last executing test programs: 2m42.356133251s ago: executing program 3 (id=4354): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="911000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) socket$kcm(0x29, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 2m41.853131227s ago: executing program 3 (id=4357): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1000}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000002000000090000000000000e03000000019a5f94fc2a987fe2baddd3c72b0000000a0000000000"], 0x0, 0x42, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71183f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfd0f, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200030001a103000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 2m41.600113761s ago: executing program 3 (id=4359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@union={0x10, 0x5, 0x0, 0x5, 0x1, 0x3, [{0xc, 0x5, 0xffff}, {0xe, 0x0, 0x7}, {0x0, 0x3, 0x9}, {0xf, 0x5, 0xad}, {0x9, 0x1, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000e00)=""/193, 0x64, 0xc1, 0x1, 0x40, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x3ff, 0x7c, &(0x7f0000000940)=""/124, 0x41000, 0x2b, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000f40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001000)={0x0, 0xc, 0x4, 0xca}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001040)=[r2, 0xffffffffffffffff, r2, r2, r1, r0], &(0x7f0000001080)=[{0x4, 0x3, 0x4, 0x2}, {0x2, 0x5, 0x1}, {0x4, 0x2, 0xf, 0x9}, {0x4, 0x5, 0x5, 0x6}, {0x5, 0x5, 0x10, 0xa}, {0x3, 0x4, 0xd, 0x5}, {0x1, 0x3, 0xc, 0x7}, {0x0, 0x3, 0x5, 0x8}], 0x10, 0x80000001}, 0x94) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd0", 0x12, 0x24000840}, 0x20040089) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xbd, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40, 0xffffffffffffffff}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0xfc, 0x0, 0x0, 0x7, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xc6, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'ipvlan0\x00', 0x20}) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 2m41.126072366s ago: executing program 3 (id=4361): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={r0, 0x0, 0x0, 0xd0, 0x0, &(0x7f0000000c80)=""/208, 0xffffffff, 0x0, 0x1000, 0x46, &(0x7f0000001e00)="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", &(0x7f0000002e00)="dfb371f2a64ec423d128a300966c139f6a72e026024b21c839a44fdd3a841a0bc0c734205e1ebbd17a8bb7d7064af51b9c473da432799373daa19ff90893f8a800629f1cda32", 0x1, 0x0, 0xf}, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003540)="1400000037000b0fd25a806c8c7394f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2m39.969082827s ago: executing program 3 (id=4366): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="911000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x2d89dd4bd82bb7f6, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) 2m39.554736059s ago: executing program 3 (id=4369): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10546, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (fail_nth: 8) 2m24.334557407s ago: executing program 32 (id=4369): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10546, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (fail_nth: 8) 3.150492943s ago: executing program 0 (id=5104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@union={0x10, 0x5, 0x0, 0x5, 0x1, 0x3, [{0xc, 0x5, 0xffff}, {0xe, 0x0, 0x7}, {0x0, 0x3, 0x9}, {0xf, 0x5, 0xad}, {0x9, 0x1, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000e00)=""/193, 0x64, 0xc1, 0x1, 0x40, 0x10000}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) sendmsg$tipc(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd0", 0x12, 0x24000840}, 0x20040089) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xbd, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40, 0xffffffffffffffff}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0xfc, 0x0, 0x0, 0x7, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xc6, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ipvlan0\x00', 0x20}) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 3.132527624s ago: executing program 1 (id=5105): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5b7}, 0x100904, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r3, 0x0, 0xc001) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x8000}, 0x114905, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r6, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r9 = socket$kcm(0x23, 0x2, 0x0) recvmsg$kcm(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) 3.053868798s ago: executing program 2 (id=5106): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5b7}, 0x100904, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r3, 0x0, 0xc001) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x8000}, 0x114905, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r6, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) 2.807725991s ago: executing program 0 (id=5107): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40}, 0x38) r1 = openat$cgroup(r0, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000697b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000008500000008000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x80044943, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0x88}, 0x0) 2.576976333s ago: executing program 2 (id=5108): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0xfffffe6c, 0x0, 0xfffffffffffffcea}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) 2.45825402s ago: executing program 4 (id=5109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={r0, 0x0, 0x95, 0xd0, &(0x7f00000001c0)="014cbedfeff416153d13297de1cb79f01a77f666d11dac7189af537ed257fc568da64d92091f5980605ce20d8af9b62b65f12ebf0911fb95445e44f348e89d219546e8fc9e93153f3ee17c7820ff103549f3c71847429bcdce7eea69c48772558431aba87727531e08b7b64bb2df6a133abf664471f7d551b0f1ff36e7c6e15f92fc72440d82f8f63900dd84e067cc835de356cfc7", &(0x7f0000000c80)=""/208, 0xffffffff, 0x0, 0xfb8, 0x46, &(0x7f0000001e00)="49c86623f1fa03c811e1a7b66656638504d45d633dcb1c14d3db9d52b2959eb9e18cf4878ee81e06d483410edda88b2d22d762b5624dc242e312debd798099daea4616437423e49eac958e9fd9474a74cf98768f2c43857ebc086f23d0fe0e30a6889980a0d45a69659b113256ebe2fac1fea061823d3865965da7be7f08c71e8b717783a58799a2248a30b5d424525400af69f9b4fd070e68cfa332c1232f6153c5da0cbf262681b0c7ccaae8d451114cd788c3cdd4c8061eefd2d4ae189b7cd85d93f98db04e3f5f83e8563d15464c53af872836eb345c2bf68710a61dc90cf5915ef7845909c75b687dba47e9e849d49a84190db53a004ccf030c92e1f6f0de7fbca86333bd3a476ca8e2a91c814b63b3f8611a39a3aac6660c85f6899bcd4959bd7695bd76d6cc9e44acdfd5eff9fa1b2eedb7d48326176b2cfd114c6e3238f3edf10197e098ad05ff5660ba6ea6f5f44b532d766ad8b8050309923f9f84f11b1efbc1b2102e48efd614510d177b83f38d3d1c484707b93dbd02c829dcddf3b575516048a2beebf526cf40c8cdebb92503f6d6b98fafb7273b673e03dcc015a16a59e42e1edc53fa80cedd6915c540b085dea1784e90c13c5034591d69535d0ab677b7e4e9061a486db39f2809b6f3cec464173921d8eeb302baad396cd4f2a04191488f6b95b80e0412095d492ffd2351680980ef4d26a05bc5a2e50b7e8fbc9622ad22f578e2c948230ba31740e3a59704eafe018bb931d56c6a1b71057c0f5b6f896d57ac627db1be65609dd58daf9e2e6e6b0e27c7cbd42c73c13581f66c5f3b70b0cabc27f4f00d65decfcc168ec3b4065f685621ca8fcf534712b86f5b183c4d303f7cba60bc6960f6c5a3584e7e5cc7ddc7e40ae64289aaf0c6f808777b1b253b4e1c8afa4b9aab5357feb4556bd89e228b86d0cab3a04fd9a2b732d069771abb573c4446c615af8978ac598c30969d69acdbe5c21e50cceb99bb4ed93125b3fce2b32cd36fa71f3c172a51fe6c39b5f0498063c107ecbc664795276a516aebb0dc45621f68d6dfff8d6d835b99f68e4f9dd3645c40c63638be9cf4d82f118f2f019f15f34b4399f4f65755177f63f775291368b49df73ca71fef9d779f25b4393d610fa1871282b067c5b50438915abdc982a3ea8d58db2e6c9266eca6228777326a8f45851c155c0a091b7a866cf1aab0178c2b0183ee5bceae4cd23726e8c399afc2c9ac38ebd493756b67bd3275f1da06e2c6e5b2f3fbc40efc16c514193eb393824e92225f9aeac013366532f0a9626588b6f75de719868ff2a2476d707eba398bd021135bbe8098ac7d2396ee85941041485059544e0d69c77787f249ad98f5cabcd7705de4671dafdb164d6efb039bf0e9d637d0fc1a0ae0c74fcc8158ae3476899047b4895201bb2a6128237b5f946d9e87a7dabbc0a30eeeb47e25ac2bf0cee42a1d2f4bfdff4d79b6d189ddc0c3dc6628a561034854620c8f3747e17b435cd5683d1f455d13bd61dbb65fd5122c14115c354bee845a65f7958021c6528291a7fc97b5255d6ab6b855afa377c5590bea0a280120da99c6b29d338ee62292e0d44e0d27069bb154e4d72225e94f53e1973517545dda0f84c7d7469fcd9d3d8494844b1390d151bd9a44337f28657b5e567a06e3941be02d7271d5e2ba658a5a79c35c3bb6e69c1eb5564dccd8d5db031b9f745a6d77f0f3c4ba71c62d014e70feb1b14f1af166b846d34ecf1092a2db0d45816024dc6f952af73c88bc178e963c83818a27facf604ba0eeee0cde7fff292ae021564184d124a17be47bb7a4da33b336305267192f3f8452e7d18711b3ed35f709c9074bd87e9f69cd6c91ec964c0d48e1782e9952ce4544279162df0463c124a366db857e0fcbc7673b1b744b7ce83b35d95c08b5ffed23cfbf9ab7ded16e32cf74c25142e5c9e4dfa416db4d562ea41df87730b1461694a9b7fa8b477ecb8bb547f53928f3098b5b634b5ef469a9b7c7bc228f14bc5932046950402711ed60798022373e64bdccabb293f4c0e4729062ee9d375ab4df637f93d2f2b55cfcb2b80a65326f56dc3f11668897a5b0548a49ede2e258b1f63062a133e41556b0a4ac1328ee7c7e5bed8c83a314f16d2fa51b4ae5f0a6fa5de7e5eb229f458d9a6b9b11b7ec71a7b8106da9456a4f203d859ea2efed02f4bb8f00788bf9ec2b8d08843ebc2f91b731ce0080c752cd8a5d93db71e6b726efcc0d65d10882d66c83de44fc830e61a29ac69cd6c5d96995aa76adf66797afdf37ef43c6cf8812d224c2f7f57d6bf66a7d13d0fbaf699b09ef9d7ecd740fcbf9b752c2a067f34175fb8fa8664cd93c407e5e7625fb5661afbbebd1135ab29b04aa69616d905f70519ef5a64c168787aa3d7af856ebe1e824a9a386d7ead9f093146043700c9edecb0d74b03c8864eaf7e76e49a226b3c7046923b854bbb9164678022861b9692fdac7a8e823fd67aa30f796fdffdfb7799aa1c4357d65e689c0b1db15f1fe026b6c741339372a126317d040a24b757c1808ead62281add5a2c8f585e842854986ee9598f21693e2b1bc6682bd02c6fcf79ddcdd2276a47575650501de9223a25f130cbdb7b8e17be11e2c55ca7c609ebe59ee0e053fcbe35a019089d37b55c5039376cccdee7a39bb515b1c6afb6baabcc60954155e0fadab7bbc65e4580c6356d000f96686194d8d6a6385bf538cfe3f4fbddd08d6009ea88284a6efd80400ba23d35f52ac98d8c167cc11a47de2dcdc588cd3ce0254cb8775ce0c39930dcab35657781848282dbeb977f4055a4c59f40d702b6c286c39aa008c9026442e6d31938f1f6aad8de4ac20d2d36574c0aed2d8928f640ab312240362fbff4d4006c966fb1b4558b5a34a468d5d8ea8e5bfe7ddfcd601d76f85c7427a50d4743e2ad915bba2e087b41d2b7e0706eb71d92afada79de85d4f9ec94a7edc823f1e6dc53a84289f04b6521f3d152928481a714108fb827089ca987763f051240ec1ca52b59c5891fbd2c3c8a1311fd3219e6a4e64018146ebcdb7d2d77e15b94f5f557d549cf8e93d18ea164dd4abce5acabd9eeb363dc6a4c3d3f3c5a78c856c7d5626bc32d02d98be561414249217cb5b16e9565998055ba4347b7f95610d87405f5ae001a83c94c6e4b3604889e08e9fca9d3a2f3d5468c57f426750c39946d4e8dcff09c1891b802a97a285e02b5219a8f1ced7e6032c56029e957893441f6d330ff70ce38db7a923abc617e5b52eb2f282b730981f22f31a6365fa7d0ce9a47c48af452ac128a3b597daeb1c4f3fa28052e423973f79c40ca63a4803067a4da0805c2826102833ca31c8b3deac802a95f76f46d78075631eee2a5ac68838384128184a2f15f33af0c9f467fa75eb56935ad162fe70bcd92ce047f98fa3fb7626c937bd80a2a019e8d3a94f99e5e5bf1ecf5b226f104374604066ade284f094e0becfa711b954cc81f5e69af4245b66594bc59d13341a46f4062d1cc1c9dd17ab5010b31666fd0f3ff991316c00b431fc2bbb85530e2d8f919c7f26a6df6144d527ad49b5a5c5fd9e55e89facb8d206c8ddd8ccea5ee9157aa2bffce4ddbba2155b2ef4dd10dca9d2290b6692eb123d2b0888c449d3a304619af8a6eb8ee60b5e27f82eb22c91b5def5fae53ad2b1af43cd2fa20bed47fc3e5590a3fd70822685a98be62a4218581ecea3677e6a42852ade19751e76cb59560a77e873d38090973c6710fb2d0bdf97c356f023a1169426bf07d5aa3c8ceb8764f1a97531c9ce0424b69b8106ebfeabe4d0c86836b19e25c470c595edf23ed3335275c1c8f44374495373b173c6a593ad559fc63aaf61e5e9aa52279b73ed33e5e637bef2e615c91ed81e3f0f06de1f95474cffe35847660f51a209f224b4e21767a6faab5009af50c8a46e80170795ef611af5019a1ee3b05ddb106a79a9e163fd75151936283d7500a8fa730d4f398ed75214a028d28b7ba4c70a28b5112551ce6c641a3b71881b0a3100de9a87b7c1e382976a1ea098984735731ae210f83656be8e71a79a8c32c6e12b276d6293d0eb80df5f9a3b18447171e946982ae6a44746ab9dc7858511eafcf2c62fef052c225d9da29673134e6d0f202e1016330dbdc40d0d5582ecc6042296d2d0427362501de8b4e44a20f8584ddafadae8a4e62ce3cee284622e71eca6e5be11cc709be7312251f39a4ae3902b0436d6e583bdf82c280e62e089fe33c9681ac674b7385de0bd9a598970aa71d68eebe833ce679ec6e0eb698f109dbcd254ba1c1d888b56f18cd05a7ed90a7327c4b20487580c8d539fe5967addb3676f946526fb9fd7fef199608f8f64030223dd04c9f145569b991be1b7d422ac3ebb2df737f50ab6832a7d185c279d43906d3f2e6e2c2436f89a5208aee3c835e20cdb49087076e0c6037750886078550fa140144cd81543ddc05e8b01af8647495e82c5f07a53e21ada21cdcae28e1de624c0a5da918a0dd30dec73adf49b1b6d2f2bc1d3ff1c2de2e8a6beac99400c78000feedf1e9804065d8e7adb69e3bcde729ff342e9b7485dab4e1167af3047e70b1da11777c6e8846b04a2e29ac6b1f49b4800067ea8daae1bcd3e92899f91c3de05f5065dd9b8d1c31287685dae273602ed6aea8418af2ff70da2898f53816352c056f8ff40db0128ca8123dec83c7e34ab9b579824adac538e3f477c6478058f0b08526ae1860fade48f8648ae4c113132e3e2e9968ca38b7c74292de3744e38bd42ac1a0c726d7dd5cd220b7855f7fefd5636041b8541fd9bec2792a42611027754e2f9d47455db1cad78c5e588fdfa244d637666eca5e260875d9d2b2b0e537747d725cc125e7ef45d3f530d985ee7036b3d82637d806a67fb24468ce240e04a1de2cc2572ec616a4e5928cc16fd93277d5162ff7394e5bd18b5f3be652ec7c9281e399dfe9ef9391596ecc12b34e9d14d902c93e946220d9b2605e923b124b96826397c56aebb1912c18f5f93b46ab0e63779c039c6ca7806c189560675010db8538f7a4582fed98204b7f130285910d213699b380c237ace1b7eb26857826b8280eb461cc9c451f12fd16a98417da9d17d09933f66bd484e18f6e31012a02d1b17b14135538476d5f349bba05692f2d95034a56373fa4e304c0b05fb8dbca0f1dd9e0098e8e1e32266f5460b95a577ae4072c1d365ff4bac2cecc8e7acdb0efe4eb8dcf275b1c4286b703959e62c4abf3cd1dc4f4ccb974084cc969df59e15619751c96c07e26316eefc8c7eef2c39528e59aceb7653b1f2bec18ddbc83db7645566b6cd43e360bec83c3af7b3b18db992621ba8d8c0b70408150ab740058fabdf2a2a66f722a5bb8fc1115642ecf68d5732676f4f4579c5bc119bc793c4498004df8dd68745454360b536248904f450920ad7c7f0d100313144ffd84b460a2859ea522f9310d66d68e220b6f3af8271f129c5f4389702f48abf632e764762a03f56c275028934a0abc72e1912f01b07af3050712c6137005546cb2ef316f9fbc8a10fa68c4e7b620f143784202957f89a023bacec77213aaedb6d4b9aa0bdca092208d1815a7ec1e4db28ea28dfbee1e7e545708df235fd564ef47792937ef6d9495439cd1298b94bfd128e8ce2e45b65a2e71b5993ce8aa99312ad7156711c4c62cdf2c692f13ab8a44a8", &(0x7f0000002e00)="dfb371f2a64ec423d128a300966c139f6a72e026024b21c839a44fdd3a841a0bc0c734205e1ebbd17a8bb7d7064af51b9c473da432799373daa19ff90893f8a800629f1cda32", 0x1, 0x0, 0xf}, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003540)="1400000037000b0fd25a806c8c7394f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2.318935817s ago: executing program 0 (id=5110): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="911000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x2d89dd4bd82bb7f6, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 2.302786478s ago: executing program 1 (id=5111): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x2a, 0x2, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0xa000000, 0x109, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53e", &(0x7f00000001c0), 0x0, 0x0, 0xd}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x4, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x3b) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='FROZEN\x00', 0x7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x1000, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r8}, 0x94) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x3, 0xfff}, 0x0, 0x400000, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.708917519s ago: executing program 2 (id=5112): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="911000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 1.643973383s ago: executing program 4 (id=5113): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5b7}, 0x100904, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r3, 0x0, 0xc001) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 1.529388149s ago: executing program 1 (id=5114): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 1.472806752s ago: executing program 0 (id=5115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@union={0x10, 0x5, 0x0, 0x5, 0x1, 0x3, [{0xc, 0x5, 0xffff}, {0xe, 0x0, 0x7}, {0x0, 0x3, 0x9}, {0xf, 0x5, 0xad}, {0x9, 0x1, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000e00)=""/193, 0x64, 0xc1, 0x1, 0x40, 0x10000}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) sendmsg$tipc(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd0", 0x12, 0x24000840}, 0x20040089) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xbd, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40, 0xffffffffffffffff}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0xfc, 0x0, 0x0, 0x7, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xc6, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ipvlan0\x00', 0x20}) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 1.428765184s ago: executing program 4 (id=5116): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5b7}, 0x100904, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r3, 0x0, 0xc001) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x8000}, 0x114905, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r6, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) 1.195099427s ago: executing program 0 (id=5117): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x2a, 0x2, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0xa000000, 0x109, 0x0, &(0x7f0000000640)="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", &(0x7f00000001c0), 0x0, 0x0, 0xd}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x4, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x3b) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='FROZEN\x00', 0x7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x1000, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r8}, 0x94) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x3, 0xfff}, 0x0, 0x400000, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.194693817s ago: executing program 2 (id=5118): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40}, 0x38) r1 = openat$cgroup(r0, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000697b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000008500000008000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x80044943, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0x88}, 0x0) 1.056636904s ago: executing program 1 (id=5119): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff, 0x100000000}, 0x8000, 0x5, 0xb, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r3) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r5, 0xffffffffffffffff, 0x7, 0x22, 0xffffffffffffffff, @void, @void, @void, @value=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x96, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r8, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex=r7, r1, 0x31, 0x2024, 0x0, @void, @void, @value=r8}, 0x20) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r3) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c0000000000000000000000080000", @ANYRES64=r0], 0x48}, 0x20028814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 939.335491ms ago: executing program 4 (id=5120): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0xfffffe6c, 0x0, 0xfffffffffffffcea}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) 859.284475ms ago: executing program 1 (id=5121): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x24, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 762.95936ms ago: executing program 1 (id=5122): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x2a, 0x2, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0xa000000, 0x109, 0x0, &(0x7f0000000640)="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", &(0x7f00000001c0), 0x0, 0x0, 0xd}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x4, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x3b) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000001c0)='FROZEN\x00', 0x7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x1000, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r8}, 0x94) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x3, 0xfff}, 0x0, 0x400000, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 754.45415ms ago: executing program 2 (id=5123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={r0, 0x0, 0x95, 0xd0, &(0x7f00000001c0)="014cbedfeff416153d13297de1cb79f01a77f666d11dac7189af537ed257fc568da64d92091f5980605ce20d8af9b62b65f12ebf0911fb95445e44f348e89d219546e8fc9e93153f3ee17c7820ff103549f3c71847429bcdce7eea69c48772558431aba87727531e08b7b64bb2df6a133abf664471f7d551b0f1ff36e7c6e15f92fc72440d82f8f63900dd84e067cc835de356cfc7", &(0x7f0000000c80)=""/208, 0xffffffff, 0x0, 0xfb8, 0x46, &(0x7f0000001e00)="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", &(0x7f0000002e00)="dfb371f2a64ec423d128a300966c139f6a72e026024b21c839a44fdd3a841a0bc0c734205e1ebbd17a8bb7d7064af51b9c473da432799373daa19ff90893f8a800629f1cda32", 0x1, 0x0, 0xf}, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003540)="1400000037000b0fd25a806c8c7394f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 694.390104ms ago: executing program 4 (id=5124): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5b7}, 0x100904, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r3, 0x0, 0xc001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 667.715715ms ago: executing program 0 (id=5125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@union={0x10, 0x5, 0x0, 0x5, 0x1, 0x3, [{0xc, 0x5, 0xffff}, {0xe, 0x0, 0x7}, {0x0, 0x3, 0x9}, {0xf, 0x5, 0xad}, {0x9, 0x1, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000e00)=""/193, 0x64, 0xc1, 0x1, 0x40, 0x10000}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) sendmsg$tipc(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd0", 0x12, 0x24000840}, 0x20040089) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xbd, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40, 0xffffffffffffffff}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0xfc, 0x0, 0x0, 0x7, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xc6, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'ipvlan0\x00', 0x20}) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 69.866557ms ago: executing program 4 (id=5126): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="911000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 0s ago: executing program 2 (id=5127): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x39, 0x0, 0x1, 0x6cb}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r4}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) kernel console output (not intermixed with test programs): address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.817584][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.853134][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.869687][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.886658][T20580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.897351][T20799] netlink: 'syz.0.4739': attribute type 21 has an invalid length. [ 969.905340][T20799] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4739'. [ 969.916555][T20799] netlink: 'syz.0.4739': attribute type 4 has an invalid length. [ 969.925007][T20799] netlink: 'syz.0.4739': attribute type 3 has an invalid length. [ 969.960319][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.988016][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.998802][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.009775][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.036041][T20580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.082664][T20798] delete_channel: no stack [ 970.090778][T20580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.101241][T20580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.111798][T20580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.121562][T20580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.391669][T11766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.415398][T11766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.490389][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.514126][T20813] netlink: 'syz.4.4743': attribute type 10 has an invalid length. [ 970.515922][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.658847][T20814] can: request_module (can-proto-3) failed. [ 971.703468][T20840] __nla_validate_parse: 2 callbacks suppressed [ 971.703651][T20840] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4746'. [ 972.314858][T20837] delete_channel: no stack [ 973.789894][T20839] netlink: 'syz.4.4747': attribute type 21 has an invalid length. [ 973.798274][T20839] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4747'. [ 973.810562][T20839] netlink: 'syz.4.4747': attribute type 4 has an invalid length. [ 973.818895][T20839] netlink: 'syz.4.4747': attribute type 3 has an invalid length. [ 973.827607][T20839] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4747'. [ 975.967625][T20856] netlink: 'syz.4.4753': attribute type 10 has an invalid length. [ 976.580332][T20875] netlink: 'syz.4.4759': attribute type 10 has an invalid length. [ 976.716800][T20878] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4758'. [ 977.103929][T20893] netlink: 'syz.2.4765': attribute type 10 has an invalid length. [ 977.127065][T20890] FAULT_INJECTION: forcing a failure. [ 977.127065][T20890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.169019][T20890] CPU: 1 PID: 20890 Comm: syz.0.4763 Not tainted syzkaller #0 [ 977.176676][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 977.186799][T20890] Call Trace: [ 977.190152][T20890] [ 977.193163][T20890] dump_stack_lvl+0x18c/0x250 [ 977.197932][T20890] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 977.204351][T20890] ? show_regs_print_info+0x20/0x20 [ 977.209730][T20890] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 977.215957][T20890] ? dump_stack+0x9/0x20 [ 977.220284][T20890] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 977.226194][T20890] should_fail_ex+0x39d/0x4d0 [ 977.231011][T20890] _copy_from_user+0x2f/0xe0 [ 977.235694][T20890] kstrtouint_from_user+0xde/0x170 [ 977.240917][T20890] ? kstrtol_from_user+0x190/0x190 [ 977.246272][T20890] proc_fail_nth_write+0x8f/0x250 [ 977.251386][T20890] ? proc_fail_nth_read+0x260/0x260 [ 977.256662][T20890] ? proc_fail_nth_read+0x260/0x260 [ 977.261910][T20890] vfs_write+0x296/0x990 [ 977.266312][T20890] ? file_end_write+0x250/0x250 [ 977.271244][T20890] ? __fget_files+0x28/0x4b0 [ 977.275874][T20890] ? __fget_files+0x28/0x4b0 [ 977.280596][T20890] ? __fget_files+0x43d/0x4b0 [ 977.285441][T20890] ? __fdget_pos+0x2a3/0x330 [ 977.290067][T20890] ? ksys_write+0x75/0x260 [ 977.294538][T20890] ksys_write+0x150/0x260 [ 977.298942][T20890] ? __ia32_sys_read+0x90/0x90 [ 977.303771][T20890] ? lockdep_hardirqs_on+0x98/0x150 [ 977.309023][T20890] do_syscall_64+0x55/0xa0 [ 977.313481][T20890] ? clear_bhb_loop+0x40/0x90 [ 977.318198][T20890] ? clear_bhb_loop+0x40/0x90 [ 977.322932][T20890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.328954][T20890] RIP: 0033:0x7f3b5d55d04e [ 977.333409][T20890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 977.353157][T20890] RSP: 002b:00007f3b5b7d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 977.361646][T20890] RAX: ffffffffffffffda RBX: 00007f3b5b7d56c0 RCX: 00007f3b5d55d04e [ 977.369759][T20890] RDX: 0000000000000001 RSI: 00007f3b5b7d50a0 RDI: 0000000000000008 [ 977.377944][T20890] RBP: 00007f3b5b7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 977.386299][T20890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.394597][T20890] R13: 00007f3b5d816128 R14: 00007f3b5d816090 R15: 00007fff088dec58 [ 977.402790][T20890] [ 978.143859][T20893] team0: Port device syz_tun added [ 978.158255][T20891] netlink: 'syz.4.4764': attribute type 10 has an invalid length. [ 978.348758][T20903] netlink: 'syz.4.4768': attribute type 10 has an invalid length. [ 978.455929][T20896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4766'. [ 979.023658][T20924] netlink: 'syz.1.4776': attribute type 10 has an invalid length. [ 979.050279][T20924] bond0: (slave bond_slave_0): Releasing backup interface [ 979.124319][T20926] netlink: 'syz.4.4777': attribute type 21 has an invalid length. [ 979.177413][T20926] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4777'. [ 979.394555][T20937] netlink: 'syz.0.4780': attribute type 10 has an invalid length. [ 979.406071][T20934] netlink: 'syz.1.4779': attribute type 6 has an invalid length. [ 979.415531][T20934] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4779'. [ 979.427901][T20934] FAULT_INJECTION: forcing a failure. [ 979.427901][T20934] name failslab, interval 1, probability 0, space 0, times 0 [ 979.453632][T20934] CPU: 1 PID: 20934 Comm: syz.1.4779 Not tainted syzkaller #0 [ 979.461188][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 979.471533][T20934] Call Trace: [ 979.474860][T20934] [ 979.477829][T20934] dump_stack_lvl+0x18c/0x250 [ 979.482553][T20934] ? show_regs_print_info+0x20/0x20 [ 979.487785][T20934] ? load_image+0x420/0x420 [ 979.492319][T20934] should_fail_ex+0x39d/0x4d0 [ 979.497022][T20934] should_failslab+0x9/0x20 [ 979.501683][T20934] slab_pre_alloc_hook+0x59/0x310 [ 979.506838][T20934] ? lockdep_hardirqs_on+0x98/0x150 [ 979.512060][T20934] ? fib_trie_unmerge+0x93/0xcd0 [ 979.517114][T20934] __kmem_cache_alloc_node+0x53/0x250 [ 979.522630][T20934] ? fib_trie_unmerge+0x93/0xcd0 [ 979.527582][T20934] kmalloc_trace+0x2a/0xe0 [ 979.532044][T20934] fib_trie_unmerge+0x93/0xcd0 [ 979.537028][T20934] ? lock_chain_count+0x20/0x20 [ 979.541903][T20934] fib_unmerge+0xc0/0x350 [ 979.546256][T20934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.552518][T20934] fib4_rule_configure+0x118/0xb00 [ 979.557652][T20934] fib_nl_newrule+0x12cf/0x1dc0 [ 979.562801][T20934] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 979.568546][T20934] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 979.574298][T20934] ? fib_rules_seq_read+0xf0/0xf0 [ 979.579342][T20934] ? mark_lock+0x94/0x320 [ 979.583695][T20934] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 979.589880][T20934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.596052][T20934] ? fib_rules_seq_read+0xf0/0xf0 [ 979.601097][T20934] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 979.606321][T20934] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 979.611474][T20934] ? fib_rules_seq_read+0xf0/0xf0 [ 979.616524][T20934] rtnetlink_rcv_msg+0x869/0xfa0 [ 979.622216][T20934] ? rtnetlink_bind+0x80/0x80 [ 979.626933][T20934] ? perf_trace_preemptirq_template+0x269/0x330 [ 979.633390][T20934] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 979.639445][T20934] ? lock_chain_count+0x20/0x20 [ 979.644495][T20934] ? __local_bh_enable_ip+0x13a/0x1c0 [ 979.649901][T20934] ? lockdep_hardirqs_on+0x98/0x150 [ 979.655129][T20934] ? __local_bh_enable_ip+0x13a/0x1c0 [ 979.660531][T20934] ? _local_bh_enable+0xa0/0xa0 [ 979.665401][T20934] ? __dev_queue_xmit+0x265/0x3660 [ 979.670530][T20934] ? __dev_queue_xmit+0x265/0x3660 [ 979.675681][T20934] ? __dev_queue_xmit+0x1b2c/0x3660 [ 979.680934][T20934] ? __dev_queue_xmit+0x265/0x3660 [ 979.686071][T20934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.692249][T20934] ? ref_tracker_free+0x690/0x840 [ 979.697322][T20934] netlink_rcv_skb+0x241/0x4d0 [ 979.702115][T20934] ? rtnetlink_bind+0x80/0x80 [ 979.706807][T20934] ? netlink_ack+0x1180/0x1180 [ 979.711773][T20934] ? __lock_acquire+0x7d40/0x7d40 [ 979.716906][T20934] ? netlink_deliver_tap+0x2e/0x1b0 [ 979.722131][T20934] netlink_unicast+0x751/0x8d0 [ 979.727009][T20934] netlink_sendmsg+0x8d0/0xbf0 [ 979.731978][T20934] ? netlink_getsockopt+0x590/0x590 [ 979.737290][T20934] ? aa_sock_msg_perm+0x94/0x150 [ 979.742249][T20934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 979.747642][T20934] ? security_socket_sendmsg+0x80/0xa0 [ 979.753392][T20934] ? netlink_getsockopt+0x590/0x590 [ 979.758792][T20934] ____sys_sendmsg+0x5ba/0x960 [ 979.763736][T20934] ? __asan_memset+0x22/0x40 [ 979.768348][T20934] ? __sys_sendmsg_sock+0x30/0x30 [ 979.773383][T20934] ? __import_iovec+0x5f2/0x850 [ 979.778269][T20934] ? import_iovec+0x73/0xa0 [ 979.782882][T20934] ___sys_sendmsg+0x2a6/0x360 [ 979.787585][T20934] ? __sys_sendmsg+0x2a0/0x2a0 [ 979.792407][T20934] __se_sys_sendmsg+0x1c2/0x2b0 [ 979.797280][T20934] ? __x64_sys_sendmsg+0x80/0x80 [ 979.802246][T20934] ? syscall_enter_from_user_mode+0x2e/0x80 [ 979.808184][T20934] do_syscall_64+0x55/0xa0 [ 979.812750][T20934] ? clear_bhb_loop+0x40/0x90 [ 979.817455][T20934] ? clear_bhb_loop+0x40/0x90 [ 979.822188][T20934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.828203][T20934] RIP: 0033:0x7f3fbe99c819 [ 979.832722][T20934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.852702][T20934] RSP: 002b:00007f3fbf7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.861239][T20934] RAX: ffffffffffffffda RBX: 00007f3fbec15fa0 RCX: 00007f3fbe99c819 [ 979.869414][T20934] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 979.877412][T20934] RBP: 00007f3fbf7bd090 R08: 0000000000000000 R09: 0000000000000000 [ 979.885483][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.893720][T20934] R13: 00007f3fbec16038 R14: 00007f3fbec15fa0 R15: 00007ffd7d2b7d68 [ 979.901726][T20934] [ 979.975610][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4782'. [ 980.570524][T20959] netlink: 'syz.1.4788': attribute type 10 has an invalid length. [ 981.053109][T20971] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4795'. [ 981.129032][T20973] validate_nla: 1 callbacks suppressed [ 981.129053][T20973] netlink: 'syz.0.4793': attribute type 2 has an invalid length. [ 981.167329][T20973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4793'. [ 981.190494][T20979] netlink: 'syz.1.4797': attribute type 10 has an invalid length. [ 981.218743][T20973] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4793'. [ 981.542702][T20991] netlink: 'syz.1.4801': attribute type 10 has an invalid length. [ 981.575041][T20991] hsr_slave_0: left promiscuous mode [ 981.581868][T20991] hsr_slave_1: left promiscuous mode [ 981.619201][T20997] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4803'. [ 981.671521][T20993] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4802'. [ 981.830449][T21002] netlink: 'syz.2.4805': attribute type 6 has an invalid length. [ 981.926706][T21002] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4805'. [ 982.005438][T21010] syzkaller0: entered promiscuous mode [ 982.011141][T21010] syzkaller0: entered allmulticast mode [ 982.114740][T21012] netlink: 'syz.4.4808': attribute type 10 has an invalid length. [ 982.405505][T21015] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4809'. [ 985.091334][T21026] IPv6: NLM_F_CREATE should be specified when creating new route [ 985.099485][T21026] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4820'. [ 985.108989][T21028] netlink: 'syz.4.4812': attribute type 10 has an invalid length. [ 985.153224][T21028] team0: Port device syz_tun added [ 985.242485][T21037] netlink: 'syz.1.4815': attribute type 10 has an invalid length. [ 985.251276][T21037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.341296][T21043] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4818'. [ 985.347733][T21037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.374690][T21037] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 985.385785][T21041] netlink: 'syz.2.4817': attribute type 10 has an invalid length. [ 985.779319][T21057] netlink: 'syz.2.4823': attribute type 11 has an invalid length. [ 985.787881][T21057] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4823'. [ 985.804836][T21057] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 985.821166][T21057] CPU: 0 PID: 21057 Comm: syz.2.4823 Not tainted syzkaller #0 [ 985.828839][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 985.839062][T21057] Call Trace: [ 985.842412][T21057] [ 985.845410][T21057] dump_stack_lvl+0x18c/0x250 [ 985.850275][T21057] ? show_regs_print_info+0x20/0x20 [ 985.855584][T21057] ? load_image+0x420/0x420 [ 985.860244][T21057] sysfs_warn_dup+0x8e/0xa0 [ 985.864827][T21057] sysfs_do_create_link_sd+0xc0/0x110 [ 985.870374][T21057] device_add_class_symlinks+0x1cf/0x240 [ 985.876190][T21057] device_add+0x507/0xc20 [ 985.880686][T21057] wiphy_register+0x1dad/0x2ae0 [ 985.885842][T21057] ? cfg80211_event_work+0x40/0x40 [ 985.891169][T21057] ? minstrel_ht_alloc+0x88a/0x990 [ 985.896397][T21057] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 985.902638][T21057] ieee80211_register_hw+0x3464/0x4250 [ 985.908286][T21057] ? ieee80211_tasklet_handler+0x20/0x20 [ 985.914135][T21057] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 985.920087][T21057] ? __debug_object_init+0xec/0x450 [ 985.925436][T21057] ? __asan_memset+0x22/0x40 [ 985.930279][T21057] ? __hrtimer_init+0x186/0x270 [ 985.935290][T21057] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 985.941116][T21057] ? mac80211_hwsim_free+0x220/0x220 [ 985.946452][T21057] ? rcu_is_watching+0x15/0xb0 [ 985.951289][T21057] ? kstrndup+0xbd/0x140 [ 985.955716][T21057] hwsim_new_radio_nl+0xdc9/0x1a90 [ 985.960928][T21057] ? __nla_validate+0x50/0x50 [ 985.965719][T21057] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 985.972132][T21057] ? __nla_parse+0x40/0x50 [ 985.976599][T21057] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 985.982991][T21057] genl_family_rcv_msg_doit+0x211/0x310 [ 985.988668][T21057] ? end_current_label_crit_section+0x170/0x170 [ 985.994987][T21057] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 986.000945][T21057] ? bpf_lsm_capable+0x9/0x10 [ 986.005756][T21057] ? security_capable+0x89/0xb0 [ 986.010781][T21057] genl_rcv_msg+0x619/0x7a0 [ 986.015437][T21057] ? genl_bind+0x360/0x360 [ 986.019896][T21057] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 986.026272][T21057] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 986.033086][T21057] ? ref_tracker_free+0x690/0x840 [ 986.038189][T21057] netlink_rcv_skb+0x241/0x4d0 [ 986.043773][T21057] ? genl_bind+0x360/0x360 [ 986.048265][T21057] ? netlink_ack+0x1180/0x1180 [ 986.053135][T21057] ? __lock_acquire+0x7d40/0x7d40 [ 986.058254][T21057] ? down_read+0x1ac/0x2e0 [ 986.062725][T21057] genl_rcv+0x28/0x40 [ 986.066749][T21057] netlink_unicast+0x751/0x8d0 [ 986.071748][T21057] netlink_sendmsg+0x8d0/0xbf0 [ 986.076600][T21057] ? netlink_getsockopt+0x590/0x590 [ 986.081915][T21057] ? aa_sock_msg_perm+0x94/0x150 [ 986.086923][T21057] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 986.092247][T21057] ? security_socket_sendmsg+0x80/0xa0 [ 986.097916][T21057] ? netlink_getsockopt+0x590/0x590 [ 986.103262][T21057] ____sys_sendmsg+0x5ba/0x960 [ 986.108099][T21057] ? __asan_memset+0x22/0x40 [ 986.112739][T21057] ? __sys_sendmsg_sock+0x30/0x30 [ 986.117895][T21057] ? __import_iovec+0x5f2/0x850 [ 986.122992][T21057] ? import_iovec+0x73/0xa0 [ 986.127726][T21057] ___sys_sendmsg+0x2a6/0x360 [ 986.132465][T21057] ? __sys_sendmsg+0x2a0/0x2a0 [ 986.137337][T21057] ? __destroy_inode+0x486/0x630 [ 986.142487][T21057] __se_sys_sendmsg+0x1c2/0x2b0 [ 986.147501][T21057] ? __x64_sys_sendmsg+0x80/0x80 [ 986.152527][T21057] ? lockdep_hardirqs_on+0x98/0x150 [ 986.157872][T21057] do_syscall_64+0x55/0xa0 [ 986.162420][T21057] ? clear_bhb_loop+0x40/0x90 [ 986.167315][T21057] ? clear_bhb_loop+0x40/0x90 [ 986.172214][T21057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.178320][T21057] RIP: 0033:0x7fabc739c819 [ 986.182780][T21057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.203034][T21057] RSP: 002b:00007fabc825f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.211642][T21057] RAX: ffffffffffffffda RBX: 00007fabc7615fa0 RCX: 00007fabc739c819 [ 986.219878][T21057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 986.228421][T21057] RBP: 00007fabc7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 986.236518][T21057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.244542][T21057] R13: 00007fabc7616038 R14: 00007fabc7615fa0 R15: 00007fffeebdfc88 [ 986.252612][T21057] [ 986.354461][T21062] netlink: 'syz.4.4824': attribute type 21 has an invalid length. [ 986.413638][T21062] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4824'. [ 986.446386][T21062] netlink: 'syz.4.4824': attribute type 4 has an invalid length. [ 986.465190][T21062] netlink: 'syz.4.4824': attribute type 3 has an invalid length. [ 986.476194][T21062] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4824'. [ 986.495622][T21059] delete_channel: no stack [ 986.622961][T21066] netlink: 'syz.0.4825': attribute type 21 has an invalid length. [ 986.657486][T21066] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4825'. [ 986.666799][T21066] netlink: 'syz.0.4825': attribute type 4 has an invalid length. [ 986.676204][T21066] netlink: 'syz.0.4825': attribute type 3 has an invalid length. [ 986.688906][T21066] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4825'. [ 986.793369][T21064] delete_channel: no stack [ 986.872237][T21075] netlink: 'syz.4.4829': attribute type 10 has an invalid length. [ 986.933760][T21077] netlink: 'syz.2.4830': attribute type 6 has an invalid length. [ 986.952979][T21077] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4830'. [ 987.001539][T21077] FAULT_INJECTION: forcing a failure. [ 987.001539][T21077] name failslab, interval 1, probability 0, space 0, times 0 [ 987.021858][T21077] CPU: 0 PID: 21077 Comm: syz.2.4830 Not tainted syzkaller #0 [ 987.029575][T21077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 987.039936][T21077] Call Trace: [ 987.043389][T21077] [ 987.046376][T21077] dump_stack_lvl+0x18c/0x250 [ 987.051129][T21077] ? show_regs_print_info+0x20/0x20 [ 987.056649][T21077] ? load_image+0x420/0x420 [ 987.061218][T21077] should_fail_ex+0x39d/0x4d0 [ 987.065961][T21077] should_failslab+0x9/0x20 [ 987.070610][T21077] slab_pre_alloc_hook+0x59/0x310 [ 987.075698][T21077] kmem_cache_alloc_node+0x60/0x320 [ 987.081117][T21077] ? __alloc_skb+0x103/0x2c0 [ 987.085856][T21077] __alloc_skb+0x103/0x2c0 [ 987.090522][T21077] ? fib4_rule_fill+0x4b0/0x4b0 [ 987.095514][T21077] notify_rule_change+0xab/0x210 [ 987.100708][T21077] fib_nl_newrule+0x1b7e/0x1dc0 [ 987.105719][T21077] ? fib_rules_seq_read+0xf0/0xf0 [ 987.110894][T21077] ? rcu_is_watching+0x15/0xb0 [ 987.115894][T21077] ? trace_contention_end+0x39/0xe0 [ 987.121659][T21077] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 987.126991][T21077] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 987.132337][T21077] ? fib_rules_seq_read+0xf0/0xf0 [ 987.137515][T21077] rtnetlink_rcv_msg+0x869/0xfa0 [ 987.142513][T21077] ? rtnetlink_bind+0x80/0x80 [ 987.147327][T21077] ? perf_tp_event+0x13d7/0x1520 [ 987.152322][T21077] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 987.158307][T21077] ? __dev_queue_xmit+0x265/0x3660 [ 987.163477][T21077] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 987.169608][T21077] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 987.175480][T21077] netlink_rcv_skb+0x241/0x4d0 [ 987.180303][T21077] ? rtnetlink_bind+0x80/0x80 [ 987.185118][T21077] ? netlink_ack+0x1180/0x1180 [ 987.190035][T21077] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 987.196254][T21077] netlink_unicast+0x751/0x8d0 [ 987.201082][T21077] netlink_sendmsg+0x8d0/0xbf0 [ 987.205978][T21077] ? lockdep_hardirqs_on+0x98/0x150 [ 987.211315][T21077] ? netlink_getsockopt+0x590/0x590 [ 987.216665][T21077] ? security_socket_sendmsg+0x5a/0xa0 [ 987.222255][T21077] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 987.227589][T21077] ? security_socket_sendmsg+0x80/0xa0 [ 987.233101][T21077] ? netlink_getsockopt+0x590/0x590 [ 987.238522][T21077] ____sys_sendmsg+0x5ba/0x960 [ 987.243321][T21077] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 987.249535][T21077] ? __asan_memset+0x22/0x40 [ 987.254285][T21077] ? __sys_sendmsg_sock+0x30/0x30 [ 987.259452][T21077] ? __import_iovec+0x5f2/0x850 [ 987.264524][T21077] ? import_iovec+0x73/0xa0 [ 987.269074][T21077] ___sys_sendmsg+0x2a6/0x360 [ 987.273883][T21077] ? __sys_sendmsg+0x2a0/0x2a0 [ 987.278887][T21077] __se_sys_sendmsg+0x1c2/0x2b0 [ 987.283896][T21077] ? __x64_sys_sendmsg+0x80/0x80 [ 987.288909][T21077] do_syscall_64+0x55/0xa0 [ 987.293363][T21077] ? clear_bhb_loop+0x40/0x90 [ 987.298084][T21077] ? clear_bhb_loop+0x40/0x90 [ 987.302815][T21077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.308848][T21077] RIP: 0033:0x7fabc739c819 [ 987.313394][T21077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.333310][T21077] RSP: 002b:00007fabc825f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.341946][T21077] RAX: ffffffffffffffda RBX: 00007fabc7615fa0 RCX: 00007fabc739c819 [ 987.349966][T21077] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 987.358075][T21077] RBP: 00007fabc825f090 R08: 0000000000000000 R09: 0000000000000000 [ 987.366080][T21077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.374655][T21077] R13: 00007fabc7616038 R14: 00007fabc7615fa0 R15: 00007fffeebdfc88 [ 987.383041][T21077] [ 987.932559][T21098] netlink: 'syz.0.4836': attribute type 11 has an invalid length. [ 987.976058][T21098] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.4836'. [ 988.024014][T21098] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 988.058063][T21098] CPU: 0 PID: 21098 Comm: syz.0.4836 Not tainted syzkaller #0 [ 988.065832][T21098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 988.075968][T21098] Call Trace: [ 988.079318][T21098] [ 988.082326][T21098] dump_stack_lvl+0x18c/0x250 [ 988.087099][T21098] ? show_regs_print_info+0x20/0x20 [ 988.092404][T21098] ? load_image+0x420/0x420 [ 988.097060][T21098] sysfs_warn_dup+0x8e/0xa0 [ 988.101660][T21098] sysfs_do_create_link_sd+0xc0/0x110 [ 988.107135][T21098] device_add_class_symlinks+0x1cf/0x240 [ 988.112968][T21098] device_add+0x507/0xc20 [ 988.117697][T21098] wiphy_register+0x1dad/0x2ae0 [ 988.122720][T21098] ? cfg80211_event_work+0x40/0x40 [ 988.128277][T21098] ? minstrel_ht_alloc+0x88a/0x990 [ 988.133748][T21098] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 988.139920][T21098] ieee80211_register_hw+0x3464/0x4250 [ 988.145732][T21098] ? ieee80211_tasklet_handler+0x20/0x20 [ 988.151522][T21098] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 988.157712][T21098] ? __debug_object_init+0xec/0x450 [ 988.163015][T21098] ? __asan_memset+0x22/0x40 [ 988.167691][T21098] ? __hrtimer_init+0x186/0x270 [ 988.172648][T21098] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 988.178642][T21098] ? mac80211_hwsim_free+0x220/0x220 [ 988.184089][T21098] ? rcu_is_watching+0x15/0xb0 [ 988.189024][T21098] ? kstrndup+0xbd/0x140 [ 988.193394][T21098] hwsim_new_radio_nl+0xdc9/0x1a90 [ 988.198623][T21098] ? __nla_validate+0x50/0x50 [ 988.203429][T21098] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 988.209884][T21098] ? __nla_parse+0x40/0x50 [ 988.214396][T21098] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 988.220928][T21098] genl_family_rcv_msg_doit+0x211/0x310 [ 988.226549][T21098] ? end_current_label_crit_section+0x170/0x170 [ 988.232895][T21098] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 988.239090][T21098] ? bpf_lsm_capable+0x9/0x10 [ 988.243845][T21098] ? security_capable+0x89/0xb0 [ 988.248909][T21098] genl_rcv_msg+0x619/0x7a0 [ 988.253623][T21098] ? genl_bind+0x360/0x360 [ 988.258394][T21098] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 988.265087][T21098] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 988.271864][T21098] ? ref_tracker_free+0x690/0x840 [ 988.277019][T21098] netlink_rcv_skb+0x241/0x4d0 [ 988.281950][T21098] ? genl_bind+0x360/0x360 [ 988.286427][T21098] ? netlink_ack+0x1180/0x1180 [ 988.291339][T21098] ? __lock_acquire+0x7d40/0x7d40 [ 988.296478][T21098] ? down_read+0x1ac/0x2e0 [ 988.300987][T21098] genl_rcv+0x28/0x40 [ 988.305138][T21098] netlink_unicast+0x751/0x8d0 [ 988.310048][T21098] netlink_sendmsg+0x8d0/0xbf0 [ 988.314937][T21098] ? netlink_getsockopt+0x590/0x590 [ 988.320321][T21098] ? aa_sock_msg_perm+0x94/0x150 [ 988.325529][T21098] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 988.330896][T21098] ? security_socket_sendmsg+0x80/0xa0 [ 988.336513][T21098] ? netlink_getsockopt+0x590/0x590 [ 988.342071][T21098] ____sys_sendmsg+0x5ba/0x960 [ 988.346944][T21098] ? __asan_memset+0x22/0x40 [ 988.351654][T21098] ? __sys_sendmsg_sock+0x30/0x30 [ 988.356927][T21098] ? __import_iovec+0x5f2/0x850 [ 988.361899][T21098] ? import_iovec+0x73/0xa0 [ 988.366528][T21098] ___sys_sendmsg+0x2a6/0x360 [ 988.371329][T21098] ? __sys_sendmsg+0x2a0/0x2a0 [ 988.376397][T21098] __se_sys_sendmsg+0x1c2/0x2b0 [ 988.381453][T21098] ? __x64_sys_sendmsg+0x80/0x80 [ 988.386596][T21098] ? lockdep_hardirqs_on+0x98/0x150 [ 988.391924][T21098] do_syscall_64+0x55/0xa0 [ 988.396514][T21098] ? clear_bhb_loop+0x40/0x90 [ 988.401376][T21098] ? clear_bhb_loop+0x40/0x90 [ 988.406241][T21098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.412316][T21098] RIP: 0033:0x7f3b5d59c819 [ 988.416987][T21098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.437204][T21098] RSP: 002b:00007f3b5b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.445720][T21098] RAX: ffffffffffffffda RBX: 00007f3b5d815fa0 RCX: 00007f3b5d59c819 [ 988.453944][T21098] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 988.462778][T21098] RBP: 00007f3b5d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 988.470834][T21098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.478980][T21098] R13: 00007f3b5d816038 R14: 00007f3b5d815fa0 R15: 00007fff088dec58 [ 988.487100][T21098] [ 988.916692][T21112] netlink: 'syz.1.4841': attribute type 10 has an invalid length. [ 989.110878][T21117] netlink: 'syz.1.4843': attribute type 21 has an invalid length. [ 989.120033][T21117] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4843'. [ 989.130999][T21117] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4843'. [ 989.210224][T21116] delete_channel: no stack [ 989.514557][T21126] netlink: 'syz.4.4847': attribute type 11 has an invalid length. [ 989.525159][T21126] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.4847'. [ 989.574011][T21126] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 989.600519][T21126] CPU: 0 PID: 21126 Comm: syz.4.4847 Not tainted syzkaller #0 [ 989.608127][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 989.618356][T21126] Call Trace: [ 989.621712][T21126] [ 989.624725][T21126] dump_stack_lvl+0x18c/0x250 [ 989.629684][T21126] ? show_regs_print_info+0x20/0x20 [ 989.634974][T21126] ? load_image+0x420/0x420 [ 989.639580][T21126] sysfs_warn_dup+0x8e/0xa0 [ 989.644153][T21126] sysfs_do_create_link_sd+0xc0/0x110 [ 989.649708][T21126] device_add_class_symlinks+0x1cf/0x240 [ 989.655417][T21126] device_add+0x507/0xc20 [ 989.659817][T21126] wiphy_register+0x1dad/0x2ae0 [ 989.664983][T21126] ? cfg80211_event_work+0x40/0x40 [ 989.670946][T21126] ? minstrel_ht_alloc+0x88a/0x990 [ 989.676227][T21126] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 989.682525][T21126] ieee80211_register_hw+0x3464/0x4250 [ 989.688112][T21126] ? ieee80211_tasklet_handler+0x20/0x20 [ 989.693870][T21126] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 989.699825][T21126] ? __debug_object_init+0xec/0x450 [ 989.705167][T21126] ? __asan_memset+0x22/0x40 [ 989.709813][T21126] ? __hrtimer_init+0x186/0x270 [ 989.714725][T21126] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 989.720562][T21126] ? mac80211_hwsim_free+0x220/0x220 [ 989.725980][T21126] ? rcu_is_watching+0x15/0xb0 [ 989.730807][T21126] ? kstrndup+0xbd/0x140 [ 989.735121][T21126] hwsim_new_radio_nl+0xdc9/0x1a90 [ 989.740293][T21126] ? __nla_validate+0x50/0x50 [ 989.745166][T21126] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 989.751617][T21126] ? __nla_parse+0x40/0x50 [ 989.756087][T21126] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 989.762602][T21126] genl_family_rcv_msg_doit+0x211/0x310 [ 989.768225][T21126] ? end_current_label_crit_section+0x170/0x170 [ 989.774600][T21126] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 989.780655][T21126] ? bpf_lsm_capable+0x9/0x10 [ 989.785373][T21126] ? security_capable+0x89/0xb0 [ 989.790287][T21126] genl_rcv_msg+0x619/0x7a0 [ 989.794890][T21126] ? genl_bind+0x360/0x360 [ 989.799464][T21126] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 989.805863][T21126] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 989.812703][T21126] ? ref_tracker_free+0x690/0x840 [ 989.817835][T21126] netlink_rcv_skb+0x241/0x4d0 [ 989.822663][T21126] ? genl_bind+0x360/0x360 [ 989.827315][T21126] ? netlink_ack+0x1180/0x1180 [ 989.832266][T21126] ? __lock_acquire+0x7d40/0x7d40 [ 989.837371][T21126] ? down_read+0x1ac/0x2e0 [ 989.841927][T21126] genl_rcv+0x28/0x40 [ 989.845952][T21126] netlink_unicast+0x751/0x8d0 [ 989.850861][T21126] netlink_sendmsg+0x8d0/0xbf0 [ 989.855742][T21126] ? netlink_getsockopt+0x590/0x590 [ 989.861154][T21126] ? aa_sock_msg_perm+0x94/0x150 [ 989.866234][T21126] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 989.871564][T21126] ? security_socket_sendmsg+0x80/0xa0 [ 989.877235][T21126] ? netlink_getsockopt+0x590/0x590 [ 989.882663][T21126] ____sys_sendmsg+0x5ba/0x960 [ 989.887672][T21126] ? __asan_memset+0x22/0x40 [ 989.892313][T21126] ? __sys_sendmsg_sock+0x30/0x30 [ 989.897379][T21126] ? __import_iovec+0x5f2/0x850 [ 989.902389][T21126] ? import_iovec+0x73/0xa0 [ 989.906941][T21126] ___sys_sendmsg+0x2a6/0x360 [ 989.911686][T21126] ? __sys_sendmsg+0x2a0/0x2a0 [ 989.916825][T21126] __se_sys_sendmsg+0x1c2/0x2b0 [ 989.921865][T21126] ? __x64_sys_sendmsg+0x80/0x80 [ 989.927111][T21126] ? lockdep_hardirqs_on+0x98/0x150 [ 989.932520][T21126] do_syscall_64+0x55/0xa0 [ 989.937017][T21126] ? clear_bhb_loop+0x40/0x90 [ 989.941737][T21126] ? clear_bhb_loop+0x40/0x90 [ 989.946532][T21126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 989.952492][T21126] RIP: 0033:0x7f484b59c819 [ 989.957005][T21126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.977015][T21126] RSP: 002b:00007f484c497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.985495][T21126] RAX: ffffffffffffffda RBX: 00007f484b815fa0 RCX: 00007f484b59c819 [ 989.993591][T21126] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 990.001705][T21126] RBP: 00007f484b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 990.009890][T21126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.018162][T21126] R13: 00007f484b816038 R14: 00007f484b815fa0 R15: 00007ffe968364f8 [ 990.026217][T21126] [ 990.935092][T21142] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4854'. [ 990.957533][T21142] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4854'. [ 991.093940][T21141] delete_channel: no stack [ 991.258917][T21149] FAULT_INJECTION: forcing a failure. [ 991.258917][T21149] name failslab, interval 1, probability 0, space 0, times 0 [ 991.274068][T21149] CPU: 1 PID: 21149 Comm: syz.1.4855 Not tainted syzkaller #0 [ 991.281682][T21149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 991.291879][T21149] Call Trace: [ 991.295201][T21149] [ 991.298260][T21149] dump_stack_lvl+0x18c/0x250 [ 991.302997][T21149] ? show_regs_print_info+0x20/0x20 [ 991.308262][T21149] ? load_image+0x420/0x420 [ 991.312805][T21149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 991.319162][T21149] should_fail_ex+0x39d/0x4d0 [ 991.323960][T21149] should_failslab+0x9/0x20 [ 991.328641][T21149] slab_pre_alloc_hook+0x59/0x310 [ 991.333713][T21149] kmem_cache_alloc+0x5a/0x2d0 [ 991.338671][T21149] ? dst_alloc+0x105/0x170 [ 991.343283][T21149] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 991.348947][T21149] dst_alloc+0x105/0x170 [ 991.353224][T21149] ip6_pol_route+0x94f/0x1230 [ 991.357922][T21149] ? ip6_pol_route+0x171/0x1230 [ 991.362790][T21149] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 991.369041][T21149] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 991.375045][T21149] ? lock_chain_count+0x20/0x20 [ 991.379930][T21149] fib6_rule_lookup+0x20c/0x570 [ 991.384900][T21149] ? skb_header_pointer+0x120/0x120 [ 991.390121][T21149] ? fib6_lookup+0x2d0/0x2d0 [ 991.394734][T21149] ? lock_is_held_type+0x13e/0x190 [ 991.399873][T21149] ? dev_get_by_index_rcu+0xf4/0x110 [ 991.405178][T21149] ip6_route_output_flags+0x364/0x5d0 [ 991.410617][T21149] ? ip6_route_output_flags+0x2e/0x5d0 [ 991.416530][T21149] ip6_dst_lookup_tail+0x1ae/0x1530 [ 991.421755][T21149] ? sk_dst_check+0x25/0x430 [ 991.426369][T21149] ? ip6_dst_lookup+0x60/0x60 [ 991.431063][T21149] ? sk_dst_check+0x25/0x430 [ 991.435765][T21149] ? sk_dst_check+0x25/0x430 [ 991.440492][T21149] ? sk_dst_check+0x2f3/0x430 [ 991.445193][T21149] ip6_sk_dst_lookup_flow+0x731/0x970 [ 991.450598][T21149] ? security_sk_classify_flow+0x6a/0x90 [ 991.456254][T21149] ping_v6_sendmsg+0xbfd/0x11f0 [ 991.461131][T21149] ? ping_v6_pre_connect+0x30/0x30 [ 991.466262][T21149] ? irqentry_enter+0x37/0x50 [ 991.470972][T21149] ? lock_chain_count+0x20/0x20 [ 991.475849][T21149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 991.482031][T21149] ? inet_send_prepare+0x260/0x260 [ 991.487345][T21149] ? ping_v6_pre_connect+0x30/0x30 [ 991.492479][T21149] ? inet_send_prepare+0x260/0x260 [ 991.497787][T21149] ____sys_sendmsg+0x5ba/0x960 [ 991.502570][T21149] ? __lock_acquire+0x7d40/0x7d40 [ 991.507624][T21149] ? __asan_memset+0x22/0x40 [ 991.512230][T21149] ? __sys_sendmsg_sock+0x30/0x30 [ 991.517485][T21149] ? __import_iovec+0x5f2/0x850 [ 991.522704][T21149] ? import_iovec+0x73/0xa0 [ 991.527233][T21149] ___sys_sendmsg+0x2a6/0x360 [ 991.532028][T21149] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 991.537772][T21149] ? __sys_sendmsg+0x2a0/0x2a0 [ 991.542592][T21149] __se_sys_sendmsg+0x1c2/0x2b0 [ 991.547479][T21149] ? __x64_sys_sendmsg+0x80/0x80 [ 991.552447][T21149] ? lockdep_hardirqs_on+0x98/0x150 [ 991.557678][T21149] do_syscall_64+0x55/0xa0 [ 991.562113][T21149] ? clear_bhb_loop+0x40/0x90 [ 991.566914][T21149] ? clear_bhb_loop+0x40/0x90 [ 991.572656][T21149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.578696][T21149] RIP: 0033:0x7f3fbe99c819 [ 991.583130][T21149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.603470][T21149] RSP: 002b:00007f3fbf79c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.611918][T21149] RAX: ffffffffffffffda RBX: 00007f3fbec16090 RCX: 00007f3fbe99c819 [ 991.619994][T21149] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000009 [ 991.628011][T21149] RBP: 00007f3fbf79c090 R08: 0000000000000000 R09: 0000000000000000 [ 991.636006][T21149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.644079][T21149] R13: 00007f3fbec16128 R14: 00007f3fbec16090 R15: 00007ffd7d2b7d68 [ 991.652085][T21149] [ 991.881802][T21153] netlink: 'syz.0.4857': attribute type 11 has an invalid length. [ 991.893183][T21153] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.4857'. [ 991.943003][T21153] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 991.967989][T21153] CPU: 0 PID: 21153 Comm: syz.0.4857 Not tainted syzkaller #0 [ 991.975660][T21153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 991.985883][T21153] Call Trace: [ 991.989412][T21153] [ 991.992413][T21153] dump_stack_lvl+0x18c/0x250 [ 991.997301][T21153] ? show_regs_print_info+0x20/0x20 [ 992.002606][T21153] ? load_image+0x420/0x420 [ 992.007869][T21153] sysfs_warn_dup+0x8e/0xa0 [ 992.013158][T21153] sysfs_do_create_link_sd+0xc0/0x110 [ 992.018678][T21153] device_add_class_symlinks+0x1cf/0x240 [ 992.024574][T21153] device_add+0x507/0xc20 [ 992.029019][T21153] wiphy_register+0x1dad/0x2ae0 [ 992.034294][T21153] ? cfg80211_event_work+0x40/0x40 [ 992.039482][T21153] ? minstrel_ht_alloc+0x88a/0x990 [ 992.044744][T21153] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 992.051006][T21153] ieee80211_register_hw+0x3464/0x4250 [ 992.056655][T21153] ? ieee80211_tasklet_handler+0x20/0x20 [ 992.062366][T21153] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 992.068457][T21153] ? __debug_object_init+0xec/0x450 [ 992.073946][T21153] ? __asan_memset+0x22/0x40 [ 992.078638][T21153] ? __hrtimer_init+0x186/0x270 [ 992.083599][T21153] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 992.089499][T21153] ? mac80211_hwsim_free+0x220/0x220 [ 992.094884][T21153] ? rcu_is_watching+0x15/0xb0 [ 992.099910][T21153] ? kstrndup+0xbd/0x140 [ 992.104732][T21153] hwsim_new_radio_nl+0xdc9/0x1a90 [ 992.110059][T21153] ? __nla_validate+0x50/0x50 [ 992.114963][T21153] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 992.121691][T21153] ? __nla_parse+0x40/0x50 [ 992.126388][T21153] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 992.132843][T21153] genl_family_rcv_msg_doit+0x211/0x310 [ 992.138480][T21153] ? end_current_label_crit_section+0x170/0x170 [ 992.144831][T21153] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 992.150850][T21153] ? bpf_lsm_capable+0x9/0x10 [ 992.155716][T21153] ? security_capable+0x89/0xb0 [ 992.160791][T21153] genl_rcv_msg+0x619/0x7a0 [ 992.165403][T21153] ? genl_bind+0x360/0x360 [ 992.169897][T21153] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 992.176324][T21153] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 992.183009][T21153] ? ref_tracker_free+0x690/0x840 [ 992.188184][T21153] netlink_rcv_skb+0x241/0x4d0 [ 992.193053][T21153] ? genl_bind+0x360/0x360 [ 992.197578][T21153] ? netlink_ack+0x1180/0x1180 [ 992.202607][T21153] ? __lock_acquire+0x7d40/0x7d40 [ 992.207774][T21153] ? down_read+0x1ac/0x2e0 [ 992.212299][T21153] genl_rcv+0x28/0x40 [ 992.216367][T21153] netlink_unicast+0x751/0x8d0 [ 992.221272][T21153] netlink_sendmsg+0x8d0/0xbf0 [ 992.226179][T21153] ? netlink_getsockopt+0x590/0x590 [ 992.231491][T21153] ? aa_sock_msg_perm+0x94/0x150 [ 992.236547][T21153] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 992.241934][T21153] ? security_socket_sendmsg+0x80/0xa0 [ 992.247489][T21153] ? netlink_getsockopt+0x590/0x590 [ 992.252896][T21153] ____sys_sendmsg+0x5ba/0x960 [ 992.257871][T21153] ? __asan_memset+0x22/0x40 [ 992.262571][T21153] ? __sys_sendmsg_sock+0x30/0x30 [ 992.267933][T21153] ? __import_iovec+0x5f2/0x850 [ 992.272926][T21153] ? import_iovec+0x73/0xa0 [ 992.277540][T21153] ___sys_sendmsg+0x2a6/0x360 [ 992.282601][T21153] ? __sys_sendmsg+0x2a0/0x2a0 [ 992.287773][T21153] __se_sys_sendmsg+0x1c2/0x2b0 [ 992.292703][T21153] ? __x64_sys_sendmsg+0x80/0x80 [ 992.297869][T21153] ? lockdep_hardirqs_on+0x98/0x150 [ 992.303251][T21153] do_syscall_64+0x55/0xa0 [ 992.307836][T21153] ? clear_bhb_loop+0x40/0x90 [ 992.312621][T21153] ? clear_bhb_loop+0x40/0x90 [ 992.317473][T21153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.323450][T21153] RIP: 0033:0x7f3b5d59c819 [ 992.328026][T21153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.348154][T21153] RSP: 002b:00007f3b5b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.356672][T21153] RAX: ffffffffffffffda RBX: 00007f3b5d815fa0 RCX: 00007f3b5d59c819 [ 992.364733][T21153] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 992.372786][T21153] RBP: 00007f3b5d632c91 R08: 0000000000000000 R09: 0000000000000000 [ 992.380933][T21153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.389115][T21153] R13: 00007f3b5d816038 R14: 00007f3b5d815fa0 R15: 00007fff088dec58 [ 992.397334][T21153] [ 992.450264][T21159] netlink: 'syz.2.4860': attribute type 11 has an invalid length. [ 992.470054][T21159] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4860'. [ 992.536611][T21159] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 992.576318][T21159] CPU: 1 PID: 21159 Comm: syz.2.4860 Not tainted syzkaller #0 [ 992.584167][T21159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 992.594462][T21159] Call Trace: [ 992.597826][T21159] [ 992.600824][T21159] dump_stack_lvl+0x18c/0x250 [ 992.605612][T21159] ? show_regs_print_info+0x20/0x20 [ 992.610925][T21159] ? load_image+0x420/0x420 [ 992.615609][T21159] sysfs_warn_dup+0x8e/0xa0 [ 992.620211][T21159] sysfs_do_create_link_sd+0xc0/0x110 [ 992.625697][T21159] device_add_class_symlinks+0x1cf/0x240 [ 992.631429][T21159] device_add+0x507/0xc20 [ 992.635945][T21159] wiphy_register+0x1dad/0x2ae0 [ 992.641056][T21159] ? cfg80211_event_work+0x40/0x40 [ 992.646320][T21159] ? minstrel_ht_alloc+0x88a/0x990 [ 992.651567][T21159] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 992.657833][T21159] ieee80211_register_hw+0x3464/0x4250 [ 992.663464][T21159] ? ieee80211_tasklet_handler+0x20/0x20 [ 992.669179][T21159] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 992.675254][T21159] ? __debug_object_init+0xec/0x450 [ 992.680556][T21159] ? __asan_memset+0x22/0x40 [ 992.685319][T21159] ? __hrtimer_init+0x186/0x270 [ 992.690349][T21159] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 992.696238][T21159] ? mac80211_hwsim_free+0x220/0x220 [ 992.701689][T21159] ? rcu_is_watching+0x15/0xb0 [ 992.706635][T21159] ? kstrndup+0xbd/0x140 [ 992.710995][T21159] hwsim_new_radio_nl+0xdc9/0x1a90 [ 992.716391][T21159] ? __nla_validate+0x50/0x50 [ 992.721328][T21159] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 992.727783][T21159] ? __nla_parse+0x40/0x50 [ 992.732288][T21159] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 992.739436][T21159] genl_family_rcv_msg_doit+0x211/0x310 [ 992.745089][T21159] ? end_current_label_crit_section+0x170/0x170 [ 992.751462][T21159] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 992.757588][T21159] ? bpf_lsm_capable+0x9/0x10 [ 992.762462][T21159] ? security_capable+0x89/0xb0 [ 992.767439][T21159] genl_rcv_msg+0x619/0x7a0 [ 992.772077][T21159] ? genl_bind+0x360/0x360 [ 992.776782][T21159] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 992.783215][T21159] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 992.790053][T21159] netlink_rcv_skb+0x241/0x4d0 [ 992.795431][T21159] ? genl_bind+0x360/0x360 [ 992.799964][T21159] ? netlink_ack+0x1180/0x1180 [ 992.804898][T21159] ? __lock_acquire+0x7d40/0x7d40 [ 992.810147][T21159] ? down_read+0x1ac/0x2e0 [ 992.814660][T21159] genl_rcv+0x28/0x40 [ 992.818724][T21159] netlink_unicast+0x751/0x8d0 [ 992.823624][T21159] netlink_sendmsg+0x8d0/0xbf0 [ 992.828613][T21159] ? netlink_getsockopt+0x590/0x590 [ 992.834011][T21159] ? aa_sock_msg_perm+0x94/0x150 [ 992.839233][T21159] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 992.844787][T21159] ? security_socket_sendmsg+0x80/0xa0 [ 992.850684][T21159] ? netlink_getsockopt+0x590/0x590 [ 992.856006][T21159] ____sys_sendmsg+0x5ba/0x960 [ 992.861053][T21159] ? __asan_memset+0x22/0x40 [ 992.865824][T21159] ? __sys_sendmsg_sock+0x30/0x30 [ 992.870926][T21159] ? __import_iovec+0x5f2/0x850 [ 992.876074][T21159] ? import_iovec+0x73/0xa0 [ 992.880849][T21159] ___sys_sendmsg+0x2a6/0x360 [ 992.885872][T21159] ? __sys_sendmsg+0x2a0/0x2a0 [ 992.891330][T21159] __se_sys_sendmsg+0x1c2/0x2b0 [ 992.896474][T21159] ? __x64_sys_sendmsg+0x80/0x80 [ 992.901805][T21159] ? lockdep_hardirqs_on+0x98/0x150 [ 992.907755][T21159] do_syscall_64+0x55/0xa0 [ 992.912253][T21159] ? clear_bhb_loop+0x40/0x90 [ 992.917017][T21159] ? clear_bhb_loop+0x40/0x90 [ 992.921877][T21159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.928295][T21159] RIP: 0033:0x7fabc739c819 [ 992.932826][T21159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.952668][T21159] RSP: 002b:00007fabc823e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.961275][T21159] RAX: ffffffffffffffda RBX: 00007fabc7616090 RCX: 00007fabc739c819 [ 992.969517][T21159] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 992.977764][T21159] RBP: 00007fabc7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 992.985828][T21159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.993874][T21159] R13: 00007fabc7616128 R14: 00007fabc7616090 R15: 00007fffeebdfc88 [ 993.001987][T21159] [ 993.447730][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.454141][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.673177][T21180] syzkaller0: entered promiscuous mode [ 993.683289][T21180] syzkaller0: entered allmulticast mode [ 993.691496][T21178] validate_nla: 8 callbacks suppressed [ 993.691509][T21178] netlink: 'syz.1.4865': attribute type 10 has an invalid length. [ 993.818260][T21184] netlink: 'syz.4.4867': attribute type 10 has an invalid length. [ 993.826519][T21184] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4867'. [ 993.977686][T21190] netlink: 'syz.1.4871': attribute type 11 has an invalid length. [ 993.991317][T21190] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.4871'. [ 994.036898][T21190] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 994.123518][T21192] netlink: 'syz.2.4872': attribute type 11 has an invalid length. [ 994.145989][T21192] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4872'. [ 994.186596][T21192] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 994.197714][T21192] CPU: 1 PID: 21192 Comm: syz.2.4872 Not tainted syzkaller #0 [ 994.205376][T21192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 994.215515][T21192] Call Trace: [ 994.218960][T21192] [ 994.221962][T21192] dump_stack_lvl+0x18c/0x250 [ 994.226829][T21192] ? show_regs_print_info+0x20/0x20 [ 994.232118][T21192] ? load_image+0x420/0x420 [ 994.236859][T21192] sysfs_warn_dup+0x8e/0xa0 [ 994.241445][T21192] sysfs_do_create_link_sd+0xc0/0x110 [ 994.247002][T21192] device_add_class_symlinks+0x1cf/0x240 [ 994.252734][T21192] device_add+0x507/0xc20 [ 994.257168][T21192] wiphy_register+0x1dad/0x2ae0 [ 994.262177][T21192] ? cfg80211_event_work+0x40/0x40 [ 994.267359][T21192] ? minstrel_ht_alloc+0x88a/0x990 [ 994.272695][T21192] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 994.278874][T21192] ieee80211_register_hw+0x3464/0x4250 [ 994.284521][T21192] ? ieee80211_tasklet_handler+0x20/0x20 [ 994.290413][T21192] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 994.296518][T21192] ? __debug_object_init+0xec/0x450 [ 994.301854][T21192] ? __asan_memset+0x22/0x40 [ 994.306880][T21192] ? __hrtimer_init+0x186/0x270 [ 994.311960][T21192] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 994.317860][T21192] ? mac80211_hwsim_free+0x220/0x220 [ 994.323228][T21192] ? rcu_is_watching+0x15/0xb0 [ 994.328090][T21192] ? kstrndup+0xbd/0x140 [ 994.332640][T21192] hwsim_new_radio_nl+0xdc9/0x1a90 [ 994.338384][T21192] ? __nla_validate+0x50/0x50 [ 994.343380][T21192] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 994.350032][T21192] ? __nla_parse+0x40/0x50 [ 994.354813][T21192] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 994.361259][T21192] genl_family_rcv_msg_doit+0x211/0x310 [ 994.366872][T21192] ? end_current_label_crit_section+0x170/0x170 [ 994.373154][T21192] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 994.379230][T21192] ? bpf_lsm_capable+0x9/0x10 [ 994.383994][T21192] ? security_capable+0x89/0xb0 [ 994.389140][T21192] genl_rcv_msg+0x619/0x7a0 [ 994.393845][T21192] ? genl_bind+0x360/0x360 [ 994.398336][T21192] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 994.404864][T21192] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 994.412004][T21192] netlink_rcv_skb+0x241/0x4d0 [ 994.417182][T21192] ? genl_bind+0x360/0x360 [ 994.421792][T21192] ? netlink_ack+0x1180/0x1180 [ 994.426715][T21192] ? __lock_acquire+0x7d40/0x7d40 [ 994.431868][T21192] ? down_read+0x1ac/0x2e0 [ 994.436652][T21192] genl_rcv+0x28/0x40 [ 994.440754][T21192] netlink_unicast+0x751/0x8d0 [ 994.445693][T21192] netlink_sendmsg+0x8d0/0xbf0 [ 994.450682][T21192] ? netlink_getsockopt+0x590/0x590 [ 994.455986][T21192] ? aa_sock_msg_perm+0x94/0x150 [ 994.461134][T21192] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 994.466595][T21192] ? security_socket_sendmsg+0x80/0xa0 [ 994.472151][T21192] ? netlink_getsockopt+0x590/0x590 [ 994.477502][T21192] ____sys_sendmsg+0x5ba/0x960 [ 994.482381][T21192] ? __asan_memset+0x22/0x40 [ 994.487052][T21192] ? __sys_sendmsg_sock+0x30/0x30 [ 994.492227][T21192] ? __import_iovec+0x5f2/0x850 [ 994.497191][T21192] ? import_iovec+0x73/0xa0 [ 994.501901][T21192] ___sys_sendmsg+0x2a6/0x360 [ 994.506678][T21192] ? __sys_sendmsg+0x2a0/0x2a0 [ 994.511836][T21192] __se_sys_sendmsg+0x1c2/0x2b0 [ 994.517038][T21192] ? __x64_sys_sendmsg+0x80/0x80 [ 994.522327][T21192] ? lockdep_hardirqs_on+0x98/0x150 [ 994.527675][T21192] do_syscall_64+0x55/0xa0 [ 994.532165][T21192] ? clear_bhb_loop+0x40/0x90 [ 994.536925][T21192] ? clear_bhb_loop+0x40/0x90 [ 994.541705][T21192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 994.547683][T21192] RIP: 0033:0x7fabc739c819 [ 994.552186][T21192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.571972][T21192] RSP: 002b:00007fabc825f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.580497][T21192] RAX: ffffffffffffffda RBX: 00007fabc7615fa0 RCX: 00007fabc739c819 [ 994.589001][T21192] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 994.597148][T21192] RBP: 00007fabc7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 994.605298][T21192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.613533][T21192] R13: 00007fabc7616038 R14: 00007fabc7615fa0 R15: 00007fffeebdfc88 [ 994.622101][T21192] [ 995.412733][T19538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 995.438644][T19538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 995.463117][T19538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 995.482357][T19538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 995.492701][T19538] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 995.501523][T19538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 997.619259][T13063] Bluetooth: hci2: command tx timeout [ 998.031166][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.052870][T21213] netlink: 'syz.4.4879': attribute type 10 has an invalid length. [ 998.138629][T21217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4880'. [ 998.141566][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.171938][T21217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4880'. [ 998.192765][T21215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4880'. [ 998.242725][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.256371][T21216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4880'. [ 998.323784][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.410761][T21200] chnl_net:caif_netlink_parms(): no params data found [ 999.557642][T21200] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.584346][T21200] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.612249][T21200] bridge_slave_0: entered allmulticast mode [ 999.628977][T21200] bridge_slave_0: entered promiscuous mode [ 999.675957][T21200] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.679127][T13063] Bluetooth: hci2: command tx timeout [ 999.720319][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.764182][T21244] netlink: 'syz.2.4882': attribute type 11 has an invalid length. [ 999.781355][T21244] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4882'. [ 999.800827][T21200] bridge_slave_1: entered allmulticast mode [ 999.822707][T21200] bridge_slave_1: entered promiscuous mode [ 1000.130246][T21244] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1000.166280][T21244] CPU: 0 PID: 21244 Comm: syz.2.4882 Not tainted syzkaller #0 [ 1000.174132][T21244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1000.184394][T21244] Call Trace: [ 1000.187754][T21244] [ 1000.190761][T21244] dump_stack_lvl+0x18c/0x250 [ 1000.195563][T21244] ? show_regs_print_info+0x20/0x20 [ 1000.200954][T21244] ? load_image+0x420/0x420 [ 1000.205794][T21244] sysfs_warn_dup+0x8e/0xa0 [ 1000.210391][T21244] sysfs_do_create_link_sd+0xc0/0x110 [ 1000.215872][T21244] device_add_class_symlinks+0x1cf/0x240 [ 1000.221791][T21244] device_add+0x507/0xc20 [ 1000.226237][T21244] wiphy_register+0x1dad/0x2ae0 [ 1000.231420][T21244] ? cfg80211_event_work+0x40/0x40 [ 1000.236612][T21244] ? minstrel_ht_alloc+0x88a/0x990 [ 1000.241862][T21244] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1000.248054][T21244] ieee80211_register_hw+0x3464/0x4250 [ 1000.253816][T21244] ? ieee80211_tasklet_handler+0x20/0x20 [ 1000.259582][T21244] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1000.265664][T21244] ? __debug_object_init+0xec/0x450 [ 1000.270928][T21244] ? __asan_memset+0x22/0x40 [ 1000.275664][T21244] ? __hrtimer_init+0x186/0x270 [ 1000.280591][T21244] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1000.286472][T21244] ? mac80211_hwsim_free+0x220/0x220 [ 1000.291797][T21244] ? rcu_is_watching+0x15/0xb0 [ 1000.296783][T21244] ? kstrndup+0xbd/0x140 [ 1000.301201][T21244] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1000.306380][T21244] ? __nla_validate+0x50/0x50 [ 1000.311759][T21244] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1000.318175][T21244] ? __nla_parse+0x40/0x50 [ 1000.322656][T21244] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1000.329054][T21244] genl_family_rcv_msg_doit+0x211/0x310 [ 1000.334838][T21244] ? end_current_label_crit_section+0x170/0x170 [ 1000.341142][T21244] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1000.347149][T21244] ? bpf_lsm_capable+0x9/0x10 [ 1000.351880][T21244] ? security_capable+0x89/0xb0 [ 1000.356807][T21244] genl_rcv_msg+0x619/0x7a0 [ 1000.361382][T21244] ? genl_bind+0x360/0x360 [ 1000.365847][T21244] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1000.372416][T21244] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1000.379059][T21244] ? ref_tracker_free+0x690/0x840 [ 1000.384164][T21244] netlink_rcv_skb+0x241/0x4d0 [ 1000.389069][T21244] ? genl_bind+0x360/0x360 [ 1000.393548][T21244] ? netlink_ack+0x1180/0x1180 [ 1000.398507][T21244] ? __lock_acquire+0x7d40/0x7d40 [ 1000.403610][T21244] ? down_read+0x1ac/0x2e0 [ 1000.408178][T21244] genl_rcv+0x28/0x40 [ 1000.412201][T21244] netlink_unicast+0x751/0x8d0 [ 1000.417063][T21244] netlink_sendmsg+0x8d0/0xbf0 [ 1000.421928][T21244] ? netlink_getsockopt+0x590/0x590 [ 1000.427204][T21244] ? aa_sock_msg_perm+0x94/0x150 [ 1000.432633][T21244] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1000.438066][T21244] ? security_socket_sendmsg+0x80/0xa0 [ 1000.443661][T21244] ? netlink_getsockopt+0x590/0x590 [ 1000.449092][T21244] ____sys_sendmsg+0x5ba/0x960 [ 1000.454183][T21244] ? __asan_memset+0x22/0x40 [ 1000.458906][T21244] ? __sys_sendmsg_sock+0x30/0x30 [ 1000.463966][T21244] ? __import_iovec+0x5f2/0x850 [ 1000.468898][T21244] ? import_iovec+0x73/0xa0 [ 1000.473538][T21244] ___sys_sendmsg+0x2a6/0x360 [ 1000.478280][T21244] ? __sys_sendmsg+0x2a0/0x2a0 [ 1000.483348][T21244] __se_sys_sendmsg+0x1c2/0x2b0 [ 1000.488317][T21244] ? __x64_sys_sendmsg+0x80/0x80 [ 1000.493353][T21244] ? lockdep_hardirqs_on+0x98/0x150 [ 1000.498802][T21244] do_syscall_64+0x55/0xa0 [ 1000.503608][T21244] ? clear_bhb_loop+0x40/0x90 [ 1000.508336][T21244] ? clear_bhb_loop+0x40/0x90 [ 1000.513068][T21244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.519007][T21244] RIP: 0033:0x7fabc739c819 [ 1000.523584][T21244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.543677][T21244] RSP: 002b:00007fabc825f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1000.552576][T21244] RAX: ffffffffffffffda RBX: 00007fabc7615fa0 RCX: 00007fabc739c819 [ 1000.560763][T21244] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1000.568771][T21244] RBP: 00007fabc7432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1000.576793][T21244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.584886][T21244] R13: 00007fabc7616038 R14: 00007fabc7615fa0 R15: 00007fffeebdfc88 [ 1000.592955][T21244] [ 1000.844239][T21200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.891851][T21249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.915257][T21249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.934663][T21249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.957565][T21249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.128156][T21200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.226040][T21260] netlink: 'syz.2.4885': attribute type 21 has an invalid length. [ 1001.236458][T21260] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4885'. [ 1001.284865][T21260] netlink: 'syz.2.4885': attribute type 4 has an invalid length. [ 1001.293425][T21260] netlink: 'syz.2.4885': attribute type 3 has an invalid length. [ 1001.302379][T21260] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4885'. [ 1001.322220][T21200] team0: Port device team_slave_0 added [ 1001.341239][T21200] team0: Port device team_slave_1 added [ 1001.345333][T21259] delete_channel: no stack [ 1001.459686][T21200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.466908][T21200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.497193][T21200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.511401][T21200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.522453][T21200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.552037][T21200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.728840][T21200] hsr_slave_0: entered promiscuous mode [ 1001.744624][T21200] hsr_slave_1: entered promiscuous mode [ 1001.759527][T13063] Bluetooth: hci2: command tx timeout [ 1002.641166][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.650528][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.660108][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.669617][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.679294][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.689166][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.698667][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.708282][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.718021][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1002.727837][T21272] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1003.837537][T13063] Bluetooth: hci2: command tx timeout [ 1004.461284][ T66] vlan0: left allmulticast mode [ 1004.466314][ T66] veth0_vlan: left allmulticast mode [ 1004.508881][ T66] vlan0: left promiscuous mode [ 1004.514269][ T66] À: port 1(vlan0) entered disabled state [ 1004.768932][ T66] veth1_macvtap: left allmulticast mode [ 1004.778420][ T66] veth1_macvtap: left promiscuous mode [ 1004.797908][ T66] veth0_macvtap: left promiscuous mode [ 1004.812779][ T66] veth1_vlan: left promiscuous mode [ 1004.826645][T21321] FAULT_INJECTION: forcing a failure. [ 1004.826645][T21321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.835177][ T66] veth0_vlan: left promiscuous mode [ 1004.841785][T21321] CPU: 0 PID: 21321 Comm: syz.2.4903 Not tainted syzkaller #0 [ 1004.853553][T21321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1004.863919][T21321] Call Trace: [ 1004.867344][T21321] [ 1004.870474][T21321] dump_stack_lvl+0x18c/0x250 [ 1004.875212][T21321] ? show_regs_print_info+0x20/0x20 [ 1004.880462][T21321] ? load_image+0x420/0x420 [ 1004.885016][T21321] ? __might_fault+0xaa/0x120 [ 1004.889736][T21321] ? __lock_acquire+0x7d40/0x7d40 [ 1004.894796][T21321] ? __might_fault+0x9c/0x120 [ 1004.899530][T21321] should_fail_ex+0x39d/0x4d0 [ 1004.904261][T21321] _copy_from_user+0x2f/0xe0 [ 1004.908884][T21321] __sys_bpf+0x23e/0x890 [ 1004.913274][T21321] ? bpf_link_show_fdinfo+0x390/0x390 [ 1004.918860][T21321] ? lock_chain_count+0x20/0x20 [ 1004.923950][T21321] __x64_sys_bpf+0x7c/0x90 [ 1004.928461][T21321] do_syscall_64+0x55/0xa0 [ 1004.932896][T21321] ? clear_bhb_loop+0x40/0x90 [ 1004.937590][T21321] ? clear_bhb_loop+0x40/0x90 [ 1004.942289][T21321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.948202][T21321] RIP: 0033:0x7fabc739c819 [ 1004.952749][T21321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.972557][T21321] RSP: 002b:00007fabc825f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1004.980996][T21321] RAX: ffffffffffffffda RBX: 00007fabc7615fa0 RCX: 00007fabc739c819 [ 1004.989072][T21321] RDX: 0000000000000048 RSI: 0000200000002c00 RDI: 000000000000000a [ 1004.997061][T21321] RBP: 00007fabc825f090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.005173][T21321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.013447][T21321] R13: 00007fabc7616038 R14: 00007fabc7615fa0 R15: 00007fffeebdfc88 [ 1005.021457][T21321] [ 1006.131544][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.142289][ T66] bond_slave_1 (unregistering): left promiscuous mode [ 1006.490627][ T66] bond0 (unregistering): Released all slaves [ 1006.593404][T21327] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4905'. [ 1006.666322][T21341] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.4908'. [ 1007.352637][T21200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1007.520724][T21200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1008.281798][T21355] netlink: 'syz.1.4912': attribute type 29 has an invalid length. [ 1008.623381][T21200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1008.642989][T21355] netlink: 'syz.1.4912': attribute type 29 has an invalid length. [ 1008.674998][T21200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1008.915420][T21365] syzkaller0: entered promiscuous mode [ 1008.932320][T21365] syzkaller0: entered allmulticast mode [ 1009.020432][T21200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.070682][T21200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.095618][T20854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.102932][T20854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.142808][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.150062][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.187031][T21365] netlink: 'syz.2.4913': attribute type 10 has an invalid length. [ 1009.207187][T21365] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1009.261168][T21380] netlink: 'syz.1.4917': attribute type 21 has an invalid length. [ 1009.273716][T21380] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4917'. [ 1009.290614][T21380] netlink: 'syz.1.4917': attribute type 4 has an invalid length. [ 1009.301323][T21380] netlink: 'syz.1.4917': attribute type 3 has an invalid length. [ 1009.318011][T21380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4917'. [ 1009.344069][T21379] delete_channel: no stack [ 1009.493019][T21388] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1012.213954][T21396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.223896][T21396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.401981][T21200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.616888][T21200] veth0_vlan: entered promiscuous mode [ 1012.696164][T21200] veth1_vlan: entered promiscuous mode [ 1012.772237][T21200] veth0_macvtap: entered promiscuous mode [ 1012.798955][T21415] netlink: 'syz.4.4924': attribute type 10 has an invalid length. [ 1012.823089][T21200] veth1_macvtap: entered promiscuous mode [ 1012.915976][T21200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1012.940492][T21200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.975277][T21200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.072477][T21423] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4926'. [ 1013.101628][T21200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.146676][T21200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.179898][T21200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.245015][T21200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.276472][T21200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.302988][T21200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.342187][T21200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.600562][T11773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.630337][T11773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.755635][T11769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.795198][T11769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.926575][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4929'. [ 1015.152168][T21462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.187694][T21462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.253225][T21462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.298141][T21462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.610824][T21471] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4936'. [ 1015.652847][T21474] netlink: 'syz.1.4937': attribute type 3 has an invalid length. [ 1015.683487][T21474] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4937'. [ 1015.950318][T19538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1015.970096][T19538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1015.979424][T19538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1015.988293][T19538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1015.996392][T19538] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1016.006134][T19538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1016.633369][T13517] team0: Port device syz_tun removed [ 1016.869737][T20854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.113249][T20854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.490280][T20854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.820831][T20854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.941034][T21514] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4946'. [ 1017.982846][T21476] chnl_net:caif_netlink_parms(): no params data found [ 1018.087690][T21511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4945'. [ 1018.380280][T21476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.402400][T21476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.415358][T21476] bridge_slave_0: entered allmulticast mode [ 1018.433516][T21476] bridge_slave_0: entered promiscuous mode [ 1018.492526][T21476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.522505][T21476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.533494][T21476] bridge_slave_1: entered allmulticast mode [ 1018.543090][T21476] bridge_slave_1: entered promiscuous mode [ 1018.638710][T19538] Bluetooth: hci4: command tx timeout [ 1018.979757][T21476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.022730][T21476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.414613][T21476] team0: Port device team_slave_0 added [ 1019.441951][T21476] team0: Port device team_slave_1 added [ 1019.756051][T21553] netlink: 'syz.0.4955': attribute type 10 has an invalid length. [ 1019.773972][T21553] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4955'. [ 1019.818456][T21551] syzkaller0: entered promiscuous mode [ 1019.824284][T21551] syzkaller0: entered allmulticast mode [ 1019.832586][T21556] netlink: 'syz.1.4956': attribute type 10 has an invalid length. [ 1019.845216][T21476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.869242][T21476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.913251][T21476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.939843][T21561] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4957'. [ 1020.080320][T21476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.090399][T21476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.121784][T21476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.376419][T21578] netlink: 'syz.4.4960': attribute type 11 has an invalid length. [ 1020.387282][T21578] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.4960'. [ 1020.718106][T19538] Bluetooth: hci4: command tx timeout [ 1022.473624][T21578] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1022.487392][T21578] CPU: 0 PID: 21578 Comm: syz.4.4960 Not tainted syzkaller #0 [ 1022.494969][T21578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1022.505253][T21578] Call Trace: [ 1022.508572][T21578] [ 1022.511591][T21578] dump_stack_lvl+0x18c/0x250 [ 1022.516459][T21578] ? show_regs_print_info+0x20/0x20 [ 1022.521781][T21578] ? load_image+0x420/0x420 [ 1022.526495][T21578] sysfs_warn_dup+0x8e/0xa0 [ 1022.531035][T21578] sysfs_do_create_link_sd+0xc0/0x110 [ 1022.536570][T21578] device_add_class_symlinks+0x1cf/0x240 [ 1022.542288][T21578] device_add+0x507/0xc20 [ 1022.546689][T21578] wiphy_register+0x1dad/0x2ae0 [ 1022.551716][T21578] ? cfg80211_event_work+0x40/0x40 [ 1022.556894][T21578] ? minstrel_ht_alloc+0x88a/0x990 [ 1022.562079][T21578] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1022.568513][T21578] ieee80211_register_hw+0x3464/0x4250 [ 1022.574065][T21578] ? ieee80211_tasklet_handler+0x20/0x20 [ 1022.579871][T21578] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1022.586100][T21578] ? __debug_object_init+0xec/0x450 [ 1022.591378][T21578] ? __asan_memset+0x22/0x40 [ 1022.596125][T21578] ? __hrtimer_init+0x186/0x270 [ 1022.601017][T21578] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1022.606799][T21578] ? mac80211_hwsim_free+0x220/0x220 [ 1022.612134][T21578] ? rcu_is_watching+0x15/0xb0 [ 1022.617197][T21578] ? kstrndup+0xbd/0x140 [ 1022.621661][T21578] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1022.626973][T21578] ? __nla_validate+0x50/0x50 [ 1022.631679][T21578] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1022.638041][T21578] ? __nla_parse+0x40/0x50 [ 1022.642476][T21578] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1022.648836][T21578] genl_family_rcv_msg_doit+0x211/0x310 [ 1022.654402][T21578] ? end_current_label_crit_section+0x170/0x170 [ 1022.660787][T21578] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1022.666892][T21578] ? bpf_lsm_capable+0x9/0x10 [ 1022.671687][T21578] ? security_capable+0x89/0xb0 [ 1022.676659][T21578] genl_rcv_msg+0x619/0x7a0 [ 1022.681307][T21578] ? genl_bind+0x360/0x360 [ 1022.685986][T21578] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1022.692591][T21578] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1022.699201][T21578] ? ref_tracker_free+0x690/0x840 [ 1022.704345][T21578] netlink_rcv_skb+0x241/0x4d0 [ 1022.709135][T21578] ? genl_bind+0x360/0x360 [ 1022.713570][T21578] ? netlink_ack+0x1180/0x1180 [ 1022.718465][T21578] ? __lock_acquire+0x7d40/0x7d40 [ 1022.723518][T21578] ? down_read+0x1ac/0x2e0 [ 1022.728138][T21578] genl_rcv+0x28/0x40 [ 1022.732132][T21578] netlink_unicast+0x751/0x8d0 [ 1022.736929][T21578] netlink_sendmsg+0x8d0/0xbf0 [ 1022.741799][T21578] ? netlink_getsockopt+0x590/0x590 [ 1022.747202][T21578] ? aa_sock_msg_perm+0x94/0x150 [ 1022.752195][T21578] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1022.757544][T21578] ? security_socket_sendmsg+0x80/0xa0 [ 1022.763039][T21578] ? netlink_getsockopt+0x590/0x590 [ 1022.768270][T21578] ____sys_sendmsg+0x5ba/0x960 [ 1022.773092][T21578] ? __asan_memset+0x22/0x40 [ 1022.777899][T21578] ? __sys_sendmsg_sock+0x30/0x30 [ 1022.782946][T21578] ? __import_iovec+0x5f2/0x850 [ 1022.787827][T21578] ? import_iovec+0x73/0xa0 [ 1022.792440][T21578] ___sys_sendmsg+0x2a6/0x360 [ 1022.797162][T21578] ? __sys_sendmsg+0x2a0/0x2a0 [ 1022.802008][T21578] __se_sys_sendmsg+0x1c2/0x2b0 [ 1022.807059][T21578] ? __x64_sys_sendmsg+0x80/0x80 [ 1022.812213][T21578] ? lockdep_hardirqs_on+0x98/0x150 [ 1022.817554][T21578] do_syscall_64+0x55/0xa0 [ 1022.822120][T21578] ? clear_bhb_loop+0x40/0x90 [ 1022.827197][T21578] ? clear_bhb_loop+0x40/0x90 [ 1022.831920][T21578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.837841][T21578] RIP: 0033:0x7f484b59c819 [ 1022.842277][T21578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.862083][T21578] RSP: 002b:00007f484c497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1022.870605][T21578] RAX: ffffffffffffffda RBX: 00007f484b815fa0 RCX: 00007f484b59c819 [ 1022.878767][T21578] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1022.886931][T21578] RBP: 00007f484b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1022.895004][T21578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.903081][T21578] R13: 00007f484b816038 R14: 00007f484b815fa0 R15: 00007ffe968364f8 [ 1022.911097][T21578] [ 1022.926136][T19538] Bluetooth: hci4: command tx timeout [ 1022.994833][T21476] hsr_slave_0: entered promiscuous mode [ 1023.008572][T21476] hsr_slave_1: entered promiscuous mode [ 1023.023155][T21476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.041305][T21476] Cannot create hsr debugfs directory [ 1023.684623][T21592] netlink: 'syz.4.4965': attribute type 10 has an invalid length. [ 1023.803702][T20854] vlan0: left allmulticast mode [ 1023.815731][T20854] veth0_vlan: left allmulticast mode [ 1023.836336][T20854] vlan0: left promiscuous mode [ 1023.871575][T20854] À: port 1(vlan0) entered disabled state [ 1023.908047][T20854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.926670][T20854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.949427][T20854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.958697][T20854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.968754][T20854] batman_adv: batadv0: Interface deactivated: macvlan1 [ 1023.975768][T20854] batman_adv: batadv0: Removing interface: macvlan1 [ 1023.992616][T20854] batadv0: left allmulticast mode [ 1024.000011][T20854] batadv0: left promiscuous mode [ 1024.005425][T20854] bridge0: port 5(batadv0) entered disabled state [ 1024.021499][T20854] bond0: left allmulticast mode [ 1024.026703][T20854] bond_slave_1: left allmulticast mode [ 1024.033288][T20854] bridge0: port 4(bond0) entered disabled state [ 1024.044485][T20854] bridge_slave_1: left allmulticast mode [ 1024.051572][T20854] bridge_slave_1: left promiscuous mode [ 1024.058006][T20854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.070456][T20854] bridge_slave_0: left allmulticast mode [ 1024.076352][T20854] bridge_slave_0: left promiscuous mode [ 1024.088745][T20854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.129610][T20854] veth1_vlan: left promiscuous mode [ 1024.135384][T20854] veth0_vlan: left promiscuous mode [ 1024.800520][T20854] team0 (unregistering): Port device team_slave_1 removed [ 1024.860762][T20854] team0 (unregistering): Port device team_slave_0 removed [ 1024.909915][T20854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.919241][T20854] bond_slave_1 (unregistering): left promiscuous mode [ 1024.960400][T19538] Bluetooth: hci4: command tx timeout [ 1025.316903][T20854] bond0 (unregistering): Released all slaves [ 1026.175921][T21622] syzkaller0: entered promiscuous mode [ 1026.193780][T21622] syzkaller0: entered allmulticast mode [ 1029.284636][T21476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1029.325370][T21476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1029.353501][T21476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1029.382894][T21476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1029.704229][T21476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.785419][T21476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.810943][T21665] netlink: 'syz.4.4981': attribute type 11 has an invalid length. [ 1029.834357][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.841738][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.864085][T21665] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.4981'. [ 1029.892008][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.899474][T11769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.959218][T21665] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1029.988375][T21665] CPU: 1 PID: 21665 Comm: syz.4.4981 Not tainted syzkaller #0 [ 1029.996056][T21665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1030.006618][T21665] Call Trace: [ 1030.010163][T21665] [ 1030.013285][T21665] dump_stack_lvl+0x18c/0x250 [ 1030.018159][T21665] ? show_regs_print_info+0x20/0x20 [ 1030.023459][T21665] ? load_image+0x420/0x420 [ 1030.028166][T21665] sysfs_warn_dup+0x8e/0xa0 [ 1030.032719][T21665] sysfs_do_create_link_sd+0xc0/0x110 [ 1030.038321][T21665] device_add_class_symlinks+0x1cf/0x240 [ 1030.044115][T21665] device_add+0x507/0xc20 [ 1030.048515][T21665] wiphy_register+0x1dad/0x2ae0 [ 1030.053554][T21665] ? cfg80211_event_work+0x40/0x40 [ 1030.058790][T21665] ? minstrel_ht_alloc+0x88a/0x990 [ 1030.063986][T21665] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1030.070259][T21665] ieee80211_register_hw+0x3464/0x4250 [ 1030.076002][T21665] ? ieee80211_tasklet_handler+0x20/0x20 [ 1030.081760][T21665] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1030.087708][T21665] ? __debug_object_init+0xec/0x450 [ 1030.092971][T21665] ? __asan_memset+0x22/0x40 [ 1030.097699][T21665] ? __hrtimer_init+0x186/0x270 [ 1030.102796][T21665] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1030.108746][T21665] ? mac80211_hwsim_free+0x220/0x220 [ 1030.114165][T21665] ? rcu_is_watching+0x15/0xb0 [ 1030.119235][T21665] ? kstrndup+0xbd/0x140 [ 1030.123560][T21665] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1030.128933][T21665] ? __nla_validate+0x50/0x50 [ 1030.133831][T21665] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1030.140428][T21665] ? __nla_parse+0x40/0x50 [ 1030.144910][T21665] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1030.151318][T21665] genl_family_rcv_msg_doit+0x211/0x310 [ 1030.156908][T21665] ? end_current_label_crit_section+0x170/0x170 [ 1030.163645][T21665] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1030.169642][T21665] ? bpf_lsm_capable+0x9/0x10 [ 1030.174553][T21665] ? security_capable+0x89/0xb0 [ 1030.179588][T21665] genl_rcv_msg+0x619/0x7a0 [ 1030.184369][T21665] ? genl_bind+0x360/0x360 [ 1030.188934][T21665] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1030.195753][T21665] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1030.202391][T21665] ? ref_tracker_free+0x690/0x840 [ 1030.207524][T21665] netlink_rcv_skb+0x241/0x4d0 [ 1030.212430][T21665] ? genl_bind+0x360/0x360 [ 1030.216898][T21665] ? netlink_ack+0x1180/0x1180 [ 1030.221752][T21665] ? __lock_acquire+0x7d40/0x7d40 [ 1030.226845][T21665] ? down_read+0x1ac/0x2e0 [ 1030.231311][T21665] genl_rcv+0x28/0x40 [ 1030.235620][T21665] netlink_unicast+0x751/0x8d0 [ 1030.240496][T21665] netlink_sendmsg+0x8d0/0xbf0 [ 1030.245456][T21665] ? netlink_getsockopt+0x590/0x590 [ 1030.250718][T21665] ? aa_sock_msg_perm+0x94/0x150 [ 1030.255712][T21665] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1030.261248][T21665] ? security_socket_sendmsg+0x80/0xa0 [ 1030.266950][T21665] ? netlink_getsockopt+0x590/0x590 [ 1030.272225][T21665] ____sys_sendmsg+0x5ba/0x960 [ 1030.277164][T21665] ? __asan_memset+0x22/0x40 [ 1030.281997][T21665] ? __sys_sendmsg_sock+0x30/0x30 [ 1030.287245][T21665] ? __import_iovec+0x5f2/0x850 [ 1030.292169][T21665] ? import_iovec+0x73/0xa0 [ 1030.296736][T21665] ___sys_sendmsg+0x2a6/0x360 [ 1030.301499][T21665] ? __sys_sendmsg+0x2a0/0x2a0 [ 1030.306394][T21665] ? __destroy_inode+0x486/0x630 [ 1030.311484][T21665] __se_sys_sendmsg+0x1c2/0x2b0 [ 1030.316391][T21665] ? __x64_sys_sendmsg+0x80/0x80 [ 1030.321422][T21665] ? lockdep_hardirqs_on+0x98/0x150 [ 1030.326852][T21665] do_syscall_64+0x55/0xa0 [ 1030.331302][T21665] ? clear_bhb_loop+0x40/0x90 [ 1030.336104][T21665] ? clear_bhb_loop+0x40/0x90 [ 1030.341033][T21665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1030.347067][T21665] RIP: 0033:0x7f484b59c819 [ 1030.351564][T21665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.371599][T21665] RSP: 002b:00007f484c497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.380152][T21665] RAX: ffffffffffffffda RBX: 00007f484b815fa0 RCX: 00007f484b59c819 [ 1030.388425][T21665] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1030.396444][T21665] RBP: 00007f484b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1030.404453][T21665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.412461][T21665] R13: 00007f484b816038 R14: 00007f484b815fa0 R15: 00007ffe968364f8 [ 1030.420520][T21665] [ 1031.240874][T21686] netlink: 'syz.4.4986': attribute type 11 has an invalid length. [ 1031.275668][T21686] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.4986'. [ 1031.349832][T21686] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1031.369233][T21686] CPU: 1 PID: 21686 Comm: syz.4.4986 Not tainted syzkaller #0 [ 1031.376832][T21686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1031.386980][T21686] Call Trace: [ 1031.390345][T21686] [ 1031.393370][T21686] dump_stack_lvl+0x18c/0x250 [ 1031.398158][T21686] ? show_regs_print_info+0x20/0x20 [ 1031.403464][T21686] ? load_image+0x420/0x420 [ 1031.408126][T21686] sysfs_warn_dup+0x8e/0xa0 [ 1031.412811][T21686] sysfs_do_create_link_sd+0xc0/0x110 [ 1031.418285][T21686] device_add_class_symlinks+0x1cf/0x240 [ 1031.424038][T21686] device_add+0x507/0xc20 [ 1031.428601][T21686] wiphy_register+0x1dad/0x2ae0 [ 1031.433812][T21686] ? cfg80211_event_work+0x40/0x40 [ 1031.439018][T21686] ? minstrel_ht_alloc+0x88a/0x990 [ 1031.444365][T21686] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1031.450730][T21686] ieee80211_register_hw+0x3464/0x4250 [ 1031.456421][T21686] ? ieee80211_tasklet_handler+0x20/0x20 [ 1031.462388][T21686] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1031.468527][T21686] ? __debug_object_init+0xec/0x450 [ 1031.473847][T21686] ? __asan_memset+0x22/0x40 [ 1031.478723][T21686] ? __hrtimer_init+0x186/0x270 [ 1031.483773][T21686] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1031.489675][T21686] ? mac80211_hwsim_free+0x220/0x220 [ 1031.495134][T21686] ? rcu_is_watching+0x15/0xb0 [ 1031.500071][T21686] ? kstrndup+0xbd/0x140 [ 1031.504460][T21686] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1031.509762][T21686] ? __nla_validate+0x50/0x50 [ 1031.514711][T21686] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1031.521170][T21686] ? __nla_parse+0x40/0x50 [ 1031.525701][T21686] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1031.532680][T21686] genl_family_rcv_msg_doit+0x211/0x310 [ 1031.538504][T21686] ? end_current_label_crit_section+0x170/0x170 [ 1031.545083][T21686] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1031.551192][T21686] ? bpf_lsm_capable+0x9/0x10 [ 1031.556133][T21686] ? security_capable+0x89/0xb0 [ 1031.561113][T21686] genl_rcv_msg+0x619/0x7a0 [ 1031.565750][T21686] ? genl_bind+0x360/0x360 [ 1031.570437][T21686] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1031.577058][T21686] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1031.584185][T21686] ? ref_tracker_free+0x690/0x840 [ 1031.589364][T21686] netlink_rcv_skb+0x241/0x4d0 [ 1031.594427][T21686] ? genl_bind+0x360/0x360 [ 1031.599208][T21686] ? netlink_ack+0x1180/0x1180 [ 1031.604257][T21686] ? __lock_acquire+0x7d40/0x7d40 [ 1031.609493][T21686] ? down_read+0x1ac/0x2e0 [ 1031.614194][T21686] genl_rcv+0x28/0x40 [ 1031.618300][T21686] netlink_unicast+0x751/0x8d0 [ 1031.623206][T21686] netlink_sendmsg+0x8d0/0xbf0 [ 1031.628099][T21686] ? netlink_getsockopt+0x590/0x590 [ 1031.633498][T21686] ? aa_sock_msg_perm+0x94/0x150 [ 1031.638623][T21686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1031.644078][T21686] ? security_socket_sendmsg+0x80/0xa0 [ 1031.649792][T21686] ? netlink_getsockopt+0x590/0x590 [ 1031.655185][T21686] ____sys_sendmsg+0x5ba/0x960 [ 1031.660161][T21686] ? __asan_memset+0x22/0x40 [ 1031.664930][T21686] ? __sys_sendmsg_sock+0x30/0x30 [ 1031.670249][T21686] ? __import_iovec+0x5f2/0x850 [ 1031.675510][T21686] ? import_iovec+0x73/0xa0 [ 1031.680389][T21686] ___sys_sendmsg+0x2a6/0x360 [ 1031.685194][T21686] ? __sys_sendmsg+0x2a0/0x2a0 [ 1031.690499][T21686] __se_sys_sendmsg+0x1c2/0x2b0 [ 1031.695559][T21686] ? __x64_sys_sendmsg+0x80/0x80 [ 1031.701015][T21686] ? lockdep_hardirqs_on+0x98/0x150 [ 1031.706504][T21686] do_syscall_64+0x55/0xa0 [ 1031.711086][T21686] ? clear_bhb_loop+0x40/0x90 [ 1031.715859][T21686] ? clear_bhb_loop+0x40/0x90 [ 1031.720647][T21686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.726722][T21686] RIP: 0033:0x7f484b59c819 [ 1031.731322][T21686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.751388][T21686] RSP: 002b:00007f484c497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.759917][T21686] RAX: ffffffffffffffda RBX: 00007f484b815fa0 RCX: 00007f484b59c819 [ 1031.768237][T21686] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1031.776382][T21686] RBP: 00007f484b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1031.784611][T21686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.792833][T21686] R13: 00007f484b816038 R14: 00007f484b815fa0 R15: 00007ffe968364f8 [ 1031.801123][T21686] [ 1032.032973][T21476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.174636][T21476] veth0_vlan: entered promiscuous mode [ 1032.215915][T21476] veth1_vlan: entered promiscuous mode [ 1032.366726][T21703] syzkaller0: entered promiscuous mode [ 1032.374028][T21703] syzkaller0: entered allmulticast mode [ 1032.525929][T21476] veth0_macvtap: entered promiscuous mode [ 1032.559182][T21476] veth1_macvtap: entered promiscuous mode [ 1032.608957][T21476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.663097][T21476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.704323][T21476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.732896][T21476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.751698][T21476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.763026][T21476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.004312][T21726] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4994'. [ 1035.354251][T11782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.387432][T11782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.485284][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.535527][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.542288][T21752] netlink: 'syz.0.4997': attribute type 11 has an invalid length. [ 1035.610544][T21752] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.4997'. [ 1035.670454][T21752] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1035.967757][T21763] netlink: 'syz.2.4934': attribute type 10 has an invalid length. [ 1035.987268][T21763] hsr_slave_0: left promiscuous mode [ 1036.012013][T21763] hsr_slave_1: left promiscuous mode [ 1036.210880][T21771] netlink: 'syz.4.5001': attribute type 21 has an invalid length. [ 1036.222556][T21771] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5001'. [ 1036.235353][T21771] netlink: 'syz.4.5001': attribute type 4 has an invalid length. [ 1036.256811][T21771] netlink: 'syz.4.5001': attribute type 3 has an invalid length. [ 1036.290013][T21771] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5001'. [ 1036.388680][T21769] delete_channel: no stack [ 1036.397701][T13063] Bluetooth: hci3: command 0x0406 tx timeout [ 1036.446531][T21782] netlink: 'syz.1.5011': attribute type 10 has an invalid length. [ 1036.905839][T21800] netlink: 'syz.2.5008': attribute type 10 has an invalid length. [ 1036.932975][T21800] bond0: (slave bond_slave_0): Releasing backup interface [ 1037.512679][T21813] netlink: 'syz.2.5012': attribute type 29 has an invalid length. [ 1037.542829][T21813] netlink: 'syz.2.5012': attribute type 29 has an invalid length. [ 1037.566915][T21813] netlink: 'syz.2.5012': attribute type 29 has an invalid length. [ 1037.592605][T21813] netlink: 'syz.2.5012': attribute type 29 has an invalid length. [ 1037.865104][T21824] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1037.887874][T21824] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1037.993713][T21823] delete_channel: no stack [ 1038.613953][T21840] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5021'. [ 1038.926618][T21849] hsr_slave_0: left promiscuous mode [ 1038.946525][T21849] hsr_slave_1: left promiscuous mode [ 1039.086254][T21855] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5027'. [ 1039.096076][T21855] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5027'. [ 1039.221286][T21854] delete_channel: no stack [ 1040.092876][T21876] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5034'. [ 1040.346636][T21886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5038'. [ 1040.424118][T21883] delete_channel: no stack [ 1041.346557][T21907] __nla_validate_parse: 1 callbacks suppressed [ 1041.346579][T21907] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1041.604459][T21911] validate_nla: 15 callbacks suppressed [ 1041.604480][T21911] netlink: 'syz.1.5048': attribute type 10 has an invalid length. [ 1041.663131][T21913] netlink: 'syz.0.5049': attribute type 21 has an invalid length. [ 1041.672656][T21913] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1041.703435][T21913] netlink: 'syz.0.5049': attribute type 4 has an invalid length. [ 1041.750447][T21913] netlink: 'syz.0.5049': attribute type 3 has an invalid length. [ 1041.792265][T21915] netlink: 'syz.2.5050': attribute type 11 has an invalid length. [ 1041.795748][T21913] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1041.813629][T21915] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1041.882408][T21915] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1041.894969][T21912] delete_channel: no stack [ 1042.296444][T21927] netlink: 'syz.0.5054': attribute type 10 has an invalid length. [ 1042.387433][T21927] bond0: (slave bond_slave_0): Releasing backup interface [ 1043.142762][T21936] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5058'. [ 1043.175668][T21938] netlink: 'syz.0.5059': attribute type 10 has an invalid length. [ 1043.390621][T21943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.430465][T21943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.465577][T21943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.516877][T21943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.650222][T21942] net_ratelimit: 3319 callbacks suppressed [ 1043.650246][T21942] sock: sock_set_timeout: `syz.1.5061' (pid 21942) tries to set negative timeout [ 1043.739380][T21945] netlink: 'syz.0.5062': attribute type 21 has an invalid length. [ 1043.753249][T21945] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5062'. [ 1043.763969][T21945] netlink: 'syz.0.5062': attribute type 4 has an invalid length. [ 1043.774237][T21945] netlink: 'syz.0.5062': attribute type 3 has an invalid length. [ 1043.790157][T21945] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5062'. [ 1043.810898][T21944] delete_channel: no stack [ 1045.671705][T21962] netlink: 'syz.4.5067': attribute type 10 has an invalid length. [ 1045.898294][T21968] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5071'. [ 1045.910422][T21968] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5071'. [ 1045.959630][T21967] delete_channel: no stack [ 1046.028721][T21975] netlink: 'syz.4.5072': attribute type 11 has an invalid length. [ 1046.067219][T21975] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.5072'. [ 1046.103943][T21975] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1046.134713][T21975] CPU: 0 PID: 21975 Comm: syz.4.5072 Not tainted syzkaller #0 [ 1046.142308][T21975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1046.152709][T21975] Call Trace: [ 1046.156412][T21975] [ 1046.159522][T21975] dump_stack_lvl+0x18c/0x250 [ 1046.164500][T21975] ? show_regs_print_info+0x20/0x20 [ 1046.169984][T21975] ? load_image+0x420/0x420 [ 1046.174639][T21975] sysfs_warn_dup+0x8e/0xa0 [ 1046.179378][T21975] sysfs_do_create_link_sd+0xc0/0x110 [ 1046.184851][T21975] device_add_class_symlinks+0x1cf/0x240 [ 1046.190593][T21975] device_add+0x507/0xc20 [ 1046.195028][T21975] wiphy_register+0x1dad/0x2ae0 [ 1046.200124][T21975] ? cfg80211_event_work+0x40/0x40 [ 1046.205386][T21975] ? minstrel_ht_alloc+0x88a/0x990 [ 1046.210745][T21975] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1046.216873][T21975] ieee80211_register_hw+0x3464/0x4250 [ 1046.222443][T21975] ? ieee80211_tasklet_handler+0x20/0x20 [ 1046.228289][T21975] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1046.234253][T21975] ? __debug_object_init+0xec/0x450 [ 1046.239529][T21975] ? __asan_memset+0x22/0x40 [ 1046.244199][T21975] ? __hrtimer_init+0x186/0x270 [ 1046.249156][T21975] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1046.255533][T21975] ? mac80211_hwsim_free+0x220/0x220 [ 1046.261074][T21975] ? rcu_is_watching+0x15/0xb0 [ 1046.266090][T21975] ? kstrndup+0xbd/0x140 [ 1046.270526][T21975] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1046.275820][T21975] ? __nla_validate+0x50/0x50 [ 1046.280787][T21975] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1046.287492][T21975] ? __nla_parse+0x40/0x50 [ 1046.292001][T21975] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1046.298662][T21975] genl_family_rcv_msg_doit+0x211/0x310 [ 1046.304421][T21975] ? end_current_label_crit_section+0x170/0x170 [ 1046.311218][T21975] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1046.317296][T21975] ? bpf_lsm_capable+0x9/0x10 [ 1046.322110][T21975] ? security_capable+0x89/0xb0 [ 1046.327030][T21975] genl_rcv_msg+0x619/0x7a0 [ 1046.331696][T21975] ? genl_bind+0x360/0x360 [ 1046.336167][T21975] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1046.342835][T21975] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1046.349755][T21975] ? ref_tracker_free+0x690/0x840 [ 1046.354865][T21975] netlink_rcv_skb+0x241/0x4d0 [ 1046.359685][T21975] ? genl_bind+0x360/0x360 [ 1046.364152][T21975] ? netlink_ack+0x1180/0x1180 [ 1046.369016][T21975] ? __lock_acquire+0x7d40/0x7d40 [ 1046.374148][T21975] ? down_read+0x1ac/0x2e0 [ 1046.378619][T21975] genl_rcv+0x28/0x40 [ 1046.382668][T21975] netlink_unicast+0x751/0x8d0 [ 1046.387517][T21975] netlink_sendmsg+0x8d0/0xbf0 [ 1046.392468][T21975] ? netlink_getsockopt+0x590/0x590 [ 1046.397819][T21975] ? aa_sock_msg_perm+0x94/0x150 [ 1046.402810][T21975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1046.408134][T21975] ? security_socket_sendmsg+0x80/0xa0 [ 1046.413631][T21975] ? netlink_getsockopt+0x590/0x590 [ 1046.418935][T21975] ____sys_sendmsg+0x5ba/0x960 [ 1046.423783][T21975] ? __asan_memset+0x22/0x40 [ 1046.428456][T21975] ? __sys_sendmsg_sock+0x30/0x30 [ 1046.433525][T21975] ? __import_iovec+0x5f2/0x850 [ 1046.438446][T21975] ? import_iovec+0x73/0xa0 [ 1046.443098][T21975] ___sys_sendmsg+0x2a6/0x360 [ 1046.447861][T21975] ? __sys_sendmsg+0x2a0/0x2a0 [ 1046.452902][T21975] __se_sys_sendmsg+0x1c2/0x2b0 [ 1046.457801][T21975] ? __x64_sys_sendmsg+0x80/0x80 [ 1046.462917][T21975] ? lockdep_hardirqs_on+0x98/0x150 [ 1046.468176][T21975] do_syscall_64+0x55/0xa0 [ 1046.472626][T21975] ? clear_bhb_loop+0x40/0x90 [ 1046.477375][T21975] ? clear_bhb_loop+0x40/0x90 [ 1046.482132][T21975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1046.488094][T21975] RIP: 0033:0x7f484b59c819 [ 1046.492752][T21975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.512844][T21975] RSP: 002b:00007f484c497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.521659][T21975] RAX: ffffffffffffffda RBX: 00007f484b815fa0 RCX: 00007f484b59c819 [ 1046.529894][T21975] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1046.538282][T21975] RBP: 00007f484b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1046.546497][T21975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.554611][T21975] R13: 00007f484b816038 R14: 00007f484b815fa0 R15: 00007ffe968364f8 [ 1046.563049][T21975] [ 1046.899472][T21979] sock: sock_set_timeout: `syz.0.5074' (pid 21979) tries to set negative timeout [ 1047.165709][T21990] validate_nla: 4 callbacks suppressed [ 1047.165732][T21990] netlink: 'syz.1.5080': attribute type 10 has an invalid length. [ 1047.264639][T21992] netlink: 'syz.0.5079': attribute type 10 has an invalid length. [ 1047.377482][T21997] netlink: 'syz.1.5082': attribute type 21 has an invalid length. [ 1047.385707][T21997] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5082'. [ 1047.396741][T21997] netlink: 'syz.1.5082': attribute type 4 has an invalid length. [ 1047.417210][T21997] netlink: 'syz.1.5082': attribute type 3 has an invalid length. [ 1047.425098][T21997] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5082'. [ 1047.540232][T22002] FAULT_INJECTION: forcing a failure. [ 1047.540232][T22002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.556289][T22002] CPU: 0 PID: 22002 Comm: syz.0.5084 Not tainted syzkaller #0 [ 1047.563284][T21996] delete_channel: no stack [ 1047.564324][T22002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1047.564339][T22002] Call Trace: [ 1047.582776][T22002] [ 1047.585916][T22002] dump_stack_lvl+0x18c/0x250 [ 1047.590646][T22002] ? show_regs_print_info+0x20/0x20 [ 1047.595870][T22002] ? load_image+0x420/0x420 [ 1047.600535][T22002] ? __might_fault+0xaa/0x120 [ 1047.605368][T22002] ? __lock_acquire+0x7d40/0x7d40 [ 1047.610551][T22002] should_fail_ex+0x39d/0x4d0 [ 1047.615561][T22002] _copy_to_user+0x2f/0xa0 [ 1047.620311][T22002] bpf_test_finish+0x4e7/0x650 [ 1047.625680][T22002] ? convert___skb_to_skb+0x590/0x590 [ 1047.631109][T22002] ? convert_skb_to___skb+0x420/0x420 [ 1047.636505][T22002] ? slab_build_skb+0x25f/0x3f0 [ 1047.641461][T22002] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1047.646968][T22002] ? cpu_online+0x60/0x60 [ 1047.651344][T22002] bpf_prog_test_run+0x321/0x390 [ 1047.656322][T22002] __sys_bpf+0x49d/0x890 [ 1047.660612][T22002] ? bpf_link_show_fdinfo+0x390/0x390 [ 1047.666016][T22002] ? lock_chain_count+0x20/0x20 [ 1047.671265][T22002] __x64_sys_bpf+0x7c/0x90 [ 1047.675802][T22002] do_syscall_64+0x55/0xa0 [ 1047.680238][T22002] ? clear_bhb_loop+0x40/0x90 [ 1047.685120][T22002] ? clear_bhb_loop+0x40/0x90 [ 1047.689815][T22002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.695734][T22002] RIP: 0033:0x7f631a79c819 [ 1047.700358][T22002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.721636][T22002] RSP: 002b:00007f631b730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1047.730418][T22002] RAX: ffffffffffffffda RBX: 00007f631aa15fa0 RCX: 00007f631a79c819 [ 1047.738626][T22002] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 1047.746617][T22002] RBP: 00007f631b730090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.754627][T22002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.763165][T22002] R13: 00007f631aa16038 R14: 00007f631aa15fa0 R15: 00007ffcd79e3558 [ 1047.771200][T22002] [ 1047.878765][T22006] netlink: 'syz.1.5086': attribute type 11 has an invalid length. [ 1047.897438][T22006] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.5086'. [ 1047.913829][T22006] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1047.923993][T22006] CPU: 1 PID: 22006 Comm: syz.1.5086 Not tainted syzkaller #0 [ 1047.931558][T22006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1047.942040][T22006] Call Trace: [ 1047.945495][T22006] [ 1047.948589][T22006] dump_stack_lvl+0x18c/0x250 [ 1047.953445][T22006] ? show_regs_print_info+0x20/0x20 [ 1047.959335][T22006] ? load_image+0x420/0x420 [ 1047.963966][T22006] sysfs_warn_dup+0x8e/0xa0 [ 1047.969168][T22006] sysfs_do_create_link_sd+0xc0/0x110 [ 1047.974635][T22006] device_add_class_symlinks+0x1cf/0x240 [ 1047.980456][T22006] device_add+0x507/0xc20 [ 1047.984965][T22006] wiphy_register+0x1dad/0x2ae0 [ 1047.990069][T22006] ? cfg80211_event_work+0x40/0x40 [ 1047.995665][T22006] ? minstrel_ht_alloc+0x88a/0x990 [ 1048.001685][T22006] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1048.008477][T22006] ieee80211_register_hw+0x3464/0x4250 [ 1048.014111][T22006] ? ieee80211_tasklet_handler+0x20/0x20 [ 1048.019897][T22006] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1048.026252][T22006] ? __debug_object_init+0xec/0x450 [ 1048.032239][T22006] ? __asan_memset+0x22/0x40 [ 1048.037171][T22006] ? __hrtimer_init+0x186/0x270 [ 1048.042291][T22006] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1048.048275][T22006] ? mac80211_hwsim_free+0x220/0x220 [ 1048.053645][T22006] ? rcu_is_watching+0x15/0xb0 [ 1048.058600][T22006] ? kstrndup+0xbd/0x140 [ 1048.062971][T22006] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1048.068367][T22006] ? __nla_validate+0x50/0x50 [ 1048.073347][T22006] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1048.079798][T22006] ? __nla_parse+0x40/0x50 [ 1048.084302][T22006] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1048.090732][T22006] genl_family_rcv_msg_doit+0x211/0x310 [ 1048.096347][T22006] ? end_current_label_crit_section+0x170/0x170 [ 1048.102768][T22006] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1048.108948][T22006] ? bpf_lsm_capable+0x9/0x10 [ 1048.113707][T22006] ? security_capable+0x89/0xb0 [ 1048.118666][T22006] genl_rcv_msg+0x619/0x7a0 [ 1048.123368][T22006] ? genl_bind+0x360/0x360 [ 1048.128211][T22006] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1048.134974][T22006] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1048.141896][T22006] ? ref_tracker_free+0x690/0x840 [ 1048.147157][T22006] netlink_rcv_skb+0x241/0x4d0 [ 1048.152025][T22006] ? genl_bind+0x360/0x360 [ 1048.156528][T22006] ? netlink_ack+0x1180/0x1180 [ 1048.161526][T22006] ? __lock_acquire+0x7d40/0x7d40 [ 1048.166761][T22006] ? down_read+0x1ac/0x2e0 [ 1048.171332][T22006] genl_rcv+0x28/0x40 [ 1048.175611][T22006] netlink_unicast+0x751/0x8d0 [ 1048.181065][T22006] netlink_sendmsg+0x8d0/0xbf0 [ 1048.185967][T22006] ? netlink_getsockopt+0x590/0x590 [ 1048.191299][T22006] ? aa_sock_msg_perm+0x94/0x150 [ 1048.196351][T22006] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1048.201748][T22006] ? security_socket_sendmsg+0x80/0xa0 [ 1048.207387][T22006] ? netlink_getsockopt+0x590/0x590 [ 1048.212855][T22006] ____sys_sendmsg+0x5ba/0x960 [ 1048.217730][T22006] ? __asan_memset+0x22/0x40 [ 1048.222415][T22006] ? __sys_sendmsg_sock+0x30/0x30 [ 1048.227607][T22006] ? __import_iovec+0x5f2/0x850 [ 1048.232736][T22006] ? import_iovec+0x73/0xa0 [ 1048.237763][T22006] ___sys_sendmsg+0x2a6/0x360 [ 1048.242542][T22006] ? __sys_sendmsg+0x2a0/0x2a0 [ 1048.248048][T22006] __se_sys_sendmsg+0x1c2/0x2b0 [ 1048.253116][T22006] ? __x64_sys_sendmsg+0x80/0x80 [ 1048.258580][T22006] ? lockdep_hardirqs_on+0x98/0x150 [ 1048.264039][T22006] do_syscall_64+0x55/0xa0 [ 1048.268691][T22006] ? clear_bhb_loop+0x40/0x90 [ 1048.273622][T22006] ? clear_bhb_loop+0x40/0x90 [ 1048.278470][T22006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1048.284517][T22006] RIP: 0033:0x7f3fbe99c819 [ 1048.289106][T22006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.309217][T22006] RSP: 002b:00007f3fbf7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.317910][T22006] RAX: ffffffffffffffda RBX: 00007f3fbec15fa0 RCX: 00007f3fbe99c819 [ 1048.326251][T22006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1048.334612][T22006] RBP: 00007f3fbea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1048.343003][T22006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.351158][T22006] R13: 00007f3fbec16038 R14: 00007f3fbec15fa0 R15: 00007ffd7d2b7d68 [ 1048.359532][T22006] [ 1048.553279][T22011] netlink: 'syz.4.5088': attribute type 21 has an invalid length. [ 1048.984985][T22023] netlink: 'syz.4.5090': attribute type 10 has an invalid length. [ 1049.074241][T22024] netlink: 'syz.1.5091': attribute type 10 has an invalid length. [ 1049.210475][T22030] netlink: 'syz.0.5094': attribute type 21 has an invalid length. [ 1049.247192][T22030] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5094'. [ 1049.266618][T22030] netlink: 'syz.0.5094': attribute type 4 has an invalid length. [ 1049.286287][T22030] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5094'. [ 1049.340841][T22032] netlink: 'syz.1.5096': attribute type 11 has an invalid length. [ 1049.349471][T22032] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.5096'. [ 1049.365437][T22032] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1049.374705][T22032] CPU: 1 PID: 22032 Comm: syz.1.5096 Not tainted syzkaller #0 [ 1049.382518][T22032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1049.392653][T22032] Call Trace: [ 1049.396003][T22032] [ 1049.399004][T22032] dump_stack_lvl+0x18c/0x250 [ 1049.403875][T22032] ? show_regs_print_info+0x20/0x20 [ 1049.409373][T22032] ? load_image+0x420/0x420 [ 1049.414053][T22032] sysfs_warn_dup+0x8e/0xa0 [ 1049.418643][T22032] sysfs_do_create_link_sd+0xc0/0x110 [ 1049.424361][T22032] device_add_class_symlinks+0x1cf/0x240 [ 1049.430231][T22032] device_add+0x507/0xc20 [ 1049.434685][T22032] wiphy_register+0x1dad/0x2ae0 [ 1049.439700][T22032] ? cfg80211_event_work+0x40/0x40 [ 1049.444900][T22032] ? minstrel_ht_alloc+0x88a/0x990 [ 1049.450165][T22032] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1049.456347][T22032] ieee80211_register_hw+0x3464/0x4250 [ 1049.462117][T22032] ? ieee80211_tasklet_handler+0x20/0x20 [ 1049.467849][T22032] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1049.474013][T22032] ? __debug_object_init+0xec/0x450 [ 1049.479408][T22032] ? __asan_memset+0x22/0x40 [ 1049.484077][T22032] ? __hrtimer_init+0x186/0x270 [ 1049.489198][T22032] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1049.495085][T22032] ? mac80211_hwsim_free+0x220/0x220 [ 1049.500704][T22032] ? rcu_is_watching+0x15/0xb0 [ 1049.505559][T22032] ? kstrndup+0xbd/0x140 [ 1049.509946][T22032] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1049.515180][T22032] ? __nla_validate+0x50/0x50 [ 1049.519996][T22032] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1049.526733][T22032] ? __nla_parse+0x40/0x50 [ 1049.531495][T22032] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1049.537977][T22032] genl_family_rcv_msg_doit+0x211/0x310 [ 1049.543632][T22032] ? end_current_label_crit_section+0x170/0x170 [ 1049.550468][T22032] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1049.556950][T22032] ? bpf_lsm_capable+0x9/0x10 [ 1049.558866][T22029] delete_channel: no stack [ 1049.561771][T22032] ? security_capable+0x89/0xb0 [ 1049.561850][T22032] genl_rcv_msg+0x619/0x7a0 [ 1049.561907][T22032] ? genl_bind+0x360/0x360 [ 1049.580770][T22032] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1049.587375][T22032] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1049.594133][T22032] ? ref_tracker_free+0x690/0x840 [ 1049.599597][T22032] netlink_rcv_skb+0x241/0x4d0 [ 1049.604516][T22032] ? genl_bind+0x360/0x360 [ 1049.609212][T22032] ? netlink_ack+0x1180/0x1180 [ 1049.614494][T22032] ? __lock_acquire+0x7d40/0x7d40 [ 1049.619854][T22032] ? down_read+0x1ac/0x2e0 [ 1049.624737][T22032] genl_rcv+0x28/0x40 [ 1049.628786][T22032] netlink_unicast+0x751/0x8d0 [ 1049.633691][T22032] netlink_sendmsg+0x8d0/0xbf0 [ 1049.638560][T22032] ? netlink_getsockopt+0x590/0x590 [ 1049.644007][T22032] ? aa_sock_msg_perm+0x94/0x150 [ 1049.649086][T22032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1049.654587][T22032] ? security_socket_sendmsg+0x80/0xa0 [ 1049.660465][T22032] ? netlink_getsockopt+0x590/0x590 [ 1049.665851][T22032] ____sys_sendmsg+0x5ba/0x960 [ 1049.670692][T22032] ? __asan_memset+0x22/0x40 [ 1049.675328][T22032] ? __sys_sendmsg_sock+0x30/0x30 [ 1049.680582][T22032] ? __import_iovec+0x5f2/0x850 [ 1049.685805][T22032] ? import_iovec+0x73/0xa0 [ 1049.690551][T22032] ___sys_sendmsg+0x2a6/0x360 [ 1049.696595][T22032] ? __sys_sendmsg+0x2a0/0x2a0 [ 1049.702038][T22032] ? __destroy_inode+0x486/0x630 [ 1049.707221][T22032] __se_sys_sendmsg+0x1c2/0x2b0 [ 1049.712139][T22032] ? __x64_sys_sendmsg+0x80/0x80 [ 1049.717225][T22032] ? lockdep_hardirqs_on+0x98/0x150 [ 1049.722869][T22032] do_syscall_64+0x55/0xa0 [ 1049.727431][T22032] ? clear_bhb_loop+0x40/0x90 [ 1049.732534][T22032] ? clear_bhb_loop+0x40/0x90 [ 1049.737347][T22032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.743370][T22032] RIP: 0033:0x7f3fbe99c819 [ 1049.747845][T22032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.767797][T22032] RSP: 002b:00007f3fbf7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.776270][T22032] RAX: ffffffffffffffda RBX: 00007f3fbec15fa0 RCX: 00007f3fbe99c819 [ 1049.784311][T22032] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1049.792420][T22032] RBP: 00007f3fbea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1049.800434][T22032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.808459][T22032] R13: 00007f3fbec16038 R14: 00007f3fbec15fa0 R15: 00007ffd7d2b7d68 [ 1049.816981][T22032] [ 1050.059122][T22041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5099'. [ 1050.076093][T22044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5100'. [ 1050.119070][T22045] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.5099'. [ 1050.188376][T22041] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.5099'. [ 1051.107455][T22066] delete_channel: no stack [ 1051.247281][T22071] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1051.260626][T22071] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1051.269630][T22071] CPU: 1 PID: 22071 Comm: syz.4.5109 Not tainted syzkaller #0 [ 1051.277362][T22071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1051.287739][T22071] Call Trace: [ 1051.291069][T22071] [ 1051.294042][T22071] dump_stack_lvl+0x18c/0x250 [ 1051.298770][T22071] ? show_regs_print_info+0x20/0x20 [ 1051.304368][T22071] ? load_image+0x420/0x420 [ 1051.309109][T22071] sysfs_warn_dup+0x8e/0xa0 [ 1051.313728][T22071] sysfs_do_create_link_sd+0xc0/0x110 [ 1051.319315][T22071] device_add_class_symlinks+0x1cf/0x240 [ 1051.325004][T22071] device_add+0x507/0xc20 [ 1051.329555][T22071] wiphy_register+0x1dad/0x2ae0 [ 1051.334559][T22071] ? cfg80211_event_work+0x40/0x40 [ 1051.340156][T22071] ? minstrel_ht_alloc+0x88a/0x990 [ 1051.345937][T22071] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1051.352512][T22071] ieee80211_register_hw+0x3464/0x4250 [ 1051.358249][T22071] ? ieee80211_tasklet_handler+0x20/0x20 [ 1051.364350][T22071] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1051.370372][T22071] ? __debug_object_init+0xec/0x450 [ 1051.375613][T22071] ? __asan_memset+0x22/0x40 [ 1051.380251][T22071] ? __hrtimer_init+0x186/0x270 [ 1051.385403][T22071] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1051.391546][T22071] ? mac80211_hwsim_free+0x220/0x220 [ 1051.396912][T22071] ? rcu_is_watching+0x15/0xb0 [ 1051.401714][T22071] ? kstrndup+0xbd/0x140 [ 1051.406043][T22071] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1051.411231][T22071] ? __nla_validate+0x50/0x50 [ 1051.416289][T22071] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1051.422878][T22071] ? __nla_parse+0x40/0x50 [ 1051.427351][T22071] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1051.433811][T22071] genl_family_rcv_msg_doit+0x211/0x310 [ 1051.439738][T22071] ? end_current_label_crit_section+0x170/0x170 [ 1051.446255][T22071] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1051.452220][T22071] ? bpf_lsm_capable+0x9/0x10 [ 1051.456937][T22071] ? security_capable+0x89/0xb0 [ 1051.461836][T22071] genl_rcv_msg+0x619/0x7a0 [ 1051.466527][T22071] ? genl_bind+0x360/0x360 [ 1051.471175][T22071] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1051.477653][T22071] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1051.484562][T22071] netlink_rcv_skb+0x241/0x4d0 [ 1051.489408][T22071] ? genl_bind+0x360/0x360 [ 1051.493987][T22071] ? netlink_ack+0x1180/0x1180 [ 1051.498935][T22071] ? __lock_acquire+0x7d40/0x7d40 [ 1051.504111][T22071] ? down_read+0x1ac/0x2e0 [ 1051.508904][T22071] genl_rcv+0x28/0x40 [ 1051.512969][T22071] netlink_unicast+0x751/0x8d0 [ 1051.518161][T22071] netlink_sendmsg+0x8d0/0xbf0 [ 1051.523336][T22071] ? netlink_getsockopt+0x590/0x590 [ 1051.528588][T22071] ? aa_sock_msg_perm+0x94/0x150 [ 1051.533647][T22071] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1051.539066][T22071] ? security_socket_sendmsg+0x80/0xa0 [ 1051.544818][T22071] ? netlink_getsockopt+0x590/0x590 [ 1051.550251][T22071] ____sys_sendmsg+0x5ba/0x960 [ 1051.555106][T22071] ? __asan_memset+0x22/0x40 [ 1051.559943][T22071] ? __sys_sendmsg_sock+0x30/0x30 [ 1051.565225][T22071] ? __import_iovec+0x5f2/0x850 [ 1051.570302][T22071] ? import_iovec+0x73/0xa0 [ 1051.574864][T22071] ___sys_sendmsg+0x2a6/0x360 [ 1051.579586][T22071] ? __sys_sendmsg+0x2a0/0x2a0 [ 1051.584438][T22071] ? __destroy_inode+0x486/0x630 [ 1051.589574][T22071] __se_sys_sendmsg+0x1c2/0x2b0 [ 1051.594511][T22071] ? __x64_sys_sendmsg+0x80/0x80 [ 1051.599610][T22071] ? lockdep_hardirqs_on+0x98/0x150 [ 1051.604867][T22071] do_syscall_64+0x55/0xa0 [ 1051.609402][T22071] ? clear_bhb_loop+0x40/0x90 [ 1051.614501][T22071] ? clear_bhb_loop+0x40/0x90 [ 1051.619344][T22071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.625725][T22071] RIP: 0033:0x7f484b59c819 [ 1051.630260][T22071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.650784][T22071] RSP: 002b:00007f484c497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.659364][T22071] RAX: ffffffffffffffda RBX: 00007f484b815fa0 RCX: 00007f484b59c819 [ 1051.667830][T22071] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1051.675920][T22071] RBP: 00007f484b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1051.684120][T22071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.692123][T22071] R13: 00007f484b816038 R14: 00007f484b815fa0 R15: 00007ffe968364f8 [ 1051.700944][T22071] [ 1052.469091][T22095] validate_nla: 7 callbacks suppressed [ 1052.469112][T22095] netlink: 'syz.2.5118': attribute type 21 has an invalid length. [ 1052.484182][T22095] __nla_validate_parse: 3 callbacks suppressed [ 1052.484201][T22095] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5118'. [ 1052.506728][T22095] netlink: 'syz.2.5118': attribute type 4 has an invalid length. [ 1052.516811][T22095] netlink: 'syz.2.5118': attribute type 3 has an invalid length. [ 1052.537518][T22095] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5118'. [ 1052.630872][T22094] delete_channel: no stack [ 1052.649161][T22102] netlink: 'syz.1.5121': attribute type 17 has an invalid length. [ 1052.658568][T22102] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5121'. [ 1052.862833][T22109] netlink: 'syz.2.5123': attribute type 11 has an invalid length. [ 1052.873854][T22109] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.5123'. [ 1052.899582][T22109] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1052.914962][T22109] CPU: 0 PID: 22109 Comm: syz.2.5123 Not tainted syzkaller #0 [ 1052.922637][T22109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1052.932903][T22109] Call Trace: [ 1052.936253][T22109] [ 1052.939260][T22109] dump_stack_lvl+0x18c/0x250 [ 1052.944057][T22109] ? show_regs_print_info+0x20/0x20 [ 1052.950048][T22109] ? load_image+0x420/0x420 [ 1052.954800][T22109] sysfs_warn_dup+0x8e/0xa0 [ 1052.959410][T22109] sysfs_do_create_link_sd+0xc0/0x110 [ 1052.964904][T22109] device_add_class_symlinks+0x1cf/0x240 [ 1052.970652][T22109] device_add+0x507/0xc20 [ 1052.975110][T22109] wiphy_register+0x1dad/0x2ae0 [ 1052.980168][T22109] ? cfg80211_event_work+0x40/0x40 [ 1052.985325][T22109] ? minstrel_ht_alloc+0x88a/0x990 [ 1052.990541][T22109] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1052.996868][T22109] ieee80211_register_hw+0x3464/0x4250 [ 1053.002453][T22109] ? ieee80211_tasklet_handler+0x20/0x20 [ 1053.008394][T22109] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1053.014722][T22109] ? __debug_object_init+0xec/0x450 [ 1053.020003][T22109] ? __asan_memset+0x22/0x40 [ 1053.024756][T22109] ? __hrtimer_init+0x186/0x270 [ 1053.029668][T22109] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1053.035506][T22109] ? mac80211_hwsim_free+0x220/0x220 [ 1053.040953][T22109] ? rcu_is_watching+0x15/0xb0 [ 1053.045806][T22109] ? kstrndup+0xbd/0x140 [ 1053.050579][T22109] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1053.055757][T22109] ? __nla_validate+0x50/0x50 [ 1053.060517][T22109] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1053.067273][T22109] ? __nla_parse+0x40/0x50 [ 1053.071774][T22109] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1053.078181][T22109] genl_family_rcv_msg_doit+0x211/0x310 [ 1053.083857][T22109] ? end_current_label_crit_section+0x170/0x170 [ 1053.090425][T22109] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1053.096422][T22109] ? bpf_lsm_capable+0x9/0x10 [ 1053.101252][T22109] ? security_capable+0x89/0xb0 [ 1053.106183][T22109] genl_rcv_msg+0x619/0x7a0 [ 1053.110841][T22109] ? genl_bind+0x360/0x360 [ 1053.115384][T22109] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1053.121766][T22109] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1053.128841][T22109] netlink_rcv_skb+0x241/0x4d0 [ 1053.133844][T22109] ? genl_bind+0x360/0x360 [ 1053.138418][T22109] ? netlink_ack+0x1180/0x1180 [ 1053.143284][T22109] ? __lock_acquire+0x7d40/0x7d40 [ 1053.148827][T22109] ? down_read+0x1ac/0x2e0 [ 1053.153311][T22109] genl_rcv+0x28/0x40 [ 1053.157337][T22109] netlink_unicast+0x751/0x8d0 [ 1053.162192][T22109] netlink_sendmsg+0x8d0/0xbf0 [ 1053.167221][T22109] ? netlink_getsockopt+0x590/0x590 [ 1053.172478][T22109] ? aa_sock_msg_perm+0x94/0x150 [ 1053.177648][T22109] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1053.183019][T22109] ? security_socket_sendmsg+0x80/0xa0 [ 1053.188539][T22109] ? netlink_getsockopt+0x590/0x590 [ 1053.193880][T22109] ____sys_sendmsg+0x5ba/0x960 [ 1053.198746][T22109] ? __asan_memset+0x22/0x40 [ 1053.203590][T22109] ? __sys_sendmsg_sock+0x30/0x30 [ 1053.208887][T22109] ? __import_iovec+0x5f2/0x850 [ 1053.213849][T22109] ? import_iovec+0x73/0xa0 [ 1053.218505][T22109] ___sys_sendmsg+0x2a6/0x360 [ 1053.223433][T22109] ? __sys_sendmsg+0x2a0/0x2a0 [ 1053.228351][T22109] ? __destroy_inode+0x486/0x630 [ 1053.233507][T22109] __se_sys_sendmsg+0x1c2/0x2b0 [ 1053.238499][T22109] ? __x64_sys_sendmsg+0x80/0x80 [ 1053.243712][T22109] ? lockdep_hardirqs_on+0x98/0x150 [ 1053.249096][T22109] do_syscall_64+0x55/0xa0 [ 1053.253652][T22109] ? clear_bhb_loop+0x40/0x90 [ 1053.258377][T22109] ? clear_bhb_loop+0x40/0x90 [ 1053.263103][T22109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.269047][T22109] RIP: 0033:0x7f07f6f9c819 [ 1053.273506][T22109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.293540][T22109] RSP: 002b:00007f07f7e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.302290][T22109] RAX: ffffffffffffffda RBX: 00007f07f7215fa0 RCX: 00007f07f6f9c819 [ 1053.310845][T22109] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1053.318974][T22109] RBP: 00007f07f7032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1053.327369][T22109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.336135][T22109] R13: 00007f07f7216038 R14: 00007f07f7215fa0 R15: 00007fff30513cc8 [ 1053.344829][T22109] [ 1053.447417][T22115] netlink: 'syz.0.5125': attribute type 10 has an invalid length. [ 1053.519632][ T29] INFO: task syz.3.4369:19376 blocked for more than 143 seconds. [ 1053.528037][ T29] Not tainted syzkaller #0 [ 1053.533151][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1053.551196][ T29] task:syz.3.4369 state:D stack:26856 pid:19376 ppid:13061 flags:0x00004002 [ 1053.561324][ T29] Call Trace: [ 1053.564660][ T29] [ 1053.568137][ T29] __schedule+0x1553/0x45a0 [ 1053.573347][ T29] ? rcu_is_watching+0x15/0xb0 [ 1053.578850][ T29] ? asan.module_dtor+0x20/0x20 [ 1053.583962][ T29] ? trace_contention_end+0x39/0xe0 [ 1053.589686][ T29] ? task_work_cancel+0xa5/0x220 [ 1053.595814][ T29] ? task_work_cancel_func+0x210/0x210 [ 1053.603073][ T29] schedule+0xbd/0x170 [ 1053.610332][ T29] ? _free_event+0xfe/0xf30 [ 1053.615004][ T29] _free_event+0x174/0xf30 [ 1053.620304][ T29] perf_event_release_kernel+0x842/0x8d0 [ 1053.626183][ T29] ? __might_sleep+0xe0/0xe0 [ 1053.631393][ T29] ? calc_timer_values+0x400/0x400 [ 1053.636582][ T29] ? __fput+0x61c/0x970 [ 1053.641219][ T29] ? perf_mmap+0x15c0/0x15c0 [ 1053.646154][ T29] perf_release+0x3b/0x40 [ 1053.650746][ T29] __fput+0x234/0x970 [ 1053.655113][ T29] task_work_run+0x1d4/0x260 [ 1053.660490][ T29] ? task_work_cancel+0x220/0x220 [ 1053.666066][ T29] do_exit+0x95a/0x2460 [ 1053.670854][ T29] ? preempt_schedule+0xc0/0xd0 [ 1053.676084][ T29] ? put_task_struct+0xc0/0xc0 [ 1053.681123][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1053.689814][ T29] ? lock_chain_count+0x20/0x20 [ 1053.694877][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1053.700690][ T29] do_group_exit+0x21b/0x2d0 [ 1053.705452][ T29] __x64_sys_exit_group+0x3f/0x40 [ 1053.711540][ T29] do_syscall_64+0x55/0xa0 [ 1053.716107][ T29] ? clear_bhb_loop+0x40/0x90 [ 1053.721135][ T29] ? clear_bhb_loop+0x40/0x90 [ 1053.725889][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.732282][ T29] RIP: 0033:0x7f7b9d99c819 [ 1053.736834][ T29] RSP: 002b:00007f7b9e8cef38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1053.745440][ T29] RAX: ffffffffffffffda RBX: 00007f7b9da093e8 RCX: 00007f7b9d99c819 [ 1053.753668][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1053.762038][ T29] RBP: 000000000000000e R08: 0000000000000000 R09: 00007f7b9dc16038 [ 1053.770100][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.778340][ T29] R13: 00007f7b9dc16038 R14: 00007f7b9dc15fa0 R15: 00007ffc3048d9b8 [ 1053.786453][ T29] [ 1053.789695][ T29] [ 1053.789695][ T29] Showing all locks held in the system: [ 1053.807176][ T29] 1 lock held by khungtaskd/29: [ 1053.812204][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1053.831660][ T29] 2 locks held by getty/5529: [ 1053.836594][ T29] #0: ffff88802d1440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1053.846956][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1053.857816][ T29] 2 locks held by kworker/1:5/11598: [ 1053.863389][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1053.874806][ T29] #1: ffffc900043dfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1053.887277][ T29] 3 locks held by kworker/u4:18/11769: [ 1053.893033][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1053.905053][ T29] #1: ffffc900033e7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1053.918025][ T29] #2: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 1053.929237][ T29] 2 locks held by syz.1.5122/22106: [ 1053.934731][ T29] #0: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 1053.944507][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1053.955944][ T29] 1 lock held by syz.4.5126/22116: [ 1053.961236][ T29] #0: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 1053.970917][ T29] 1 lock held by syz.2.5127/22117: [ 1053.976075][ T29] #0: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 1053.987579][ T29] [ 1053.989980][ T29] ============================================= [ 1053.989980][ T29] [ 1053.998935][ T29] NMI backtrace for cpu 1 [ 1054.003488][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1054.010711][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1054.020877][ T29] Call Trace: [ 1054.024286][ T29] [ 1054.027245][ T29] dump_stack_lvl+0x18c/0x250 [ 1054.032065][ T29] ? preempt_count_add+0x91/0x1a0 [ 1054.037206][ T29] ? show_regs_print_info+0x20/0x20 [ 1054.042437][ T29] ? load_image+0x420/0x420 [ 1054.047058][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1054.052036][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1054.058303][ T29] ? _printk+0xde/0x130 [ 1054.062700][ T29] ? load_image+0x420/0x420 [ 1054.067230][ T29] ? load_image+0x420/0x420 [ 1054.071767][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1054.077944][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1054.084041][ T29] watchdog+0xf3d/0xf80 [ 1054.088519][ T29] ? watchdog+0x1e1/0xf80 [ 1054.093071][ T29] kthread+0x2fa/0x390 [ 1054.097155][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1054.102207][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1054.107000][ T29] ret_from_fork+0x48/0x80 [ 1054.111526][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1054.116425][ T29] ret_from_fork_asm+0x11/0x20 [ 1054.121240][ T29] [ 1054.124988][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1054.130435][ C0] NMI backtrace for cpu 0 [ 1054.130454][ C0] CPU: 0 PID: 11782 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 1054.130471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1054.130481][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1054.130505][ C0] RIP: 0010:unwind_next_frame+0x1c89/0x2970 [ 1054.130525][ C0] Code: e8 6c 05 a4 00 4d 8b 74 24 38 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 42 80 3c 28 00 48 8b ac 24 90 00 00 00 74 05 e8 47 05 a4 00 <49> 8b 5c 24 08 4d 8d 7c 24 10 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 [ 1054.130538][ C0] RSP: 0018:ffffc90003866d58 EFLAGS: 00000246 [ 1054.130552][ C0] RAX: 1ffff9200070cdc6 RBX: ffffc90003866e60 RCX: 0000000000000000 [ 1054.130563][ C0] RDX: ffff888023940000 RSI: 0000000000000001 RDI: ffffc90003866e30 [ 1054.130574][ C0] RBP: ffffc900038671a0 R08: ffff888023940000 R09: 0000000000000003 [ 1054.130584][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90003866e28 [ 1054.130594][ C0] R13: dffffc0000000000 R14: ffffc900038671b0 R15: ffffffff8f19e564 [ 1054.130605][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1054.130618][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.130629][ C0] CR2: 00007f631a9e92f8 CR3: 000000007679d000 CR4: 00000000003506f0 [ 1054.130645][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1054.130654][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1054.130664][ C0] Call Trace: [ 1054.130670][ C0] [ 1054.130683][ C0] ? kasan_save_free_info+0x2e/0x50 [ 1054.130705][ C0] ? kasan_save_free_info+0x2e/0x50 [ 1054.130722][ C0] ? stack_trace_save+0x100/0x100 [ 1054.130740][ C0] arch_stack_walk+0x144/0x190 [ 1054.130759][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 1054.130778][ C0] stack_trace_save+0xaa/0x100 [ 1054.130795][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1054.130817][ C0] kasan_set_track+0x4e/0x70 [ 1054.130832][ C0] ? kasan_set_track+0x4e/0x70 [ 1054.130846][ C0] ? kasan_save_free_info+0x2e/0x50 [ 1054.130888][ C0] ? __kmem_cache_free+0xba/0x1e0 [ 1054.130907][ C0] kasan_save_free_info+0x2e/0x50 [ 1054.130933][ C0] ____kasan_slab_free+0x126/0x1e0 [ 1054.130952][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 1054.130969][ C0] ? ieee80211_inform_bss+0xbca/0x1080 [ 1054.130988][ C0] __kmem_cache_free+0xba/0x1e0 [ 1054.131010][ C0] ieee80211_inform_bss+0xbca/0x1080 [ 1054.131032][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 1054.131057][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 1054.131075][ C0] rdev_inform_bss+0x106/0x410 [ 1054.131090][ C0] cfg80211_inform_bss_frame_data+0xb8b/0x13d0 [ 1054.131120][ C0] ? cfg80211_parse_ml_sta_data+0x1ab0/0x1ab0 [ 1054.131161][ C0] ? ieee80211_bss_info_update+0x3ac/0x9b0 [ 1054.131181][ C0] ieee80211_bss_info_update+0x759/0x9b0 [ 1054.131203][ C0] ? ieee80211_inform_bss+0x1080/0x1080 [ 1054.131227][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 1054.131246][ C0] ieee80211_ibss_rx_queued_mgmt+0x18ae/0x2c80 [ 1054.131269][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xe9d/0x2c80 [ 1054.131285][ C0] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1054.131306][ C0] ? mark_lock+0x94/0x320 [ 1054.131324][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1054.131342][ C0] ? lock_chain_count+0x20/0x20 [ 1054.131362][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1054.131383][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1054.131402][ C0] ? skb_dequeue+0x124/0x160 [ 1054.131420][ C0] ieee80211_iface_work+0x717/0xc70 [ 1054.131437][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1054.131456][ C0] cfg80211_wiphy_work+0x225/0x260 [ 1054.131473][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1054.131492][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1054.131523][ C0] ? worker_attach_to_pool+0x380/0x380 [ 1054.131543][ C0] ? assign_work+0x3d2/0x5d0 [ 1054.131563][ C0] worker_thread+0xa55/0xfc0 [ 1054.131581][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1054.131598][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1054.131612][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1054.131639][ C0] kthread+0x2fa/0x390 [ 1054.131652][ C0] ? pr_cont_work+0x560/0x560 [ 1054.131669][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1054.131683][ C0] ret_from_fork+0x48/0x80 [ 1054.131701][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1054.131716][ C0] ret_from_fork_asm+0x11/0x20 [ 1054.131741][ C0] [ 1054.154119][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1054.154137][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1054.154157][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1054.154167][ T29] Call Trace: [ 1054.154178][ T29] [ 1054.154187][ T29] dump_stack_lvl+0x18c/0x250 [ 1054.154222][ T29] ? show_regs_print_info+0x20/0x20 [ 1054.154248][ T29] ? load_image+0x420/0x420 [ 1054.154282][ T29] panic+0x2dc/0x730 [ 1054.154302][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1054.154332][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1054.154352][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1054.154377][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1054.154401][ T29] watchdog+0xf7c/0xf80 [ 1054.154424][ T29] ? watchdog+0x1e1/0xf80 [ 1054.154452][ T29] kthread+0x2fa/0x390 [ 1054.154469][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1054.154492][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1054.154509][ T29] ret_from_fork+0x48/0x80 [ 1054.154529][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1054.154547][ T29] ret_from_fork_asm+0x11/0x20 [ 1054.154582][ T29] [ 1054.160351][ T29] Kernel Offset: disabled [ 1054.680596][ T29] Rebooting in 86400 seconds..