+0x59/0x310 [ 1349.409290][T28558] ? __get_vm_area_node+0x122/0x330 [ 1349.414505][T28558] __kmem_cache_alloc_node+0x4f/0x260 [ 1349.419980][T28558] ? __get_vm_area_node+0x122/0x330 [ 1349.425193][T28558] kmalloc_node_trace+0x22/0xe0 [ 1349.430088][T28558] __get_vm_area_node+0x122/0x330 [ 1349.435134][T28558] __vmalloc_node_range+0x357/0x13b0 [ 1349.440531][T28558] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1349.446110][T28558] ? perf_trace_preemptirq_template+0x268/0x320 [ 1349.452384][T28558] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1349.458395][T28558] ? free_vm_area+0x50/0x50 [ 1349.463002][T28558] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1349.469174][T28558] ? lockdep_hardirqs_on+0x94/0x140 [ 1349.474406][T28558] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1349.479970][T28558] __vmalloc+0x76/0x80 [ 1349.484159][T28558] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1349.490004][T28558] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1349.495416][T28558] bpf_prog_alloc+0x1c/0x1b0 [ 1349.500037][T28558] bpf_prog_load+0x7c9/0x1560 [ 1349.504749][T28558] ? map_freeze+0x390/0x390 [ 1349.509269][T28558] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1349.515451][T28558] ? lockdep_hardirqs_on+0x94/0x140 [ 1349.520766][T28558] ? security_bpf+0x40/0xa0 [ 1349.525471][T28558] ? bpf_lsm_bpf+0x5/0x10 [ 1349.529840][T28558] ? security_bpf+0x7a/0xa0 [ 1349.534623][T28558] __sys_bpf+0x5b8/0x780 [ 1349.538906][T28558] ? bpf_link_show_fdinfo+0x380/0x380 [ 1349.544329][T28558] __x64_sys_bpf+0x78/0x90 [ 1349.548851][T28558] do_syscall_64+0x4c/0xa0 [ 1349.553383][T28558] ? clear_bhb_loop+0x60/0xb0 [ 1349.558286][T28558] ? clear_bhb_loop+0x60/0xb0 [ 1349.563006][T28558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.568936][T28558] RIP: 0033:0x7f487c59cdd9 [ 1349.573469][T28558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.593111][T28558] RSP: 002b:00007f487d49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1349.601729][T28558] RAX: ffffffffffffffda RBX: 00007f487c815fa0 RCX: 00007f487c59cdd9 [ 1349.609915][T28558] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1349.618100][T28558] RBP: 00007f487d49a090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.626094][T28558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.634184][T28558] R13: 00007f487c816038 R14: 00007f487c815fa0 R15: 00007ffce9314848 [ 1349.642285][T28558] [ 1349.675972][T28558] syz.5.7118: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1349.773311][T28558] CPU: 1 PID: 28558 Comm: syz.5.7118 Not tainted syzkaller #0 [ 1349.780879][T28558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.790982][T28558] Call Trace: [ 1349.794291][T28558] [ 1349.797456][T28558] dump_stack_lvl+0x188/0x24e [ 1349.802279][T28558] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1349.808747][T28558] ? show_regs_print_info+0x12/0x12 [ 1349.814018][T28558] ? load_image+0x400/0x400 [ 1349.818631][T28558] ? __rcu_read_unlock+0x78/0xd0 [ 1349.823624][T28558] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1349.830181][T28558] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1349.836922][T28558] warn_alloc+0x242/0x330 [ 1349.841302][T28558] ? __get_vm_area_node+0x122/0x330 [ 1349.846559][T28558] ? zone_watermark_ok_safe+0x270/0x270 [ 1349.852167][T28558] ? rcu_is_watching+0x11/0xa0 [ 1349.857254][T28558] ? __get_vm_area_node+0x318/0x330 [ 1349.862601][T28558] __vmalloc_node_range+0x37c/0x13b0 [ 1349.868271][T28558] ? perf_trace_preemptirq_template+0x268/0x320 [ 1349.874543][T28558] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1349.880751][T28558] ? free_vm_area+0x50/0x50 [ 1349.885294][T28558] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1349.891487][T28558] ? lockdep_hardirqs_on+0x94/0x140 [ 1349.896887][T28558] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1349.902460][T28558] __vmalloc+0x76/0x80 [ 1349.906728][T28558] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1349.912394][T28558] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1349.918077][T28558] bpf_prog_alloc+0x1c/0x1b0 [ 1349.922986][T28558] bpf_prog_load+0x7c9/0x1560 [ 1349.927798][T28558] ? map_freeze+0x390/0x390 [ 1349.932320][T28558] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1349.938493][T28558] ? lockdep_hardirqs_on+0x94/0x140 [ 1349.943817][T28558] ? security_bpf+0x40/0xa0 [ 1349.948336][T28558] ? bpf_lsm_bpf+0x5/0x10 [ 1349.952699][T28558] ? security_bpf+0x7a/0xa0 [ 1349.957219][T28558] __sys_bpf+0x5b8/0x780 [ 1349.961480][T28558] ? bpf_link_show_fdinfo+0x380/0x380 [ 1349.966899][T28558] __x64_sys_bpf+0x78/0x90 [ 1349.971352][T28558] do_syscall_64+0x4c/0xa0 [ 1349.975797][T28558] ? clear_bhb_loop+0x60/0xb0 [ 1349.980589][T28558] ? clear_bhb_loop+0x60/0xb0 [ 1349.985377][T28558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.991294][T28558] RIP: 0033:0x7f487c59cdd9 [ 1349.995723][T28558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.015693][T28558] RSP: 002b:00007f487d49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.024129][T28558] RAX: ffffffffffffffda RBX: 00007f487c815fa0 RCX: 00007f487c59cdd9 [ 1350.032113][T28558] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1350.040290][T28558] RBP: 00007f487d49a090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.048372][T28558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.056449][T28558] R13: 00007f487c816038 R14: 00007f487c815fa0 R15: 00007ffce9314848 [ 1350.064800][T28558] [ 1350.260213][T28567] netlink: 'syz.0.7120': attribute type 2 has an invalid length. [ 1350.272984][T28558] Mem-Info: [ 1350.278622][T28558] active_anon:8537 inactive_anon:0 isolated_anon:0 [ 1350.278622][T28558] active_file:21476 inactive_file:40455 isolated_file:0 [ 1350.278622][T28558] unevictable:768 dirty:106 writeback:0 [ 1350.278622][T28558] slab_reclaimable:21459 slab_unreclaimable:95789 [ 1350.278622][T28558] mapped:29731 shmem:1373 pagetables:705 [ 1350.278622][T28558] sec_pagetables:0 bounce:0 [ 1350.278622][T28558] kernel_misc_reclaimable:0 [ 1350.278622][T28558] free:1313938 free_pcp:6118 free_cma:0 [ 1350.335939][T28558] Node 0 active_anon:34148kB inactive_anon:0kB active_file:85904kB inactive_file:161620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118924kB dirty:424kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11136kB pagetables:2820kB sec_pagetables:0kB all_unreclaimable? no [ 1350.348402][T28567] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.7120'. [ 1350.385222][T28558] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1350.483240][T28558] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.603476][T28558] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1350.609452][T28558] Node 0 DMA32 free:1335496kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:34148kB inactive_anon:0kB active_file:85904kB inactive_file:161620kB unevictable:1536kB writepending:424kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:17116kB local_pcp:14444kB free_cma:0kB [ 1350.703286][T28558] lowmem_reserve[]: 0 0 1 1 1 [ 1350.708369][T28558] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1350.756923][T28585] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.1.1 [ 1350.787101][T28558] lowmem_reserve[]: 0 0 0 0 0 [ 1350.791926][T28558] Node 1 Normal free:3904880kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6884kB local_pcp:6884kB free_cma:0kB [ 1350.823068][T28558] lowmem_reserve[]: 0 0 0 0 0 [ 1350.836302][T28558] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1350.883007][T28558] Node 0 DMA32: 1778*4kB (UME) 3014*8kB (UME) 1889*16kB (UME) 982*32kB (UME) 660*64kB (UME) 882*128kB (UME) 308*256kB (UM) 150*512kB (UM) 62*1024kB (UME) 20*2048kB (UME) 202*4096kB (UM) = 1335496kB [ 1350.919671][T28558] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1351.038741][T28558] Node 1 Normal: 242*4kB (UE) 35*8kB (UME) 37*16kB (UME) 206*32kB (UME) 88*64kB (UME) 23*128kB (UME) 7*256kB (UE) 2*512kB (UM) 0*1024kB 3*2048kB (UE) 947*4096kB (M) = 3904880kB [ 1351.057283][T28558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.067729][T28558] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1351.077578][T28558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.092238][T28558] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1351.102308][T28583] device wlan1 entered promiscuous mode [ 1351.113642][T28558] 63304 total pagecache pages [ 1351.118483][T28558] 0 pages in swap cache [ 1351.122875][T28558] Free swap = 124996kB [ 1351.132440][T28558] Total swap = 124996kB [ 1351.141476][T28558] 2097051 pages RAM [ 1351.167279][T28558] 0 pages HighMem/MovableOnly [ 1351.172905][T28558] 415209 pages reserved [ 1351.231965][T28558] 0 pages cma reserved [ 1351.790313][T28607] netlink: 'syz.3.7135': attribute type 10 has an invalid length. [ 1351.841765][T28607] device wlan1 left promiscuous mode [ 1352.065044][T28607] bond0: (slave wlan1): Releasing backup interface [ 1354.412096][T28669] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7158'. [ 1356.213364][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 10.1.1.1 [ 1356.307026][T28727] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1356.313982][T28727] syzkaller0: linktype set to 776 [ 1356.537148][T28725] netlink: 'syz.3.7176': attribute type 21 has an invalid length. [ 1356.560573][T28725] netlink: 'syz.3.7176': attribute type 4 has an invalid length. [ 1358.604697][T28776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7192'. [ 1360.175801][T28798] netlink: 'syz.4.7199': attribute type 10 has an invalid length. [ 1360.216001][T28798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7199'. [ 1360.625468][T28812] netlink: 'syz.5.7202': attribute type 10 has an invalid length. [ 1360.817087][T28820] netlink: 'syz.3.7204': attribute type 29 has an invalid length. [ 1361.041525][T28812] device wlan1 left promiscuous mode [ 1361.586862][T28812] team0: Port device wlan1 added [ 1361.597819][T28820] netlink: 'syz.3.7204': attribute type 29 has an invalid length. [ 1361.656817][T28825] netlink: 'syz.3.7204': attribute type 29 has an invalid length. [ 1361.674065][T28828] netlink: 'syz.3.7204': attribute type 29 has an invalid length. [ 1361.845764][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.852646][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.970237][T28837] netlink: 'syz.0.7208': attribute type 1 has an invalid length. [ 1362.021352][T28837] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7208'. [ 1364.345765][T28903] FAULT_INJECTION: forcing a failure. [ 1364.345765][T28903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.387851][T28903] CPU: 1 PID: 28903 Comm: syz.3.7233 Not tainted syzkaller #0 [ 1364.395419][T28903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1364.405519][T28903] Call Trace: [ 1364.408828][T28903] [ 1364.411786][T28903] dump_stack_lvl+0x188/0x24e [ 1364.416616][T28903] ? show_regs_print_info+0x12/0x12 [ 1364.422216][T28903] ? load_image+0x400/0x400 [ 1364.426764][T28903] ? __lock_acquire+0x7d10/0x7d10 [ 1364.432083][T28903] should_fail_ex+0x399/0x4d0 [ 1364.436896][T28903] _copy_from_user+0x2c/0x170 [ 1364.441608][T28903] iovec_from_user+0x143/0x360 [ 1364.446556][T28903] __import_iovec+0x6d/0x500 [ 1364.451176][T28903] ? __might_fault+0xa6/0x120 [ 1364.456048][T28903] import_iovec+0x6f/0xa0 [ 1364.460487][T28903] ___sys_recvmsg+0x4b6/0x590 [ 1364.465374][T28903] ? __sys_recvmsg+0x290/0x290 [ 1364.470250][T28903] ? common_file_perm+0x171/0x1c0 [ 1364.476270][T28903] ? __fget_files+0x43d/0x4b0 [ 1364.481070][T28903] __x64_sys_recvmsg+0x205/0x2e0 [ 1364.486029][T28903] ? ___sys_recvmsg+0x590/0x590 [ 1364.490916][T28903] ? lockdep_hardirqs_on+0x94/0x140 [ 1364.496135][T28903] do_syscall_64+0x4c/0xa0 [ 1364.500571][T28903] ? clear_bhb_loop+0x60/0xb0 [ 1364.505271][T28903] ? clear_bhb_loop+0x60/0xb0 [ 1364.509969][T28903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1364.516050][T28903] RIP: 0033:0x7fe63b39cdd9 [ 1364.520564][T28903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.540282][T28903] RSP: 002b:00007fe63c1a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1364.549150][T28903] RAX: ffffffffffffffda RBX: 00007fe63b615fa0 RCX: 00007fe63b39cdd9 [ 1364.557322][T28903] RDX: 0000000040010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1364.565315][T28903] RBP: 00007fe63c1a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.573647][T28903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.581721][T28903] R13: 00007fe63b616038 R14: 00007fe63b615fa0 R15: 00007ffc7e088b68 [ 1364.589721][T28903] [ 1365.943801][T28929] netlink: 'syz.4.7240': attribute type 41 has an invalid length. [ 1365.968604][T28929] netlink: 'syz.4.7240': attribute type 41 has an invalid length. [ 1366.421360][T28939] netlink: 'syz.1.7242': attribute type 2 has an invalid length. [ 1366.445590][T28939] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1368.273945][T28994] netlink: 'syz.1.7260': attribute type 3 has an invalid length. [ 1368.283520][T28994] netlink: 'syz.1.7260': attribute type 4 has an invalid length. [ 1368.291292][T28994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7260'. [ 1368.641807][T29005] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7264'. [ 1368.773803][T29002] netlink: 'syz.3.7261': attribute type 21 has an invalid length. [ 1368.782971][T29002] netlink: 'syz.3.7261': attribute type 10 has an invalid length. [ 1368.813293][T29002] netlink: 'syz.3.7261': attribute type 12 has an invalid length. [ 1368.883709][T29002] netlink: 'syz.3.7261': attribute type 13 has an invalid length. [ 1368.892923][T29002] netlink: 'syz.3.7261': attribute type 14 has an invalid length. [ 1368.981830][T29002] netlink: 'syz.3.7261': attribute type 15 has an invalid length. [ 1369.004294][T29002] netlink: 'syz.3.7261': attribute type 16 has an invalid length. [ 1369.019346][T29002] netlink: 'syz.3.7261': attribute type 19 has an invalid length. [ 1369.043852][T29002] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.7261'. [ 1370.464960][T29046] netlink: 92148 bytes leftover after parsing attributes in process `syz.3.7276'. [ 1370.832019][T29055] netlink: 826 bytes leftover after parsing attributes in process `syz.0.7280'. [ 1372.379338][T29095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7293'. [ 1373.602959][T29113] validate_nla: 3 callbacks suppressed [ 1373.603006][T29113] netlink: 'syz.4.7301': attribute type 21 has an invalid length. [ 1373.629805][T29113] IPv6: NLM_F_CREATE should be specified when creating new route [ 1374.030880][T29129] FAULT_INJECTION: forcing a failure. [ 1374.030880][T29129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1374.048463][T29131] tap0: tun_chr_ioctl cmd 2147767517 [ 1374.048921][T29129] CPU: 1 PID: 29129 Comm: syz.5.7303 Not tainted syzkaller #0 [ 1374.061471][T29129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1374.071914][T29129] Call Trace: [ 1374.075318][T29129] [ 1374.078280][T29129] dump_stack_lvl+0x188/0x24e [ 1374.083012][T29129] ? show_regs_print_info+0x12/0x12 [ 1374.088259][T29129] ? load_image+0x400/0x400 [ 1374.092914][T29129] ? __lock_acquire+0x7d10/0x7d10 [ 1374.098287][T29129] should_fail_ex+0x399/0x4d0 [ 1374.103106][T29129] prepare_alloc_pages+0x1e2/0x5f0 [ 1374.108363][T29129] __alloc_pages+0x130/0x4f0 [ 1374.113088][T29129] ? zone_statistics+0x170/0x170 [ 1374.118091][T29129] ? verify_lock_unused+0x140/0x140 [ 1374.123342][T29129] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1374.129597][T29129] __folio_alloc+0xe/0x30 [ 1374.133975][T29129] vma_alloc_folio+0x4a3/0x900 [ 1374.138798][T29129] wp_page_copy+0x28b/0x1680 [ 1374.143436][T29129] ? do_wp_page+0x67f/0x1680 [ 1374.148170][T29129] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 1374.153871][T29129] handle_mm_fault+0x1d19/0x3ee0 [ 1374.158872][T29129] ? mt_find+0x157/0x830 [ 1374.163175][T29129] ? numa_migrate_prep+0x250/0x250 [ 1374.168336][T29129] ? lock_chain_count+0x20/0x20 [ 1374.173222][T29129] ? perf_trace_preemptirq_template+0x268/0x320 [ 1374.179507][T29129] ? lock_mm_and_find_vma+0xae/0x2f0 [ 1374.184844][T29129] do_user_addr_fault+0x51f/0xb10 [ 1374.189923][T29129] exc_page_fault+0x60/0x100 [ 1374.194644][T29129] asm_exc_page_fault+0x22/0x30 [ 1374.199544][T29129] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1374.206181][T29129] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1374.225918][T29129] RSP: 0018:ffffc90005f97628 EFLAGS: 00050202 [ 1374.232034][T29129] RAX: ffffffff840f0c01 RBX: 0000000000000e5c RCX: 000000000000061c [ 1374.240050][T29129] RDX: 0000000000000e5c RSI: ffff888064786840 RDI: 0000200000002000 [ 1374.248063][T29129] RBP: 0000000000000000 R08: ffff888064786e5b R09: 1ffff1100c8f0dcb [ 1374.256075][T29129] R10: dffffc0000000000 R11: ffffed100c8f0dcc R12: 00007fffffffe1a4 [ 1374.264178][T29129] R13: 0000000000000e5c R14: ffff888064786000 R15: 00002000000017c0 [ 1374.272458][T29129] ? copy_pipe_to_iter+0x171/0x180 [ 1374.277640][T29129] copyout+0xe7/0x120 [ 1374.281767][T29129] _copy_to_iter+0x48b/0x1040 [ 1374.286596][T29129] ? iov_iter_init+0x1f0/0x1f0 [ 1374.291491][T29129] ? __virt_addr_valid+0x188/0x540 [ 1374.296749][T29129] ? __virt_addr_valid+0x465/0x540 [ 1374.301918][T29129] ? __phys_addr_symbol+0x2b/0x70 [ 1374.306990][T29129] ? __check_object_size+0x500/0xa40 [ 1374.312321][T29129] __skb_datagram_iter+0xde/0x740 [ 1374.317403][T29129] ? skb_copy_datagram_iter+0x290/0x290 [ 1374.323169][T29129] skb_copy_datagram_iter+0xd7/0x290 [ 1374.328503][T29129] netlink_recvmsg+0x2d0/0xe00 [ 1374.333327][T29129] ? netlink_sendmsg+0xbd0/0xbd0 [ 1374.338321][T29129] ? aa_af_perm+0x340/0x340 [ 1374.342868][T29129] ? __might_fault+0xa6/0x120 [ 1374.347585][T29129] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1374.352907][T29129] ? security_socket_recvmsg+0x85/0xb0 [ 1374.358598][T29129] ? netlink_sendmsg+0xbd0/0xbd0 [ 1374.363586][T29129] ____sys_recvmsg+0x2cb/0x5e0 [ 1374.368407][T29129] ? __sys_recvmsg_sock+0x40/0x40 [ 1374.373491][T29129] ? import_iovec+0x6f/0xa0 [ 1374.378131][T29129] ___sys_recvmsg+0x212/0x590 [ 1374.382870][T29129] ? __sys_recvmsg+0x290/0x290 [ 1374.387694][T29129] ? common_file_perm+0x171/0x1c0 [ 1374.392778][T29129] ? __fget_files+0x43d/0x4b0 [ 1374.397701][T29129] __x64_sys_recvmsg+0x205/0x2e0 [ 1374.402727][T29129] ? ___sys_recvmsg+0x590/0x590 [ 1374.407650][T29129] ? lockdep_hardirqs_on+0x94/0x140 [ 1374.412904][T29129] do_syscall_64+0x4c/0xa0 [ 1374.417369][T29129] ? clear_bhb_loop+0x60/0xb0 [ 1374.422086][T29129] ? clear_bhb_loop+0x60/0xb0 [ 1374.426805][T29129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1374.432830][T29129] RIP: 0033:0x7f487c59cdd9 [ 1374.437284][T29129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.456925][T29129] RSP: 002b:00007f487d479028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1374.465385][T29129] RAX: ffffffffffffffda RBX: 00007f487c816090 RCX: 00007f487c59cdd9 [ 1374.473476][T29129] RDX: 0000000040010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1374.481568][T29129] RBP: 00007f487d479090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.489746][T29129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.497876][T29129] R13: 00007f487c816128 R14: 00007f487c816090 R15: 00007ffce9314848 [ 1374.505902][T29129] [ 1374.710890][T29148] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7310'. [ 1374.759504][T29148] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7310'. [ 1375.364840][T29159] netlink: 'syz.5.7313': attribute type 2 has an invalid length. [ 1375.423457][T29159] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.7313'. [ 1376.817883][T29203] netlink: 'syz.3.7328': attribute type 3 has an invalid length. [ 1376.850959][T29203] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7328'. [ 1378.048097][T29231] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7338'. [ 1378.074775][T29231] netlink: 'syz.3.7338': attribute type 39 has an invalid length. [ 1378.568494][T29249] netlink: 'syz.1.7343': attribute type 39 has an invalid length. [ 1379.293446][T24343] Bluetooth: hci4: command 0x0406 tx timeout [ 1379.562428][T29255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.624336][T29255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.705992][T29255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.754134][T29255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.028271][T29255] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1380.060619][T29255] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1380.180682][T29277] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1380.256959][T29277] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1383.414298][T29321] netlink: 'syz.3.7367': attribute type 10 has an invalid length. [ 1383.782554][T29335] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7370'. [ 1383.894637][T29334] netlink: 'syz.3.7371': attribute type 2 has an invalid length. [ 1383.928117][T29334] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1384.127658][T29335] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7370'. [ 1384.294925][T29345] FAULT_INJECTION: forcing a failure. [ 1384.294925][T29345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.364982][T29345] CPU: 0 PID: 29345 Comm: syz.0.7373 Not tainted syzkaller #0 [ 1384.372701][T29345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1384.382891][T29345] Call Trace: [ 1384.386226][T29345] [ 1384.389281][T29345] dump_stack_lvl+0x188/0x24e [ 1384.394363][T29345] ? show_regs_print_info+0x12/0x12 [ 1384.399701][T29345] ? load_image+0x400/0x400 [ 1384.404254][T29345] ? __lock_acquire+0x7d10/0x7d10 [ 1384.409330][T29345] ? snprintf+0xe5/0x140 [ 1384.413618][T29345] should_fail_ex+0x399/0x4d0 [ 1384.418340][T29345] _copy_to_user+0x2c/0x130 [ 1384.422889][T29345] simple_read_from_buffer+0xe3/0x150 [ 1384.428304][T29345] proc_fail_nth_read+0x1a6/0x220 [ 1384.433378][T29345] ? proc_fault_inject_write+0x310/0x310 [ 1384.439063][T29345] ? fsnotify_perm+0x248/0x550 [ 1384.443872][T29345] ? proc_fault_inject_write+0x310/0x310 [ 1384.449547][T29345] vfs_read+0x2de/0xa00 [ 1384.453738][T29345] ? kernel_read+0x1e0/0x1e0 [ 1384.458354][T29345] ? __fget_files+0x28/0x4b0 [ 1384.462998][T29345] ? __fget_files+0x28/0x4b0 [ 1384.467618][T29345] ? __fget_files+0x43d/0x4b0 [ 1384.472328][T29345] ? __fdget_pos+0x2ae/0x360 [ 1384.476942][T29345] ? ksys_read+0x71/0x250 [ 1384.481384][T29345] ksys_read+0x14c/0x250 [ 1384.485651][T29345] ? vfs_write+0xa30/0xa30 [ 1384.490192][T29345] ? lockdep_hardirqs_on+0x94/0x140 [ 1384.495444][T29345] do_syscall_64+0x4c/0xa0 [ 1384.500013][T29345] ? clear_bhb_loop+0x60/0xb0 [ 1384.504706][T29345] ? clear_bhb_loop+0x60/0xb0 [ 1384.509403][T29345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.515315][T29345] RIP: 0033:0x7f57a5d5d60e [ 1384.519752][T29345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1384.539371][T29345] RSP: 002b:00007f57a6c92fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1384.547890][T29345] RAX: ffffffffffffffda RBX: 00007f57a6c936c0 RCX: 00007f57a5d5d60e [ 1384.555872][T29345] RDX: 000000000000000f RSI: 00007f57a6c930a0 RDI: 0000000000000004 [ 1384.563971][T29345] RBP: 00007f57a6c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.572042][T29345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.580027][T29345] R13: 00007f57a6016038 R14: 00007f57a6015fa0 R15: 00007ffda07636e8 [ 1384.588036][T29345] [ 1386.162572][T29393] netlink: 'syz.4.7388': attribute type 10 has an invalid length. [ 1386.248851][T29393] netlink: 65019 bytes leftover after parsing attributes in process `syz.4.7388'. [ 1389.805358][T29453] netlink: 'syz.1.7408': attribute type 2 has an invalid length. [ 1390.287366][T29453] device 1 entered promiscuous mode [ 1390.800083][T29491] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7420'. [ 1391.001355][T29491] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1391.935460][T29501] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7422'. [ 1392.023105][T29501] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1392.064934][T29501] CPU: 0 PID: 29501 Comm: syz.0.7422 Not tainted syzkaller #0 [ 1392.072501][T29501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1392.082793][T29501] Call Trace: [ 1392.086205][T29501] [ 1392.089266][T29501] dump_stack_lvl+0x188/0x24e [ 1392.094205][T29501] ? show_regs_print_info+0x12/0x12 [ 1392.099551][T29501] ? load_image+0x400/0x400 [ 1392.104120][T29501] sysfs_warn_dup+0x8a/0xa0 [ 1392.108680][T29501] sysfs_do_create_link_sd+0xc0/0x110 [ 1392.114417][T29501] device_add+0x7ed/0xfb0 [ 1392.118804][T29501] wiphy_register+0x1d9f/0x2ac0 [ 1392.123821][T29501] ? cfg80211_event_work+0x40/0x40 [ 1392.129076][T29501] ? minstrel_ht_alloc+0x894/0xa20 [ 1392.134353][T29501] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1392.140582][T29501] ieee80211_register_hw+0x2d00/0x39f0 [ 1392.146139][T29501] ? ieee80211_register_hw+0xf21/0x39f0 [ 1392.151758][T29501] ? ieee80211_register_hw+0xf21/0x39f0 [ 1392.157381][T29501] ? ieee80211_tasklet_handler+0x20/0x20 [ 1392.163080][T29501] ? memset+0x1e/0x40 [ 1392.167108][T29501] ? __hrtimer_init+0x186/0x270 [ 1392.172032][T29501] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1392.177827][T29501] hwsim_new_radio_nl+0xafa/0xce0 [ 1392.182902][T29501] genl_family_rcv_msg_doit+0x22a/0x330 [ 1392.188482][T29501] ? end_current_label_crit_section+0x170/0x170 [ 1392.194774][T29501] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1392.200736][T29501] ? bpf_lsm_capable+0x5/0x10 [ 1392.205458][T29501] ? security_capable+0x85/0xb0 [ 1392.210370][T29501] genl_rcv_msg+0x604/0x790 [ 1392.214944][T29501] ? genl_bind+0x360/0x360 [ 1392.219502][T29501] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1392.226010][T29501] netlink_rcv_skb+0x1fb/0x450 [ 1392.230918][T29501] ? genl_bind+0x360/0x360 [ 1392.235383][T29501] ? netlink_ack+0x1170/0x1170 [ 1392.240223][T29501] ? down_read+0x1a8/0x2d0 [ 1392.244701][T29501] genl_rcv+0x24/0x40 [ 1392.248816][T29501] netlink_unicast+0x74d/0x8d0 [ 1392.253654][T29501] netlink_sendmsg+0x8ad/0xbd0 [ 1392.258479][T29501] ? netlink_getsockopt+0x550/0x550 [ 1392.263737][T29501] ? aa_sock_msg_perm+0x94/0x150 [ 1392.268814][T29501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1392.274147][T29501] ? security_socket_sendmsg+0x7c/0xa0 [ 1392.279689][T29501] ? netlink_getsockopt+0x550/0x550 [ 1392.284940][T29501] ____sys_sendmsg+0x5be/0x970 [ 1392.289783][T29501] ? __sys_sendmsg_sock+0x30/0x30 [ 1392.294878][T29501] ? __import_iovec+0x315/0x500 [ 1392.299805][T29501] ? import_iovec+0x6f/0xa0 [ 1392.304378][T29501] ___sys_sendmsg+0x2a2/0x360 [ 1392.309120][T29501] ? __sys_sendmsg+0x290/0x290 [ 1392.314106][T29501] __se_sys_sendmsg+0x1bb/0x2a0 [ 1392.319039][T29501] ? ct_nmi_exit+0x145/0x1c0 [ 1392.323694][T29501] ? __x64_sys_sendmsg+0x80/0x80 [ 1392.328718][T29501] ? lockdep_hardirqs_on+0x94/0x140 [ 1392.334061][T29501] do_syscall_64+0x4c/0xa0 [ 1392.338544][T29501] ? clear_bhb_loop+0x60/0xb0 [ 1392.343362][T29501] ? clear_bhb_loop+0x60/0xb0 [ 1392.348097][T29501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1392.354313][T29501] RIP: 0033:0x7f57a5d9cdd9 [ 1392.358817][T29501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.378493][T29501] RSP: 002b:00007f57a6c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1392.386970][T29501] RAX: ffffffffffffffda RBX: 00007f57a6015fa0 RCX: 00007f57a5d9cdd9 [ 1392.395000][T29501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1392.403023][T29501] RBP: 00007f57a5e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1392.411043][T29501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.419157][T29501] R13: 00007f57a6016038 R14: 00007f57a6015fa0 R15: 00007ffda07636e8 [ 1392.427287][T29501] [ 1392.978026][T29520] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.7428'. [ 1393.720582][T29550] netlink: 'syz.0.7438': attribute type 2 has an invalid length. [ 1393.813532][T29550] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7438'. [ 1395.561776][T29596] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7449'. [ 1395.840012][T29596] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1396.209326][T29612] netlink: 'syz.3.7455': attribute type 10 has an invalid length. [ 1398.278998][T29652] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7466'. [ 1398.386528][T29652] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1398.450550][T29652] CPU: 1 PID: 29652 Comm: syz.4.7466 Not tainted syzkaller #0 [ 1398.458106][T29652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1398.468294][T29652] Call Trace: [ 1398.471627][T29652] [ 1398.474611][T29652] dump_stack_lvl+0x188/0x24e [ 1398.479358][T29652] ? show_regs_print_info+0x12/0x12 [ 1398.484624][T29652] ? load_image+0x400/0x400 [ 1398.489189][T29652] sysfs_warn_dup+0x8a/0xa0 [ 1398.493745][T29652] sysfs_do_create_link_sd+0xc0/0x110 [ 1398.499174][T29652] device_add+0x7ed/0xfb0 [ 1398.503567][T29652] wiphy_register+0x1d9f/0x2ac0 [ 1398.508475][T29652] ? __rtnl_unlock+0x14/0xe0 [ 1398.513217][T29652] ? cfg80211_event_work+0x40/0x40 [ 1398.518387][T29652] ? minstrel_ht_alloc+0x894/0xa20 [ 1398.523613][T29652] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1398.529998][T29652] ieee80211_register_hw+0x2d00/0x39f0 [ 1398.535492][T29652] ? lockdep_hardirqs_on+0x94/0x140 [ 1398.540733][T29652] ? ieee80211_register_hw+0xf21/0x39f0 [ 1398.546305][T29652] ? ieee80211_register_hw+0xf21/0x39f0 [ 1398.551887][T29652] ? ieee80211_tasklet_handler+0x20/0x20 [ 1398.557557][T29652] ? memset+0x1e/0x40 [ 1398.561552][T29652] ? __hrtimer_init+0x186/0x270 [ 1398.566445][T29652] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1398.572212][T29652] hwsim_new_radio_nl+0xafa/0xce0 [ 1398.577372][T29652] genl_family_rcv_msg_doit+0x22a/0x330 [ 1398.583030][T29652] ? end_current_label_crit_section+0x170/0x170 [ 1398.589293][T29652] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1398.595209][T29652] ? bpf_lsm_capable+0x5/0x10 [ 1398.599906][T29652] ? security_capable+0x85/0xb0 [ 1398.604800][T29652] genl_rcv_msg+0x604/0x790 [ 1398.609435][T29652] ? genl_bind+0x360/0x360 [ 1398.613898][T29652] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1398.620353][T29652] netlink_rcv_skb+0x1fb/0x450 [ 1398.625154][T29652] ? genl_bind+0x360/0x360 [ 1398.629586][T29652] ? netlink_ack+0x1170/0x1170 [ 1398.634382][T29652] ? down_read+0x1a8/0x2d0 [ 1398.638831][T29652] genl_rcv+0x24/0x40 [ 1398.642827][T29652] netlink_unicast+0x74d/0x8d0 [ 1398.647623][T29652] netlink_sendmsg+0x8ad/0xbd0 [ 1398.652425][T29652] ? lockdep_hardirqs_on+0x94/0x140 [ 1398.657818][T29652] ? netlink_getsockopt+0x550/0x550 [ 1398.663416][T29652] ? netlink_getsockopt+0x550/0x550 [ 1398.668637][T29652] ____sys_sendmsg+0x5be/0x970 [ 1398.673438][T29652] ? __sys_sendmsg_sock+0x30/0x30 [ 1398.678502][T29652] ? __import_iovec+0x315/0x500 [ 1398.683409][T29652] ? import_iovec+0x6f/0xa0 [ 1398.687951][T29652] ___sys_sendmsg+0x2a2/0x360 [ 1398.692669][T29652] ? __sys_sendmsg+0x290/0x290 [ 1398.697475][T29652] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1398.703653][T29652] ? irqentry_enter+0x33/0x50 [ 1398.708356][T29652] ? rcu_is_watching+0x11/0xa0 [ 1398.713257][T29652] __se_sys_sendmsg+0x1bb/0x2a0 [ 1398.718134][T29652] ? __x64_sys_sendmsg+0x80/0x80 [ 1398.723106][T29652] ? lockdep_hardirqs_on+0x94/0x140 [ 1398.728328][T29652] do_syscall_64+0x4c/0xa0 [ 1398.732763][T29652] ? clear_bhb_loop+0x60/0xb0 [ 1398.737462][T29652] ? clear_bhb_loop+0x60/0xb0 [ 1398.742162][T29652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1398.748190][T29652] RIP: 0033:0x7f100539cdd9 [ 1398.752906][T29652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.772638][T29652] RSP: 002b:00007f1006291028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1398.781091][T29652] RAX: ffffffffffffffda RBX: 00007f1005616090 RCX: 00007f100539cdd9 [ 1398.789092][T29652] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1398.797085][T29652] RBP: 00007f1005432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1398.805072][T29652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.813056][T29652] R13: 00007f1005616128 R14: 00007f1005616090 R15: 00007ffde1ddabe8 [ 1398.821283][T29652] [ 1399.031743][T29666] Ÿë: port 1(veth0_to_team) entered blocking state [ 1399.051980][T29666] Ÿë: port 1(veth0_to_team) entered disabled state [ 1399.114811][T29666] device veth0_to_team entered promiscuous mode [ 1399.356904][T29673] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.7471'. [ 1405.520088][T29738] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.7486'. [ 1406.069507][T29743] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7488'. [ 1406.338657][T29743] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1406.572219][T29743] CPU: 0 PID: 29743 Comm: syz.1.7488 Not tainted syzkaller #0 [ 1406.579782][T29743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1406.589971][T29743] Call Trace: [ 1406.593392][T29743] [ 1406.596352][T29743] dump_stack_lvl+0x188/0x24e [ 1406.601078][T29743] ? show_regs_print_info+0x12/0x12 [ 1406.606320][T29743] ? load_image+0x400/0x400 [ 1406.610882][T29743] sysfs_warn_dup+0x8a/0xa0 [ 1406.615425][T29743] sysfs_do_create_link_sd+0xc0/0x110 [ 1406.620835][T29743] device_add+0x7ed/0xfb0 [ 1406.625222][T29743] wiphy_register+0x1d9f/0x2ac0 [ 1406.630180][T29743] ? cfg80211_event_work+0x40/0x40 [ 1406.635420][T29743] ? minstrel_ht_alloc+0x894/0xa20 [ 1406.640678][T29743] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1406.646982][T29743] ieee80211_register_hw+0x2d00/0x39f0 [ 1406.652531][T29743] ? ieee80211_register_hw+0xf21/0x39f0 [ 1406.658273][T29743] ? ieee80211_register_hw+0xf21/0x39f0 [ 1406.663925][T29743] ? ieee80211_tasklet_handler+0x20/0x20 [ 1406.669716][T29743] ? memset+0x1e/0x40 [ 1406.673744][T29743] ? __hrtimer_init+0x186/0x270 [ 1406.678650][T29743] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1406.684456][T29743] hwsim_new_radio_nl+0xafa/0xce0 [ 1406.689579][T29743] genl_family_rcv_msg_doit+0x22a/0x330 [ 1406.695154][T29743] ? end_current_label_crit_section+0x170/0x170 [ 1406.701436][T29743] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1406.707373][T29743] ? bpf_lsm_capable+0x5/0x10 [ 1406.712069][T29743] ? security_capable+0x85/0xb0 [ 1406.716952][T29743] genl_rcv_msg+0x604/0x790 [ 1406.721492][T29743] ? genl_bind+0x360/0x360 [ 1406.725929][T29743] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1406.732318][T29743] netlink_rcv_skb+0x1fb/0x450 [ 1406.737121][T29743] ? genl_bind+0x360/0x360 [ 1406.741561][T29743] ? netlink_ack+0x1170/0x1170 [ 1406.746717][T29743] ? down_read+0x1a8/0x2d0 [ 1406.751169][T29743] genl_rcv+0x24/0x40 [ 1406.755258][T29743] netlink_unicast+0x74d/0x8d0 [ 1406.760064][T29743] netlink_sendmsg+0x8ad/0xbd0 [ 1406.765052][T29743] ? netlink_getsockopt+0x550/0x550 [ 1406.770377][T29743] ? aa_sock_msg_perm+0x94/0x150 [ 1406.775338][T29743] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1406.780645][T29743] ? security_socket_sendmsg+0x7c/0xa0 [ 1406.786142][T29743] ? netlink_getsockopt+0x550/0x550 [ 1406.791456][T29743] ____sys_sendmsg+0x5be/0x970 [ 1406.796435][T29743] ? __sys_sendmsg_sock+0x30/0x30 [ 1406.801481][T29743] ? __import_iovec+0x315/0x500 [ 1406.806366][T29743] ? import_iovec+0x6f/0xa0 [ 1406.810899][T29743] ___sys_sendmsg+0x2a2/0x360 [ 1406.815616][T29743] ? __sys_sendmsg+0x290/0x290 [ 1406.820565][T29743] __se_sys_sendmsg+0x1bb/0x2a0 [ 1406.825446][T29743] ? __x64_sys_sendmsg+0x80/0x80 [ 1406.830440][T29743] ? lockdep_hardirqs_on+0x94/0x140 [ 1406.835665][T29743] do_syscall_64+0x4c/0xa0 [ 1406.840334][T29743] ? clear_bhb_loop+0x60/0xb0 [ 1406.845219][T29743] ? clear_bhb_loop+0x60/0xb0 [ 1406.849923][T29743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1406.855836][T29743] RIP: 0033:0x7f2f7819cdd9 [ 1406.860287][T29743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.880173][T29743] RSP: 002b:00007f2f79084028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1406.888614][T29743] RAX: ffffffffffffffda RBX: 00007f2f78415fa0 RCX: 00007f2f7819cdd9 [ 1406.896624][T29743] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1406.904627][T29743] RBP: 00007f2f78232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1406.912732][T29743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.920738][T29743] R13: 00007f2f78416038 R14: 00007f2f78415fa0 R15: 00007fffbcf51b88 [ 1406.928784][T29743] [ 1409.231687][T29788] netlink: 'syz.0.7501': attribute type 2 has an invalid length. [ 1409.793051][T29804] netlink: 'syz.3.7508': attribute type 2 has an invalid length. [ 1411.408312][T29824] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7510'. [ 1411.586440][T29824] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1411.640479][T29824] CPU: 0 PID: 29824 Comm: syz.0.7510 Not tainted syzkaller #0 [ 1411.648042][T29824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1411.658239][T29824] Call Trace: [ 1411.661576][T29824] [ 1411.664544][T29824] dump_stack_lvl+0x188/0x24e [ 1411.669459][T29824] ? show_regs_print_info+0x12/0x12 [ 1411.674791][T29824] ? load_image+0x400/0x400 [ 1411.679373][T29824] sysfs_warn_dup+0x8a/0xa0 [ 1411.684031][T29824] sysfs_do_create_link_sd+0xc0/0x110 [ 1411.689563][T29824] device_add+0x7ed/0xfb0 [ 1411.693958][T29824] wiphy_register+0x1d9f/0x2ac0 [ 1411.698887][T29824] ? cfg80211_event_work+0x40/0x40 [ 1411.704139][T29824] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1411.710362][T29824] ? ieee80211_register_hw+0x2821/0x39f0 [ 1411.716160][T29824] ? ieee80211_register_hw+0x28b7/0x39f0 [ 1411.722037][T29824] ieee80211_register_hw+0x2d00/0x39f0 [ 1411.727572][T29824] ? ieee80211_register_hw+0xf21/0x39f0 [ 1411.733175][T29824] ? ieee80211_register_hw+0xf21/0x39f0 [ 1411.738878][T29824] ? ieee80211_tasklet_handler+0x20/0x20 [ 1411.744588][T29824] ? memset+0x1e/0x40 [ 1411.748637][T29824] ? __hrtimer_init+0x186/0x270 [ 1411.753566][T29824] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1411.759373][T29824] hwsim_new_radio_nl+0xafa/0xce0 [ 1411.764486][T29824] genl_family_rcv_msg_doit+0x22a/0x330 [ 1411.770175][T29824] ? end_current_label_crit_section+0x170/0x170 [ 1411.776567][T29824] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1411.782611][T29824] ? bpf_lsm_capable+0x5/0x10 [ 1411.787339][T29824] ? security_capable+0x85/0xb0 [ 1411.792249][T29824] genl_rcv_msg+0x604/0x790 [ 1411.796801][T29824] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1411.803009][T29824] ? genl_bind+0x360/0x360 [ 1411.807473][T29824] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1411.813960][T29824] ? lock_acquire+0x225/0x4a0 [ 1411.818702][T29824] netlink_rcv_skb+0x1fb/0x450 [ 1411.823520][T29824] ? genl_bind+0x360/0x360 [ 1411.827983][T29824] ? netlink_ack+0x1170/0x1170 [ 1411.832804][T29824] ? down_read+0x1a8/0x2d0 [ 1411.837358][T29824] genl_rcv+0x24/0x40 [ 1411.841414][T29824] netlink_unicast+0x74d/0x8d0 [ 1411.846500][T29824] netlink_sendmsg+0x8ad/0xbd0 [ 1411.851503][T29824] ? netlink_getsockopt+0x550/0x550 [ 1411.856768][T29824] ? netlink_getsockopt+0x550/0x550 [ 1411.862023][T29824] ____sys_sendmsg+0x5be/0x970 [ 1411.866853][T29824] ? __sys_sendmsg_sock+0x30/0x30 [ 1411.872010][T29824] ? __import_iovec+0x315/0x500 [ 1411.877098][T29824] ? import_iovec+0x6f/0xa0 [ 1411.881652][T29824] ___sys_sendmsg+0x2a2/0x360 [ 1411.886419][T29824] ? try_to_wake_up+0x6ae/0x1080 [ 1411.891421][T29824] ? __sys_sendmsg+0x290/0x290 [ 1411.896281][T29824] ? ktime_get_real_ts64+0x440/0x440 [ 1411.901739][T29824] __se_sys_sendmsg+0x1bb/0x2a0 [ 1411.906650][T29824] ? __x64_sys_sendmsg+0x80/0x80 [ 1411.911932][T29824] ? lockdep_hardirqs_on+0x94/0x140 [ 1411.917186][T29824] do_syscall_64+0x4c/0xa0 [ 1411.921655][T29824] ? clear_bhb_loop+0x60/0xb0 [ 1411.926385][T29824] ? clear_bhb_loop+0x60/0xb0 [ 1411.931105][T29824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.937044][T29824] RIP: 0033:0x7f57a5d9cdd9 [ 1411.941505][T29824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.961421][T29824] RSP: 002b:00007f57a6c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.969895][T29824] RAX: ffffffffffffffda RBX: 00007f57a6016090 RCX: 00007f57a5d9cdd9 [ 1411.978274][T29824] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1411.986566][T29824] RBP: 00007f57a5e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1411.994844][T29824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.002855][T29824] R13: 00007f57a6016128 R14: 00007f57a6016090 R15: 00007ffda07636e8 [ 1412.011018][T29824] [ 1412.142527][T29831] device wlan1 entered promiscuous mode [ 1412.510875][T29851] netlink: 'syz.1.7518': attribute type 2 has an invalid length. [ 1412.560326][T29851] netlink: 'syz.1.7518': attribute type 1 has an invalid length. [ 1412.575772][T29851] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7518'. [ 1414.984464][T29892] device syzkaller0 entered promiscuous mode [ 1418.443033][T29902] netlink: 'syz.5.7534': attribute type 10 has an invalid length. [ 1418.451074][T29902] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7534'. [ 1419.190977][T29934] netlink: 'syz.4.7542': attribute type 16 has an invalid length. [ 1419.231210][T29934] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7542'. [ 1420.076983][T24229] tipc: Subscription rejected, illegal request [ 1423.285709][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.292097][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.571126][T30136] netlink: 'syz.0.7601': attribute type 21 has an invalid length. [ 1430.622168][T30130] device syzkaller0 entered promiscuous mode [ 1431.154636][T30137] netlink: 'syz.4.7599': attribute type 2 has an invalid length. [ 1431.162564][T30137] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.7599'. [ 1431.327688][T30141] netlink: 'syz.1.7603': attribute type 21 has an invalid length. [ 1431.669464][T30155] netlink: 'syz.3.7607': attribute type 3 has an invalid length. [ 1431.703586][T30155] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7607'. [ 1434.409690][T30193] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.7617'. [ 1439.077741][T30207] delete_channel: no stack [ 1442.010170][T30313] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7652'. [ 1443.677241][T30347] FAULT_INJECTION: forcing a failure. [ 1443.677241][T30347] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.755812][T30347] CPU: 0 PID: 30347 Comm: syz.4.7666 Not tainted syzkaller #0 [ 1443.763367][T30347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1443.773688][T30347] Call Trace: [ 1443.777015][T30347] [ 1443.779995][T30347] dump_stack_lvl+0x188/0x24e [ 1443.784904][T30347] ? show_regs_print_info+0x12/0x12 [ 1443.790183][T30347] ? load_image+0x400/0x400 [ 1443.794744][T30347] ? __might_sleep+0xd0/0xd0 [ 1443.799384][T30347] ? __lock_acquire+0x7d10/0x7d10 [ 1443.804469][T30347] should_fail_ex+0x399/0x4d0 [ 1443.809208][T30347] should_failslab+0x5/0x20 [ 1443.813756][T30347] slab_pre_alloc_hook+0x59/0x310 [ 1443.818840][T30347] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1443.824626][T30347] __kmem_cache_alloc_node+0x4f/0x260 [ 1443.830146][T30347] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1443.835924][T30347] __kmalloc+0xa0/0x240 [ 1443.840230][T30347] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1443.846016][T30347] ? tomoyo_path_number_perm+0x205/0x650 [ 1443.851713][T30347] tomoyo_path_number_perm+0x22f/0x650 [ 1443.857248][T30347] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1443.862932][T30347] ? ksys_write+0x1c0/0x250 [ 1443.867491][T30347] ? common_file_perm+0x171/0x1c0 [ 1443.872578][T30347] ? __fget_files+0x28/0x4b0 [ 1443.877192][T30347] ? __fget_files+0x28/0x4b0 [ 1443.881905][T30347] security_file_ioctl+0x6c/0xa0 [ 1443.886871][T30347] __se_sys_ioctl+0x48/0x170 [ 1443.891579][T30347] do_syscall_64+0x4c/0xa0 [ 1443.896206][T30347] ? clear_bhb_loop+0x60/0xb0 [ 1443.900924][T30347] ? clear_bhb_loop+0x60/0xb0 [ 1443.905627][T30347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1443.911552][T30347] RIP: 0033:0x7f100539cdd9 [ 1443.915996][T30347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.935748][T30347] RSP: 002b:00007f10062b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1443.944356][T30347] RAX: ffffffffffffffda RBX: 00007f1005615fa0 RCX: 00007f100539cdd9 [ 1443.952339][T30347] RDX: 00002000000000c0 RSI: 00000000400454e2 RDI: 0000000000000003 [ 1443.960436][T30347] RBP: 00007f10062b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.968870][T30347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.976853][T30347] R13: 00007f1005616038 R14: 00007f1005615fa0 R15: 00007ffde1ddabe8 [ 1443.984943][T30347] [ 1444.102892][T30347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1444.654129][T30365] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7670'. [ 1445.265797][T30365] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1445.275892][T30365] CPU: 1 PID: 30365 Comm: syz.0.7670 Not tainted syzkaller #0 [ 1445.283504][T30365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1445.293613][T30365] Call Trace: [ 1445.296936][T30365] [ 1445.299986][T30365] dump_stack_lvl+0x188/0x24e [ 1445.304807][T30365] ? show_regs_print_info+0x12/0x12 [ 1445.310072][T30365] ? load_image+0x400/0x400 [ 1445.314644][T30365] sysfs_warn_dup+0x8a/0xa0 [ 1445.319202][T30365] sysfs_do_create_link_sd+0xc0/0x110 [ 1445.324622][T30365] device_add+0x7ed/0xfb0 [ 1445.329015][T30365] wiphy_register+0x1d9f/0x2ac0 [ 1445.333953][T30365] ? cfg80211_event_work+0x40/0x40 [ 1445.339114][T30365] ? minstrel_ht_alloc+0x894/0xa20 [ 1445.344285][T30365] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1445.350676][T30365] ieee80211_register_hw+0x2d00/0x39f0 [ 1445.356379][T30365] ? ieee80211_register_hw+0xf21/0x39f0 [ 1445.361965][T30365] ? ieee80211_register_hw+0xf21/0x39f0 [ 1445.367548][T30365] ? ieee80211_tasklet_handler+0x20/0x20 [ 1445.373312][T30365] ? memset+0x1e/0x40 [ 1445.377320][T30365] ? __hrtimer_init+0x186/0x270 [ 1445.382199][T30365] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1445.388046][T30365] hwsim_new_radio_nl+0xafa/0xce0 [ 1445.393138][T30365] genl_family_rcv_msg_doit+0x22a/0x330 [ 1445.398703][T30365] ? end_current_label_crit_section+0x170/0x170 [ 1445.404967][T30365] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1445.410971][T30365] ? bpf_lsm_capable+0x5/0x10 [ 1445.415686][T30365] ? security_capable+0x85/0xb0 [ 1445.420563][T30365] genl_rcv_msg+0x604/0x790 [ 1445.425095][T30365] ? genl_bind+0x360/0x360 [ 1445.429547][T30365] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1445.435911][T30365] netlink_rcv_skb+0x1fb/0x450 [ 1445.440697][T30365] ? genl_bind+0x360/0x360 [ 1445.445214][T30365] ? netlink_ack+0x1170/0x1170 [ 1445.450210][T30365] ? down_read+0x1a8/0x2d0 [ 1445.454827][T30365] genl_rcv+0x24/0x40 [ 1445.458827][T30365] netlink_unicast+0x74d/0x8d0 [ 1445.463618][T30365] netlink_sendmsg+0x8ad/0xbd0 [ 1445.468596][T30365] ? netlink_getsockopt+0x550/0x550 [ 1445.474164][T30365] ? aa_sock_msg_perm+0x94/0x150 [ 1445.479304][T30365] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1445.484603][T30365] ? security_socket_sendmsg+0x7c/0xa0 [ 1445.490091][T30365] ? netlink_getsockopt+0x550/0x550 [ 1445.495309][T30365] ____sys_sendmsg+0x5be/0x970 [ 1445.500192][T30365] ? __sys_sendmsg_sock+0x30/0x30 [ 1445.505244][T30365] ? __import_iovec+0x315/0x500 [ 1445.510138][T30365] ? import_iovec+0x6f/0xa0 [ 1445.514763][T30365] ___sys_sendmsg+0x2a2/0x360 [ 1445.519663][T30365] ? __sys_sendmsg+0x290/0x290 [ 1445.524482][T30365] ? ktime_get_real_ts64+0x440/0x440 [ 1445.529903][T30365] __se_sys_sendmsg+0x1bb/0x2a0 [ 1445.534908][T30365] ? __x64_sys_sendmsg+0x80/0x80 [ 1445.539895][T30365] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1445.545815][T30365] do_syscall_64+0x4c/0xa0 [ 1445.550269][T30365] ? clear_bhb_loop+0x60/0xb0 [ 1445.554967][T30365] ? clear_bhb_loop+0x60/0xb0 [ 1445.559714][T30365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1445.566675][T30365] RIP: 0033:0x7f57a5d9cdd9 [ 1445.571122][T30365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.591277][T30365] RSP: 002b:00007f57a6c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.599801][T30365] RAX: ffffffffffffffda RBX: 00007f57a6016090 RCX: 00007f57a5d9cdd9 [ 1445.608072][T30365] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1445.616175][T30365] RBP: 00007f57a5e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1445.624327][T30365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.632411][T30365] R13: 00007f57a6016128 R14: 00007f57a6016090 R15: 00007ffda07636e8 [ 1445.640610][T30365] [ 1445.775035][T30379] netlink: 'syz.4.7674': attribute type 21 has an invalid length. [ 1445.804136][T30379] netlink: 'syz.4.7674': attribute type 4 has an invalid length. [ 1445.851920][T30384] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1446.088761][T30392] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7679'. [ 1446.585097][T30412] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.7686'. [ 1446.799389][T30412] delete_channel: no stack [ 1447.553638][T30430] device lo entered promiscuous mode [ 1447.583726][T30430] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1447.985808][T30437] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7692'. [ 1448.058860][T30437] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1448.146240][T30437] CPU: 0 PID: 30437 Comm: syz.5.7692 Not tainted syzkaller #0 [ 1448.153884][T30437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1448.164357][T30437] Call Trace: [ 1448.167675][T30437] [ 1448.170647][T30437] dump_stack_lvl+0x188/0x24e [ 1448.175394][T30437] ? show_regs_print_info+0x12/0x12 [ 1448.180736][T30437] ? load_image+0x400/0x400 [ 1448.185307][T30437] sysfs_warn_dup+0x8a/0xa0 [ 1448.189950][T30437] sysfs_do_create_link_sd+0xc0/0x110 [ 1448.195379][T30437] device_add+0x7ed/0xfb0 [ 1448.199770][T30437] wiphy_register+0x1d9f/0x2ac0 [ 1448.204806][T30437] ? cfg80211_event_work+0x40/0x40 [ 1448.209959][T30437] ? minstrel_ht_alloc+0x894/0xa20 [ 1448.215109][T30437] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1448.221294][T30437] ieee80211_register_hw+0x2d00/0x39f0 [ 1448.226807][T30437] ? ieee80211_register_hw+0xf21/0x39f0 [ 1448.232485][T30437] ? ieee80211_register_hw+0xf21/0x39f0 [ 1448.238163][T30437] ? ieee80211_tasklet_handler+0x20/0x20 [ 1448.244032][T30437] ? memset+0x1e/0x40 [ 1448.248058][T30437] ? __hrtimer_init+0x186/0x270 [ 1448.253059][T30437] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1448.258835][T30437] hwsim_new_radio_nl+0xafa/0xce0 [ 1448.263899][T30437] genl_family_rcv_msg_doit+0x22a/0x330 [ 1448.269465][T30437] ? end_current_label_crit_section+0x170/0x170 [ 1448.275911][T30437] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1448.282184][T30437] ? bpf_lsm_capable+0x5/0x10 [ 1448.286886][T30437] ? security_capable+0x85/0xb0 [ 1448.291760][T30437] genl_rcv_msg+0x604/0x790 [ 1448.296290][T30437] ? genl_bind+0x360/0x360 [ 1448.300804][T30437] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1448.307167][T30437] netlink_rcv_skb+0x1fb/0x450 [ 1448.312058][T30437] ? genl_bind+0x360/0x360 [ 1448.316581][T30437] ? netlink_ack+0x1170/0x1170 [ 1448.321381][T30437] ? down_read+0x1a8/0x2d0 [ 1448.325921][T30437] genl_rcv+0x24/0x40 [ 1448.329920][T30437] netlink_unicast+0x74d/0x8d0 [ 1448.334715][T30437] netlink_sendmsg+0x8ad/0xbd0 [ 1448.339510][T30437] ? netlink_getsockopt+0x550/0x550 [ 1448.344731][T30437] ? aa_sock_msg_perm+0x94/0x150 [ 1448.349684][T30437] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1448.355158][T30437] ? security_socket_sendmsg+0x7c/0xa0 [ 1448.360645][T30437] ? netlink_getsockopt+0x550/0x550 [ 1448.365866][T30437] ____sys_sendmsg+0x5be/0x970 [ 1448.370664][T30437] ? __sys_sendmsg_sock+0x30/0x30 [ 1448.375708][T30437] ? __import_iovec+0x315/0x500 [ 1448.380758][T30437] ? import_iovec+0x6f/0xa0 [ 1448.385282][T30437] ___sys_sendmsg+0x2a2/0x360 [ 1448.389986][T30437] ? __sys_sendmsg+0x290/0x290 [ 1448.394820][T30437] __se_sys_sendmsg+0x1bb/0x2a0 [ 1448.399692][T30437] ? ct_nmi_exit+0x145/0x1c0 [ 1448.404298][T30437] ? __x64_sys_sendmsg+0x80/0x80 [ 1448.409275][T30437] ? lockdep_hardirqs_on+0x94/0x140 [ 1448.414496][T30437] do_syscall_64+0x4c/0xa0 [ 1448.418951][T30437] ? clear_bhb_loop+0x60/0xb0 [ 1448.423735][T30437] ? clear_bhb_loop+0x60/0xb0 [ 1448.428521][T30437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1448.434492][T30437] RIP: 0033:0x7f487c59cdd9 [ 1448.438921][T30437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.458638][T30437] RSP: 002b:00007f487d479028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1448.467073][T30437] RAX: ffffffffffffffda RBX: 00007f487c816090 RCX: 00007f487c59cdd9 [ 1448.475162][T30437] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1448.483324][T30437] RBP: 00007f487c632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1448.491306][T30437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1448.499294][T30437] R13: 00007f487c816128 R14: 00007f487c816090 R15: 00007ffce9314848 [ 1448.507391][T30437] [ 1448.788637][T30450] netlink: 'syz.3.7695': attribute type 4 has an invalid length. [ 1449.010080][T30450] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7695'. [ 1449.145663][T30450] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1449.359244][T30462] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7698'. [ 1449.463647][T30463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7698'. [ 1450.738453][T30493] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7708'. [ 1450.752853][T30497] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.7709'. [ 1450.837229][T30493] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1451.073384][T30504] FAULT_INJECTION: forcing a failure. [ 1451.073384][T30504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.184373][T30504] CPU: 1 PID: 30504 Comm: syz.5.7711 Not tainted syzkaller #0 [ 1451.191926][T30504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1451.202194][T30504] Call Trace: [ 1451.205594][T30504] [ 1451.208554][T30504] dump_stack_lvl+0x188/0x24e [ 1451.213377][T30504] ? show_regs_print_info+0x12/0x12 [ 1451.218879][T30504] ? load_image+0x400/0x400 [ 1451.223423][T30504] ? __lock_acquire+0x7d10/0x7d10 [ 1451.228587][T30504] should_fail_ex+0x399/0x4d0 [ 1451.233300][T30504] strncpy_from_user+0x32/0x350 [ 1451.238203][T30504] bpf_prog_load+0x1f3/0x1560 [ 1451.242950][T30504] ? map_freeze+0x390/0x390 [ 1451.247515][T30504] ? __might_fault+0xa6/0x120 [ 1451.252322][T30504] ? __might_fault+0xa6/0x120 [ 1451.257014][T30504] ? __might_fault+0xc2/0x120 [ 1451.261703][T30504] ? __might_fault+0xa6/0x120 [ 1451.266566][T30504] ? bpf_lsm_bpf+0x5/0x10 [ 1451.270911][T30504] ? security_bpf+0x7a/0xa0 [ 1451.275434][T30504] __sys_bpf+0x5b8/0x780 [ 1451.279701][T30504] ? bpf_link_show_fdinfo+0x380/0x380 [ 1451.285201][T30504] ? lock_chain_count+0x20/0x20 [ 1451.290346][T30504] __x64_sys_bpf+0x78/0x90 [ 1451.294982][T30504] do_syscall_64+0x4c/0xa0 [ 1451.299515][T30504] ? clear_bhb_loop+0x60/0xb0 [ 1451.304222][T30504] ? clear_bhb_loop+0x60/0xb0 [ 1451.308920][T30504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.314921][T30504] RIP: 0033:0x7f487c59cdd9 [ 1451.319523][T30504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.339226][T30504] RSP: 002b:00007f487d49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1451.347659][T30504] RAX: ffffffffffffffda RBX: 00007f487c815fa0 RCX: 00007f487c59cdd9 [ 1451.355732][T30504] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1451.363713][T30504] RBP: 00007f487d49a090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.371691][T30504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.379670][T30504] R13: 00007f487c816038 R14: 00007f487c815fa0 R15: 00007ffce9314848 [ 1451.387667][T30504] [ 1451.631701][T30508] netlink: 'syz.0.7712': attribute type 3 has an invalid length. [ 1451.658834][T30508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7712'. [ 1452.217873][T30527] netlink: 'syz.5.7718': attribute type 21 has an invalid length. [ 1452.263331][T30527] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7718'. [ 1452.320821][T30527] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7718'. [ 1452.376883][T30527] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1452.405937][T30527] CPU: 1 PID: 30527 Comm: syz.5.7718 Not tainted syzkaller #0 [ 1452.413588][T30527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1452.423871][T30527] Call Trace: [ 1452.427208][T30527] [ 1452.430210][T30527] dump_stack_lvl+0x188/0x24e [ 1452.434974][T30527] ? show_regs_print_info+0x12/0x12 [ 1452.440250][T30527] ? load_image+0x400/0x400 [ 1452.444869][T30527] sysfs_warn_dup+0x8a/0xa0 [ 1452.449446][T30527] sysfs_do_create_link_sd+0xc0/0x110 [ 1452.454904][T30527] device_add+0x7ed/0xfb0 [ 1452.459341][T30527] wiphy_register+0x1d9f/0x2ac0 [ 1452.464504][T30527] ? cfg80211_event_work+0x40/0x40 [ 1452.469777][T30527] ? minstrel_ht_alloc+0x894/0xa20 [ 1452.475041][T30527] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1452.481202][T30527] ieee80211_register_hw+0x2d00/0x39f0 [ 1452.486789][T30527] ? ieee80211_register_hw+0xf21/0x39f0 [ 1452.492512][T30527] ? ieee80211_register_hw+0xf21/0x39f0 [ 1452.498167][T30527] ? ieee80211_tasklet_handler+0x20/0x20 [ 1452.504091][T30527] ? memset+0x1e/0x40 [ 1452.508145][T30527] ? __hrtimer_init+0x186/0x270 [ 1452.513085][T30527] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1452.518955][T30527] hwsim_new_radio_nl+0xafa/0xce0 [ 1452.524231][T30527] genl_family_rcv_msg_doit+0x22a/0x330 [ 1452.530029][T30527] ? end_current_label_crit_section+0x170/0x170 [ 1452.536441][T30527] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1452.542429][T30527] ? bpf_lsm_capable+0x5/0x10 [ 1452.547165][T30527] ? security_capable+0x85/0xb0 [ 1452.552109][T30527] genl_rcv_msg+0x604/0x790 [ 1452.556722][T30527] ? genl_bind+0x360/0x360 [ 1452.561281][T30527] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1452.567755][T30527] netlink_rcv_skb+0x1fb/0x450 [ 1452.572590][T30527] ? genl_bind+0x360/0x360 [ 1452.577082][T30527] ? netlink_ack+0x1170/0x1170 [ 1452.581977][T30527] ? down_read+0x1a8/0x2d0 [ 1452.586478][T30527] genl_rcv+0x24/0x40 [ 1452.590609][T30527] netlink_unicast+0x74d/0x8d0 [ 1452.595794][T30527] netlink_sendmsg+0x8ad/0xbd0 [ 1452.600671][T30527] ? netlink_getsockopt+0x550/0x550 [ 1452.605969][T30527] ? aa_sock_msg_perm+0x94/0x150 [ 1452.610991][T30527] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1452.616348][T30527] ? security_socket_sendmsg+0x7c/0xa0 [ 1452.621979][T30527] ? netlink_getsockopt+0x550/0x550 [ 1452.627251][T30527] ____sys_sendmsg+0x5be/0x970 [ 1452.632207][T30527] ? __sys_sendmsg_sock+0x30/0x30 [ 1452.637299][T30527] ? __import_iovec+0x315/0x500 [ 1452.642253][T30527] ? import_iovec+0x6f/0xa0 [ 1452.646832][T30527] ___sys_sendmsg+0x2a2/0x360 [ 1452.651574][T30527] ? try_to_wake_up+0x6ae/0x1080 [ 1452.656679][T30527] ? __sys_sendmsg+0x290/0x290 [ 1452.661714][T30527] __se_sys_sendmsg+0x1bb/0x2a0 [ 1452.666823][T30527] ? __x64_sys_sendmsg+0x80/0x80 [ 1452.671978][T30527] ? lockdep_hardirqs_on+0x94/0x140 [ 1452.677771][T30527] do_syscall_64+0x4c/0xa0 [ 1452.682257][T30527] ? clear_bhb_loop+0x60/0xb0 [ 1452.687084][T30527] ? clear_bhb_loop+0x60/0xb0 [ 1452.691832][T30527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.697781][T30527] RIP: 0033:0x7f487c59cdd9 [ 1452.702266][T30527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.722115][T30527] RSP: 002b:00007f487d49a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1452.730613][T30527] RAX: ffffffffffffffda RBX: 00007f487c815fa0 RCX: 00007f487c59cdd9 [ 1452.738658][T30527] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1452.746770][T30527] RBP: 00007f487c632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1452.754800][T30527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.762838][T30527] R13: 00007f487c816038 R14: 00007f487c815fa0 R15: 00007ffce9314848 [ 1452.770938][T30527] [ 1453.306877][T30540] netlink: 'syz.0.7721': attribute type 21 has an invalid length. [ 1453.598769][T30549] FAULT_INJECTION: forcing a failure. [ 1453.598769][T30549] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.620116][T30549] CPU: 1 PID: 30549 Comm: syz.5.7725 Not tainted syzkaller #0 [ 1453.627741][T30549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1453.637930][T30549] Call Trace: [ 1453.641328][T30549] [ 1453.644295][T30549] dump_stack_lvl+0x188/0x24e [ 1453.649024][T30549] ? show_regs_print_info+0x12/0x12 [ 1453.654274][T30549] ? load_image+0x400/0x400 [ 1453.658920][T30549] ? __might_sleep+0xd0/0xd0 [ 1453.663568][T30549] ? __lock_acquire+0x7d10/0x7d10 [ 1453.668905][T30549] ? mark_lock+0x94/0x320 [ 1453.673373][T30549] should_fail_ex+0x399/0x4d0 [ 1453.678099][T30549] should_failslab+0x5/0x20 [ 1453.682745][T30549] slab_pre_alloc_hook+0x59/0x310 [ 1453.687915][T30549] ? __get_vm_area_node+0x122/0x330 [ 1453.693177][T30549] __kmem_cache_alloc_node+0x4f/0x260 [ 1453.698601][T30549] ? __get_vm_area_node+0x122/0x330 [ 1453.703940][T30549] kmalloc_node_trace+0x22/0xe0 [ 1453.708844][T30549] __get_vm_area_node+0x122/0x330 [ 1453.713930][T30549] __vmalloc_node_range+0x357/0x13b0 [ 1453.719254][T30549] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1453.724974][T30549] ? free_vm_area+0x50/0x50 [ 1453.729517][T30549] ? end_current_label_crit_section+0x170/0x170 [ 1453.735805][T30549] ? __lock_acquire+0x7d10/0x7d10 [ 1453.740886][T30549] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1453.746562][T30549] __vmalloc+0x76/0x80 [ 1453.750753][T30549] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1453.756513][T30549] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1453.761986][T30549] ? bpf_lsm_capable+0x5/0x10 [ 1453.766873][T30549] ? security_capable+0x85/0xb0 [ 1453.771764][T30549] bpf_prog_alloc+0x1c/0x1b0 [ 1453.776397][T30549] bpf_prog_load+0x7c9/0x1560 [ 1453.781395][T30549] ? map_freeze+0x390/0x390 [ 1453.786025][T30549] ? __might_fault+0xa6/0x120 [ 1453.790756][T30549] ? __might_fault+0xa6/0x120 [ 1453.795465][T30549] ? __might_fault+0xc2/0x120 [ 1453.800261][T30549] ? __might_fault+0xa6/0x120 [ 1453.805060][T30549] ? bpf_lsm_bpf+0x5/0x10 [ 1453.809421][T30549] ? security_bpf+0x7a/0xa0 [ 1453.813972][T30549] __sys_bpf+0x5b8/0x780 [ 1453.818262][T30549] ? bpf_link_show_fdinfo+0x380/0x380 [ 1453.823706][T30549] ? lock_chain_count+0x20/0x20 [ 1453.828629][T30549] __x64_sys_bpf+0x78/0x90 [ 1453.833088][T30549] do_syscall_64+0x4c/0xa0 [ 1453.837581][T30549] ? clear_bhb_loop+0x60/0xb0 [ 1453.842468][T30549] ? clear_bhb_loop+0x60/0xb0 [ 1453.847212][T30549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.853309][T30549] RIP: 0033:0x7f487c59cdd9 [ 1453.857760][T30549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.877509][T30549] RSP: 002b:00007f487d49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1453.885976][T30549] RAX: ffffffffffffffda RBX: 00007f487c815fa0 RCX: 00007f487c59cdd9 [ 1453.894192][T30549] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1453.902196][T30549] RBP: 00007f487d49a090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.910301][T30549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.918410][T30549] R13: 00007f487c816038 R14: 00007f487c815fa0 R15: 00007ffce9314848 [ 1453.926534][T30549] [ 1453.943429][T30549] syz.5.7725: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1453.975735][T30549] CPU: 1 PID: 30549 Comm: syz.5.7725 Not tainted syzkaller #0 [ 1453.983389][T30549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1453.993654][T30549] Call Trace: [ 1453.996987][T30549] [ 1454.000021][T30549] dump_stack_lvl+0x188/0x24e [ 1454.004742][T30549] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1454.011452][T30549] ? show_regs_print_info+0x12/0x12 [ 1454.016664][T30549] ? load_image+0x400/0x400 [ 1454.021236][T30549] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1454.027774][T30549] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1454.034282][T30549] warn_alloc+0x242/0x330 [ 1454.038664][T30549] ? __get_vm_area_node+0x122/0x330 [ 1454.044083][T30549] ? zone_watermark_ok_safe+0x270/0x270 [ 1454.049665][T30549] ? rcu_is_watching+0x11/0xa0 [ 1454.054474][T30549] ? __get_vm_area_node+0x318/0x330 [ 1454.059688][T30549] __vmalloc_node_range+0x37c/0x13b0 [ 1454.065201][T30549] ? free_vm_area+0x50/0x50 [ 1454.069813][T30549] ? end_current_label_crit_section+0x170/0x170 [ 1454.076135][T30549] ? __lock_acquire+0x7d10/0x7d10 [ 1454.081207][T30549] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1454.086978][T30549] __vmalloc+0x76/0x80 [ 1454.091064][T30549] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1454.096649][T30549] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1454.102252][T30549] ? bpf_lsm_capable+0x5/0x10 [ 1454.107080][T30549] ? security_capable+0x85/0xb0 [ 1454.111970][T30549] bpf_prog_alloc+0x1c/0x1b0 [ 1454.116682][T30549] bpf_prog_load+0x7c9/0x1560 [ 1454.121574][T30549] ? map_freeze+0x390/0x390 [ 1454.126197][T30549] ? __might_fault+0xa6/0x120 [ 1454.130974][T30549] ? __might_fault+0xa6/0x120 [ 1454.135829][T30549] ? __might_fault+0xc2/0x120 [ 1454.140594][T30549] ? __might_fault+0xa6/0x120 [ 1454.145276][T30549] ? bpf_lsm_bpf+0x5/0x10 [ 1454.149607][T30549] ? security_bpf+0x7a/0xa0 [ 1454.154116][T30549] __sys_bpf+0x5b8/0x780 [ 1454.158384][T30549] ? bpf_link_show_fdinfo+0x380/0x380 [ 1454.164057][T30549] ? lock_chain_count+0x20/0x20 [ 1454.168939][T30549] __x64_sys_bpf+0x78/0x90 [ 1454.173386][T30549] do_syscall_64+0x4c/0xa0 [ 1454.177824][T30549] ? clear_bhb_loop+0x60/0xb0 [ 1454.182600][T30549] ? clear_bhb_loop+0x60/0xb0 [ 1454.187313][T30549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1454.193242][T30549] RIP: 0033:0x7f487c59cdd9 [ 1454.197699][T30549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.217322][T30549] RSP: 002b:00007f487d49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1454.225753][T30549] RAX: ffffffffffffffda RBX: 00007f487c815fa0 RCX: 00007f487c59cdd9 [ 1454.233926][T30549] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1454.242138][T30549] RBP: 00007f487d49a090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.250114][T30549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.258092][T30549] R13: 00007f487c816038 R14: 00007f487c815fa0 R15: 00007ffce9314848 [ 1454.266077][T30549] [ 1454.305240][T30549] Mem-Info: [ 1454.314103][T30549] active_anon:8579 inactive_anon:0 isolated_anon:0 [ 1454.314103][T30549] active_file:21476 inactive_file:40495 isolated_file:0 [ 1454.314103][T30549] unevictable:768 dirty:252 writeback:0 [ 1454.314103][T30549] slab_reclaimable:21496 slab_unreclaimable:95934 [ 1454.314103][T30549] mapped:29835 shmem:1373 pagetables:716 [ 1454.314103][T30549] sec_pagetables:0 bounce:0 [ 1454.314103][T30549] kernel_misc_reclaimable:0 [ 1454.314103][T30549] free:1310495 free_pcp:9664 free_cma:0 [ 1454.438735][T30549] Node 0 active_anon:34216kB inactive_anon:0kB active_file:85904kB inactive_file:161780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119340kB dirty:1004kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10556kB pagetables:2764kB sec_pagetables:0kB all_unreclaimable? no [ 1454.553424][T30549] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1454.600751][T30549] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.630121][T30549] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1454.636017][T30549] Node 0 DMA32 free:1321088kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:34116kB inactive_anon:0kB active_file:85904kB inactive_file:161780kB unevictable:1536kB writepending:1004kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:34796kB local_pcp:17600kB free_cma:0kB [ 1454.745721][T30549] lowmem_reserve[]: 0 0 1 1 1 [ 1454.750545][T30549] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1454.797940][T30549] lowmem_reserve[]: 0 0 0 0 0 [ 1454.802755][T30549] Node 1 Normal free:3905396kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6368kB local_pcp:0kB free_cma:0kB [ 1454.840928][T30549] lowmem_reserve[]: 0 0 0 0 0 [ 1454.878112][T30549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1454.933254][T30549] Node 0 DMA32: 2075*4kB (UM) 3120*8kB (UME) 2296*16kB (UM) 1524*32kB (UM) 906*64kB (UM) 866*128kB (UME) 299*256kB (UM) 132*512kB (UM) 36*1024kB (UME) 13*2048kB (UME) 202*4096kB (UM) = 1322604kB [ 1454.965013][T30549] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1454.978827][T30549] Node 1 Normal: 241*4kB (UE) 36*8kB (UME) 37*16kB (UME) 208*32kB (UME) 89*64kB (UME) 24*128kB (UME) 8*256kB (UE) 2*512kB (UM) 0*1024kB 3*2048kB (UE) 947*4096kB (M) = 3905396kB [ 1454.997305][T30549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1455.007198][T30549] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1455.018863][T30549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1455.047467][T30549] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1455.059919][T30549] 63344 total pagecache pages [ 1455.065402][T30549] 0 pages in swap cache [ 1455.070625][T30549] Free swap = 124996kB [ 1455.076592][T30549] Total swap = 124996kB [ 1455.081174][T30549] 2097051 pages RAM [ 1455.087315][T30549] 0 pages HighMem/MovableOnly [ 1455.094487][T30549] 415209 pages reserved [ 1455.098795][T30549] 0 pages cma reserved [ 1455.560792][T30585] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1455.779938][T30585] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1455.840383][T30585] CPU: 1 PID: 30585 Comm: syz.1.7734 Not tainted syzkaller #0 [ 1455.848206][T30585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1455.858572][T30585] Call Trace: [ 1455.861923][T30585] [ 1455.865005][T30585] dump_stack_lvl+0x188/0x24e [ 1455.870210][T30585] ? show_regs_print_info+0x12/0x12 [ 1455.875469][T30585] ? load_image+0x400/0x400 [ 1455.880166][T30585] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1455.886277][T30585] sysfs_warn_dup+0x8a/0xa0 [ 1455.890955][T30585] sysfs_do_create_link_sd+0xc0/0x110 [ 1455.896438][T30585] device_add+0x7ed/0xfb0 [ 1455.900798][T30585] wiphy_register+0x1d9f/0x2ac0 [ 1455.905702][T30585] ? cfg80211_event_work+0x40/0x40 [ 1455.911038][T30585] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1455.917238][T30585] ieee80211_register_hw+0x2d00/0x39f0 [ 1455.922912][T30585] ? lockdep_hardirqs_on+0x94/0x140 [ 1455.928235][T30585] ? ieee80211_register_hw+0xf21/0x39f0 [ 1455.933803][T30585] ? ieee80211_register_hw+0xf21/0x39f0 [ 1455.939479][T30585] ? ieee80211_tasklet_handler+0x20/0x20 [ 1455.945145][T30585] ? memset+0x1e/0x40 [ 1455.949219][T30585] ? __hrtimer_init+0x186/0x270 [ 1455.954119][T30585] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1455.959898][T30585] hwsim_new_radio_nl+0xafa/0xce0 [ 1455.965070][T30585] genl_family_rcv_msg_doit+0x22a/0x330 [ 1455.970639][T30585] ? end_current_label_crit_section+0x170/0x170 [ 1455.977167][T30585] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1455.983264][T30585] ? bpf_lsm_capable+0x5/0x10 [ 1455.987979][T30585] ? security_capable+0x85/0xb0 [ 1455.992876][T30585] genl_rcv_msg+0x604/0x790 [ 1455.997432][T30585] ? genl_bind+0x360/0x360 [ 1456.001963][T30585] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1456.008535][T30585] netlink_rcv_skb+0x1fb/0x450 [ 1456.013591][T30585] ? genl_bind+0x360/0x360 [ 1456.018113][T30585] ? netlink_ack+0x1170/0x1170 [ 1456.023035][T30585] ? down_read+0x1a8/0x2d0 [ 1456.027508][T30585] genl_rcv+0x24/0x40 [ 1456.031518][T30585] netlink_unicast+0x74d/0x8d0 [ 1456.036326][T30585] netlink_sendmsg+0x8ad/0xbd0 [ 1456.041239][T30585] ? lockdep_hardirqs_on+0x94/0x140 [ 1456.046461][T30585] ? netlink_getsockopt+0x550/0x550 [ 1456.051679][T30585] ? netlink_getsockopt+0x550/0x550 [ 1456.057019][T30585] ? netlink_getsockopt+0x550/0x550 [ 1456.062258][T30585] ____sys_sendmsg+0x5be/0x970 [ 1456.067157][T30585] ? __sys_sendmsg_sock+0x30/0x30 [ 1456.072235][T30585] ___sys_sendmsg+0x2a2/0x360 [ 1456.076939][T30585] ? try_to_wake_up+0x6ae/0x1080 [ 1456.081906][T30585] ? __sys_sendmsg+0x290/0x290 [ 1456.086740][T30585] __se_sys_sendmsg+0x1bb/0x2a0 [ 1456.091695][T30585] ? ct_nmi_exit+0x145/0x1c0 [ 1456.096322][T30585] ? __x64_sys_sendmsg+0x80/0x80 [ 1456.101384][T30585] ? lockdep_hardirqs_on+0x94/0x140 [ 1456.106703][T30585] do_syscall_64+0x4c/0xa0 [ 1456.111166][T30585] ? clear_bhb_loop+0x60/0xb0 [ 1456.115916][T30585] ? clear_bhb_loop+0x60/0xb0 [ 1456.120618][T30585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.126619][T30585] RIP: 0033:0x7f2f7819cdd9 [ 1456.131046][T30585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.150760][T30585] RSP: 002b:00007f2f79063028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1456.159281][T30585] RAX: ffffffffffffffda RBX: 00007f2f78416090 RCX: 00007f2f7819cdd9 [ 1456.167441][T30585] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1456.175599][T30585] RBP: 00007f2f78232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1456.183677][T30585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.191846][T30585] R13: 00007f2f78416128 R14: 00007f2f78416090 R15: 00007fffbcf51b88 [ 1456.199933][T30585] [ 1456.261670][T30595] netlink: 'syz.4.7736': attribute type 10 has an invalid length. [ 1457.282760][T30632] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.7751'. [ 1457.329729][T30635] netlink: 'syz.5.7752': attribute type 1 has an invalid length. [ 1457.332053][T30632] openvswitch: netlink: Flow actions attr not present in new flow. [ 1457.348967][T30635] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.7752'. [ 1458.000165][T30639] netlink: 'syz.3.7754': attribute type 10 has an invalid length. [ 1458.741374][T30669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7763'. [ 1458.767274][T30669] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7763'. [ 1460.070551][T30692] netlink: 'syz.1.7770': attribute type 2 has an invalid length. [ 1460.140352][T30692] netlink: 'syz.1.7770': attribute type 8 has an invalid length. [ 1460.150847][T30692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7770'. [ 1460.190597][T30697] netlink: 'syz.5.7772': attribute type 3 has an invalid length. [ 1460.201075][T30697] netlink: 'syz.5.7772': attribute type 1 has an invalid length. [ 1460.223498][T30697] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7772'. [ 1460.288025][T30697] netlink: 'syz.5.7772': attribute type 10 has an invalid length. [ 1460.344052][T30697] device syz_tun entered promiscuous mode [ 1460.422440][T30697] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1462.219916][T30731] netlink: 'syz.0.7782': attribute type 10 has an invalid length. [ 1467.978520][T30801] icmp: detected local route for 172.20.20.10 during ICMP sending, src 0.32.0.0 [ 1468.093831][T30804] netlink: 'syz.3.7803': attribute type 2 has an invalid length. [ 1468.111729][T30804] netlink: 'syz.3.7803': attribute type 8 has an invalid length. [ 1468.168974][T30804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7803'. [ 1469.079348][T30810] netlink: 'syz.1.7805': attribute type 10 has an invalid length. [ 1469.107979][T30810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7805'. [ 1470.524488][T30862] netlink: 'syz.3.7818': attribute type 1 has an invalid length. [ 1470.628099][T30862] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7818'. [ 1488.416953][T24343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1488.426802][T24343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1488.435124][T24343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1488.445232][T24343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1488.452879][T24343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1488.462952][T24343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1490.483789][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 1492.135282][T24343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1492.145272][T24343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1492.157903][T24343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1492.174126][T24343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1492.183446][T24343] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1492.190965][T24343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1492.573267][T14570] Bluetooth: hci3: command 0x041b tx timeout [ 1494.243282][T14570] Bluetooth: hci6: command 0x0409 tx timeout [ 1494.653258][T14570] Bluetooth: hci3: command 0x040f tx timeout [ 1496.333369][T14570] Bluetooth: hci6: command 0x041b tx timeout [ 1496.733123][T14570] Bluetooth: hci3: command 0x0419 tx timeout [ 1498.403268][T14570] Bluetooth: hci6: command 0x040f tx timeout [ 1500.483199][ T48] Bluetooth: hci6: command 0x0419 tx timeout [ 1501.603318][T14570] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1502.101630][T14570] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1502.123430][T14570] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1502.131923][T14570] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1502.143355][T14570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1502.153475][T14570] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1502.160970][T14570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1504.243281][T14570] Bluetooth: hci7: command 0x0409 tx timeout [ 1506.323260][T14570] Bluetooth: hci7: command 0x041b tx timeout [ 1508.414148][ T48] Bluetooth: hci7: command 0x040f tx timeout [ 1510.083327][T14570] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1510.483271][T14570] Bluetooth: hci7: command 0x0419 tx timeout [ 1512.163220][T30903] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1512.883530][ T22] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2659 jiffies s: 112277 root: 0x1/. [ 1512.953107][ T22] rcu: blocking rcu_node structures (internal RCU debug): [ 1512.960299][ T22] Sending NMI from CPU 1 to CPUs 0: [ 1512.965674][ C0] NMI backtrace for cpu 0 [ 1512.965686][ C0] CPU: 0 PID: 30885 Comm: syz.5.7825 Not tainted syzkaller #0 [ 1512.965702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1512.965711][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 1512.965736][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 9f a5 01 03 66 2e 0f 1f 84 00 00 00 00 00 [ 1512.965750][ C0] RSP: 0018:ffffc90000007590 EFLAGS: 00000046 [ 1512.965764][ C0] RAX: 0000000000000150 RBX: 0000000000000150 RCX: 0000000000000838 [ 1512.965776][ C0] RDX: 0000000000000000 RSI: 0000000000000150 RDI: 0000000000000838 [ 1512.965786][ C0] RBP: 0000000000000000 R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 1512.965797][ C0] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: dffffc0000000000 [ 1512.965809][ C0] R13: 00000000100001ad R14: ffffffff8c653b40 R15: dffffc0000000000 [ 1512.965821][ C0] FS: 00007f487d49a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1512.965835][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1512.965846][ C0] CR2: 0000200000000480 CR3: 0000000077ab4000 CR4: 00000000003506f0 [ 1512.965862][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1512.965872][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1512.965882][ C0] Call Trace: [ 1512.965888][ C0] [ 1512.965893][ C0] lapic_next_event+0x5b/0x70 [ 1512.965916][ C0] clockevents_program_event+0x1bc/0x310 [ 1512.965938][ C0] hrtimer_interrupt+0x59d/0x9c0 [ 1512.965973][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1512.965995][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 1512.966013][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1512.966033][ C0] RIP: 0010:rcu_read_lock_held+0x1/0x40 [ 1512.966051][ C0] Code: 8f e8 f3 1e 68 00 eb cf 90 0f b6 05 c1 91 b4 0c c3 0f 1f 84 00 00 00 00 00 e8 6b 3e 01 00 e9 56 42 01 00 66 0f 1f 44 00 00 53 8a 88 c2 08 85 c0 74 26 31 db e8 9f 0c 01 00 84 c0 74 20 e8 f6 [ 1512.966063][ C0] RSP: 0018:ffffc90000007810 EFLAGS: 00000202 [ 1512.966075][ C0] RAX: ffffffff89a1fcea RBX: ffff888055ef17f6 RCX: 0000000000000100 [ 1512.966086][ C0] RDX: ffff88801775d940 RSI: 0000000000000001 RDI: 0000000000000000 [ 1512.966096][ C0] RBP: ffffc90000007990 R08: ffff88801775d940 R09: 000000000000000c [ 1512.966106][ C0] R10: 000000000000000c R11: 0000000000000100 R12: 0000000000000000 [ 1512.966115][ C0] R13: dffffc0000000000 R14: ffff888085424030 R15: 0000000000000001 [ 1512.966131][ C0] ? rhltable_lookup+0x2fa/0x7c0 [ 1512.966152][ C0] rhltable_lookup+0x304/0x7c0 [ 1512.966174][ C0] ? sta_info_hash_lookup+0x60/0x60 [ 1512.966192][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1512.966209][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1512.966233][ C0] sta_info_hash_lookup+0x4a/0x60 [ 1512.966251][ C0] ieee80211_rx_list+0x1ad3/0x2e60 [ 1512.966286][ C0] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 1512.966314][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1512.966341][ C0] ? ieee80211_rx_napi+0xd0/0x3d0 [ 1512.966362][ C0] ieee80211_rx_napi+0x1ae/0x3d0 [ 1512.966384][ C0] ? ieee80211_rx_list+0x2e60/0x2e60 [ 1512.966408][ C0] ? skb_dequeue+0x120/0x150 [ 1512.966426][ C0] ieee80211_handle_queued_frames+0x105/0x1b0 [ 1512.966451][ C0] tasklet_action_common+0x2fe/0x4d0 [ 1512.966470][ C0] ? detach_timer+0x350/0x350 [ 1512.966486][ C0] ? trace_raw_output_tasklet+0xc0/0xc0 [ 1512.966510][ C0] handle_softirqs+0x2a1/0x930 [ 1512.966529][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1512.966547][ C0] ? do_softirq+0x210/0x210 [ 1512.966565][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1512.966583][ C0] __irq_exit_rcu+0x13b/0x230 [ 1512.966598][ C0] ? irq_exit_rcu+0x20/0x20 [ 1512.966620][ C0] irq_exit_rcu+0x5/0x20 [ 1512.966633][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1512.966649][ C0] [ 1512.966653][ C0] [ 1512.966669][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1512.966687][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x2c/0x80 [ 1512.966705][ C0] Code: 04 24 65 48 8b 0d 04 f8 7f 7e 65 8b 15 05 f8 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e <8b> 91 f8 15 00 00 83 fa 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc [ 1512.966717][ C0] RSP: 0018:ffffc90004f3fcd0 EFLAGS: 00000246 [ 1512.966729][ C0] RAX: ffffffff84104777 RBX: 0000000000000004 RCX: ffff88801775d940 [ 1512.966740][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1512.966749][ C0] RBP: ffff888056096680 R08: 0000000000000003 R09: 0000000000000004 [ 1512.966759][ C0] R10: dffffc0000000000 R11: fffff520009e7f94 R12: ffff888057d0d9a0 [ 1512.966770][ C0] R13: ffff8880466be1c0 R14: ffff888057d0d980 R15: 0000000000000000 [ 1512.966786][ C0] ? _find_next_zero_bit+0x27/0x130 [ 1512.966806][ C0] _find_next_zero_bit+0x27/0x130 [ 1512.966826][ C0] alloc_fd+0x18a/0x630 [ 1512.966852][ C0] __se_sys_perf_event_open+0x491/0x1ec0 [ 1512.966867][ C0] ? clockevents_program_event+0x22c/0x310 [ 1512.966890][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1512.966923][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1512.966938][ C0] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1512.966960][ C0] do_syscall_64+0x4c/0xa0 [ 1512.966979][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1512.966997][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1512.967015][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1512.967033][ C0] RIP: 0033:0x7f487c59cdd9 [ 1512.967047][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.967059][ C0] RSP: 002b:00007f487d49a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1512.967074][ C0] RAX: ffffffffffffffda RBX: 00007f487c815fa0 RCX: 00007f487c59cdd9 [ 1512.967085][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 1512.967095][ C0] RBP: 00007f487c632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1512.967105][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1512.967115][ C0] R13: 00007f487c816038 R14: 00007f487c815fa0 R15: 00007ffce9314848 [ 1512.967135][ C0] [ 1513.686606][T14570] Bluetooth: hci9: Opcode 0x0c03 failed: -110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1514.294764][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.301161][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.334166][T14570] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1514.354856][T14570] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1514.362877][T14570] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1514.370956][T14570] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1514.426321][T14570] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1514.434008][T14570] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1514.768996][T30882] netlink: 'syz.4.7824': attribute type 10 has an invalid length. [ 1514.825794][T30882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7824'. [ 1514.891062][T30882] batman_adv: batadv0: Adding interface: vlan1 [ 1514.923292][T30882] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.003758][T30882] batman_adv: batadv0: Interface activated: vlan1 [ 1516.177689][T30885] bond0: (slave syz_tun): Releasing backup interface [ 1517.211079][T30198] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.262738][T30198] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.328283][T30198] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.389804][T30198] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.530106][T30198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.610252][T30198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.664670][T30198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.745529][T30198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.959777][T30198] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.057706][T30198] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.146697][T30198] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.212031][T30198] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.368462][T30198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.457640][T30198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.550694][T30198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.623985][T30198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.795597][T30198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.892220][T30198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.962768][T30198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.038779][T30198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.171193][T30198] device 0 left promiscuous mode [ 1519.218032][T30198] device 0 left promiscuous mode [ 1519.294198][T30198] device 1 left promiscuous mode [ 1519.333965][T30198] device 0 left promiscuous mode [ 1522.341969][T30198] team0: Port device wlan1 removed