last executing test programs: 18m29.522656485s ago: executing program 1 (id=14): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x10c002, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x894) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305828, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) 18m25.159498212s ago: executing program 1 (id=19): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xca, 0x2, 0x9, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x126, 0x5, 0xb, 0x6, 0x7, 0x6, 0x7dc, 0x0, 0x1ff, 0x0, 0xfffffffffffffff9}, 0x0, 0x2, r0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x54}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x4986, 0xfc, 0x4, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8d24, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f000000040000000600000007000000801300", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000500000002000000d6670000000001", @ANYRES32, @ANYBLOB="030000000000e700"/20, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x50) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x8f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0xfff, 0xc, &(0x7f0000000540)=""/12, 0x41100, 0x20, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000640)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xc, 0xa, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r1, r3, r3], &(0x7f0000000700)=[{0x4, 0x1, 0x5, 0xa}, {0x1, 0x1, 0x2, 0x8}, {0x2, 0x1, 0x5, 0x5}, {0xd6, 0x3, 0x5}], 0x10, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) 18m23.730523918s ago: executing program 1 (id=23): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001600)="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", 0x481}], 0x1, 0x0, 0x1d0}, 0x8811) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x46, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r5, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) sendmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{0x0}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 18m22.978759462s ago: executing program 1 (id=28): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4810}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a1085", @ANYRES8, @ANYBLOB="8700"/20, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) write$cgroup_int(r5, &(0x7f0000000040), 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) 18m20.042634194s ago: executing program 1 (id=31): socket$kcm(0x2, 0x3, 0x84) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000400", @ANYRES32, @ANYBLOB="ffffffff00"/15, @ANYRES32=0x0, @ANYBLOB="00000000f40700000000"], 0x48) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000005, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002200356bd25a806f8c6394f96b24fc60", 0x14}], 0x1}, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x5}) r6 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000240)=ANY=[], 0xa) r7 = socket$kcm(0x2, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r6}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x100008000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$kcm(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x368}, 0x20044000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1}, 0x6044, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid_for_children\x00') 18m16.737427709s ago: executing program 1 (id=35): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x0, 0x8a, 0x0, 0x40000001, 0x1, 0x10000, @value=r1}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"], 0x48) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 18m1.603976156s ago: executing program 32 (id=35): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x0, 0x8a, 0x0, 0x40000001, 0x1, 0x10000, @value=r1}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"], 0x48) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 7.348413489s ago: executing program 4 (id=4993): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x104402, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x2}], 0x10}, 0x8080) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0x0, &(0x7f0000001dc0), &(0x7f0000001e40)='syzkaller\x00', 0x80000000, 0x82, &(0x7f0000001e80)=""/130, 0x41000, 0x9, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xc, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x1, 0x1, 0x7, 0x1}, {0x4, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xb}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xe, 0x17}, {0x200, 0x4, 0x8, 0x5}], 0x10, 0x2}, 0x94) r8 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000007f00000000000000", @ANYRES32=r1, @ANYBLOB="080000000000000000fffffffffffffff152040000c8ee0088d510b47e198de4d8b8cf56ceb92a8b8ca9fc0ab8cb9c0ec931bd9699418463db101dad1bd9cfa48f09995e9e371fea2942ac0a87fbcc991731f3448b093caa656fbf6854df127be5f4ff8ada88a22fea66b4c61ca718e6f743954f2f2803091b71ec91a740982be020a15544cbd18a214ed060f511a2b5247f05d0", @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, @call={0x85, 0x0, 0x0, 0x24}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0xd, 0x4, 0x9, 0x6, 0xfffffffffffffffc}]}, &(0x7f0000000500)='GPL\x00', 0x5, 0xec, &(0x7f00000005c0)=""/236, 0x0, 0x17, '\x00', r7, @cgroup_skb=0x1, r8, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xa, 0x2, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x7, &(0x7f0000000800)=[r3, r4, r9], &(0x7f0000000840)=[{0x3, 0x5, 0x7, 0xb}, {0x0, 0x5, 0xe, 0x8}, {0x0, 0x3, 0x8}, {0x3, 0x2, 0x0, 0x3}, {0x4, 0x4, 0x1, 0x6}, {0x80, 0x3, 0x5, 0x3}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0x93}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 7.052488899s ago: executing program 0 (id=4995): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="75508cb777c07afe3882b758985adc022e4c0132a4589cbdb147c3664a5746fecc780c20829a688ffc49cbf8b769fd3910060e0f629bac59bb90d05d1884a1d9bc03c53946b25467ca271612717b3786a0795eea12f767f395867414a41d93c0f6c7b23dc61298dfa932ae347bbe343901ebc7dc7740284a62dc2b3fa494eb239c61050000000000000d6f1f3af5eba4b4ac22321782a7a9fd6183e70bfe5875d558db490fc036e4da768dc913757f0e45b9c410f67d76cb761666f23e1729318de2f81a2c9b3c43a3a20bb2fd1e755d346a13033a4981364b22f77477d226e8ea0e9084abd41cc8c431eacf8cd0f5711120ca459bdc60235578913844c44fb3d11bd85ef125223a49a34eec0465a65f242ecd"]) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000001c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 7.046203479s ago: executing program 2 (id=4996): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000001780)="02042700ea0e0300000000001eafbcf706e1050000", 0x15}, {&(0x7f0000000100)}], 0x2}, 0x40000) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 7.02110041s ago: executing program 4 (id=4997): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8, 0x0, 0xc2ba, 0x1, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xfffffffc, 0x9, 0x8, 0x40003, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x3}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@struct={0x8, 0x2, 0x0, 0x4, 0x0, 0x8, [{0xc, 0x3, 0x1}, {0xf, 0x4, 0x5}]}, @enum64={0x10, 0x5, 0x0, 0x13, 0x0, 0xc, [{0x10, 0x4, 0x800}, {0x4, 0xfffffffa, 0x400}, {0x2, 0xffffffff, 0x3ff}, {0xa, 0x9, 0x7}, {0x8, 0x9, 0x1}]}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000700)=""/27, 0x89, 0x1b, 0x1, 0x7}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000880)=r7, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5650, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x8, 0xbc, &(0x7f0000000300)=""/188, 0x41100, 0x24, '\x00', r5, @sk_lookup, r6, 0x8, &(0x7f0000000780)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0x0, 0x3}, 0x10, 0xffffffffffffffff, r7, 0x5, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10], &(0x7f0000000a00)=[{0x5, 0x3, 0xc, 0x9}, {0x0, 0x2, 0xe, 0x9}, {0x4, 0x1, 0x6}, {0x4, 0x5, 0x7, 0x9}, {0x1, 0x3, 0x2, 0x8}], 0x10, 0x9004}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0xe0, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25f0, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xe, 0x7, 0x9, 0xc, 0x9}, @call={0x85, 0x0, 0x0, 0x12}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @generic={0x8, 0x9, 0x2, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000500)='GPL\x00', 0x6, 0xdd, &(0x7f0000000540)=""/221, 0x40f00, 0x6, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x260fd, r1, 0x3, &(0x7f0000000dc0)=[r11, 0x1, r12, r13, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x4, 0x1, 0x3, 0x6}, {0x3, 0x1, 0xe, 0x4}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0xffffffff}, 0x94) 6.596601003s ago: executing program 0 (id=4998): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) 6.229403975s ago: executing program 0 (id=4999): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='T'], 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd046}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.395680002s ago: executing program 4 (id=5000): socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0xe9, &(0x7f0000000380)=""/233, 0x41000, 0x2}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4c850}, 0x40400c5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\v'], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) 4.308734305s ago: executing program 2 (id=5001): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200), 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x5, 0x0, 0x16) 4.303987905s ago: executing program 0 (id=5002): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a97f9) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 4.16409392s ago: executing program 3 (id=5004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d00000008500000023000000954b000000001000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.052588963s ago: executing program 2 (id=5005): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0x4, 0x0, &(0x7f0000000280)="7b5515cc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r2, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000a40), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000c40)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000000400000000d9000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000081000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000a15400008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000000), &(0x7f0000000140)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) 3.984470326s ago: executing program 3 (id=5006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000003c77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc2", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x50) 3.912639857s ago: executing program 2 (id=5007): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="c109ff97000000", 0x7}, {&(0x7f0000000240)="05", 0x1}], 0x2}, 0x20040000) 3.776565352s ago: executing program 3 (id=5008): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x104402, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x2}], 0x10}, 0x8080) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0x0, &(0x7f0000001dc0), &(0x7f0000001e40)='syzkaller\x00', 0x80000000, 0x82, &(0x7f0000001e80)=""/130, 0x41000, 0x9, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xc, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x1, 0x1, 0x7, 0x1}, {0x4, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xb}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xe, 0x17}, {0x200, 0x4, 0x8, 0x5}], 0x10, 0x2}, 0x94) r8 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000007f00000000000000", @ANYRES32=r1, @ANYBLOB="080000000000000000fffffffffffffff152040000c8ee0088d510b47e198de4d8b8cf56ceb92a8b8ca9fc0ab8cb9c0ec931bd9699418463db101dad1bd9cfa48f09995e9e371fea2942ac0a87fbcc991731f3448b093caa656fbf6854df127be5f4ff8ada88a22fea66b4c61ca718e6f743954f2f2803091b71ec91a740982be020a15544cbd18a214ed060f511a2b5247f05d0", @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, @call={0x85, 0x0, 0x0, 0x24}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0xd, 0x4, 0x9, 0x6, 0xfffffffffffffffc}]}, &(0x7f0000000500)='GPL\x00', 0x5, 0xec, &(0x7f00000005c0)=""/236, 0x0, 0x17, '\x00', r7, @cgroup_skb=0x1, r8, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xa, 0x2, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x7, &(0x7f0000000800)=[r3, r4, r9], &(0x7f0000000840)=[{0x3, 0x5, 0x7, 0xb}, {0x0, 0x5, 0xe, 0x8}, {0x0, 0x3, 0x8}, {0x3, 0x2, 0x0, 0x3}, {0x4, 0x4, 0x1, 0x6}, {0x80, 0x3, 0x5, 0x3}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0x93}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 3.767079602s ago: executing program 4 (id=5009): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x200008, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socket$kcm(0x21, 0x2, 0xa) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r5}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb01001800000000000000d2000000d20000000500000000000000000000030000000003000000020000000500061e0000070000000000000700000000050000000000000b02000000100000000300000f020000000100000046c1000008000000030000000010000000000000120000000400000040000000bd3210000000000000110200000002000000000000000000000300000000040000000400000008000000020000000200000604000000040000005d0500000e0000000a000000070000000100001302000000070000000200000006000000000000000100000d00000000030000000000000000000000612e00"], &(0x7f0000001200)=""/48, 0xf1, 0x30, 0x0, 0x262, 0x10000, @value=r8}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) close(r6) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0x2, 0x922000000001, 0x106) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) r11 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000012c0)=ANY=[@ANYBLOB="1400000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r11, &(0x7f0000001600), 0x0}, 0x20) setsockopt$sock_attach_bpf(r9, 0x1, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x90, 0x0, 0x2, 0x7602, 0x0, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000)}, 0x20, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6, 0x0, 0xfffbffff}, 0x0, 0x16, 0xffffffffffffffff, 0x9) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r13, 0x0, 0x0}, 0x10) 3.740890343s ago: executing program 2 (id=5010): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x13, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a884", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) close(r3) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r6, @ANYRESOCT=r6, @ANYRES16=r7], 0x48) r9 = socket$kcm(0x2c, 0x3, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200008100000000000000d17e00008500000020000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) 3.704427284s ago: executing program 5 (id=5011): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x10000, 0x7fff, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000002c000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="e31dca29f640368b2296d8beaf7d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xb}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2b, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000200), 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000013000400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x5, 0x4, 0x4f, 0x2080, 0xffffffffffffffff, 0x10, '\x00', 0x0, r4, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) 3.626845836s ago: executing program 0 (id=5012): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8, 0x0, 0xc2ba, 0x1, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xfffffffc, 0x9, 0x8, 0x40003, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x3}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@struct={0x8, 0x2, 0x0, 0x4, 0x0, 0x8, [{0xc, 0x3, 0x1}, {0xf, 0x4, 0x5}]}, @enum64={0x10, 0x5, 0x0, 0x13, 0x0, 0xc, [{0x10, 0x4, 0x800}, {0x4, 0xfffffffa, 0x400}, {0x2, 0xffffffff, 0x3ff}, {0xa, 0x9, 0x7}, {0x8, 0x9, 0x1}]}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000700)=""/27, 0x89, 0x1b, 0x1, 0x7}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000880)=r7, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5650, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x8, 0xbc, &(0x7f0000000300)=""/188, 0x41100, 0x24, '\x00', r5, @sk_lookup, r6, 0x8, &(0x7f0000000780)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0x0, 0x3}, 0x10, 0xffffffffffffffff, r7, 0x5, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10], &(0x7f0000000a00)=[{0x5, 0x3, 0xc, 0x9}, {0x0, 0x2, 0xe, 0x9}, {0x4, 0x1, 0x6}, {0x4, 0x5, 0x7, 0x9}, {0x1, 0x3, 0x2, 0x8}], 0x10, 0x9004}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0xe0, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25f0, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xe, 0x7, 0x9, 0xc, 0x9}, @call={0x85, 0x0, 0x0, 0x12}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @generic={0x8, 0x9, 0x2, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000500)='GPL\x00', 0x6, 0xdd, &(0x7f0000000540)=""/221, 0x40f00, 0x6, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x260fd, r1, 0x3, &(0x7f0000000dc0)=[r11, 0x1, r12, r13, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x4, 0x1, 0x3, 0x6}, {0x3, 0x1, 0xe, 0x4}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0xffffffff}, 0x94) 3.457050542s ago: executing program 3 (id=5013): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x8, 0x8, 0x0, 0xfffc, 0x0, 0x3fffe, 0x0, 0xffffffffffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x5, 0x4, 0x9, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xb, 0x9, 0x3}, 0x10, 0x361b, r1, 0x4, &(0x7f0000000400)=[0x1, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x2, 0xa, 0x9}, {0x3, 0x1, 0xb, 0x210693e57baa8435}, {0x0, 0x1, 0x9, 0x2}, {0x5, 0x2, 0x10, 0xc}], 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r6, 0x0, 0x2020) r7 = socket$kcm(0x10, 0x3, 0x10) close(r7) recvmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) 3.128472742s ago: executing program 4 (id=5014): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)}, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b954bc6762240c61c57ed374ad", 0x0, 0x20041ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000", 0x28}], 0x1}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000040)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0x14}, {&(0x7f0000000580)="1210366768003b6a3115e205ad12f6795f1a", 0x12}], 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 3.092043813s ago: executing program 5 (id=5015): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) 2.676534426s ago: executing program 5 (id=5016): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000009, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, @perf_config_ext={0x87, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000a80), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f0000001a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001d00), &(0x7f0000001a80), 0x8, 0xbc, 0x8, 0x7, &(0x7f0000001ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fdfc74ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c40)=r10, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e000000f4000000000001000100000000000000", @ANYRES32=r11, @ANYBLOB="0400"/20, @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="05000000010000000000000002000000000000000000000000000000e3caaa1a30f62824e513f62ea3bed954d4532673712c04ff7f193157db61738ab1305c046932b40017125e802982d608ce2740518bce305d3626087b05821915367037cf6022eddd125c15eb817ccf4a914285806cd7d2f0848d8a0fbb2e79ca516423c4ea3692ac1e073fc046c4d88d1e261a01a802ec1f297c13059d3ede2cd299d02fb6fe440ee4cc8a2edbbbee1e8e92d130af"], 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r14 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f0000000180)=r13, 0x4) write$cgroup_pressure(r13, &(0x7f0000000240)={'full', 0x20, 0x9, 0x20, 0xfffffffffffffff8}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000600000005000000a41700000a100000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="010000000300000004008c000a080000000000000000000000000054"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r15) 2.623348688s ago: executing program 3 (id=5017): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80010000, 0x4}, 0x50) 1.596187701s ago: executing program 5 (id=5018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000003c77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc2", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x50) 1.400615726s ago: executing program 5 (id=5019): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="80000000000000000000000000000000000000009d1db92e725227cd02015d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000600000000000000000200000000"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x28, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="181100000fab2adacee486258abcd381d00a524c16ea1d6d8e94739f50384a0d57c4e59fa35bfb7bf802ddc521bc4d984496754eb314440388f67aa008593d2c22cda67f87a5e8", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0xbd, &(0x7f0000000640)=""/189, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r2, r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{r2}, 0x0, &(0x7f0000001540)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd661db401558c9c6}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r1, 0x3b, 0x1, 0xde, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000500)=[0x0]}, 0x40) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000000100179215a2681cf6e50400003d490d20b735b16b6a4479", 0x35}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000030000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda104000400000027010000f8ffffffb702000008000000b703000000000000250000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xfffe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'veth0\x00', 0x4000}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000012c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002400)={0xffffffffffffffff, 0x20, &(0x7f00000023c0)={&(0x7f0000001380)=""/4096, 0x1000, 0x0, &(0x7f0000002380)=""/23, 0x17}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="1b0000000000000000000000050000049164e4f4", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002540)={{r0}, &(0x7f00000024c0), &(0x7f0000002500)='%pS \x00'}, 0x20) 1.239253451s ago: executing program 3 (id=5020): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000000006114a40000000000040000000000000095000000000000002db4fd3b76d88606e422f0ab90b7cf917eef7e9760c11f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x81}, 0x10159c, 0xffffffffffffffff, 0x10000, 0x9, 0x40, 0x7, 0x0, 0x0, 0x3}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0, 0x11}, {0x0, 0xf5ff}], 0x2, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x2000000, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x46}, 0x28) 1.131356555s ago: executing program 0 (id=5021): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x31, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1, 0x0, 0xdc05}, 0x480c0) socket$kcm(0x2, 0x3, 0x84) 1.005993109s ago: executing program 2 (id=5022): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a97f9) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 771.183426ms ago: executing program 5 (id=5023): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0xc272}, 0x104402, 0xac5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x29, 0x2}], 0x10}, 0x8080) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='../\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0x1, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x18, 0x0, &(0x7f0000001dc0), &(0x7f0000001e40)='syzkaller\x00', 0x80000000, 0x82, &(0x7f0000001e80)=""/130, 0x41000, 0x9, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0x1ff, 0x2}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0xc, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002100)=[{0x1, 0x1, 0x7, 0x1}, {0x4, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x0, 0x2, 0xb}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x5, 0xe, 0x17}, {0x200, 0x4, 0x8, 0x5}], 0x10, 0x2}, 0x94) r8 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000007f00000000000000", @ANYRES32=r1, @ANYBLOB="080000000000000000fffffffffffffff152040000c8ee0088d510b47e198de4d8b8cf56ceb92a8b8ca9fc0ab8cb9c0ec931bd9699418463db101dad1bd9cfa48f09995e9e371fea2942ac0a87fbcc991731f3448b093caa656fbf6854df127be5f4ff8ada88a22fea66b4c61ca718e6f743954f2f2803091b71ec91a740982be020a15544cbd18a214ed060f511a2b5247f05d0", @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, @call={0x85, 0x0, 0x0, 0x24}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0xd, 0x4, 0x9, 0x6, 0xfffffffffffffffc}]}, &(0x7f0000000500)='GPL\x00', 0x5, 0xec, &(0x7f00000005c0)=""/236, 0x0, 0x17, '\x00', r7, @cgroup_skb=0x1, r8, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xa, 0x2, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x7, &(0x7f0000000800)=[r3, r4, r9], &(0x7f0000000840)=[{0x3, 0x5, 0x7, 0xb}, {0x0, 0x5, 0xe, 0x8}, {0x0, 0x3, 0x8}, {0x3, 0x2, 0x0, 0x3}, {0x4, 0x4, 0x1, 0x6}, {0x80, 0x3, 0x5, 0x3}, {0x4, 0x4, 0xc, 0xb}], 0x10, 0x93}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 0s ago: executing program 4 (id=5024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800020000000000000000000000000071123300f9ffffff9400000053812f0e0a87faaa362e03b555c5a4ac7764ed2736732322de5ef011e5e07c68df2c4055d2fd9c890984583cd56fcc3a09a9d44eb6d11a738e9ffaa715fef1aed46cfd3a154b2d633c8be53e8cbf5ba0f3f4aa25fd852d4c273a5f30c618a66f925d04d224dd279d8c66bc4291c6ac0a783e221f9f7e8703cb82b760e08090a1fe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r1) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x80040008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB=','], 0x9a) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602410000000e000a000f000000028000bfd2b3", 0x2e}], 0x1}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) close(r9) (async) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) close(r11) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES32], 0x50) (async, rerun: 32) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) kernel console output (not intermixed with test programs): 17507] netlink: 'syz.5.3979': attribute type 21 has an invalid length. [ 1036.562148][T17509] bridge0: port 4(batadv0) entered blocking state [ 1036.575757][T17507] FAULT_INJECTION: forcing a failure. [ 1036.575757][T17507] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.594763][T17509] bridge0: port 4(batadv0) entered disabled state [ 1036.601894][T17507] CPU: 1 PID: 17507 Comm: syz.5.3979 Not tainted syzkaller #0 [ 1036.609424][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1036.619522][T17507] Call Trace: [ 1036.622846][T17507] [ 1036.625910][T17507] dump_stack_lvl+0x188/0x24e [ 1036.630646][T17507] ? show_regs_print_info+0x12/0x12 [ 1036.635905][T17507] ? load_image+0x400/0x400 [ 1036.640470][T17507] should_fail_ex+0x399/0x4d0 [ 1036.645191][T17507] should_failslab+0x5/0x20 [ 1036.649722][T17507] slab_pre_alloc_hook+0x59/0x310 [ 1036.654793][T17507] kmem_cache_alloc+0x56/0x2f0 [ 1036.659586][T17507] ? dst_alloc+0x101/0x160 [ 1036.664043][T17507] dst_alloc+0x101/0x160 [ 1036.668320][T17507] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 1036.674427][T17507] inet_rtm_getroute+0x10ca/0x2810 [ 1036.679577][T17507] ? inet_rtm_getroute+0xdc8/0x2810 [ 1036.684815][T17507] ? ip_rt_multicast_event+0x80/0x80 [ 1036.690142][T17507] ? slab_free_freelist_hook+0x131/0x1a0 [ 1036.695877][T17507] ? ct_nmi_exit+0x145/0x1c0 [ 1036.700517][T17507] ? __lock_acquire+0x7d10/0x7d10 [ 1036.705604][T17507] ? ip_rt_multicast_event+0x80/0x80 [ 1036.710919][T17507] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1036.716063][T17507] ? ip_rt_multicast_event+0x80/0x80 [ 1036.721389][T17507] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 1036.726371][T17507] ? rtnetlink_bind+0x80/0x80 [ 1036.731081][T17507] ? __local_bh_enable_ip+0x136/0x1c0 [ 1036.736478][T17507] ? lockdep_hardirqs_on+0x94/0x140 [ 1036.741713][T17507] ? __local_bh_enable_ip+0x136/0x1c0 [ 1036.747111][T17507] ? _local_bh_enable+0xa0/0xa0 [ 1036.751987][T17507] ? __dev_queue_xmit+0x26b/0x37c0 [ 1036.757217][T17507] ? __dev_queue_xmit+0x26b/0x37c0 [ 1036.762358][T17507] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 1036.767593][T17507] ? __dev_queue_xmit+0x26b/0x37c0 [ 1036.772737][T17507] ? ref_tracker_free+0x68c/0x840 [ 1036.777800][T17507] ? __copy_skb_header+0x3ba/0x4f0 [ 1036.782952][T17507] ? refcount_inc+0x70/0x70 [ 1036.787488][T17507] ? memcpy+0x3c/0x60 [ 1036.791496][T17507] ? __copy_skb_header+0x3ba/0x4f0 [ 1036.796688][T17507] ? __skb_clone+0x480/0x790 [ 1036.801316][T17507] netlink_rcv_skb+0x1fb/0x450 [ 1036.806120][T17507] ? rtnetlink_bind+0x80/0x80 [ 1036.810835][T17507] ? netlink_ack+0x1170/0x1170 [ 1036.815638][T17507] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.820885][T17507] netlink_unicast+0x74d/0x8d0 [ 1036.825694][T17507] netlink_sendmsg+0x8ad/0xbd0 [ 1036.830502][T17507] ? netlink_getsockopt+0x550/0x550 [ 1036.835748][T17507] ? aa_sock_msg_perm+0x94/0x150 [ 1036.840716][T17507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1036.846024][T17507] ? security_socket_sendmsg+0x7c/0xa0 [ 1036.851607][T17507] ? netlink_getsockopt+0x550/0x550 [ 1036.856851][T17507] ____sys_sendmsg+0x5be/0x970 [ 1036.861658][T17507] ? __sys_sendmsg_sock+0x30/0x30 [ 1036.866722][T17507] ? __import_iovec+0x315/0x500 [ 1036.871613][T17507] ? import_iovec+0x6f/0xa0 [ 1036.876230][T17507] ___sys_sendmsg+0x2a2/0x360 [ 1036.880946][T17507] ? __sys_sendmsg+0x290/0x290 [ 1036.885762][T17507] ? __lock_acquire+0x7d10/0x7d10 [ 1036.890851][T17507] __se_sys_sendmsg+0x1bb/0x2a0 [ 1036.895744][T17507] ? __x64_sys_sendmsg+0x80/0x80 [ 1036.900742][T17507] ? lockdep_hardirqs_on+0x94/0x140 [ 1036.905969][T17507] do_syscall_64+0x4c/0xa0 [ 1036.910418][T17507] ? clear_bhb_loop+0x60/0xb0 [ 1036.915128][T17507] ? clear_bhb_loop+0x60/0xb0 [ 1036.919847][T17507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1036.925768][T17507] RIP: 0033:0x7fce4f19ce59 [ 1036.930213][T17507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.949863][T17507] RSP: 002b:00007fce4ff8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.958314][T17507] RAX: ffffffffffffffda RBX: 00007fce4f415fa0 RCX: 00007fce4f19ce59 [ 1036.966314][T17507] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1036.974308][T17507] RBP: 00007fce4ff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.982303][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.990293][T17507] R13: 00007fce4f416038 R14: 00007fce4f415fa0 R15: 00007fffe791fb28 [ 1036.998310][T17507] [ 1037.018669][T17509] device batadv0 entered promiscuous mode [ 1037.031363][T17509] bridge0: port 4(batadv0) entered blocking state [ 1037.037929][T17509] bridge0: port 4(batadv0) entered forwarding state [ 1037.057530][ T5637] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1037.066899][ T5637] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1037.540827][T17523] netlink: 'syz.3.3974': attribute type 2 has an invalid length. [ 1037.676606][T17523] device 8 entered promiscuous mode [ 1037.767337][T17534] netlink: 7551 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1037.888793][T17525] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1038.854146][T17551] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3984'. [ 1039.592577][T17571] FAULT_INJECTION: forcing a failure. [ 1039.592577][T17571] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.605807][T17571] CPU: 0 PID: 17571 Comm: syz.5.3990 Not tainted syzkaller #0 [ 1039.613321][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.623436][T17571] Call Trace: [ 1039.626766][T17571] [ 1039.629732][T17571] dump_stack_lvl+0x188/0x24e [ 1039.634471][T17571] ? show_regs_print_info+0x12/0x12 [ 1039.639730][T17571] ? load_image+0x400/0x400 [ 1039.644287][T17571] ? __might_sleep+0xd0/0xd0 [ 1039.648923][T17571] ? __lock_acquire+0x7d10/0x7d10 [ 1039.654012][T17571] should_fail_ex+0x399/0x4d0 [ 1039.658750][T17571] should_failslab+0x5/0x20 [ 1039.663300][T17571] slab_pre_alloc_hook+0x59/0x310 [ 1039.668375][T17571] ? apparmor_sk_alloc_security+0x74/0x100 [ 1039.674229][T17571] __kmem_cache_alloc_node+0x4f/0x260 [ 1039.679651][T17571] ? apparmor_sk_alloc_security+0x74/0x100 [ 1039.685510][T17571] kmalloc_trace+0x26/0xe0 [ 1039.690015][T17571] apparmor_sk_alloc_security+0x74/0x100 [ 1039.695706][T17571] security_sk_alloc+0x6a/0xa0 [ 1039.700524][T17571] sk_prot_alloc+0x101/0x210 [ 1039.705179][T17571] ? sk_alloc+0x20/0x340 [ 1039.709615][T17571] sk_alloc+0x36/0x340 [ 1039.713747][T17571] ? bpf_ctx_init+0x163/0x1a0 [ 1039.718471][T17571] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1039.724153][T17571] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1039.729563][T17571] ? __fget_files+0x28/0x4b0 [ 1039.734190][T17571] ? __fget_files+0x43d/0x4b0 [ 1039.738911][T17571] ? cpu_online+0xa0/0xa0 [ 1039.743267][T17571] bpf_prog_test_run+0x31e/0x390 [ 1039.748244][T17571] __sys_bpf+0x62b/0x780 [ 1039.752521][T17571] ? bpf_link_show_fdinfo+0x380/0x380 [ 1039.757935][T17571] ? lock_chain_count+0x20/0x20 [ 1039.762856][T17571] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1039.768879][T17571] __x64_sys_bpf+0x78/0x90 [ 1039.773329][T17571] do_syscall_64+0x4c/0xa0 [ 1039.777789][T17571] ? clear_bhb_loop+0x60/0xb0 [ 1039.782512][T17571] ? clear_bhb_loop+0x60/0xb0 [ 1039.787224][T17571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.793151][T17571] RIP: 0033:0x7fce4f19ce59 [ 1039.797588][T17571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.817220][T17571] RSP: 002b:00007fce4ff8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1039.825659][T17571] RAX: ffffffffffffffda RBX: 00007fce4f415fa0 RCX: 00007fce4f19ce59 [ 1039.833688][T17571] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1039.841680][T17571] RBP: 00007fce4ff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.849670][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.857659][T17571] R13: 00007fce4f416038 R14: 00007fce4f415fa0 R15: 00007fffe791fb28 [ 1039.865670][T17571] [ 1040.098947][T17565] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1040.196100][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1041.214614][T17599] FAULT_INJECTION: forcing a failure. [ 1041.214614][T17599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.235543][T17599] CPU: 1 PID: 17599 Comm: syz.2.3995 Not tainted syzkaller #0 [ 1041.243112][T17599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.253234][T17599] Call Trace: [ 1041.256572][T17599] [ 1041.259552][T17599] dump_stack_lvl+0x188/0x24e [ 1041.264331][T17599] ? show_regs_print_info+0x12/0x12 [ 1041.269621][T17599] ? load_image+0x400/0x400 [ 1041.274213][T17599] ? __lock_acquire+0x7d10/0x7d10 [ 1041.279320][T17599] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1041.285143][T17599] should_fail_ex+0x399/0x4d0 [ 1041.289907][T17599] _copy_from_user+0x2c/0x170 [ 1041.294679][T17599] ___sys_sendmsg+0x1c3/0x360 [ 1041.299461][T17599] ? __sys_sendmsg+0x290/0x290 [ 1041.304376][T17599] ? __lock_acquire+0x7d10/0x7d10 [ 1041.309551][T17599] __se_sys_sendmsg+0x1bb/0x2a0 [ 1041.314478][T17599] ? ct_nmi_exit+0x145/0x1c0 [ 1041.319152][T17599] ? __x64_sys_sendmsg+0x80/0x80 [ 1041.324264][T17599] ? lockdep_hardirqs_on+0x94/0x140 [ 1041.329546][T17599] do_syscall_64+0x4c/0xa0 [ 1041.334048][T17599] ? clear_bhb_loop+0x60/0xb0 [ 1041.338814][T17599] ? clear_bhb_loop+0x60/0xb0 [ 1041.343584][T17599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.349557][T17599] RIP: 0033:0x7ff85cf9ce59 [ 1041.354041][T17599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.373726][T17599] RSP: 002b:00007ff85de5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.382233][T17599] RAX: ffffffffffffffda RBX: 00007ff85d215fa0 RCX: 00007ff85cf9ce59 [ 1041.390265][T17599] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000004 [ 1041.398314][T17599] RBP: 00007ff85de5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.406412][T17599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.414445][T17599] R13: 00007ff85d216038 R14: 00007ff85d215fa0 R15: 00007ffce4e6f588 [ 1041.422537][T17599] [ 1041.493217][T17603] netlink: 'syz.4.3996': attribute type 2 has an invalid length. [ 1041.506403][T17603] device 6 entered promiscuous mode [ 1041.592934][T17604] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1044.698617][T17617] netlink: 'syz.4.4001': attribute type 10 has an invalid length. [ 1044.723248][T17617] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4001'. [ 1045.817877][T17648] netlink: 'syz.5.4013': attribute type 10 has an invalid length. [ 1045.836728][T17648] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4013'. [ 1046.052986][T17651] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4014'. [ 1046.332205][T17658] FAULT_INJECTION: forcing a failure. [ 1046.332205][T17658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.371192][T17658] CPU: 0 PID: 17658 Comm: syz.3.4017 Not tainted syzkaller #0 [ 1046.378743][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.388867][T17658] Call Trace: [ 1046.392206][T17658] [ 1046.395175][T17658] dump_stack_lvl+0x188/0x24e [ 1046.399920][T17658] ? show_regs_print_info+0x12/0x12 [ 1046.405192][T17658] ? load_image+0x400/0x400 [ 1046.409760][T17658] ? __lock_acquire+0x7d10/0x7d10 [ 1046.414867][T17658] should_fail_ex+0x399/0x4d0 [ 1046.419594][T17658] _copy_from_iter+0x1c0/0x1130 [ 1046.424510][T17658] ? __lock_acquire+0x7d10/0x7d10 [ 1046.429591][T17658] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1046.435029][T17658] ? copyout_mc+0x110/0x110 [ 1046.439591][T17658] ? __virt_addr_valid+0x188/0x540 [ 1046.444751][T17658] ? __virt_addr_valid+0x188/0x540 [ 1046.449932][T17658] ? __virt_addr_valid+0x465/0x540 [ 1046.455097][T17658] ? __check_object_size+0x500/0xa40 [ 1046.460438][T17658] skb_copy_datagram_from_iter+0xef/0x690 [ 1046.466212][T17658] ? skb_put+0x117/0x210 [ 1046.470498][T17658] tun_get_user+0xb81/0x3c70 [ 1046.475158][T17658] ? rcu_read_unlock+0xa0/0xa0 [ 1046.479989][T17658] ? tun_get+0x1c/0x2e0 [ 1046.484200][T17658] ? __lock_acquire+0x7d10/0x7d10 [ 1046.489277][T17658] ? tun_get+0x1c/0x2e0 [ 1046.493490][T17658] tun_chr_write_iter+0x112/0x1f0 [ 1046.498581][T17658] vfs_write+0x4b1/0xa30 [ 1046.502891][T17658] ? file_end_write+0x250/0x250 [ 1046.507827][T17658] ? __fget_files+0x43d/0x4b0 [ 1046.512571][T17658] ? __fdget_pos+0x1d4/0x360 [ 1046.517217][T17658] ? ksys_write+0x71/0x250 [ 1046.521697][T17658] ksys_write+0x14c/0x250 [ 1046.526091][T17658] ? __ia32_sys_read+0x80/0x80 [ 1046.530918][T17658] ? lockdep_hardirqs_on+0x94/0x140 [ 1046.536180][T17658] do_syscall_64+0x4c/0xa0 [ 1046.540665][T17658] ? clear_bhb_loop+0x60/0xb0 [ 1046.545396][T17658] ? clear_bhb_loop+0x60/0xb0 [ 1046.550140][T17658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1046.556088][T17658] RIP: 0033:0x7fbd3479ce59 [ 1046.560544][T17658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.580194][T17658] RSP: 002b:00007fbd356ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1046.588652][T17658] RAX: ffffffffffffffda RBX: 00007fbd34a15fa0 RCX: 00007fbd3479ce59 [ 1046.596662][T17658] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 1046.604670][T17658] RBP: 00007fbd356ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.612677][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.620684][T17658] R13: 00007fbd34a16038 R14: 00007fbd34a15fa0 R15: 00007ffd5d6e8f78 [ 1046.628714][T17658] [ 1047.357862][T17654] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1047.379939][T17662] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1047.591980][T17669] netlink: 'syz.2.4021': attribute type 2 has an invalid length. [ 1047.717851][T17669] device 7 entered promiscuous mode [ 1047.785715][T17676] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4020'. [ 1047.876932][T17676] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1048.076523][T17682] netlink: 'syz.3.4025': attribute type 10 has an invalid length. [ 1048.091127][T17682] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1048.619957][T17705] netlink: 'syz.5.4031': attribute type 21 has an invalid length. [ 1048.670697][T17705] IPv6: NLM_F_CREATE should be specified when creating new route [ 1048.678619][T17705] IPv6: Can't replace route, no match found [ 1048.869070][T17701] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1049.084947][T17717] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1049.890884][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 1049.915055][T17728] netlink: 'syz.0.4040': attribute type 10 has an invalid length. [ 1049.931300][T17728] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1050.076476][T17731] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4041'. [ 1050.099922][T17731] netlink: 'syz.4.4041': attribute type 21 has an invalid length. [ 1050.134008][T17731] netlink: 'syz.4.4041': attribute type 6 has an invalid length. [ 1050.149952][T17731] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4041'. [ 1050.183019][T17736] netlink: 'syz.0.4043': attribute type 9 has an invalid length. [ 1050.192631][T17736] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4043'. [ 1051.192059][T17763] netlink: 'syz.0.4053': attribute type 10 has an invalid length. [ 1051.206855][T17763] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4053'. [ 1051.228470][T17752] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1051.318582][T17761] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1051.763678][T17781] netlink: 'syz.5.4057': attribute type 21 has an invalid length. [ 1051.786301][T17784] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1052.227608][T17795] FAULT_INJECTION: forcing a failure. [ 1052.227608][T17795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.311521][T17795] CPU: 1 PID: 17795 Comm: syz.2.4064 Not tainted syzkaller #0 [ 1052.319077][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1052.329180][T17795] Call Trace: [ 1052.332506][T17795] [ 1052.335495][T17795] dump_stack_lvl+0x188/0x24e [ 1052.340237][T17795] ? show_regs_print_info+0x12/0x12 [ 1052.345489][T17795] ? load_image+0x400/0x400 [ 1052.350046][T17795] ? __lock_acquire+0x7d10/0x7d10 [ 1052.355136][T17795] should_fail_ex+0x399/0x4d0 [ 1052.359869][T17795] _copy_from_user+0x2c/0x170 [ 1052.364600][T17795] csum_and_copy_from_iter+0x493/0x1350 [ 1052.370212][T17795] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1052.375897][T17795] ? __kmem_cache_alloc_node+0x140/0x260 [ 1052.381571][T17795] ip_generic_getfrag+0x150/0x2e0 [ 1052.386639][T17795] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1052.391520][T17795] ? skb_put+0x117/0x210 [ 1052.395792][T17795] __ip6_append_data+0x300b/0x3d40 [ 1052.400958][T17795] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 1052.406305][T17795] ? ip6_setup_cork+0xfe0/0xfe0 [ 1052.411194][T17795] ? __local_bh_enable_ip+0x136/0x1c0 [ 1052.416586][T17795] ip6_append_data+0x1ea/0x3e0 [ 1052.421390][T17795] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 1052.426714][T17795] rawv6_sendmsg+0x1224/0x1700 [ 1052.431528][T17795] ? compat_rawv6_ioctl+0x60/0x60 [ 1052.436594][T17795] ? aa_sk_perm+0x81f/0x950 [ 1052.441138][T17795] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1052.447681][T17795] ? inet_sendmsg+0x78/0x2f0 [ 1052.452297][T17795] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1052.457604][T17795] ? security_socket_sendmsg+0x7c/0xa0 [ 1052.463098][T17795] ? inet_send_prepare+0x260/0x260 [ 1052.468253][T17795] ____sys_sendmsg+0x5be/0x970 [ 1052.473055][T17795] ? __sys_sendmsg_sock+0x30/0x30 [ 1052.478116][T17795] ? __import_iovec+0x315/0x500 [ 1052.483006][T17795] ? import_iovec+0x6f/0xa0 [ 1052.487536][T17795] ___sys_sendmsg+0x2a2/0x360 [ 1052.492252][T17795] ? __sys_sendmsg+0x290/0x290 [ 1052.497065][T17795] ? __lock_acquire+0x7d10/0x7d10 [ 1052.502140][T17795] __se_sys_sendmsg+0x1bb/0x2a0 [ 1052.507118][T17795] ? __x64_sys_sendmsg+0x80/0x80 [ 1052.512100][T17795] ? lockdep_hardirqs_on+0x94/0x140 [ 1052.517334][T17795] do_syscall_64+0x4c/0xa0 [ 1052.521785][T17795] ? clear_bhb_loop+0x60/0xb0 [ 1052.526488][T17795] ? clear_bhb_loop+0x60/0xb0 [ 1052.531197][T17795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.537116][T17795] RIP: 0033:0x7ff85cf9ce59 [ 1052.541555][T17795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.561203][T17795] RSP: 002b:00007ff85de5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.569639][T17795] RAX: ffffffffffffffda RBX: 00007ff85d215fa0 RCX: 00007ff85cf9ce59 [ 1052.577633][T17795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1052.585627][T17795] RBP: 00007ff85de5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.593621][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.601612][T17795] R13: 00007ff85d216038 R14: 00007ff85d215fa0 R15: 00007ffce4e6f588 [ 1052.609627][T17795] [ 1052.686402][T17797] netlink: 'syz.0.4066': attribute type 10 has an invalid length. [ 1052.705876][T17797] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4066'. [ 1053.089699][T17807] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1053.293312][T17820] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1053.306644][T17816] netlink: 'syz.3.4070': attribute type 2 has an invalid length. [ 1053.446007][T17816] device 9 entered promiscuous mode [ 1053.718830][T17835] netlink: 'syz.2.4079': attribute type 10 has an invalid length. [ 1053.734662][T17835] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1053.827780][T17839] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4076'. [ 1053.880219][T17839] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1053.891946][ T5637] wlan1: Trigger new scan to find an IBSS to join [ 1053.963645][T17839] CPU: 1 PID: 17839 Comm: syz.4.4076 Not tainted syzkaller #0 [ 1053.971207][T17839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1053.981311][T17839] Call Trace: [ 1053.984629][T17839] [ 1053.987625][T17839] dump_stack_lvl+0x188/0x24e [ 1053.992377][T17839] ? show_regs_print_info+0x12/0x12 [ 1053.997641][T17839] ? load_image+0x400/0x400 [ 1054.002229][T17839] sysfs_warn_dup+0x8a/0xa0 [ 1054.006878][T17839] sysfs_do_create_link_sd+0xc0/0x110 [ 1054.012319][T17839] device_add+0x7ed/0xfb0 [ 1054.016725][T17839] wiphy_register+0x1d9f/0x2ac0 [ 1054.021665][T17839] ? cfg80211_event_work+0x40/0x40 [ 1054.026850][T17839] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1054.033090][T17839] ? ieee80211_register_hw+0x28b7/0x39f0 [ 1054.038795][T17839] ieee80211_register_hw+0x2d00/0x39f0 [ 1054.044338][T17839] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.049598][T17839] ? ieee80211_register_hw+0xf41/0x39f0 [ 1054.055216][T17839] ? ieee80211_register_hw+0xe41/0x39f0 [ 1054.060845][T17839] ? ieee80211_tasklet_handler+0x20/0x20 [ 1054.066551][T17839] ? memset+0x1e/0x40 [ 1054.070588][T17839] ? __hrtimer_init+0x186/0x270 [ 1054.075498][T17839] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1054.081310][T17839] hwsim_new_radio_nl+0xafa/0xce0 [ 1054.086415][T17839] genl_family_rcv_msg_doit+0x22a/0x330 [ 1054.092020][T17839] ? end_current_label_crit_section+0x170/0x170 [ 1054.098339][T17839] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1054.104298][T17839] ? bpf_lsm_capable+0x5/0x10 [ 1054.109027][T17839] ? security_capable+0x85/0xb0 [ 1054.113959][T17839] genl_rcv_msg+0x604/0x790 [ 1054.118514][T17839] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1054.124751][T17839] ? genl_bind+0x360/0x360 [ 1054.129222][T17839] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1054.135624][T17839] ? lock_acquire+0x225/0x4a0 [ 1054.140373][T17839] netlink_rcv_skb+0x1fb/0x450 [ 1054.145200][T17839] ? genl_bind+0x360/0x360 [ 1054.149686][T17839] ? netlink_ack+0x1170/0x1170 [ 1054.154528][T17839] ? down_read+0x1a8/0x2d0 [ 1054.159012][T17839] genl_rcv+0x24/0x40 [ 1054.163037][T17839] netlink_unicast+0x74d/0x8d0 [ 1054.167875][T17839] netlink_sendmsg+0x8ad/0xbd0 [ 1054.172714][T17839] ? netlink_getsockopt+0x550/0x550 [ 1054.177986][T17839] ? aa_sock_msg_perm+0x94/0x150 [ 1054.182980][T17839] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1054.188315][T17839] ? security_socket_sendmsg+0x7c/0xa0 [ 1054.193846][T17839] ? netlink_getsockopt+0x550/0x550 [ 1054.199135][T17839] ____sys_sendmsg+0x5be/0x970 [ 1054.203992][T17839] ? __sys_sendmsg_sock+0x30/0x30 [ 1054.209075][T17839] ? __import_iovec+0x315/0x500 [ 1054.213986][T17839] ? import_iovec+0x6f/0xa0 [ 1054.218541][T17839] ___sys_sendmsg+0x2a2/0x360 [ 1054.223296][T17839] ? __sys_sendmsg+0x290/0x290 [ 1054.228179][T17839] __se_sys_sendmsg+0x1bb/0x2a0 [ 1054.233148][T17839] ? __x64_sys_sendmsg+0x80/0x80 [ 1054.238176][T17839] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.243444][T17839] do_syscall_64+0x4c/0xa0 [ 1054.247921][T17839] ? clear_bhb_loop+0x60/0xb0 [ 1054.252664][T17839] ? clear_bhb_loop+0x60/0xb0 [ 1054.257408][T17839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.263361][T17839] RIP: 0033:0x7f358cb9ce59 [ 1054.267854][T17839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.287524][T17839] RSP: 002b:00007f358d9ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.296010][T17839] RAX: ffffffffffffffda RBX: 00007f358ce16090 RCX: 00007f358cb9ce59 [ 1054.304035][T17839] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1054.312065][T17839] RBP: 00007f358cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1054.320091][T17839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.328110][T17839] R13: 00007f358ce16128 R14: 00007f358ce16090 R15: 00007ffffd200b38 [ 1054.336155][T17839] [ 1054.453220][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.459687][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.484372][T17847] netlink: 'syz.2.4082': attribute type 10 has an invalid length. [ 1054.547074][T17847] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4082'. [ 1055.003271][T17861] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1055.148885][T17851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4084'. [ 1055.205575][T17863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.230980][T17863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.272165][T17863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.288213][T17863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.553125][T17857] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1055.605242][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4086'. [ 1055.688671][T17870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4090'. [ 1055.770182][T17878] netlink: 'syz.3.4092': attribute type 10 has an invalid length. [ 1055.791326][T17878] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4092'. [ 1056.312653][T17882] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.4093'. [ 1056.676799][T17892] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4095'. [ 1056.716564][T17892] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1056.761002][T17892] CPU: 0 PID: 17892 Comm: syz.3.4095 Not tainted syzkaller #0 [ 1056.768651][T17892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.778771][T17892] Call Trace: [ 1056.782114][T17892] [ 1056.785097][T17892] dump_stack_lvl+0x188/0x24e [ 1056.789848][T17892] ? show_regs_print_info+0x12/0x12 [ 1056.795111][T17892] ? load_image+0x400/0x400 [ 1056.799684][T17892] sysfs_warn_dup+0x8a/0xa0 [ 1056.804273][T17892] sysfs_do_create_link_sd+0xc0/0x110 [ 1056.809708][T17892] device_add+0x7ed/0xfb0 [ 1056.814105][T17892] wiphy_register+0x1d9f/0x2ac0 [ 1056.819041][T17892] ? cfg80211_event_work+0x40/0x40 [ 1056.824216][T17892] ? minstrel_ht_alloc+0x894/0xa20 [ 1056.829404][T17892] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1056.835538][T17892] ieee80211_register_hw+0x2d00/0x39f0 [ 1056.841083][T17892] ? ieee80211_register_hw+0xf41/0x39f0 [ 1056.846694][T17892] ? ieee80211_register_hw+0xe41/0x39f0 [ 1056.852320][T17892] ? ieee80211_tasklet_handler+0x20/0x20 [ 1056.858048][T17892] ? memset+0x1e/0x40 [ 1056.862099][T17892] ? __hrtimer_init+0x186/0x270 [ 1056.867006][T17892] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1056.872807][T17892] hwsim_new_radio_nl+0xafa/0xce0 [ 1056.877906][T17892] genl_family_rcv_msg_doit+0x22a/0x330 [ 1056.883505][T17892] ? end_current_label_crit_section+0x170/0x170 [ 1056.889826][T17892] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1056.895786][T17892] ? bpf_lsm_capable+0x5/0x10 [ 1056.900523][T17892] ? security_capable+0x85/0xb0 [ 1056.905443][T17892] genl_rcv_msg+0x604/0x790 [ 1056.910023][T17892] ? genl_bind+0x360/0x360 [ 1056.914494][T17892] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1056.921018][T17892] netlink_rcv_skb+0x1fb/0x450 [ 1056.925860][T17892] ? genl_bind+0x360/0x360 [ 1056.930338][T17892] ? netlink_ack+0x1170/0x1170 [ 1056.935201][T17892] ? down_read+0x1a8/0x2d0 [ 1056.939690][T17892] genl_rcv+0x24/0x40 [ 1056.943811][T17892] netlink_unicast+0x74d/0x8d0 [ 1056.948664][T17892] netlink_sendmsg+0x8ad/0xbd0 [ 1056.953509][T17892] ? netlink_getsockopt+0x550/0x550 [ 1056.958773][T17892] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1056.964989][T17892] ? aa_sock_msg_perm+0x94/0x150 [ 1056.970067][T17892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1056.975412][T17892] ? security_socket_sendmsg+0x7c/0xa0 [ 1056.980945][T17892] ? netlink_getsockopt+0x550/0x550 [ 1056.986218][T17892] ____sys_sendmsg+0x5be/0x970 [ 1056.991057][T17892] ? __sanitizer_cov_trace_pc+0x13/0x60 [ 1056.996677][T17892] ? __sys_sendmsg_sock+0x30/0x30 [ 1057.001766][T17892] ? __import_iovec+0x315/0x500 [ 1057.006681][T17892] ? import_iovec+0x6f/0xa0 [ 1057.011242][T17892] ___sys_sendmsg+0x2a2/0x360 [ 1057.015999][T17892] ? __sys_sendmsg+0x290/0x290 [ 1057.020880][T17892] __se_sys_sendmsg+0x1bb/0x2a0 [ 1057.025795][T17892] ? __x64_sys_sendmsg+0x80/0x80 [ 1057.030814][T17892] ? lockdep_hardirqs_on+0x94/0x140 [ 1057.036075][T17892] do_syscall_64+0x4c/0xa0 [ 1057.040554][T17892] ? clear_bhb_loop+0x60/0xb0 [ 1057.045288][T17892] ? clear_bhb_loop+0x60/0xb0 [ 1057.050045][T17892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.056001][T17892] RIP: 0033:0x7fbd3479ce59 [ 1057.060468][T17892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.080220][T17892] RSP: 002b:00007fbd356cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1057.088674][T17892] RAX: ffffffffffffffda RBX: 00007fbd34a16090 RCX: 00007fbd3479ce59 [ 1057.096679][T17892] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1057.104683][T17892] RBP: 00007fbd34832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1057.112689][T17892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.120689][T17892] R13: 00007fbd34a16128 R14: 00007fbd34a16090 R15: 00007ffd5d6e8f78 [ 1057.128709][T17892] [ 1057.526067][T17891] netlink: 'syz.5.4096': attribute type 10 has an invalid length. [ 1057.550720][T17891] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4096'. [ 1057.576740][T17897] netlink: 'syz.4.4099': attribute type 15 has an invalid length. [ 1057.590773][T17897] netlink: 'syz.4.4099': attribute type 7 has an invalid length. [ 1057.896217][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1058.059374][T17918] netlink: 'syz.5.4105': attribute type 10 has an invalid length. [ 1058.090902][T17918] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4105'. [ 1058.127290][T17923] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1058.263134][T17926] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1058.850041][T17936] netlink: 'syz.4.4111': attribute type 2 has an invalid length. [ 1058.991127][T17936] device 7 entered promiscuous mode [ 1059.317200][T17942] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1059.533978][T17953] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1059.611087][T17953] netlink: 'syz.0.4117': attribute type 4 has an invalid length. [ 1059.672173][T17953] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1059.704397][T17955] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1060.267093][T17967] netlink: 'syz.4.4120': attribute type 10 has an invalid length. [ 1060.301990][T17967] __nla_validate_parse: 4 callbacks suppressed [ 1060.302035][T17967] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4120'. [ 1060.747412][T17978] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1060.845179][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4123'. [ 1061.794165][T18000] FAULT_INJECTION: forcing a failure. [ 1061.794165][T18000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.884270][T18000] CPU: 1 PID: 18000 Comm: syz.5.4132 Not tainted syzkaller #0 [ 1061.891923][T18000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1061.895210][ T4327] wlan1: Trigger new scan to find an IBSS to join [ 1061.902012][T18000] Call Trace: [ 1061.902052][T18000] [ 1061.902065][T18000] dump_stack_lvl+0x188/0x24e [ 1061.902115][T18000] ? show_regs_print_info+0x12/0x12 [ 1061.902153][T18000] ? load_image+0x400/0x400 [ 1061.929416][T18000] ? __lock_acquire+0x7d10/0x7d10 [ 1061.934528][T18000] ? mutex_lock_nested+0x10/0x10 [ 1061.939554][T18000] should_fail_ex+0x399/0x4d0 [ 1061.944308][T18000] _copy_to_user+0x2c/0x130 [ 1061.948932][T18000] ppp_ioctl+0x1044/0x1a50 [ 1061.953429][T18000] ? ppp_poll+0x250/0x250 [ 1061.957850][T18000] ? __fget_files+0x28/0x4b0 [ 1061.962542][T18000] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1061.967550][T18000] ? security_file_ioctl+0x7c/0xa0 [ 1061.972736][T18000] ? ppp_poll+0x250/0x250 [ 1061.977130][T18000] __se_sys_ioctl+0xfa/0x170 [ 1061.981790][T18000] do_syscall_64+0x4c/0xa0 [ 1061.986244][T18000] ? clear_bhb_loop+0x60/0xb0 [ 1061.990965][T18000] ? clear_bhb_loop+0x60/0xb0 [ 1061.995685][T18000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1062.001617][T18000] RIP: 0033:0x7fce4f19ce59 [ 1062.006074][T18000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.025722][T18000] RSP: 002b:00007fce4ff8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1062.034178][T18000] RAX: ffffffffffffffda RBX: 00007fce4f415fa0 RCX: 00007fce4f19ce59 [ 1062.042212][T18000] RDX: 00f0ff1f00000000 RSI: 000000008010743f RDI: 0000000000000004 [ 1062.050215][T18000] RBP: 00007fce4ff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.058219][T18000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.066316][T18000] R13: 00007fce4f416038 R14: 00007fce4f415fa0 R15: 00007fffe791fb28 [ 1062.074355][T18000] [ 1062.350323][T18009] netlink: 'syz.4.4135': attribute type 10 has an invalid length. [ 1062.386767][T18009] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4135'. [ 1063.165580][ T4327] wlan1: Creating new IBSS network, BSSID 9e:02:d9:96:8a:81 [ 1064.578924][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1064.685468][T18026] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1064.923878][T18046] netlink: 'syz.0.4148': attribute type 10 has an invalid length. [ 1064.935719][T18046] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4148'. [ 1065.511203][T18061] netlink: 'syz.4.4155': attribute type 3 has an invalid length. [ 1065.587382][T18061] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4155'. [ 1066.681005][T18074] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1066.812951][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4156'. [ 1067.198824][T18077] device syzkaller0 entered promiscuous mode [ 1068.932089][T14521] wlan1: Trigger new scan to find an IBSS to join [ 1071.900370][T14521] wlan1: Trigger new scan to find an IBSS to join [ 1071.965208][T18104] -: renamed from syzkaller0 [ 1071.979775][T18113] netlink: 'syz.0.4165': attribute type 10 has an invalid length. [ 1071.988110][T18113] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1072.010723][T18119] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1072.023922][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1075.157113][T18131] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1075.241672][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4181'. [ 1075.255969][T18138] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1075.284473][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4171'. [ 1075.309420][T18148] netlink: 'syz.0.4173': attribute type 10 has an invalid length. [ 1075.813281][T18169] netlink: 'syz.0.4180': attribute type 10 has an invalid length. [ 1075.838101][T18169] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4180'. [ 1076.022746][T18175] netlink: 'syz.3.4182': attribute type 10 has an invalid length. [ 1076.449729][T18175] device wlan1 entered promiscuous mode [ 1076.491369][T18175] team0: Port device wlan1 added [ 1077.892592][T11100] wlan1: Trigger new scan to find an IBSS to join [ 1078.506492][T18205] FAULT_INJECTION: forcing a failure. [ 1078.506492][T18205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.564676][T18205] CPU: 1 PID: 18205 Comm: syz.3.4191 Not tainted syzkaller #0 [ 1078.572253][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.582377][T18205] Call Trace: [ 1078.585710][T18205] [ 1078.588679][T18205] dump_stack_lvl+0x188/0x24e [ 1078.593433][T18205] ? show_regs_print_info+0x12/0x12 [ 1078.598693][T18205] ? load_image+0x400/0x400 [ 1078.603258][T18205] ? __lock_acquire+0x7d10/0x7d10 [ 1078.608348][T18205] ? snprintf+0xe5/0x140 [ 1078.612666][T18205] should_fail_ex+0x399/0x4d0 [ 1078.617433][T18205] _copy_to_user+0x2c/0x130 [ 1078.622039][T18205] simple_read_from_buffer+0xe3/0x150 [ 1078.627479][T18205] proc_fail_nth_read+0x1a6/0x220 [ 1078.632570][T18205] ? proc_fault_inject_write+0x310/0x310 [ 1078.638258][T18205] ? fsnotify_perm+0x248/0x550 [ 1078.643081][T18205] ? proc_fault_inject_write+0x310/0x310 [ 1078.648774][T18205] vfs_read+0x2de/0xa00 [ 1078.652997][T18205] ? kernel_read+0x1e0/0x1e0 [ 1078.657662][T18205] ? __fget_files+0x28/0x4b0 [ 1078.662316][T18205] ? __fget_files+0x28/0x4b0 [ 1078.666974][T18205] ? __fget_files+0x43d/0x4b0 [ 1078.671727][T18205] ? __fdget_pos+0x2ae/0x360 [ 1078.676386][T18205] ? ksys_read+0x71/0x250 [ 1078.680780][T18205] ksys_read+0x14c/0x250 [ 1078.685095][T18205] ? vfs_write+0xa30/0xa30 [ 1078.689584][T18205] ? lockdep_hardirqs_on+0x94/0x140 [ 1078.694851][T18205] do_syscall_64+0x4c/0xa0 [ 1078.699340][T18205] ? clear_bhb_loop+0x60/0xb0 [ 1078.704084][T18205] ? clear_bhb_loop+0x60/0xb0 [ 1078.708835][T18205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.714779][T18205] RIP: 0033:0x7fbd3475d68e [ 1078.719247][T18205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1078.738925][T18205] RSP: 002b:00007fbd356ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1078.747406][T18205] RAX: ffffffffffffffda RBX: 00007fbd356ec6c0 RCX: 00007fbd3475d68e [ 1078.755429][T18205] RDX: 000000000000000f RSI: 00007fbd356ec0a0 RDI: 0000000000000007 [ 1078.763460][T18205] RBP: 00007fbd356ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.771488][T18205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.779557][T18205] R13: 00007fbd34a16038 R14: 00007fbd34a15fa0 R15: 00007ffd5d6e8f78 [ 1078.787633][T18205] [ 1078.958122][T18217] netlink: 'syz.5.4195': attribute type 10 has an invalid length. [ 1078.994332][T18217] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4195'. [ 1079.353081][T18230] netlink: 177648 bytes leftover after parsing attributes in process `syz.4.4197'. [ 1079.973112][T18236] netlink: 'syz.5.4202': attribute type 11 has an invalid length. [ 1080.005877][T18236] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4202'. [ 1080.772197][T18235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.860725][ T5637] wlan1: Trigger new scan to find an IBSS to join [ 1080.929789][T18261] can: request_module (can-proto-0) failed. [ 1080.992053][T18254] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1081.012741][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4206'. [ 1082.918144][ T9] wlan1: Creating new IBSS network, BSSID 0a:2d:11:2f:10:ff [ 1083.579101][T18291] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4219'. [ 1083.688935][T18288] netlink: 'syz.0.4216': attribute type 10 has an invalid length. [ 1083.730074][T18290] netlink: 'syz.4.4219': attribute type 10 has an invalid length. [ 1083.777844][T18290] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1084.457883][T18305] netlink: 'syz.0.4225': attribute type 10 has an invalid length. [ 1084.480883][T18305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4225'. [ 1084.502413][T18305] device hsr0 entered promiscuous mode [ 1084.796355][T18319] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1084.889562][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1085.334021][T18341] FAULT_INJECTION: forcing a failure. [ 1085.334021][T18341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.390981][T18341] CPU: 1 PID: 18341 Comm: syz.0.4238 Not tainted syzkaller #0 [ 1085.398577][T18341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.408815][T18341] Call Trace: [ 1085.412176][T18341] [ 1085.415198][T18341] dump_stack_lvl+0x188/0x24e [ 1085.420017][T18341] ? show_regs_print_info+0x12/0x12 [ 1085.425333][T18341] ? load_image+0x400/0x400 [ 1085.429998][T18341] ? __lock_acquire+0x7d10/0x7d10 [ 1085.435170][T18341] should_fail_ex+0x399/0x4d0 [ 1085.439979][T18341] _copy_from_user+0x2c/0x170 [ 1085.444776][T18341] iovec_from_user+0x143/0x360 [ 1085.449686][T18341] __import_iovec+0x6d/0x500 [ 1085.454444][T18341] import_iovec+0x6f/0xa0 [ 1085.458905][T18341] ___sys_sendmsg+0x252/0x360 [ 1085.463728][T18341] ? __sys_sendmsg+0x290/0x290 [ 1085.468735][T18341] ? __lock_acquire+0x7d10/0x7d10 [ 1085.473971][T18341] __se_sys_sendmsg+0x1bb/0x2a0 [ 1085.478963][T18341] ? __x64_sys_sendmsg+0x80/0x80 [ 1085.484055][T18341] ? lockdep_hardirqs_on+0x94/0x140 [ 1085.489342][T18341] do_syscall_64+0x4c/0xa0 [ 1085.493842][T18341] ? clear_bhb_loop+0x60/0xb0 [ 1085.498585][T18341] ? clear_bhb_loop+0x60/0xb0 [ 1085.503357][T18341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.509314][T18341] RIP: 0033:0x7f51f7f9ce59 [ 1085.513798][T18341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.533459][T18341] RSP: 002b:00007f51f61f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.541940][T18341] RAX: ffffffffffffffda RBX: 00007f51f8215fa0 RCX: 00007f51f7f9ce59 [ 1085.549967][T18341] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1085.557993][T18341] RBP: 00007f51f61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.566022][T18341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.574051][T18341] R13: 00007f51f8216038 R14: 00007f51f8215fa0 R15: 00007ffd4029d818 [ 1085.582170][T18341] [ 1087.034238][T18389] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1087.085267][T18389] netlink: 'syz.2.4254': attribute type 3 has an invalid length. [ 1087.123548][T18389] netlink: 'syz.2.4254': attribute type 1 has an invalid length. [ 1087.157823][T18389] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1088.896957][T18429] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.4273'. [ 1088.941594][T18429] netlink: 'syz.4.4273': attribute type 3 has an invalid length. [ 1088.949543][T18429] netlink: 'syz.4.4273': attribute type 1 has an invalid length. [ 1088.977897][T18429] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.4273'. [ 1089.390442][T18447] netlink: 'syz.0.4281': attribute type 2 has an invalid length. [ 1089.412815][T18447] netlink: 'syz.0.4281': attribute type 8 has an invalid length. [ 1089.447605][T18447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4281'. [ 1090.325842][T18476] netlink: 'syz.4.4291': attribute type 3 has an invalid length. [ 1090.369950][T18476] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4291'. [ 1092.015811][T18515] netlink: 'syz.4.4305': attribute type 10 has an invalid length. [ 1092.141119][T18515] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4305'. [ 1092.208774][T18512] netlink: 'syz.2.4304': attribute type 10 has an invalid length. [ 1092.244768][T18512] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1092.468043][T18520] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1092.612999][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4306'. [ 1093.551760][T18547] netlink: 'syz.4.4320': attribute type 10 has an invalid length. [ 1093.561292][T18547] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4320'. [ 1093.787962][T18551] netlink: 'syz.3.4322': attribute type 10 has an invalid length. [ 1093.811048][T18551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1094.191260][T18555] netlink: 'syz.5.4323': attribute type 10 has an invalid length. [ 1094.208469][T18555] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4323'. [ 1094.232482][T18555] device hsr0 entered promiscuous mode [ 1094.260007][T18555] bridge0: port 4(hsr0) entered blocking state [ 1094.285578][T18555] bridge0: port 4(hsr0) entered disabled state [ 1094.546462][T18555] bridge0: port 4(hsr0) entered blocking state [ 1094.560473][T18555] bridge0: port 4(hsr0) entered forwarding state [ 1094.571257][T18576] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4330'. [ 1094.931265][ T5637] wlan1: Trigger new scan to find an IBSS to join [ 1094.943628][T18574] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1095.016513][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4328'. [ 1095.109168][T18570] device pim6reg1 entered promiscuous mode [ 1095.414924][T18594] netlink: 'syz.4.4335': attribute type 10 has an invalid length. [ 1095.441981][T18594] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4335'. [ 1095.484056][T18592] netlink: 'syz.5.4336': attribute type 10 has an invalid length. [ 1095.560729][T18592] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4336'. [ 1095.637645][T18592] device team0 entered promiscuous mode [ 1095.645688][T18592] device team_slave_0 entered promiscuous mode [ 1095.663135][T18592] device team_slave_1 entered promiscuous mode [ 1095.691006][T18592] bridge0: port 5(team0) entered blocking state [ 1095.711407][T18592] bridge0: port 5(team0) entered disabled state [ 1095.780475][T18592] bridge0: port 5(team0) entered blocking state [ 1095.786998][T18592] bridge0: port 5(team0) entered forwarding state [ 1096.285306][T18602] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4338'. [ 1096.927665][T18627] netlink: 'syz.4.4344': attribute type 10 has an invalid length. [ 1096.951729][T18627] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4344'. [ 1097.315832][T18643] netlink: 'syz.4.4351': attribute type 10 has an invalid length. [ 1097.339942][T18643] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4351'. [ 1097.417478][T18644] netlink: 'syz.2.4352': attribute type 28 has an invalid length. [ 1097.461010][T18644] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1097.500924][T18647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4353'. [ 1097.597190][T18640] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1097.648145][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4350'. [ 1098.128153][T18671] netlink: 'syz.2.4362': attribute type 10 has an invalid length. [ 1098.356477][T18671] team0: Device vxcan0 is of different type [ 1098.705545][T18680] netlink: 'syz.4.4366': attribute type 10 has an invalid length. [ 1098.736018][T18680] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1098.851301][T14521] wlan1: Trigger new scan to find an IBSS to join [ 1099.403033][T18708] netlink: 'syz.3.4377': attribute type 2 has an invalid length. [ 1099.419077][T18708] netlink: 'syz.3.4377': attribute type 4 has an invalid length. [ 1099.431580][T18708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1099.957056][T18719] netlink: 'syz.5.4381': attribute type 10 has an invalid length. [ 1100.264123][T18728] FAULT_INJECTION: forcing a failure. [ 1100.264123][T18728] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.282837][T18728] CPU: 1 PID: 18728 Comm: syz.5.4386 Not tainted syzkaller #0 [ 1100.290338][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.300525][T18728] Call Trace: [ 1100.303847][T18728] [ 1100.306856][T18728] dump_stack_lvl+0x188/0x24e [ 1100.311602][T18728] ? show_regs_print_info+0x12/0x12 [ 1100.316864][T18728] ? load_image+0x400/0x400 [ 1100.321430][T18728] ? verify_lock_unused+0x140/0x140 [ 1100.326704][T18728] should_fail_ex+0x399/0x4d0 [ 1100.331441][T18728] should_failslab+0x5/0x20 [ 1100.336001][T18728] slab_pre_alloc_hook+0x59/0x310 [ 1100.341083][T18728] kmem_cache_alloc+0x56/0x2f0 [ 1100.345904][T18728] ? skb_clone+0x1e7/0x370 [ 1100.350386][T18728] skb_clone+0x1e7/0x370 [ 1100.354692][T18728] __netlink_deliver_tap+0x3ed/0x800 [ 1100.360057][T18728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1100.365318][T18728] netlink_deliver_tap+0x19c/0x1b0 [ 1100.370497][T18728] netlink_unicast+0x728/0x8d0 [ 1100.375339][T18728] netlink_sendmsg+0x8ad/0xbd0 [ 1100.380201][T18728] ? netlink_getsockopt+0x550/0x550 [ 1100.385486][T18728] ? aa_sock_msg_perm+0x94/0x150 [ 1100.390480][T18728] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1100.395826][T18728] ? security_socket_sendmsg+0x7c/0xa0 [ 1100.401355][T18728] ? netlink_getsockopt+0x550/0x550 [ 1100.406636][T18728] ____sys_sendmsg+0x5be/0x970 [ 1100.411469][T18728] ? __sys_sendmsg_sock+0x30/0x30 [ 1100.416547][T18728] ? __import_iovec+0x315/0x500 [ 1100.421463][T18728] ? import_iovec+0x6f/0xa0 [ 1100.426022][T18728] ___sys_sendmsg+0x2a2/0x360 [ 1100.430778][T18728] ? __sys_sendmsg+0x290/0x290 [ 1100.435625][T18728] ? __lock_acquire+0x7d10/0x7d10 [ 1100.440750][T18728] __se_sys_sendmsg+0x1bb/0x2a0 [ 1100.445666][T18728] ? __x64_sys_sendmsg+0x80/0x80 [ 1100.450691][T18728] ? lockdep_hardirqs_on+0x94/0x140 [ 1100.455970][T18728] do_syscall_64+0x4c/0xa0 [ 1100.460449][T18728] ? clear_bhb_loop+0x60/0xb0 [ 1100.465190][T18728] ? clear_bhb_loop+0x60/0xb0 [ 1100.470014][T18728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1100.475961][T18728] RIP: 0033:0x7fce4f19ce59 [ 1100.480435][T18728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.500110][T18728] RSP: 002b:00007fce4ff8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.508580][T18728] RAX: ffffffffffffffda RBX: 00007fce4f415fa0 RCX: 00007fce4f19ce59 [ 1100.516696][T18728] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 1100.524730][T18728] RBP: 00007fce4ff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.532750][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.540759][T18728] R13: 00007fce4f416038 R14: 00007fce4f415fa0 R15: 00007fffe791fb28 [ 1100.548785][T18728] [ 1100.596779][T18739] FAULT_INJECTION: forcing a failure. [ 1100.596779][T18739] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.609983][T18739] CPU: 0 PID: 18739 Comm: syz.2.4389 Not tainted syzkaller #0 [ 1100.617497][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.627610][T18739] Call Trace: [ 1100.630931][T18739] [ 1100.633899][T18739] dump_stack_lvl+0x188/0x24e [ 1100.638644][T18739] ? show_regs_print_info+0x12/0x12 [ 1100.643989][T18739] ? load_image+0x400/0x400 [ 1100.648561][T18739] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1100.654595][T18739] should_fail_ex+0x399/0x4d0 [ 1100.659325][T18739] should_failslab+0x5/0x20 [ 1100.663868][T18739] slab_pre_alloc_hook+0x59/0x310 [ 1100.668945][T18739] kmem_cache_alloc+0x56/0x2f0 [ 1100.673749][T18739] ? __build_skb+0x2a/0x3c0 [ 1100.678311][T18739] __build_skb+0x2a/0x3c0 [ 1100.682670][T18739] build_skb+0x1e/0x230 [ 1100.686964][T18739] bpf_prog_test_run_skb+0x37e/0x12a0 [ 1100.692381][T18739] ? __fget_files+0x28/0x4b0 [ 1100.697117][T18739] ? __fget_files+0x43d/0x4b0 [ 1100.701847][T18739] ? cpu_online+0xa0/0xa0 [ 1100.706205][T18739] bpf_prog_test_run+0x31e/0x390 [ 1100.711178][T18739] __sys_bpf+0x62b/0x780 [ 1100.715467][T18739] ? bpf_link_show_fdinfo+0x380/0x380 [ 1100.720883][T18739] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1100.727073][T18739] __x64_sys_bpf+0x78/0x90 [ 1100.731522][T18739] do_syscall_64+0x4c/0xa0 [ 1100.735972][T18739] ? clear_bhb_loop+0x60/0xb0 [ 1100.740685][T18739] ? clear_bhb_loop+0x60/0xb0 [ 1100.745396][T18739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1100.751328][T18739] RIP: 0033:0x7ff85cf9ce59 [ 1100.755766][T18739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.775403][T18739] RSP: 002b:00007ff85de5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1100.783844][T18739] RAX: ffffffffffffffda RBX: 00007ff85d215fa0 RCX: 00007ff85cf9ce59 [ 1100.791837][T18739] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 1100.799825][T18739] RBP: 00007ff85de5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.807815][T18739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.815826][T18739] R13: 00007ff85d216038 R14: 00007ff85d215fa0 R15: 00007ffce4e6f588 [ 1100.823847][T18739] [ 1100.864038][T11100] wlan1: Creating new IBSS network, BSSID 6a:b9:58:7a:f5:98 [ 1101.794361][T18762] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1101.830960][T18762] __nla_validate_parse: 1 callbacks suppressed [ 1101.831003][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4397'. [ 1101.875803][T18768] netlink: 'syz.0.4399': attribute type 21 has an invalid length. [ 1101.885771][T18768] netlink: 'syz.0.4399': attribute type 2 has an invalid length. [ 1102.583505][T18779] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4403'. [ 1102.781040][T18786] netlink: 'syz.2.4406': attribute type 5 has an invalid length. [ 1102.788861][T18786] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4406'. [ 1103.266300][T18796] netlink: 'syz.2.4411': attribute type 10 has an invalid length. [ 1103.293865][T18796] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4411'. [ 1103.793881][T18812] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1103.809716][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4414'. [ 1104.359511][T18832] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1105.548490][T18850] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1105.591881][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1105.872322][T18862] netlink: 'syz.4.4433': attribute type 10 has an invalid length. [ 1105.891341][T11100] wlan1: Trigger new scan to find an IBSS to join [ 1105.911073][T18862] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4433'. [ 1106.241871][T18871] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4437'. [ 1106.682728][T18889] FAULT_INJECTION: forcing a failure. [ 1106.682728][T18889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.782495][T18889] CPU: 0 PID: 18889 Comm: syz.3.4446 Not tainted syzkaller #0 [ 1106.790055][T18889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1106.800232][T18889] Call Trace: [ 1106.803558][T18889] [ 1106.806537][T18889] dump_stack_lvl+0x188/0x24e [ 1106.811291][T18889] ? show_regs_print_info+0x12/0x12 [ 1106.816554][T18889] ? load_image+0x400/0x400 [ 1106.821138][T18889] ? __lock_acquire+0x7d10/0x7d10 [ 1106.826231][T18889] should_fail_ex+0x399/0x4d0 [ 1106.830960][T18889] _copy_from_user+0x2c/0x170 [ 1106.835741][T18889] ___sys_sendmsg+0x1c3/0x360 [ 1106.840500][T18889] ? __sys_sendmsg+0x290/0x290 [ 1106.845349][T18889] ? __lock_acquire+0x7d10/0x7d10 [ 1106.850456][T18889] __se_sys_sendmsg+0x1bb/0x2a0 [ 1106.855375][T18889] ? __x64_sys_sendmsg+0x80/0x80 [ 1106.860400][T18889] ? lockdep_hardirqs_on+0x94/0x140 [ 1106.865654][T18889] do_syscall_64+0x4c/0xa0 [ 1106.870138][T18889] ? clear_bhb_loop+0x60/0xb0 [ 1106.874885][T18889] ? clear_bhb_loop+0x60/0xb0 [ 1106.879630][T18889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1106.885571][T18889] RIP: 0033:0x7fbd3479ce59 [ 1106.890031][T18889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.909787][T18889] RSP: 002b:00007fbd356ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.918272][T18889] RAX: ffffffffffffffda RBX: 00007fbd34a15fa0 RCX: 00007fbd3479ce59 [ 1106.926301][T18889] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1106.934329][T18889] RBP: 00007fbd356ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.942352][T18889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.950372][T18889] R13: 00007fbd34a16038 R14: 00007fbd34a15fa0 R15: 00007ffd5d6e8f78 [ 1106.958427][T18889] [ 1107.141630][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4445'. [ 1107.220756][T18897] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1107.389166][T18903] netlink: 'syz.5.4449': attribute type 10 has an invalid length. [ 1107.424258][T18903] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4449'. [ 1107.889454][T18917] netlink: 'syz.4.4456': attribute type 3 has an invalid length. [ 1107.920919][T18917] netlink: 'syz.4.4456': attribute type 1 has an invalid length. [ 1107.939025][T18917] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1108.474374][T18942] netlink: 'syz.3.4466': attribute type 10 has an invalid length. [ 1108.510046][T18942] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4466'. [ 1108.710373][T18950] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1108.746429][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4467'. [ 1109.223473][T18962] netlink: 'syz.3.4474': attribute type 3 has an invalid length. [ 1109.281324][T18962] netlink: 'syz.3.4474': attribute type 1 has an invalid length. [ 1109.323549][T18962] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1109.878600][T18982] netlink: 'syz.4.4481': attribute type 10 has an invalid length. [ 1109.892863][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1109.908721][T18982] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4481'. [ 1110.780206][T19015] netlink: 'syz.5.4490': attribute type 3 has an invalid length. [ 1110.788907][T19015] netlink: 'syz.5.4490': attribute type 1 has an invalid length. [ 1110.799521][T19015] netlink: 198452 bytes leftover after parsing attributes in process `syz.5.4490'. [ 1111.891274][T14521] wlan1: Creating new IBSS network, BSSID c6:33:a8:82:db:c8 [ 1113.092267][T18987] netlink: 'syz.2.4483': attribute type 1 has an invalid length. [ 1113.100248][T18987] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1113.113896][T19005] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1113.130643][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4486'. [ 1113.144837][T19010] device wlan1 entered promiscuous mode [ 1113.154822][T19014] netlink: 'syz.0.4489': attribute type 3 has an invalid length. [ 1113.163295][T19014] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1113.174723][T19028] netlink: 'syz.3.4496': attribute type 10 has an invalid length. [ 1113.189564][T19028] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4496'. [ 1114.268734][T19056] netlink: 'syz.2.4505': attribute type 21 has an invalid length. [ 1114.478598][T19066] netlink: 'syz.4.4510': attribute type 10 has an invalid length. [ 1114.497644][T19066] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4510'. [ 1114.674824][T19069] netlink: 'syz.5.4511': attribute type 3 has an invalid length. [ 1114.711317][T19069] netlink: 'syz.5.4511': attribute type 1 has an invalid length. [ 1114.736989][T19069] netlink: 198452 bytes leftover after parsing attributes in process `syz.5.4511'. [ 1114.824441][T19076] device wlan1 entered promiscuous mode [ 1114.905037][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1114.986736][T19072] netlink: 'syz.2.4512': attribute type 3 has an invalid length. [ 1115.035915][T19072] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1115.112495][T19080] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4514'. [ 1115.588042][T19080] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1115.617408][T19080] CPU: 1 PID: 19080 Comm: syz.4.4514 Not tainted syzkaller #0 [ 1115.624966][T19080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1115.635074][T19080] Call Trace: [ 1115.638405][T19080] [ 1115.641384][T19080] dump_stack_lvl+0x188/0x24e [ 1115.646123][T19080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1115.652437][T19080] ? show_regs_print_info+0x12/0x12 [ 1115.657706][T19080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1115.663949][T19080] sysfs_warn_dup+0x8a/0xa0 [ 1115.668534][T19080] sysfs_do_create_link_sd+0xc0/0x110 [ 1115.673985][T19080] device_add+0x7ed/0xfb0 [ 1115.678375][T19080] wiphy_register+0x1d9f/0x2ac0 [ 1115.683290][T19080] ? cfg80211_event_work+0x40/0x40 [ 1115.688638][T19080] ? minstrel_ht_alloc+0x894/0xa20 [ 1115.693798][T19080] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1115.699927][T19080] ieee80211_register_hw+0x2d00/0x39f0 [ 1115.705457][T19080] ? ieee80211_register_hw+0xf41/0x39f0 [ 1115.711051][T19080] ? ieee80211_register_hw+0xe41/0x39f0 [ 1115.716644][T19080] ? ieee80211_tasklet_handler+0x20/0x20 [ 1115.722327][T19080] ? memset+0x1e/0x40 [ 1115.726341][T19080] ? __hrtimer_init+0x186/0x270 [ 1115.731232][T19080] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1115.737095][T19080] hwsim_new_radio_nl+0xafa/0xce0 [ 1115.742170][T19080] genl_family_rcv_msg_doit+0x22a/0x330 [ 1115.747752][T19080] ? end_current_label_crit_section+0x170/0x170 [ 1115.754034][T19080] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1115.759980][T19080] ? bpf_lsm_capable+0x5/0x10 [ 1115.764690][T19080] ? security_capable+0x85/0xb0 [ 1115.769577][T19080] genl_rcv_msg+0x604/0x790 [ 1115.774111][T19080] ? lock_chain_count+0x20/0x20 [ 1115.778999][T19080] ? genl_bind+0x360/0x360 [ 1115.783443][T19080] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1115.789824][T19080] netlink_rcv_skb+0x1fb/0x450 [ 1115.794627][T19080] ? genl_bind+0x360/0x360 [ 1115.799069][T19080] ? netlink_ack+0x1170/0x1170 [ 1115.803875][T19080] ? down_read+0x1a8/0x2d0 [ 1115.808333][T19080] genl_rcv+0x24/0x40 [ 1115.812373][T19080] netlink_unicast+0x74d/0x8d0 [ 1115.817189][T19080] netlink_sendmsg+0x8ad/0xbd0 [ 1115.821997][T19080] ? netlink_getsockopt+0x550/0x550 [ 1115.827245][T19080] ? aa_sock_msg_perm+0x94/0x150 [ 1115.832210][T19080] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1115.837519][T19080] ? security_socket_sendmsg+0x7c/0xa0 [ 1115.843015][T19080] ? netlink_getsockopt+0x550/0x550 [ 1115.848247][T19080] ____sys_sendmsg+0x5be/0x970 [ 1115.853056][T19080] ? __sys_sendmsg_sock+0x30/0x30 [ 1115.858113][T19080] ? __import_iovec+0x315/0x500 [ 1115.863044][T19080] ? import_iovec+0x6f/0xa0 [ 1115.867580][T19080] ___sys_sendmsg+0x2a2/0x360 [ 1115.872309][T19080] ? try_to_wake_up+0x67c/0x1080 [ 1115.877283][T19080] ? __sys_sendmsg+0x290/0x290 [ 1115.882130][T19080] __se_sys_sendmsg+0x1bb/0x2a0 [ 1115.887020][T19080] ? __x64_sys_sendmsg+0x80/0x80 [ 1115.892011][T19080] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1115.897940][T19080] do_syscall_64+0x4c/0xa0 [ 1115.902394][T19080] ? clear_bhb_loop+0x60/0xb0 [ 1115.907106][T19080] ? clear_bhb_loop+0x60/0xb0 [ 1115.911821][T19080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1115.917751][T19080] RIP: 0033:0x7f358cb9ce59 [ 1115.922191][T19080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.941821][T19080] RSP: 002b:00007f358d9ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.950265][T19080] RAX: ffffffffffffffda RBX: 00007f358ce16090 RCX: 00007f358cb9ce59 [ 1115.958267][T19080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1115.966260][T19080] RBP: 00007f358cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1115.974256][T19080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.982249][T19080] R13: 00007f358ce16128 R14: 00007f358ce16090 R15: 00007ffffd200b38 [ 1115.990265][T19080] [ 1115.998494][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.004955][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.012274][T14521] wlan1: Trigger new scan to find an IBSS to join [ 1116.270240][T19099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4521'. [ 1116.669769][T19109] netlink: 'syz.5.4524': attribute type 10 has an invalid length. [ 1116.766969][T19111] netlink: 'syz.4.4525': attribute type 3 has an invalid length. [ 1116.930740][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1116.966309][T19121] FAULT_INJECTION: forcing a failure. [ 1116.966309][T19121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.985782][T19121] CPU: 1 PID: 19121 Comm: syz.2.4528 Not tainted syzkaller #0 [ 1116.993331][T19121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1117.003435][T19121] Call Trace: [ 1117.006764][T19121] [ 1117.009729][T19121] dump_stack_lvl+0x188/0x24e [ 1117.014467][T19121] ? show_regs_print_info+0x12/0x12 [ 1117.019720][T19121] ? load_image+0x400/0x400 [ 1117.024278][T19121] ? __lock_acquire+0x7d10/0x7d10 [ 1117.029740][T19121] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1117.035614][T19121] should_fail_ex+0x399/0x4d0 [ 1117.040344][T19121] _copy_from_user+0x2c/0x170 [ 1117.045080][T19121] ___sys_sendmsg+0x1c3/0x360 [ 1117.049825][T19121] ? __sys_sendmsg+0x290/0x290 [ 1117.054699][T19121] __se_sys_sendmsg+0x1bb/0x2a0 [ 1117.059611][T19121] ? __x64_sys_sendmsg+0x80/0x80 [ 1117.064604][T19121] do_syscall_64+0x4c/0xa0 [ 1117.069062][T19121] ? clear_bhb_loop+0x60/0xb0 [ 1117.073769][T19121] ? clear_bhb_loop+0x60/0xb0 [ 1117.078479][T19121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.084410][T19121] RIP: 0033:0x7ff85cf9ce59 [ 1117.088850][T19121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.108488][T19121] RSP: 002b:00007ff85de5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.116942][T19121] RAX: ffffffffffffffda RBX: 00007ff85d215fa0 RCX: 00007ff85cf9ce59 [ 1117.124949][T19121] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 000000000000000d [ 1117.132957][T19121] RBP: 00007ff85de5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.140959][T19121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.148955][T19121] R13: 00007ff85d216038 R14: 00007ff85d215fa0 R15: 00007ffce4e6f588 [ 1117.156973][T19121] [ 1117.714009][T19143] FAULT_INJECTION: forcing a failure. [ 1117.714009][T19143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.740673][T19143] CPU: 1 PID: 19143 Comm: syz.4.4536 Not tainted syzkaller #0 [ 1117.748219][T19143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1117.758305][T19143] Call Trace: [ 1117.761610][T19143] [ 1117.764565][T19143] dump_stack_lvl+0x188/0x24e [ 1117.769285][T19143] ? show_regs_print_info+0x12/0x12 [ 1117.774521][T19143] ? load_image+0x400/0x400 [ 1117.779056][T19143] ? __lock_acquire+0x7d10/0x7d10 [ 1117.784118][T19143] should_fail_ex+0x399/0x4d0 [ 1117.788854][T19143] _copy_from_user+0x2c/0x170 [ 1117.793565][T19143] __sys_bpf+0x2ea/0x780 [ 1117.797843][T19143] ? bpf_link_show_fdinfo+0x380/0x380 [ 1117.803265][T19143] ? lock_chain_count+0x20/0x20 [ 1117.808162][T19143] __x64_sys_bpf+0x78/0x90 [ 1117.812613][T19143] do_syscall_64+0x4c/0xa0 [ 1117.817066][T19143] ? clear_bhb_loop+0x60/0xb0 [ 1117.821779][T19143] ? clear_bhb_loop+0x60/0xb0 [ 1117.826487][T19143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.832410][T19143] RIP: 0033:0x7f358cb9ce59 [ 1117.836855][T19143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.856489][T19143] RSP: 002b:00007f358da10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1117.864928][T19143] RAX: ffffffffffffffda RBX: 00007f358ce15fa0 RCX: 00007f358cb9ce59 [ 1117.872932][T19143] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1117.880933][T19143] RBP: 00007f358da10090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.888936][T19143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.896933][T19143] R13: 00007f358ce16038 R14: 00007f358ce15fa0 R15: 00007ffffd200b38 [ 1117.904946][T19143] [ 1118.303645][T19149] validate_nla: 3 callbacks suppressed [ 1118.303686][T19149] netlink: 'syz.5.4539': attribute type 10 has an invalid length. [ 1118.344999][T19149] __nla_validate_parse: 3 callbacks suppressed [ 1118.345037][T19149] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1118.426727][T19154] netlink: 'syz.4.4540': attribute type 29 has an invalid length. [ 1118.453929][T19154] netlink: 'syz.4.4540': attribute type 29 has an invalid length. [ 1118.492670][T19156] netlink: 'syz.4.4540': attribute type 29 has an invalid length. [ 1118.540134][T19154] netlink: 'syz.4.4540': attribute type 29 has an invalid length. [ 1118.580149][T19151] netlink: 'syz.4.4540': attribute type 22 has an invalid length. [ 1118.597862][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 1118.648250][T19154] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4540'. [ 1118.743261][T19162] netlink: 'syz.2.4542': attribute type 3 has an invalid length. [ 1118.765310][T19162] netlink: 'syz.2.4542': attribute type 1 has an invalid length. [ 1118.824648][T19162] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1119.021000][T19167] netlink: 'syz.0.4546': attribute type 28 has an invalid length. [ 1119.041592][T19167] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4546'. [ 1119.094427][T19170] netlink: 'syz.0.4546': attribute type 1 has an invalid length. [ 1120.083755][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1120.183448][T19202] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1120.478492][T19212] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1120.583319][T19223] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4557'. [ 1120.850844][T14521] wlan1: Trigger new scan to find an IBSS to join [ 1120.858272][T11100] wlan1: Trigger new scan to find an IBSS to join [ 1121.826427][T11100] wlan1: Creating new IBSS network, BSSID 6e:bb:62:d7:b5:ec [ 1121.846994][T11100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1122.299915][T19244] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4569'. [ 1123.891365][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1123.902852][T19288] validate_nla: 8 callbacks suppressed [ 1123.902889][T19288] netlink: 'syz.2.4583': attribute type 10 has an invalid length. [ 1123.942699][T19288] __nla_validate_parse: 5 callbacks suppressed [ 1123.942739][T19288] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4583'. [ 1124.353421][T19297] netlink: 'syz.2.4586': attribute type 10 has an invalid length. [ 1124.390262][T19297] bridge0: port 4(batadv0) entered disabled state [ 1124.401788][T19297] bridge0: port 3(hsr0) entered disabled state [ 1124.410162][T19297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.422500][T19297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.677185][T19297] bridge0: port 4(batadv0) entered blocking state [ 1124.685224][T19297] bridge0: port 4(batadv0) entered forwarding state [ 1124.695581][T19297] bridge0: port 3(hsr0) entered blocking state [ 1124.704573][T19297] bridge0: port 3(hsr0) entered forwarding state [ 1124.713138][T19297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.721655][T19297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.731221][T19297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.740003][T19297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.768656][T19310] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.4589'. [ 1124.819277][T19297] team0: Port device bridge0 added [ 1124.988535][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1125.008943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1125.058500][T19317] netlink: 'syz.5.4591': attribute type 4 has an invalid length. [ 1125.067395][T19317] netlink: 134728 bytes leftover after parsing attributes in process `syz.5.4591'. [ 1125.138887][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4590'. [ 1125.428293][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4592'. [ 1125.624555][T19332] netlink: 'syz.2.4594': attribute type 10 has an invalid length. [ 1125.674342][T19334] netlink: 'syz.3.4595': attribute type 3 has an invalid length. [ 1125.705324][T19334] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1125.791811][T19337] netlink: 'syz.4.4596': attribute type 10 has an invalid length. [ 1125.800283][T19337] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4596'. [ 1126.261021][T19349] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1126.377575][T19349] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1126.413015][T19349] CPU: 0 PID: 19349 Comm: syz.0.4598 Not tainted syzkaller #0 [ 1126.420593][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1126.430710][T19349] Call Trace: [ 1126.434032][T19349] [ 1126.437019][T19349] dump_stack_lvl+0x188/0x24e [ 1126.441784][T19349] ? show_regs_print_info+0x12/0x12 [ 1126.447068][T19349] ? load_image+0x400/0x400 [ 1126.451653][T19349] sysfs_warn_dup+0x8a/0xa0 [ 1126.456223][T19349] sysfs_do_create_link_sd+0xc0/0x110 [ 1126.461658][T19349] device_add+0x7ed/0xfb0 [ 1126.466028][T19349] wiphy_register+0x1d9f/0x2ac0 [ 1126.470955][T19349] ? cfg80211_event_work+0x40/0x40 [ 1126.476123][T19349] ? minstrel_ht_alloc+0x894/0xa20 [ 1126.481287][T19349] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1126.487393][T19349] ieee80211_register_hw+0x2d00/0x39f0 [ 1126.492892][T19349] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.498127][T19349] ? ieee80211_register_hw+0xf41/0x39f0 [ 1126.503798][T19349] ? ieee80211_register_hw+0xe41/0x39f0 [ 1126.509393][T19349] ? ieee80211_tasklet_handler+0x20/0x20 [ 1126.515084][T19349] ? memset+0x1e/0x40 [ 1126.519122][T19349] ? __hrtimer_init+0x186/0x270 [ 1126.524024][T19349] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1126.529834][T19349] hwsim_new_radio_nl+0xafa/0xce0 [ 1126.534953][T19349] genl_family_rcv_msg_doit+0x22a/0x330 [ 1126.540570][T19349] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1126.546546][T19349] ? bpf_lsm_capable+0x5/0x10 [ 1126.551364][T19349] ? security_capable+0x85/0xb0 [ 1126.556437][T19349] genl_rcv_msg+0x604/0x790 [ 1126.560987][T19349] ? genl_bind+0x360/0x360 [ 1126.565431][T19349] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1126.572274][T19349] ? lock_chain_count+0x20/0x20 [ 1126.577205][T19349] netlink_rcv_skb+0x1fb/0x450 [ 1126.582031][T19349] ? genl_bind+0x360/0x360 [ 1126.586489][T19349] ? netlink_ack+0x1170/0x1170 [ 1126.591332][T19349] ? down_read+0x1a8/0x2d0 [ 1126.595793][T19349] genl_rcv+0x24/0x40 [ 1126.599801][T19349] netlink_unicast+0x74d/0x8d0 [ 1126.604635][T19349] netlink_sendmsg+0x8ad/0xbd0 [ 1126.609454][T19349] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.614710][T19349] ? netlink_getsockopt+0x550/0x550 [ 1126.619958][T19349] ? bpf_lsm_socket_accept+0x10/0x10 [ 1126.625278][T19349] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1126.630597][T19349] ? security_socket_sendmsg+0x7c/0xa0 [ 1126.636104][T19349] ? netlink_getsockopt+0x550/0x550 [ 1126.641338][T19349] ____sys_sendmsg+0x5be/0x970 [ 1126.646150][T19349] ? __sys_sendmsg_sock+0x30/0x30 [ 1126.651218][T19349] ? __import_iovec+0x315/0x500 [ 1126.656105][T19349] ? import_iovec+0x6f/0xa0 [ 1126.660644][T19349] ___sys_sendmsg+0x2a2/0x360 [ 1126.665394][T19349] ? __sys_sendmsg+0x290/0x290 [ 1126.670258][T19349] ? trace_call_bpf+0xbf/0x6b0 [ 1126.675128][T19349] __se_sys_sendmsg+0x1bb/0x2a0 [ 1126.680091][T19349] ? __x64_sys_sendmsg+0x80/0x80 [ 1126.685090][T19349] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.690345][T19349] do_syscall_64+0x4c/0xa0 [ 1126.694831][T19349] ? clear_bhb_loop+0x60/0xb0 [ 1126.699548][T19349] ? clear_bhb_loop+0x60/0xb0 [ 1126.704261][T19349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.710186][T19349] RIP: 0033:0x7f51f7f9ce59 [ 1126.714626][T19349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.734259][T19349] RSP: 002b:00007f51f61d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.742705][T19349] RAX: ffffffffffffffda RBX: 00007f51f8216090 RCX: 00007f51f7f9ce59 [ 1126.750700][T19349] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1126.758695][T19349] RBP: 00007f51f8032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1126.766692][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.774686][T19349] R13: 00007f51f8216128 R14: 00007f51f8216090 R15: 00007ffd4029d818 [ 1126.782697][T19349] [ 1127.000132][T19365] netlink: 'syz.2.4603': attribute type 7 has an invalid length. [ 1127.052505][T19365] netlink: 'syz.2.4603': attribute type 6 has an invalid length. [ 1127.274281][T19366] netlink: 'syz.2.4603': attribute type 3 has an invalid length. [ 1127.341117][T19366] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4603'. [ 1127.612423][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 1127.830325][T19382] netlink: 'syz.3.4609': attribute type 10 has an invalid length. [ 1128.944914][T19410] device syzkaller0 entered promiscuous mode [ 1129.365958][T19426] validate_nla: 1 callbacks suppressed [ 1129.365995][T19426] netlink: 'syz.0.4622': attribute type 4 has an invalid length. [ 1129.386951][T19426] __nla_validate_parse: 2 callbacks suppressed [ 1129.386995][T19426] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.4622'. [ 1134.036765][T19430] netlink: 'syz.2.4623': attribute type 10 has an invalid length. [ 1134.045553][T19430] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4623'. [ 1134.059069][T19434] netlink: 'syz.4.4621': attribute type 10 has an invalid length. [ 1134.080540][T19445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4624'. [ 1134.772255][T19476] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4636'. [ 1134.858535][T19476] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1134.989563][T19476] CPU: 1 PID: 19476 Comm: syz.4.4636 Not tainted syzkaller #0 [ 1134.997129][T19476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1135.007241][T19476] Call Trace: [ 1135.010568][T19476] [ 1135.013549][T19476] dump_stack_lvl+0x188/0x24e [ 1135.018292][T19476] ? show_regs_print_info+0x12/0x12 [ 1135.023552][T19476] ? load_image+0x400/0x400 [ 1135.028102][T19476] sysfs_warn_dup+0x8a/0xa0 [ 1135.032639][T19476] sysfs_do_create_link_sd+0xc0/0x110 [ 1135.038043][T19476] device_add+0x7ed/0xfb0 [ 1135.042410][T19476] wiphy_register+0x1d9f/0x2ac0 [ 1135.047309][T19476] ? cfg80211_event_work+0x40/0x40 [ 1135.052453][T19476] ? minstrel_ht_alloc+0x894/0xa20 [ 1135.057609][T19476] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1135.063704][T19476] ieee80211_register_hw+0x2d00/0x39f0 [ 1135.069213][T19476] ? ieee80211_register_hw+0xf41/0x39f0 [ 1135.074800][T19476] ? ieee80211_register_hw+0xe41/0x39f0 [ 1135.080395][T19476] ? ieee80211_tasklet_handler+0x20/0x20 [ 1135.086077][T19476] ? __hrtimer_init+0xb6/0x270 [ 1135.090880][T19476] ? __hrtimer_init+0x186/0x270 [ 1135.095761][T19476] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1135.101531][T19476] hwsim_new_radio_nl+0xafa/0xce0 [ 1135.106606][T19476] genl_family_rcv_msg_doit+0x22a/0x330 [ 1135.112197][T19476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1135.118387][T19476] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1135.124317][T19476] ? ns_capable+0x75/0xe0 [ 1135.128684][T19476] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 1135.134875][T19476] genl_rcv_msg+0x604/0x790 [ 1135.139414][T19476] ? genl_bind+0x360/0x360 [ 1135.143853][T19476] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1135.150247][T19476] netlink_rcv_skb+0x1fb/0x450 [ 1135.155047][T19476] ? genl_bind+0x360/0x360 [ 1135.159493][T19476] ? netlink_ack+0x1170/0x1170 [ 1135.164303][T19476] ? down_read+0x1a8/0x2d0 [ 1135.168763][T19476] genl_rcv+0x24/0x40 [ 1135.172778][T19476] netlink_unicast+0x74d/0x8d0 [ 1135.177584][T19476] netlink_sendmsg+0x8ad/0xbd0 [ 1135.182396][T19476] ? netlink_getsockopt+0x550/0x550 [ 1135.187637][T19476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1135.193822][T19476] ? aa_sock_msg_perm+0x94/0x150 [ 1135.198789][T19476] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1135.204101][T19476] ? security_socket_sendmsg+0x7c/0xa0 [ 1135.209610][T19476] ? netlink_getsockopt+0x550/0x550 [ 1135.214840][T19476] ____sys_sendmsg+0x5be/0x970 [ 1135.219649][T19476] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 1135.225231][T19476] ? __sys_sendmsg_sock+0x30/0x30 [ 1135.230295][T19476] ? __import_iovec+0x315/0x500 [ 1135.235192][T19476] ? import_iovec+0x6f/0xa0 [ 1135.239723][T19476] ___sys_sendmsg+0x2a2/0x360 [ 1135.244440][T19476] ? __sys_sendmsg+0x290/0x290 [ 1135.249260][T19476] ? ktime_get_real_ts64+0x440/0x440 [ 1135.254597][T19476] __se_sys_sendmsg+0x1bb/0x2a0 [ 1135.259484][T19476] ? __x64_sys_sendmsg+0x80/0x80 [ 1135.264473][T19476] ? lockdep_hardirqs_on+0x94/0x140 [ 1135.269702][T19476] do_syscall_64+0x4c/0xa0 [ 1135.274165][T19476] ? clear_bhb_loop+0x60/0xb0 [ 1135.278876][T19476] ? clear_bhb_loop+0x60/0xb0 [ 1135.283585][T19476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.289505][T19476] RIP: 0033:0x7f358cb9ce59 [ 1135.293946][T19476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.313580][T19476] RSP: 002b:00007f358d9ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.322056][T19476] RAX: ffffffffffffffda RBX: 00007f358ce16090 RCX: 00007f358cb9ce59 [ 1135.330065][T19476] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1135.338059][T19476] RBP: 00007f358cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1135.346058][T19476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.354053][T19476] R13: 00007f358ce16128 R14: 00007f358ce16090 R15: 00007ffffd200b38 [ 1135.362071][T19476] [ 1135.445974][T19489] netlink: 'syz.3.4640': attribute type 10 has an invalid length. [ 1135.542263][T19489] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1135.967033][T19498] netlink: 'syz.2.4643': attribute type 4 has an invalid length. [ 1136.033214][T19498] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1136.151738][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4645'. [ 1136.329518][T19512] netlink: 'syz.3.4647': attribute type 10 has an invalid length. [ 1136.394096][T19512] bridge0: port 5(batadv0) entered disabled state [ 1136.403518][T19512] bridge0: port 4(team0) entered disabled state [ 1136.411699][T19512] bridge0: port 3(hsr0) entered disabled state [ 1136.419073][T19512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.427757][T19512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.556158][T19512] team0: Device bridge0 is already an upper device of the team interface [ 1136.674530][T19521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.695596][T19521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.053897][T19521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.071585][T19521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.291113][T19528] netlink: 'syz.5.4652': attribute type 16 has an invalid length. [ 1137.330709][T19528] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4652'. [ 1137.440449][T19536] netlink: 'syz.3.4655': attribute type 10 has an invalid length. [ 1137.481158][T19540] netlink: 'syz.2.4656': attribute type 3 has an invalid length. [ 1137.489136][T19540] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4656'. [ 1137.491667][T19536] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4655'. [ 1137.766809][T19548] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4660'. [ 1137.932458][T19548] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1137.978727][T19548] CPU: 1 PID: 19548 Comm: syz.5.4660 Not tainted syzkaller #0 [ 1137.986295][T19548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1137.996410][T19548] Call Trace: [ 1137.999739][T19548] [ 1138.002725][T19548] dump_stack_lvl+0x188/0x24e [ 1138.007486][T19548] ? show_regs_print_info+0x12/0x12 [ 1138.012752][T19548] ? load_image+0x400/0x400 [ 1138.017320][T19548] sysfs_warn_dup+0x8a/0xa0 [ 1138.021872][T19548] sysfs_do_create_link_sd+0xc0/0x110 [ 1138.027285][T19548] device_add+0x7ed/0xfb0 [ 1138.031660][T19548] wiphy_register+0x1d9f/0x2ac0 [ 1138.036579][T19548] ? cfg80211_event_work+0x40/0x40 [ 1138.041747][T19548] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1138.047970][T19548] ieee80211_register_hw+0x2d00/0x39f0 [ 1138.053497][T19548] ? ieee80211_register_hw+0xf41/0x39f0 [ 1138.059090][T19548] ? ieee80211_register_hw+0xe41/0x39f0 [ 1138.064686][T19548] ? ieee80211_tasklet_handler+0x20/0x20 [ 1138.070369][T19548] ? memset+0x1e/0x40 [ 1138.074387][T19548] ? __hrtimer_init+0x186/0x270 [ 1138.079277][T19548] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1138.085063][T19548] hwsim_new_radio_nl+0xafa/0xce0 [ 1138.090144][T19548] genl_family_rcv_msg_doit+0x22a/0x330 [ 1138.095726][T19548] ? end_current_label_crit_section+0x170/0x170 [ 1138.102011][T19548] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1138.107947][T19548] ? bpf_lsm_capable+0x5/0x10 [ 1138.112663][T19548] ? security_capable+0x85/0xb0 [ 1138.117550][T19548] genl_rcv_msg+0x604/0x790 [ 1138.122103][T19548] ? genl_bind+0x360/0x360 [ 1138.126552][T19548] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1138.132586][T19548] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1138.138956][T19548] ? lock_chain_count+0x20/0x20 [ 1138.143854][T19548] netlink_rcv_skb+0x1fb/0x450 [ 1138.148664][T19548] ? genl_bind+0x360/0x360 [ 1138.153122][T19548] ? netlink_ack+0x1170/0x1170 [ 1138.157932][T19548] ? in_lock_functions+0x7/0x20 [ 1138.162835][T19548] ? down_read+0x1a8/0x2d0 [ 1138.167301][T19548] genl_rcv+0x24/0x40 [ 1138.171312][T19548] netlink_unicast+0x74d/0x8d0 [ 1138.176128][T19548] netlink_sendmsg+0x8ad/0xbd0 [ 1138.180939][T19548] ? netlink_getsockopt+0x550/0x550 [ 1138.186206][T19548] ? aa_sock_msg_perm+0x94/0x150 [ 1138.191195][T19548] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1138.196534][T19548] ? security_socket_sendmsg+0x7c/0xa0 [ 1138.202056][T19548] ? netlink_getsockopt+0x550/0x550 [ 1138.207305][T19548] ____sys_sendmsg+0x5be/0x970 [ 1138.212120][T19548] ? __sys_sendmsg_sock+0x30/0x30 [ 1138.217185][T19548] ? __import_iovec+0x315/0x500 [ 1138.222086][T19548] ? import_iovec+0x6f/0xa0 [ 1138.226624][T19548] ___sys_sendmsg+0x2a2/0x360 [ 1138.231379][T19548] ? __sys_sendmsg+0x290/0x290 [ 1138.236860][T19548] ? rcu_is_watching+0x11/0xa0 [ 1138.241707][T19548] __se_sys_sendmsg+0x1bb/0x2a0 [ 1138.246642][T19548] ? __x64_sys_sendmsg+0x80/0x80 [ 1138.251657][T19548] ? lockdep_hardirqs_on+0x94/0x140 [ 1138.256906][T19548] do_syscall_64+0x4c/0xa0 [ 1138.261385][T19548] ? clear_bhb_loop+0x60/0xb0 [ 1138.266104][T19548] ? clear_bhb_loop+0x60/0xb0 [ 1138.270818][T19548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.276746][T19548] RIP: 0033:0x7fce4f19ce59 [ 1138.281195][T19548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.300828][T19548] RSP: 002b:00007fce4d3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.309305][T19548] RAX: ffffffffffffffda RBX: 00007fce4f416090 RCX: 00007fce4f19ce59 [ 1138.317315][T19548] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1138.325331][T19548] RBP: 00007fce4f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1138.333332][T19548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.341333][T19548] R13: 00007fce4f416128 R14: 00007fce4f416090 R15: 00007fffe791fb28 [ 1138.349362][T19548] [ 1138.519195][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1139.115345][T19583] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4670'. [ 1139.412070][T19594] netlink: 'syz.4.4672': attribute type 10 has an invalid length. [ 1139.944008][T19599] netlink: 'syz.2.4675': attribute type 10 has an invalid length. [ 1139.990974][T19599] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1140.621058][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4682'. [ 1141.211300][T19639] netlink: 'syz.3.4691': attribute type 10 has an invalid length. [ 1141.278225][T19639] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4691'. [ 1141.371166][T19634] netlink: 'syz.4.4689': attribute type 21 has an invalid length. [ 1141.398894][T19634] netlink: 'syz.4.4689': attribute type 6 has an invalid length. [ 1141.418355][T19634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1141.913301][T19652] netlink: 'syz.5.4695': attribute type 3 has an invalid length. [ 1141.974654][T19652] netlink: 'syz.5.4695': attribute type 1 has an invalid length. [ 1142.014588][T19652] netlink: 198452 bytes leftover after parsing attributes in process `syz.5.4695'. [ 1142.106602][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4698'. [ 1142.385309][T19669] netlink: 'syz.3.4701': attribute type 10 has an invalid length. [ 1142.426274][T19669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4701'. [ 1142.487226][T19669] device macvlan1 entered promiscuous mode [ 1142.574513][T19669] batman_adv: batadv0: Adding interface: macvlan1 [ 1142.607344][T19669] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.051845][T19669] batman_adv: batadv0: Interface activated: macvlan1 [ 1143.097317][T19678] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1143.122065][T19672] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4702'. [ 1143.306288][T19687] netlink: 'syz.0.4706': attribute type 10 has an invalid length. [ 1143.341091][T19687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4706'. [ 1143.448198][T19690] netlink: 'syz.4.4707': attribute type 10 has an invalid length. [ 1144.317524][T19719] netlink: 'syz.4.4715': attribute type 3 has an invalid length. [ 1144.341895][T19719] netlink: 'syz.4.4715': attribute type 1 has an invalid length. [ 1144.904105][T19734] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1145.188063][T19739] __nla_validate_parse: 5 callbacks suppressed [ 1145.188106][T19739] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4722'. [ 1145.526480][T19746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1145.552002][T19746] device dummy0 entered promiscuous mode [ 1145.572523][T19746] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1145.613099][T19752] netlink: 28603 bytes leftover after parsing attributes in process `syz.2.4728'. [ 1145.946708][T19764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1145.954298][T19764] IPv6: NLM_F_CREATE should be set when creating new route [ 1145.962143][T19764] IPv6: NLM_F_CREATE should be set when creating new route [ 1145.969823][T19764] IPv6: NLM_F_CREATE should be set when creating new route [ 1146.015684][T19763] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1146.463146][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1146.862620][T19788] validate_nla: 4 callbacks suppressed [ 1146.862658][T19788] netlink: 'syz.0.4739': attribute type 10 has an invalid length. [ 1146.897284][T19788] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4739'. [ 1146.945446][T19784] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1147.013035][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1148.040347][T19816] netlink: 'syz.3.4744': attribute type 3 has an invalid length. [ 1148.124786][T19816] netlink: 'syz.3.4744': attribute type 1 has an invalid length. [ 1148.169185][T19816] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1151.249125][T19839] FAULT_INJECTION: forcing a failure. [ 1151.249125][T19839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.362532][T19839] CPU: 0 PID: 19839 Comm: syz.0.4751 Not tainted syzkaller #0 [ 1151.370241][T19839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1151.380364][T19839] Call Trace: [ 1151.383696][T19839] [ 1151.386682][T19839] dump_stack_lvl+0x188/0x24e [ 1151.391452][T19839] ? show_regs_print_info+0x12/0x12 [ 1151.396733][T19839] ? load_image+0x400/0x400 [ 1151.401404][T19839] ? __lock_acquire+0x7d10/0x7d10 [ 1151.406514][T19839] should_fail_ex+0x399/0x4d0 [ 1151.411269][T19839] _copy_from_iter+0x1c0/0x1130 [ 1151.416193][T19839] ? __lock_acquire+0x7d10/0x7d10 [ 1151.421313][T19839] ? copyout_mc+0x110/0x110 [ 1151.425885][T19839] ? __virt_addr_valid+0x188/0x540 [ 1151.431072][T19839] ? __virt_addr_valid+0x188/0x540 [ 1151.436257][T19839] ? __virt_addr_valid+0x465/0x540 [ 1151.441440][T19839] ? __check_object_size+0x500/0xa40 [ 1151.447935][T19839] kernfs_fop_write_iter+0x1a0/0x520 [ 1151.453317][T19839] vfs_write+0x4b1/0xa30 [ 1151.457650][T19839] ? file_end_write+0x250/0x250 [ 1151.462586][T19839] ? __fget_files+0x43d/0x4b0 [ 1151.467359][T19839] ? __fdget_pos+0x2ae/0x360 [ 1151.472014][T19839] ? ksys_write+0x71/0x250 [ 1151.476509][T19839] ksys_write+0x14c/0x250 [ 1151.480929][T19839] ? __ia32_sys_read+0x80/0x80 [ 1151.485770][T19839] ? lockdep_hardirqs_on+0x94/0x140 [ 1151.491040][T19839] do_syscall_64+0x4c/0xa0 [ 1151.495686][T19839] ? clear_bhb_loop+0x60/0xb0 [ 1151.500444][T19839] ? clear_bhb_loop+0x60/0xb0 [ 1151.505307][T19839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1151.511290][T19839] RIP: 0033:0x7f51f7f9ce59 [ 1151.515775][T19839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.535460][T19839] RSP: 002b:00007f51f61f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1151.543999][T19839] RAX: ffffffffffffffda RBX: 00007f51f8215fa0 RCX: 00007f51f7f9ce59 [ 1151.552065][T19839] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1151.560108][T19839] RBP: 00007f51f61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.568157][T19839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.576202][T19839] R13: 00007f51f8216038 R14: 00007f51f8215fa0 R15: 00007ffd4029d818 [ 1151.584279][T19839] [ 1151.726012][T19846] netlink: 'syz.5.4750': attribute type 10 has an invalid length. [ 1151.835164][T19846] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4750'. [ 1152.198476][T19858] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1152.227842][T19858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1152.470489][T19868] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1153.145597][T19893] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4767'. [ 1153.327532][T19897] netlink: 'syz.3.4769': attribute type 10 has an invalid length. [ 1153.337672][T19897] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4769'. [ 1153.752318][T19908] netlink: 'syz.5.4771': attribute type 10 has an invalid length. [ 1153.931076][T19908] bridge0: port 4(hsr0) entered disabled state [ 1153.997430][T19908] device hsr0 left promiscuous mode [ 1154.032422][T19908] bridge0: port 4(hsr0) entered disabled state [ 1154.086248][T19908] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1154.143914][T19908] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1154.274216][T19908] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1154.420907][T19908] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1154.501482][T19920] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1154.534351][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1154.993848][T19938] netlink: 'syz.0.4782': attribute type 10 has an invalid length. [ 1155.007080][T19938] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1155.141869][T19941] netlink: 'syz.2.4783': attribute type 10 has an invalid length. [ 1155.197965][T19941] bridge0: port 4(batadv0) entered disabled state [ 1155.205010][T19941] bridge0: port 3(hsr0) entered disabled state [ 1155.211517][T19941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.218932][T19941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.042461][T19957] netlink: 'syz.5.4789': attribute type 6 has an invalid length. [ 1156.493586][T19976] netlink: 'syz.2.4797': attribute type 10 has an invalid length. [ 1156.520906][T19976] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1156.690921][T19977] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1156.721350][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1156.898715][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1157.319431][T19997] netlink: 'syz.5.4804': attribute type 13 has an invalid length. [ 1157.351193][T19997] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.4804'. [ 1157.433236][T20002] netlink: 'syz.4.4806': attribute type 21 has an invalid length. [ 1157.444741][T20002] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4806'. [ 1157.719950][T20011] netlink: 'syz.5.4810': attribute type 10 has an invalid length. [ 1157.761134][T20011] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4810'. [ 1158.930989][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1159.895863][ T56] wlan1: Trigger new scan to find an IBSS to join [ 1160.307642][T20031] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1160.348600][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 1161.067060][T20048] netlink: 'syz.4.4819': attribute type 10 has an invalid length. [ 1161.191787][T20048] device hsr0 left promiscuous mode [ 1161.290398][T20048] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1161.481340][T20048] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1161.541945][T20048] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1161.575456][T20048] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1162.050991][T20068] netlink: 'syz.2.4825': attribute type 10 has an invalid length. [ 1162.092738][T20068] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4825'. [ 1162.932759][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1163.890809][ T56] wlan1: Trigger new scan to find an IBSS to join [ 1163.976800][T14521] wlan1: Creating new IBSS network, BSSID b6:6b:91:64:a0:43 [ 1165.546651][ T30] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1165.567404][T20096] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1165.593040][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1166.017481][T20115] FAULT_INJECTION: forcing a failure. [ 1166.017481][T20115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.101450][T20115] CPU: 1 PID: 20115 Comm: syz.2.4842 Not tainted syzkaller #0 [ 1166.109008][T20115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1166.119117][T20115] Call Trace: [ 1166.122455][T20115] [ 1166.125447][T20115] dump_stack_lvl+0x188/0x24e [ 1166.130196][T20115] ? show_regs_print_info+0x12/0x12 [ 1166.135544][T20115] ? load_image+0x400/0x400 [ 1166.140107][T20115] ? __lock_acquire+0x7d10/0x7d10 [ 1166.145208][T20115] should_fail_ex+0x399/0x4d0 [ 1166.149940][T20115] _copy_from_user+0x2c/0x170 [ 1166.154681][T20115] __sys_bpf+0x2ea/0x780 [ 1166.158981][T20115] ? bpf_link_show_fdinfo+0x380/0x380 [ 1166.164424][T20115] ? lock_chain_count+0x20/0x20 [ 1166.169521][T20115] __x64_sys_bpf+0x78/0x90 [ 1166.174010][T20115] do_syscall_64+0x4c/0xa0 [ 1166.178490][T20115] ? clear_bhb_loop+0x60/0xb0 [ 1166.183224][T20115] ? clear_bhb_loop+0x60/0xb0 [ 1166.187953][T20115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1166.193896][T20115] RIP: 0033:0x7ff85cf9ce59 [ 1166.198355][T20115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.218017][T20115] RSP: 002b:00007ff85de5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1166.226495][T20115] RAX: ffffffffffffffda RBX: 00007ff85d215fa0 RCX: 00007ff85cf9ce59 [ 1166.234530][T20115] RDX: 0000000000000090 RSI: 0000200000000b00 RDI: 0000000000000005 [ 1166.238571][T20121] netlink: 'syz.3.4843': attribute type 3 has an invalid length. [ 1166.242552][T20115] RBP: 00007ff85de5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.242574][T20115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.242588][T20115] R13: 00007ff85d216038 R14: 00007ff85d215fa0 R15: 00007ffce4e6f588 [ 1166.242619][T20115] [ 1166.305279][T20120] netlink: 'syz.4.4844': attribute type 10 has an invalid length. [ 1166.327793][T20120] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4844'. [ 1166.410822][T20121] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4843'. [ 1166.598820][T20129] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4847'. [ 1167.149527][T20144] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1167.228626][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4852'. [ 1167.901037][T14521] wlan1: Trigger new scan to find an IBSS to join [ 1170.170228][T20157] netlink: 'syz.3.4858': attribute type 10 has an invalid length. [ 1170.183332][T20157] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1170.412185][T20165] device syzkaller0 entered promiscuous mode [ 1171.273134][T20175] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4863'. [ 1171.891879][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1174.317462][T11100] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1174.505645][T20196] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 1176.313100][T20191] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1176.322528][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1176.342481][T20196] netlink: 'syz.0.4868': attribute type 29 has an invalid length. [ 1176.782319][T20209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1176.788885][T20209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1176.929512][T20207] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4873'. [ 1176.978666][T20219] netlink: 'syz.2.4877': attribute type 3 has an invalid length. [ 1177.047527][T20219] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4877'. [ 1177.373863][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.380283][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.710097][T20231] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1177.744732][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4882'. [ 1178.006166][T20244] netlink: 'syz.5.4887': attribute type 9 has an invalid length. [ 1178.045436][T20244] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1178.089662][T20244] netlink: 'syz.5.4887': attribute type 6 has an invalid length. [ 1178.118293][T20244] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1178.664619][T20263] netlink: 'syz.5.4892': attribute type 3 has an invalid length. [ 1178.711620][T20267] IPv6: NLM_F_CREATE should be specified when creating new route [ 1178.740994][T20267] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4894'. [ 1178.768824][T20263] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4892'. [ 1178.914876][T20275] netlink: 15007 bytes leftover after parsing attributes in process `syz.0.4895'. [ 1179.369029][T20285] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1179.455871][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1180.444005][T20372] wlan1: Trigger new scan to find an IBSS to join [ 1180.870721][T20353] netlink: 'syz.0.4903': attribute type 10 has an invalid length. [ 1184.861081][T20350] wlan1: Trigger new scan to find an IBSS to join [ 1185.828422][T20366] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1185.948018][T20393] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 1185.956063][T20398] netlink: 'syz.5.4912': attribute type 10 has an invalid length. [ 1185.971099][T20398] __nla_validate_parse: 1 callbacks suppressed [ 1185.971118][T20398] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4912'. [ 1186.030691][T20402] netlink: 'syz.3.4914': attribute type 10 has an invalid length. [ 1186.038694][T20402] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4914'. [ 1186.112597][T20408] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1186.155248][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4916'. [ 1186.843013][T20426] netlink: 'syz.0.4923': attribute type 27 has an invalid length. [ 1186.874178][T20426] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4923'. [ 1187.104678][T20438] FAULT_INJECTION: forcing a failure. [ 1187.104678][T20438] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.135022][T20434] IPv6: NLM_F_CREATE should be specified when creating new route [ 1187.152845][T20434] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4926'. [ 1187.205929][T20441] netlink: 'syz.5.4929': attribute type 10 has an invalid length. [ 1187.220833][T20438] CPU: 1 PID: 20438 Comm: syz.3.4928 Not tainted syzkaller #0 [ 1187.228390][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1187.229710][T20441] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4929'. [ 1187.238468][T20438] Call Trace: [ 1187.238481][T20438] [ 1187.238491][T20438] dump_stack_lvl+0x188/0x24e [ 1187.238532][T20438] ? show_regs_print_info+0x12/0x12 [ 1187.238566][T20438] ? load_image+0x400/0x400 [ 1187.238597][T20438] ? __might_sleep+0xd0/0xd0 [ 1187.238620][T20438] ? __lock_acquire+0x7d10/0x7d10 [ 1187.238648][T20438] ? __lock_acquire+0x12f4/0x7d10 [ 1187.238684][T20438] should_fail_ex+0x399/0x4d0 [ 1187.238713][T20438] should_failslab+0x5/0x20 [ 1187.238734][T20438] slab_pre_alloc_hook+0x59/0x310 [ 1187.238767][T20438] kmem_cache_alloc_node+0x5a/0x320 [ 1187.238793][T20438] ? __alloc_skb+0xfc/0x7e0 [ 1187.238831][T20438] __alloc_skb+0xfc/0x7e0 [ 1187.238877][T20438] alloc_skb_with_frags+0xa7/0x710 [ 1187.238910][T20438] ? __lock_acquire+0x7d10/0x7d10 [ 1187.238946][T20438] sock_alloc_send_pskb+0x87f/0x9a0 [ 1187.238995][T20438] ? sock_kzfree_s+0x50/0x50 [ 1187.239029][T20438] ? dev_get_by_index+0x1e/0x2d0 [ 1187.239064][T20438] ? dev_get_by_index+0x1e/0x2d0 [ 1187.239105][T20438] packet_sendmsg+0x32b0/0x4e60 [ 1187.346410][T20438] ? perf_trace_lock+0xf8/0x390 [ 1187.351295][T20438] ? __might_sleep+0xd0/0xd0 [ 1187.355909][T20438] ? trace_event_raw_event_lock+0x250/0x250 [ 1187.361847][T20438] ? aa_sk_perm+0x81f/0x950 [ 1187.366392][T20438] ? packet_getsockopt+0x9a0/0x9a0 [ 1187.371532][T20438] ? aa_sock_msg_perm+0x94/0x150 [ 1187.376494][T20438] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1187.381808][T20438] ? security_socket_sendmsg+0x7c/0xa0 [ 1187.387309][T20438] ? packet_getsockopt+0x9a0/0x9a0 [ 1187.392444][T20438] ____sys_sendmsg+0x5be/0x970 [ 1187.397250][T20438] ? __sys_sendmsg_sock+0x30/0x30 [ 1187.402307][T20438] ? __import_iovec+0x315/0x500 [ 1187.407189][T20438] ? import_iovec+0x6f/0xa0 [ 1187.411731][T20438] ___sys_sendmsg+0x2a2/0x360 [ 1187.416466][T20438] ? __sys_sendmsg+0x290/0x290 [ 1187.421280][T20438] ? __lock_acquire+0x7d10/0x7d10 [ 1187.426356][T20438] __se_sys_sendmsg+0x1bb/0x2a0 [ 1187.431244][T20438] ? __x64_sys_sendmsg+0x80/0x80 [ 1187.436229][T20438] ? lockdep_hardirqs_on+0x94/0x140 [ 1187.441462][T20438] do_syscall_64+0x4c/0xa0 [ 1187.445910][T20438] ? clear_bhb_loop+0x60/0xb0 [ 1187.450617][T20438] ? clear_bhb_loop+0x60/0xb0 [ 1187.455325][T20438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1187.461248][T20438] RIP: 0033:0x7fbd3479ce59 [ 1187.465692][T20438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.485324][T20438] RSP: 002b:00007fbd356ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.493766][T20438] RAX: ffffffffffffffda RBX: 00007fbd34a15fa0 RCX: 00007fbd3479ce59 [ 1187.501763][T20438] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1187.509754][T20438] RBP: 00007fbd356ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.517746][T20438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.525736][T20438] R13: 00007fbd34a16038 R14: 00007fbd34a15fa0 R15: 00007ffd5d6e8f78 [ 1187.533747][T20438] [ 1187.633141][T20448] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4930'. [ 1189.021227][T20436] device syzkaller0 entered promiscuous mode [ 1191.364348][T20453] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1191.373887][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4931'. [ 1192.441461][T20535] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1192.448003][T20535] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1192.508435][T20537] netlink: 'syz.5.4942': attribute type 10 has an invalid length. [ 1192.525709][T20537] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4942'. [ 1192.635360][T20541] FAULT_INJECTION: forcing a failure. [ 1192.635360][T20541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.706306][T20541] CPU: 0 PID: 20541 Comm: syz.4.4943 Not tainted syzkaller #0 [ 1192.713895][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.724018][T20541] Call Trace: [ 1192.727362][T20541] [ 1192.730345][T20541] dump_stack_lvl+0x188/0x24e [ 1192.735102][T20541] ? show_regs_print_info+0x12/0x12 [ 1192.740382][T20541] ? load_image+0x400/0x400 [ 1192.744969][T20541] ? __lock_acquire+0x7d10/0x7d10 [ 1192.750068][T20541] ? mutex_unlock+0x10/0x10 [ 1192.754666][T20541] should_fail_ex+0x399/0x4d0 [ 1192.759392][T20541] _copy_from_user+0x2c/0x170 [ 1192.764123][T20541] smc_setsockopt+0x418/0xb80 [ 1192.768858][T20541] ? smc_shutdown+0x9a0/0x9a0 [ 1192.773579][T20541] ? aa_sock_opt_perm+0x74/0x100 [ 1192.778581][T20541] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 1192.784165][T20541] ? security_socket_setsockopt+0x7a/0xa0 [ 1192.789919][T20541] ? smc_shutdown+0x9a0/0x9a0 [ 1192.794647][T20541] __sys_setsockopt+0x2bf/0x3d0 [ 1192.799552][T20541] __x64_sys_setsockopt+0xb1/0xc0 [ 1192.804625][T20541] do_syscall_64+0x4c/0xa0 [ 1192.809080][T20541] ? clear_bhb_loop+0x60/0xb0 [ 1192.813896][T20541] ? clear_bhb_loop+0x60/0xb0 [ 1192.818626][T20541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.824564][T20541] RIP: 0033:0x7f358cb9ce59 [ 1192.829019][T20541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.848674][T20541] RSP: 002b:00007f358da10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1192.857137][T20541] RAX: ffffffffffffffda RBX: 00007f358ce15fa0 RCX: 00007f358cb9ce59 [ 1192.865147][T20541] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000008 [ 1192.873151][T20541] RBP: 00007f358da10090 R08: 0000000000000021 R09: 0000000000000000 [ 1192.881154][T20541] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1192.889173][T20541] R13: 00007f358ce16038 R14: 00007f358ce15fa0 R15: 00007ffffd200b38 [ 1192.897209][T20541] [ 1193.075208][T20549] netlink: 'syz.2.4946': attribute type 2 has an invalid length. [ 1193.187969][T20549] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.4946'. [ 1193.472515][T20556] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4944'. [ 1194.004693][T20562] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1194.108316][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4949'. [ 1194.529370][T20590] netlink: 'syz.2.4958': attribute type 10 has an invalid length. [ 1194.547213][T20590] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4958'. [ 1194.787240][T20596] netlink: 'syz.3.4961': attribute type 3 has an invalid length. [ 1194.832276][T20596] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4961'. [ 1195.006997][T20602] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1195.172422][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4960'. [ 1195.347792][T20609] netlink: 'syz.2.4965': attribute type 3 has an invalid length. [ 1195.379914][T20609] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4965'. [ 1195.408904][T20611] FAULT_INJECTION: forcing a failure. [ 1195.408904][T20611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.436168][T20611] CPU: 0 PID: 20611 Comm: syz.3.4966 Not tainted syzkaller #0 [ 1195.443732][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.453856][T20611] Call Trace: [ 1195.457172][T20611] [ 1195.460138][T20611] dump_stack_lvl+0x188/0x24e [ 1195.464873][T20611] ? show_regs_print_info+0x12/0x12 [ 1195.470203][T20611] ? load_image+0x400/0x400 [ 1195.474788][T20611] ? __lock_acquire+0x7d10/0x7d10 [ 1195.479881][T20611] should_fail_ex+0x399/0x4d0 [ 1195.484617][T20611] _copy_from_user+0x2c/0x170 [ 1195.489347][T20611] iovec_from_user+0x143/0x360 [ 1195.494157][T20611] __import_iovec+0x6d/0x500 [ 1195.498803][T20611] import_iovec+0x6f/0xa0 [ 1195.503192][T20611] ___sys_sendmsg+0x252/0x360 [ 1195.507927][T20611] ? __sys_sendmsg+0x290/0x290 [ 1195.512776][T20611] ? __lock_acquire+0x7d10/0x7d10 [ 1195.517897][T20611] __se_sys_sendmsg+0x1bb/0x2a0 [ 1195.522799][T20611] ? __x64_sys_sendmsg+0x80/0x80 [ 1195.527807][T20611] ? lockdep_hardirqs_on+0x94/0x140 [ 1195.533057][T20611] do_syscall_64+0x4c/0xa0 [ 1195.537516][T20611] ? clear_bhb_loop+0x60/0xb0 [ 1195.542250][T20611] ? clear_bhb_loop+0x60/0xb0 [ 1195.546972][T20611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1195.552903][T20611] RIP: 0033:0x7fbd3479ce59 [ 1195.557350][T20611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.577002][T20611] RSP: 002b:00007fbd356ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.585456][T20611] RAX: ffffffffffffffda RBX: 00007fbd34a15fa0 RCX: 00007fbd3479ce59 [ 1195.593462][T20611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1195.601465][T20611] RBP: 00007fbd356ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.609487][T20611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.617504][T20611] R13: 00007fbd34a16038 R14: 00007fbd34a15fa0 R15: 00007ffd5d6e8f78 [ 1195.625538][T20611] [ 1196.025140][T20617] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1196.114340][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4969'. [ 1196.388378][T20631] netlink: 'syz.2.4974': attribute type 10 has an invalid length. [ 1196.423073][T20631] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4974'. [ 1196.746042][T20642] netlink: 'syz.5.4988': attribute type 10 has an invalid length. [ 1196.766746][T20642] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4988'. [ 1197.465061][T20659] netlink: 'syz.4.4983': attribute type 2 has an invalid length. [ 1197.467753][T20664] FAULT_INJECTION: forcing a failure. [ 1197.467753][T20664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.487024][T20659] netlink: 'syz.4.4983': attribute type 8 has an invalid length. [ 1197.496240][T20664] CPU: 0 PID: 20664 Comm: syz.2.4985 Not tainted syzkaller #0 [ 1197.503768][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1197.513880][T20664] Call Trace: [ 1197.517195][T20664] [ 1197.520162][T20664] dump_stack_lvl+0x188/0x24e [ 1197.524907][T20664] ? show_regs_print_info+0x12/0x12 [ 1197.530155][T20664] ? load_image+0x400/0x400 [ 1197.530845][T20659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4983'. [ 1197.534687][T20664] ? __lock_acquire+0x7d10/0x7d10 [ 1197.534743][T20664] ? snprintf+0xe5/0x140 [ 1197.553087][T20664] should_fail_ex+0x399/0x4d0 [ 1197.557821][T20664] _copy_to_user+0x2c/0x130 [ 1197.562377][T20664] simple_read_from_buffer+0xe3/0x150 [ 1197.567800][T20664] proc_fail_nth_read+0x1a6/0x220 [ 1197.572874][T20664] ? proc_fault_inject_write+0x310/0x310 [ 1197.578554][T20664] ? fsnotify_perm+0x248/0x550 [ 1197.578806][T20666] FAULT_INJECTION: forcing a failure. [ 1197.578806][T20666] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.583354][T20664] ? proc_fault_inject_write+0x310/0x310 [ 1197.583383][T20664] vfs_read+0x2de/0xa00 [ 1197.583423][T20664] ? kernel_read+0x1e0/0x1e0 [ 1197.583472][T20664] ? __fget_files+0x28/0x4b0 [ 1197.583504][T20664] ? __fget_files+0x28/0x4b0 [ 1197.619751][T20664] ? __fget_files+0x43d/0x4b0 [ 1197.624492][T20664] ? __fdget_pos+0x2ae/0x360 [ 1197.629132][T20664] ? ksys_read+0x71/0x250 [ 1197.633492][T20664] ksys_read+0x14c/0x250 [ 1197.637859][T20664] ? vfs_write+0xa30/0xa30 [ 1197.642332][T20664] ? lockdep_hardirqs_on+0x94/0x140 [ 1197.647566][T20664] do_syscall_64+0x4c/0xa0 [ 1197.652014][T20664] ? clear_bhb_loop+0x60/0xb0 [ 1197.656723][T20664] ? clear_bhb_loop+0x60/0xb0 [ 1197.661432][T20664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.667353][T20664] RIP: 0033:0x7ff85cf5d68e [ 1197.671792][T20664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1197.691427][T20664] RSP: 002b:00007ff85de5afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1197.699872][T20664] RAX: ffffffffffffffda RBX: 00007ff85de5b6c0 RCX: 00007ff85cf5d68e [ 1197.707902][T20664] RDX: 000000000000000f RSI: 00007ff85de5b0a0 RDI: 0000000000000005 [ 1197.715890][T20664] RBP: 00007ff85de5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.723880][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.731872][T20664] R13: 00007ff85d216038 R14: 00007ff85d215fa0 R15: 00007ffce4e6f588 [ 1197.739874][T20664] [ 1197.746012][T20666] CPU: 0 PID: 20666 Comm: syz.0.4984 Not tainted syzkaller #0 [ 1197.753540][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1197.763634][T20666] Call Trace: [ 1197.766949][T20666] [ 1197.769914][T20666] dump_stack_lvl+0x188/0x24e [ 1197.774645][T20666] ? show_regs_print_info+0x12/0x12 [ 1197.779893][T20666] ? load_image+0x400/0x400 [ 1197.784445][T20666] ? __lock_acquire+0x7d10/0x7d10 [ 1197.789550][T20666] should_fail_ex+0x399/0x4d0 [ 1197.794274][T20666] should_failslab+0x5/0x20 [ 1197.798830][T20666] slab_pre_alloc_hook+0x59/0x310 [ 1197.803911][T20666] ? verify_lock_unused+0x140/0x140 [ 1197.809163][T20666] ? bpf_test_init+0x9f/0x140 [ 1197.813885][T20666] __kmem_cache_alloc_node+0x4f/0x260 [ 1197.819312][T20666] ? bpf_test_init+0x9f/0x140 [ 1197.824037][T20666] __kmalloc+0xa0/0x240 [ 1197.828251][T20666] bpf_test_init+0x9f/0x140 [ 1197.832808][T20666] bpf_prog_test_run_xdp+0x484/0xf10 [ 1197.838153][T20666] ? dev_put+0x80/0x80 [ 1197.842280][T20666] ? dev_put+0x80/0x80 [ 1197.846443][T20666] bpf_prog_test_run+0x31e/0x390 [ 1197.851435][T20666] __sys_bpf+0x62b/0x780 [ 1197.855823][T20666] ? bpf_link_show_fdinfo+0x380/0x380 [ 1197.861260][T20666] ? lock_chain_count+0x20/0x20 [ 1197.866174][T20666] __x64_sys_bpf+0x78/0x90 [ 1197.870649][T20666] do_syscall_64+0x4c/0xa0 [ 1197.875114][T20666] ? clear_bhb_loop+0x60/0xb0 [ 1197.879834][T20666] ? clear_bhb_loop+0x60/0xb0 [ 1197.884563][T20666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.890499][T20666] RIP: 0033:0x7f51f7f9ce59 [ 1197.894952][T20666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.914607][T20666] RSP: 002b:00007f51f61d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1197.923076][T20666] RAX: ffffffffffffffda RBX: 00007f51f8216090 RCX: 00007f51f7f9ce59 [ 1197.931094][T20666] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1197.939116][T20666] RBP: 00007f51f61d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.947129][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.955149][T20666] R13: 00007f51f8216128 R14: 00007f51f8216090 R15: 00007ffd4029d818 [ 1197.963263][T20666] [ 1198.146551][T20669] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1198.195123][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1198.592456][T20685] netlink: 'syz.4.4993': attribute type 10 has an invalid length. [ 1198.625506][T20685] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4993'. [ 1198.911130][T20693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1198.918549][T20693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1199.050251][T20691] netlink: 'syz.5.4994': attribute type 10 has an invalid length. [ 1199.068995][T20691] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4994'. [ 1200.860877][T20329] wlan1: Trigger new scan to find an IBSS to join [ 1201.955468][T20712] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1201.974518][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5002'. [ 1202.161994][T20724] netlink: 'syz.3.5008': attribute type 10 has an invalid length. [ 1202.170102][T20724] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5008'. [ 1202.332510][T20730] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5010'. [ 1202.592660][T20740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5013'. [ 1203.294725][T20755] netlink: 'syz.5.5016': attribute type 21 has an invalid length. [ 1203.379928][T20755] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5016'. [ 1203.431133][T20755] netlink: 'syz.5.5016': attribute type 5 has an invalid length. [ 1203.497562][T20755] netlink: 'syz.5.5016': attribute type 6 has an invalid length. [ 1203.518292][T20755] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5016'. [ 1203.890971][T20348] wlan1: Trigger new scan to find an IBSS to join [ 1205.742511][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1205.785470][T20770] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1205.795679][T20348] ------------[ cut here ]------------ [ 1205.801730][T20348] WARNING: CPU: 1 PID: 20348 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 1205.811876][T20348] Modules linked in: [ 1205.815831][T20348] CPU: 1 PID: 20348 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1205.823714][T20348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1205.834218][T20348] Workqueue: cfg80211 cfg80211_event_work [ 1205.840030][T20348] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1205.846561][T20348] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f [ 1205.866290][T20348] RSP: 0018:ffffc90005d27aa0 EFLAGS: 00010293 [ 1205.872469][T20348] RAX: ffffffff89950158 RBX: dffffc0000000000 RCX: ffff88802e659dc0 [ 1205.880574][T20348] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 1205.888620][T20348] RBP: ffffc90005d27b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 1205.896751][T20348] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff88802708b5b8 [ 1205.904820][T20348] R13: 1ffff92000ba4f5c R14: 000000000000001f R15: ffff888058134c90 [ 1205.912884][T20348] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1205.921978][T20348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1205.928618][T20348] CR2: 0000556e5d877168 CR3: 0000000030158000 CR4: 00000000003506e0 [ 1205.937001][T20348] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000008d24 [ 1205.945104][T20348] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1205.951237][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5022'. [ 1205.953362][T20348] Call Trace: [ 1205.965405][T20348] [ 1205.968379][T20348] ? mutex_lock_nested+0x10/0x10 [ 1205.973455][T20348] ? trace_rdev_return_void+0x240/0x240 [ 1205.979177][T20348] cfg80211_process_wdev_events+0x3ad/0x550 [ 1205.985290][T20348] cfg80211_process_rdev_events+0x9d/0x110 [ 1205.991195][T20348] ? process_one_work+0x7b0/0x1160 [ 1205.996371][T20348] cfg80211_event_work+0x2b/0x40 [ 1206.001411][T20348] process_one_work+0x8a2/0x1160 [ 1206.006437][T20348] ? worker_detach_from_pool+0x240/0x240 [ 1206.012211][T20348] ? _raw_spin_lock_irq+0x86/0xf0 [ 1206.017320][T20348] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1206.022457][T20348] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1206.028073][T20348] ? kthread_data+0x4b/0xc0 [ 1206.032711][T20348] worker_thread+0xaa2/0x1270 [ 1206.037782][T20348] kthread+0x29d/0x330 [ 1206.041489][T20772] netlink: 'syz.5.5023': attribute type 10 has an invalid length. [ 1206.042173][T20348] ? worker_clr_flags+0x1a0/0x1a0 [ 1206.054852][T20348] ? kthread_blkcg+0xd0/0xd0 [ 1206.058985][T20772] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5023'. [ 1206.059481][T20348] ret_from_fork+0x1f/0x30 [ 1206.073069][T20348] [ 1206.076138][T20348] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1206.083441][T20348] CPU: 1 PID: 20348 Comm: kworker/u4:20 Not tainted syzkaller #0 [ 1206.091184][T20348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1206.101259][T20348] Workqueue: cfg80211 cfg80211_event_work [ 1206.107018][T20348] Call Trace: [ 1206.110320][T20348] [ 1206.113280][T20348] dump_stack_lvl+0x188/0x24e [ 1206.117995][T20348] ? memcpy+0x3c/0x60 [ 1206.122006][T20348] ? show_regs_print_info+0x12/0x12 [ 1206.127237][T20348] ? load_image+0x400/0x400 [ 1206.131781][T20348] panic+0x2e5/0x730 [ 1206.135715][T20348] ? bpf_jit_dump+0xd0/0xd0 [ 1206.140254][T20348] ? ret_from_fork+0x1f/0x30 [ 1206.144881][T20348] __warn+0x2f8/0x4f0 [ 1206.148884][T20348] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1206.154473][T20348] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1206.160042][T20348] report_bug+0x2ba/0x4f0 [ 1206.164411][T20348] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1206.169991][T20348] handle_bug+0x3a/0x70 [ 1206.174185][T20348] exc_invalid_op+0x16/0x40 [ 1206.178718][T20348] asm_exc_invalid_op+0x16/0x20 [ 1206.183596][T20348] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1206.189770][T20348] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f [ 1206.209394][T20348] RSP: 0018:ffffc90005d27aa0 EFLAGS: 00010293 [ 1206.215485][T20348] RAX: ffffffff89950158 RBX: dffffc0000000000 RCX: ffff88802e659dc0 [ 1206.223486][T20348] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 1206.231476][T20348] RBP: ffffc90005d27b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 1206.239481][T20348] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff88802708b5b8 [ 1206.247480][T20348] R13: 1ffff92000ba4f5c R14: 000000000000001f R15: ffff888058134c90 [ 1206.255481][T20348] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1206.261058][T20348] ? mutex_lock_nested+0x10/0x10 [ 1206.266033][T20348] ? trace_rdev_return_void+0x240/0x240 [ 1206.271673][T20348] cfg80211_process_wdev_events+0x3ad/0x550 [ 1206.277652][T20348] cfg80211_process_rdev_events+0x9d/0x110 [ 1206.283512][T20348] ? process_one_work+0x7b0/0x1160 [ 1206.288673][T20348] cfg80211_event_work+0x2b/0x40 [ 1206.293659][T20348] process_one_work+0x8a2/0x1160 [ 1206.298645][T20348] ? worker_detach_from_pool+0x240/0x240 [ 1206.304321][T20348] ? _raw_spin_lock_irq+0x86/0xf0 [ 1206.309391][T20348] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1206.314453][T20348] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1206.320034][T20348] ? kthread_data+0x4b/0xc0 [ 1206.324617][T20348] worker_thread+0xaa2/0x1270 [ 1206.329365][T20348] kthread+0x29d/0x330 [ 1206.333484][T20348] ? worker_clr_flags+0x1a0/0x1a0 [ 1206.338647][T20348] ? kthread_blkcg+0xd0/0xd0 [ 1206.343279][T20348] ret_from_fork+0x1f/0x30 [ 1206.347746][T20348] [ 1206.351502][T20348] Kernel Offset: disabled [ 1206.355932][T20348] Rebooting in 86400 seconds..