last executing test programs: 8.244996196s ago: executing program 2 (id=10853): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'bridge0\x00', 0x100}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x2, 0xc2dfc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x10}, 0x2, 0x6, 0x6, 0x7, 0x81, 0x25, 0x3, 0x0, 0xfffffffe, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f00000004c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x112}) close(r1) r2 = gettid() r3 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x5, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x1411, 0x0, 0x80000001, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffff}, r2, 0xc, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000040)='\x02W\xc2\x03w\x00\x00T\xb0\xba \xe89\xaf\x00\x00\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="5400020029000b05d25a806f8c6394f90424fc602f0011", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) 7.479780076s ago: executing program 2 (id=10859): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x6, &(0x7f00000008c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000900)='GPL\x00', 0x5, 0x29e, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180011000000000000000e1208000f0100810401a8001600200001400300", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000200070002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x2e2, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000010000008500000007000000850000002300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="c8050000000000002900000005"], 0x5c8}, 0xf7e5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000180)={0x0, 0x810100, &(0x7f00000006c0)=[{&(0x7f0000000700)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 7.012505874s ago: executing program 3 (id=10861): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYBLOB="00000000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000800)=r1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619}, 0x38) 6.656979321s ago: executing program 1 (id=10865): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x10, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000001040)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001080)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={&(0x7f00000011c0)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r2}, &(0x7f00000013c0), &(0x7f0000001400)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/182, 0xb6}], 0x1}, 0x100b6) close(r2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000006c0), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000680)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7fffffffffffffff}, 0xd8c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="022200000400000004000000060000000000286a4cfbdb7900b2e80000f3e06b36decf2357482b7ed67184174a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000200), &(0x7f00000000c0)='GPL\x00', 0x5, 0xb7, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101c01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x1000}) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0c00000003000000040000000000010000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000000000000000f9282fbaf32feda7f8d3b50f4d158ce18e06fd3dabd2a2cd4489c842c665732a680343a7758cc00ba55f0543e3a8dafbfdc6af2f4b14056b8bd0ce21495780b011cc0ef6e6441589104cde99e4ce4df09cc2ad0d5a153a061f88be4ef186b579374eaff29d8159d9bc89120c451477be0c4129d612faf761db184805f29a62eb675a844656f0b0f0758cf9c68cf60a651d3a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000403000000000000000000000000000000000007ff000007ff"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x400f, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x48}, 0x40050) 6.477708279s ago: executing program 3 (id=10867): r0 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x1411, 0x0, 0x80000001, 0x5, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000040)='\x02W\xc2\x03w\x00\x00T\xb0\xba \xe89\xaf\x00\x00\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xffffff0a, &(0x7f0000000280)=[{&(0x7f00000002c0)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01720d1bd", 0x33fe0}], 0x1, 0x0, 0x700}, 0x0) 6.242701004s ago: executing program 2 (id=10868): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5.945059954s ago: executing program 4 (id=10869): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="0000320000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x90c4dfffc1e2a2dc, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x1000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x4, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xf0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)}], 0x1}, 0x4000080) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xfffffffffffffda4) sendmsg$kcm(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="2e00000010008188e6b62aa70172cc9f1ba1f8482e0000005e140602000000000e000a001000000002820000128c", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f0000000a40)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) 5.944721465s ago: executing program 1 (id=10870): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='GPL\x00', 0x5, 0x252, &(0x7f00000010c0)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000001200)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r2}, &(0x7f0000001480), &(0x7f00000014c0)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/182, 0xb6}], 0x1}, 0x100b6) 5.817072528s ago: executing program 2 (id=10871): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fffc) close(0x3) perf_event_open(&(0x7f0000001580)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0xffffff0a, &(0x7f00000016c0)=[{&(0x7f0000001700)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x15, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b2, 0x0, 0x0, 0x0, 0xe}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000ac0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x5, 0xd, 0x97e, 0x401}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x5, 0x5, 0x4, 0xa}, {0x2, 0x3, 0x9, 0x2}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@fallback=r1, 0x3, 0x0, 0x9, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000cc0)=[0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001140)=[0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0], 0x0, 0x2c, &(0x7f00000011c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000dc0)={@ifindex, r2, 0x5, 0x29, r3, @void, @void, @void, @value=r5, r4}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00') perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x33, &(0x7f0000001540), 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc225}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x48}, @generic={0x1, 0x4, 0x2, 0x0, 0x8b}, @alu={0x4, 0x1, 0x4, 0x7, 0x4, 0x0, 0x1}, @alu={0x4, 0x0, 0x3, 0xa, 0x4, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0xa6, &(0x7f0000000680)=""/166, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000008c0)=[{0x3, 0x3, 0xd, 0xc}, {0x1, 0x5, 0xc}, {0x3, 0x3, 0xd, 0xb}], 0x10, 0x5}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120) 5.778334262s ago: executing program 3 (id=10872): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5.390177992s ago: executing program 0 (id=10874): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xc00, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000000580)={&(0x7f00000005c0)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xfffffd9c, &(0x7f0000000540)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f003c805fb71621712811148ed08734843c8802033d05000000000000005c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ed7ee5de6ccd40dd68adbef", 0xd8}, {&(0x7f0000000500)}], 0x1, 0x0, 0xffffffffffffff2e, 0x7400}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 5.383843272s ago: executing program 2 (id=10875): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x24, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x1, 0x4000, r0}, 0x18) r3 = socket$kcm(0x2, 0x922000000001, 0x106) close(r3) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 5.30895101s ago: executing program 4 (id=10876): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x6f5f, 0x8000, 0x0, 0x0, 0x1000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11d81a, 0xac61, 0x209, 0x7, 0x9, 0x0, 0x200, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000940)={'veth1_to_hsr\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000000c0)={0x2, 0xd9, 0xe4, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffff00, 0x1}, 0x201, 0x7, 0x3, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0xffffff0a, &(0x7f0000000200)=[{&(0x7f0000000280)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=0x400000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000980)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000019c0), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000001a00)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000001a40)=ANY=[@ANYBLOB='8-N:'], 0x6a) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000800000009"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESOCT=r7, @ANYBLOB="9caf08acf32196b7b02499f0a1fc2dcd22d785a8230d05be5a61a30acbd78e436f5477ce20287e7775e30a9e4c4401246a5dfffd87411c992234713183d93c6316f55854b221f91f210983d59de1ab33fbeaa2a1faca5dfad5193653ea6372c9c1416b1ca73b52e99a2bd6f18e3a38d5a93aa90118714f669516f257ca1e062e1b29d5249c82e5ec8698ec24aa52fb5f6a2e1d9e08595dadf915b197ef3555545dba2df22524bfb179078f1f940b2eec72ca71089b385f33d5f108ee8908cd94c320cc83829b5c22b1df0529ca44229c7910b56508", @ANYRES8=r6], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r8}, 0xc) 5.305094571s ago: executing program 3 (id=10877): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYBLOB="00000000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000800)=r1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619}, 0x38) 4.791123964s ago: executing program 1 (id=10878): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000600)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af365040038001d001931a0e69ee517d34460bc16000000a705251e618294e83651f60a84c9f4d4938037e70e4509c5bb0000", 0xfedb}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a40)=""/277, 0x115}, {&(0x7f0000000c40)=""/248, 0xf8}, {&(0x7f0000001540)=""/4082, 0xff2}, {&(0x7f0000002540)=""/218, 0xda}, {&(0x7f0000002640)=""/215, 0xd7}, {&(0x7f0000002740)=""/163, 0xa3}, {&(0x7f0000002800)=""/154, 0x9a}], 0x7}, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000e80)={&(0x7f0000000b80)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/118, 0x76}], 0x1, &(0x7f0000000e00)=""/116, 0x74}, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x3, 0x0, &(0x7f0000000f80)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000001100)={r4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000001140)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000006c0)={'pim6reg0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2c0800, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f00000008c0)={'syzkaller0\x00', @random}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000001) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x40}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.653010822s ago: executing program 0 (id=10879): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x14, 0x20000, 0x0, 0x9}, 0x0, 0x400000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000300)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)="27032700590200000000002f1eafbcf706e10500000086ddffff1104ee162bd4b8bf4a82f6184b8a34f90186cee84400000000000000001900000000", 0x3c}, {&(0x7f0000000440)="63f805d7119496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/131, 0x83}, {&(0x7f00000006c0)="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", 0x1a1}, {&(0x7f0000000880)="6fe4dd9eeba3271dc700b58144028420f659013866dacd66dd1b8997b8e6584f5cb1076afdde0595a87f7349612eb54ded1dafb6fc6718280b20d113329a4751195ae95492356b1770341bb5ad43bc2631", 0x51}, {&(0x7f0000000900)="0b20dfc5cf657be121b2513a1c13a44e7167aa48d7ad20d6e64d6f2cfe37dbbfba6effbf208610802a824eb98292e0e894d75de383c1d4a1b982c350676fc5093607fc170eee72c2d763", 0x4a}, {&(0x7f0000000980)="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", 0x1ed}], 0x6}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.756885895s ago: executing program 4 (id=10880): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xe, &(0x7f0000000900)=ANY=[], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000900)=@l2tp6={0xa, 0x0, 0xbfff, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)='\x00\x00', 0x2}], 0x100000a2, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000014c0)="b9ff030f6044238cb89e14f065581bff88fbffff4000632f77fbac14142ce934a0a662079f4b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6}, r3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYBLOB="00000000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007032400000004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0x3a, 0x10, &(0x7f0000001380), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000001580)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000d40)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000e40)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510d9cdb42d4617b7cf000086a2f7a6e35dc227243e77a91959be879ef513328ea6b97905f099d95880ef66cc0a921408caf72d96577948ae0d4e8d28ef88e72fd83917941bd35e8bf654a9b11c3d4afa6323b52dd9271f0f6bc8005b7c2240f01e4b21092966c52b8be50e64686716af2b907908d76a7eed6ea4f9158b362b7a513de0bf", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x10001, 0xd0, &(0x7f0000000340)=""/208, 0x0, 0x8}, 0x94) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000800)=r9, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619}, 0x38) 2.544443246s ago: executing program 0 (id=10881): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.499009041s ago: executing program 3 (id=10882): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5c, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80047437, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffe8b) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xc0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x13a0}, 0x44811) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x1003, r2}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r3, 0x0) mkdir(&(0x7f00000007c0)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800), 0x200002, 0x0) mkdir(&(0x7f0000000840)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB='+pids'], 0x6) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900), 0x200002, 0x0) r7 = openat$cgroup_type(r4, &(0x7f0000000940), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000980), 0x9) r8 = openat$cgroup_subtree(r6, &(0x7f00000009c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000a00)=ANY=[], 0x6) 2.349160047s ago: executing program 1 (id=10883): r0 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x1411, 0x0, 0x80000001, 0x5, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000040)='\x02W\xc2\x03w\x00\x00T\xb0\xba \xe89\xaf\x00\x00\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xffffff0a, &(0x7f0000000280)=[{&(0x7f00000002c0)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01720d1bd", 0x33fe0}], 0x1, 0x0, 0xe00}, 0x0) 1.870514156s ago: executing program 0 (id=10884): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x43, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000091dc59b0e8b7ec31e1e152f15152a8e41c50c539c7ca6fa407c04e7dcbd14472ed76b6ea82a34d80bc18679421819a8110b80e901130f997e6cccbef36a7fd33405c7d0a4fb5f5c38d898342b1d82f281ee156f06cd66535cf257f242486ad8f3c6810a59934b81cacb189376b2c874918d36a1b70066b4c8af47b636c8b22643ca316c3fd59457350fc70517a76d0aad879e49908a794b49095aa5964b4755c56aada7e1344dcb5b07133412a51cff1c2081fad745b28d6089b298b0206a2fc1375fb0b30fa5a790c16b6a7ae823d34be2d9e30c4b7081c4045f8049260625d0d9ecb43f650ecef2b101e9ed38e423e581f0ffa5e0c"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffa}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000ac0)=r3, 0x4) sendmsg$kcm(r3, &(0x7f0000000fc0)={&(0x7f0000000b00)=@caif=@util={0x25, "19c6ba11f14f513a1f58b726275e01ce"}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)="e66d664e774ab0fdc1b042c50f2fdc322a200b51fbf83ccebcde13a63ea3a49d1b1616", 0x23}, {&(0x7f0000000bc0)="223e5c65bd61316d3517a6008f38cdea697ccc902136635285d4a37a3c503112256b3134197ad27448e174ecfbbdf5fa4895ea37c56a892fac93614a6bb809b3d3de11e091270faeb03b170b30a8cdcc695383eca277", 0x56}], 0x2, &(0x7f0000000c80)=[{0xe0, 0x0, 0x9, "458d26ea42fc7b2e2cd91a2857fe1ceedbb7ac93177acfc48c979d5a4a28700d3512b605546d5e07df2535f3c0751f942f2f259e1f64cf90dc436c262644ac2ac55407e551f912254461ffc1ee8b56654b5248b92d62c3f3100b75126935f498d62c83af5db577bd31d763d5fde1f0f3306f35dd6dcb9eea391030a72b8b2f1d5bf68481f344d2eddd604e7d0be8ac03ccaa733979313cb6254bfe8a27c202638959b15a7613cac608dabf2cd950179b968f59d60edca83ee0f01fe42940757f1d0c623a7a9a17c7e12a4e55bb64"}, {0x58, 0x114, 0x2, "3a06a198bdc615a7bdf1120ece05b3baae9a04477e2e05be04d86b5a9d3ec5565ebd543fefd56bfc2d0a8c08e3bc1c508c7201de7bf9690bc4957a1516531a1a01ba1c"}, {0x20, 0x10c, 0x7fffffff, "bb7839a1ec9237347e8d8a8d"}, {0x100, 0x115, 0x9, "7fb036c577fabd4f709c29362bc15f81846c037309f2e21be00bb56037d910c029db3d76cbdc92cd2da89913040495544a55e30fa137fdb771600b16cce7f03da6e03e387c9c485955c3c5059bfcae89e6ac7c64f3cab2c2d4174676e864573022b342321d43b47bd1c037732924224ec600471b6cc7302a361161cc60cd5166d8bef947f0ba729cc9ed9a8d312b3e3de0679cde1fdb8287bae83bad4e919ccd061473b08a5e69768a80566e5a12f394b602e3649c04b94d71a950d6c4b05805d551441b6995cd8b0b73ddfc5e4d8c0dda3ee7c9be2cc26c3541f1f306af51108d1fd53df8aff4e88a9bfb8eeeb6d9"}, {0xd0, 0x103, 0x5, "57a01dc2a45af6450a138f6d1bb491985532d7f525627dbbe903bab11a71e19b69aec8b7981cfe4952b29099f335df970e378f7b60310edd17b7f4235ef30c9df13530b15f4fbdc4578bf5c5a68b6b16793f304bc0a7655d3a0f6d5e1bbbac29e6a00871c123f3361172d06bd91cabd4f95ca875aa52e28788fe957bd770173fc4d043e93c8d57425fd7749f1c24e6a1f343382f35cb3357ccef697dcd283d3ab327aabed956ca6dfec29362a0cec75aa7c69cfccc9c847909e01e23c3"}], 0x328}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5b}}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xf) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@arena={0x21, 0x0, 0x0, 0xd, 0x60000, 0xffffffffffffffff, 0x4, '\x00', r7, r5, 0x0, 0x0, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = socket$kcm(0x15, 0x5, 0x0) close(r8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.860037068s ago: executing program 1 (id=10885): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fffc) close(0x3) perf_event_open(&(0x7f0000001580)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0xffffff0a, &(0x7f00000016c0)=[{&(0x7f0000001700)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x15, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b2, 0x0, 0x0, 0x0, 0xe}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000ac0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x5, 0xd, 0x97e, 0x401}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x5, 0x5, 0x4, 0xa}, {0x2, 0x3, 0x9, 0x2}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@fallback=r1, 0x3, 0x0, 0x9, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000cc0)=[0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001140)=[0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0], 0x0, 0x2c, &(0x7f00000011c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000dc0)={@ifindex, r2, 0x5, 0x29, r3, @void, @void, @void, @value=r5, r4}, 0x20) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00') perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x33, &(0x7f0000001540), 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc225}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x48}, @generic={0x1, 0x4, 0x2, 0x0, 0x8b}, @alu={0x4, 0x1, 0x4, 0x7, 0x4, 0x0, 0x1}, @alu={0x4, 0x0, 0x3, 0xa, 0x4, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0xa6, &(0x7f0000000680)=""/166, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000008c0)=[{0x3, 0x3, 0xd, 0xc}, {0x1, 0x5, 0xc}, {0x3, 0x3, 0xd, 0xb}], 0x10, 0x5}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120) 1.570884677s ago: executing program 4 (id=10886): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000880)=0x90) (async) ioctl$TUNSETOFFLOAD(r1, 0x80086601, 0x110e22fff8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x1c, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0xd, 0x6b, &(0x7f0000000c40)=""/107, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x2, 0x10, 0x80000000, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x1], &(0x7f0000000d80)=[{0x5, 0x2, 0xe}, {0x2, 0x4, 0xc, 0x1}, {0x1, 0x2, 0x10, 0x2}], 0x10, 0x6d0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000010000005d000000ff7f000018110000380197d3c85d933c1ae613e66a3ed1f4c66ead1d02a892efa7f7aab2e54ea097951b9a39", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018370000050000000000000000000000852000000500000018420000f8ffffff0000000000000000bf91000000000000b7020000010000008500000085000000b700000000000000950000000000"], &(0x7f0000000f80)='GPL\x00', 0x8, 0x1000, &(0x7f00000015c0)=""/4096, 0x41100, 0x30, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000025c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002600)={0x5, 0x1, 0x3, 0x1bc}, 0x10, 0x1a38c, 0xffffffffffffffff, 0x2, &(0x7f0000002640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002680)=[{0x4, 0x1, 0x4, 0x5}, {0x2, 0x4, 0x7, 0x4}], 0x10, 0x8a}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000026c0)={0xffffffffffffffff, r2, 0x4, r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002740), &(0x7f0000002780)='%pB \x00'}, 0x20) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000027c0)={r3, 0xe0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002900), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f00000029c0)=[{}, {}], 0x10, 0x10, &(0x7f0000002a00), &(0x7f0000002a40), 0x8, 0x40, 0x8, 0x8, &(0x7f0000002a80)}}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x19, 0x17, &(0x7f0000002b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002c40)='GPL\x00', 0x3, 0xec, &(0x7f0000002c80)=""/236, 0x40e00, 0x2e, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000002d80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002dc0)={0x1, 0x10, 0x48f4, 0x10}, 0x10, 0x0, r3, 0x0, &(0x7f0000002e00)=[0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ec0)={0x18, 0xc, &(0x7f0000002f80)=ANY=[@ANYBLOB="1808000000000000120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000003000)='GPL\x00'}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000003040)={0x16, 0x1c, &(0x7f0000003100)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcdd3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000003200)='GPL\x00', 0x7, 0xc, &(0x7f0000003240)=""/12, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003280)={0x1, 0x0, 0x2, 0x4}, 0x10, r6, r7, 0x1, &(0x7f00000032c0)=[r8], &(0x7f0000003300)=[{0x3, 0x3, 0x3, 0x8}], 0x10, 0xffffffff}, 0x94) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003340)='cgroup.kill\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000003380)=@bloom_filter={0x1e, 0x3ff, 0x327f, 0x100, 0x40000, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0xc}, 0x50) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x1d, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x31e, 0x0, 0x0, 0x0, 0xa77}, [@exit]}, &(0x7f0000000600)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x7, r1, 0x8, &(0x7f0000000a00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x7, 0x6, 0x1}, 0x10, r6, r0, 0x5, &(0x7f0000003480)=[r0, r9, r0, r0, r10, r0, r0, r0, r11, r0], &(0x7f00000034c0)=[{0x4, 0x1, 0xc, 0x5}, {0x4, 0x5, 0xd, 0x2}, {0x5, 0x2, 0x7, 0x1}, {0x5, 0x5, 0x9, 0x8}, {0x5, 0x4, 0x5, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @float={0xe, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x1}}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x4, 0x2}, @volatile={0x1}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000100)=""/138, 0x6a, 0x8a, 0x1, 0x7, 0x10000}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r13 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f0000000580)=r14, 0x4) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xda, 0xda, 0x6, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x4}, @const={0xd, 0x0, 0x0, 0xa, 0x2}, @ptr={0x7, 0x0, 0x0, 0x2, 0x3}, @union={0x2, 0x7, 0x0, 0x5, 0x1, 0x3, [{0x3, 0x4, 0xa6}, {0x1, 0x2, 0x3}, {0x1, 0x5, 0x8}, {0xe, 0x1}, {0x1, 0x1, 0xfffffff9}, {0x2, 0x1, 0x4}, {0x0, 0x5, 0xffffff80}]}, @datasec={0x10, 0x5, 0x0, 0xf, 0x2, [{0x1, 0x9, 0x5}, {0x5, 0x2, 0x7}, {0x2, 0xc, 0x6}, {0x2, 0x12}, {0x5, 0x0, 0x6a9}], "976a"}]}, {0x0, [0x2e, 0x61, 0x30, 0x4f]}}, &(0x7f0000000440)=""/153, 0xfa, 0x99, 0x0, 0x5, 0x10000}, 0x28) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1, 0x4, 0x100, 0x0, r0, 0x0, '\x00', r12, r15, 0x0, 0x0, 0x2}, 0x50) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x16, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150102000000002018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r17, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.465356269s ago: executing program 2 (id=10887): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/208, 0x1a, 0xd0, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0xa5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x7, 0xa, 0x0, &(0x7f0000000840)='GPL\x00', 0x4}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000880)={&(0x7f00000008c0)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x811) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0xa, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="11000000580081044e81f782db44b90402", 0x11}], 0x1}, 0x84884) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000a40)=r0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000ac0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfe23, 0x0, 0x0, 0x1f00c00e}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0xb, &(0x7f0000000d40)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x1, 0x100000, &(0x7f0000000dc0)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000100dc0)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000100e00)={0x0, 0x0, &(0x7f0000100e40), 0x0, &(0x7f0000100e80)}, 0x60000002) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 1.456054379s ago: executing program 0 (id=10888): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='GPL\x00', 0x5, 0x252, &(0x7f00000010c0)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000001200)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r2}, &(0x7f0000001480), &(0x7f00000014c0)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/182, 0xb6}], 0x1}, 0x100b6) 1.25853884s ago: executing program 1 (id=10889): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xc00, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000000580)={&(0x7f00000005c0)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xfffffd9c, &(0x7f0000000540)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f003c805fb71621712811148ed08734843c8802033d05000000000000005c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ed7ee5de6ccd40dd68adbef", 0xd8}, {&(0x7f0000000500)}], 0x1, 0x0, 0xffffffffffffff2e, 0x7400}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.208951265s ago: executing program 4 (id=10890): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 214.189387ms ago: executing program 3 (id=10891): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x8, 0x2, 0x3, 0x3, 0x0, 0x6a, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x40, 0x7, 0x7, 0x4, 0x3, 0x7, 0x7, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0x1, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040ead95667e006dcdf63951f225ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000580)="f1f2a8e261f1af420d90849e4c2d44d5d133ff828535a5fddb1b28", 0x1b}], 0x2, 0x0, 0x0, 0x7400}, 0x4048000) 198.655329ms ago: executing program 0 (id=10892): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$kcm(0xa, 0x5, 0x0) (async, rerun: 64) r4 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000040), 0x4) (async, rerun: 32) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, 0x0, 0x0) (rerun: 32) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, 0x0, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) (rerun: 64) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b80)={&(0x7f0000000780)="57d927b2b26111e21055a7e92ab280f7aefe7e04d43cd42645f5b28d1ff08b3b5f13def111a665b3ec57fb1d0a1d83c9dc4430806ee36beb0ecbd770767c6fb5ec3ccb5cdb56bf194336d77b709423e03e379f9eac48b71b4294799a11fc396ba43998e2aa2123a17c312d2e0f448daa9ed585fd9ff1154d2e736cd1b0be9fa8f6ac832be4fd0f314c643477c491510a500d3f75ed7b1d183783c59dcd3000e281d33a2fe5489e13e642670bfeada9991d4191f46e", &(0x7f0000000840)=""/96, &(0x7f00000008c0)="5a645d450fae45a66de8251ad88b52776975505fea297f0df50ad8b0a9b8c6021fa177968862ef592cc3b6ba4018b84b17aae7f43a351f4ef87a08d7db141c96d3dd856b286042620eab0baec11d952a6ffd6739e95fc370dd345b63675710164cc82b1e516ab5b11e12199a937c75774c4b4ae9979ef26910319742fa0aabe9adf89b70979133c3f56451f231e2f9dbcae6763b0e4c54f54a9a3ba64fc3627e738679d398de56782c8390389fc9a0c26d0717da6c5dc6a95dd03cbb21fe34d476aacf1a5a8ac380392450c2c8202243923eff7e7bc2cc5eeb1dece674c7e19c8536f55638", &(0x7f0000000a80)="e53044ede2064223892fadf5aedce61ff51a9a569f3a3cf76c4862363eaa6a3ea9cb8a05f7ebfea5c9801bdc79f72a95e08c19fb9aca0c4e8ef65fe76c32377e7dc3f2ee6e4520fc3ba490952c3c277eab5d3c24175ec4f0c66a09c4354842828e0735bd2895ad3cd2f745cb0495329d2930cd3a809dc6fe46a1e7cf93f138800c4499c22b4da1d026cd3b050a654c782375b2f2809bafa414b73b25b5784887bda8c4103b902b320a1ca101740539c7089ea635d57b346500c5522b92e77306a7abab1eb6a46b4ba825067181965c5b4d6958b67e947b2de25e9353", 0x3, r5, 0x4}, 0x38) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000ad4e00181900765ad4c64001c57fa0255827fe108f88ca61b66747731f4c68536ae30c6368ff3c8b5657503b030f13c8c6ba0000", @ANYBLOB="f792ba0faeb46bb78e283a41dc0629ab9e5d0c1a59d6946f4fe4892de85f307780dc3585681999e775c9c9173d3bd3d1686a06b0d60dd4142f67dd9be0d7346b58cf55871fc3d3267a5679de9c4b48fffe83121f486a377971ac6bf8e10b26f10abeca6ca5731700775763f4fc4f0b5ac5cfef7414a3e277d937f180c596cc267b08a0303c5479493ba0864e4aa5c5d2142f73", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x5, 0xe, 0x0, &(0x7f0000000700)="259f8863a9a34400000200000000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700", 0x2c}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 0s ago: executing program 4 (id=10893): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYBLOB="00000000faffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000800)=r1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619}, 0x38) kernel console output (not intermixed with test programs): 3'. [ 2214.561627][T13256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10175'. [ 2214.744030][T13257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10175'. [ 2214.968606][T13263] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.10176'. [ 2215.052912][T13263] netlink: 'syz.2.10176': attribute type 10 has an invalid length. [ 2215.614315][T13281] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10180'. [ 2215.859128][T13290] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.906291][T13328] netlink: 'syz.2.10192': attribute type 11 has an invalid length. [ 2216.930947][T13328] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10192'. [ 2218.060045][T13343] netlink: 'syz.2.10197': attribute type 11 has an invalid length. [ 2218.097322][T13343] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10197'. [ 2218.115586][T13350] €Â: renamed from bridge_slave_0 [ 2222.661227][T13382] netlink: 'syz.3.10206': attribute type 10 has an invalid length. [ 2222.699020][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10206'. [ 2222.902565][T13386] netlink: 'syz.1.10208': attribute type 3 has an invalid length. [ 2222.912142][T13386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10208'. [ 2223.125025][T13390] netlink: 'syz.0.10211': attribute type 11 has an invalid length. [ 2223.156585][T13390] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10211'. [ 2223.452483][T13404] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10215'. [ 2224.156867][T13414] netlink: 'syz.1.10220': attribute type 13 has an invalid length. [ 2224.294931][T13414] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.10220'. [ 2224.886556][T13423] netlink: 'syz.2.10221': attribute type 27 has an invalid length. [ 2224.915418][T13423] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10221'. [ 2225.644053][T16028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2225.655306][T16028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2225.672144][T16028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2225.682040][T16028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2225.691205][T16028] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2225.699308][T16028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2225.783722][T13432] rxe_eth0 speed is unknown, defaulting to 1000 [ 2226.055046][T13440] netlink: 'syz.2.10224': attribute type 6 has an invalid length. [ 2227.016466][T13432] chnl_net:caif_netlink_parms(): no params data found [ 2227.025767][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.025818][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.142322][T13450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10228'. [ 2227.188385][T13453] netlink: 'syz.3.10226': attribute type 11 has an invalid length. [ 2227.202123][T13453] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10226'. [ 2227.404415][ T8739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.654734][ T8739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.741016][T16028] Bluetooth: hci5: command 0x0409 tx timeout [ 2227.778900][T13432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.790571][T13432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2227.801311][T13432] device bridge_slave_0 entered promiscuous mode [ 2227.873160][ T8739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.905244][T13432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.913135][T13432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.933001][T13432] device bridge_slave_1 entered promiscuous mode [ 2228.011923][ T8739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.065507][T13470] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10233'. [ 2228.123849][T13432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2228.190158][T13432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2228.299230][T13432] team0: Port device team_slave_0 added [ 2228.350309][T13432] team0: Port device team_slave_1 added [ 2228.453625][T13432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2228.480647][T13432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2228.538954][T13432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2228.674314][T13432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2228.685195][T13432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2228.728403][T13432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2228.993030][T13488] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10238'. [ 2229.013567][T13432] device hsr_slave_0 entered promiscuous mode [ 2229.041678][T13432] device hsr_slave_1 entered promiscuous mode [ 2229.065317][T13432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2229.093223][T13432] Cannot create hsr debugfs directory [ 2229.323878][T13500] netlink: 'syz.1.10240': attribute type 11 has an invalid length. [ 2229.366886][T13500] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10240'. [ 2229.486175][T13503] netlink: 'syz.0.10242': attribute type 21 has an invalid length. [ 2229.494878][T13503] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10242'. [ 2229.585634][T13503] netlink: 'syz.0.10242': attribute type 10 has an invalid length. [ 2229.821782][T16028] Bluetooth: hci5: command 0x041b tx timeout [ 2229.946166][T13503] team0: Device gre0 is of different type [ 2230.322603][ T8739] device gretap0 left promiscuous mode [ 2230.328243][ T8739] Ÿë: port 2(gretap0) entered disabled state [ 2230.402278][T13519] netlink: 'syz.1.10246': attribute type 10 has an invalid length. [ 2230.412984][T13519] team0: Device nlmon0 is of different type [ 2231.008446][T13534] netlink: 'syz.1.10249': attribute type 29 has an invalid length. [ 2231.077664][T13534] netlink: 'syz.1.10249': attribute type 29 has an invalid length. [ 2231.103788][T13535] netlink: 'syz.1.10249': attribute type 29 has an invalid length. [ 2231.121164][T13534] netlink: 'syz.1.10249': attribute type 29 has an invalid length. [ 2231.158994][T13534] netlink: 'syz.1.10249': attribute type 29 has an invalid length. [ 2231.901061][T16028] Bluetooth: hci5: command 0x040f tx timeout [ 2232.369628][T13556] netlink: 'syz.1.10254': attribute type 11 has an invalid length. [ 2232.497063][T13556] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10254'. [ 2232.744002][T13432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2233.981509][T16028] Bluetooth: hci5: command 0x0419 tx timeout [ 2234.898222][ T8739] device veth0_to_team left promiscuous mode [ 2234.917636][ T8739] Ÿë: port 1(veth0_to_team) entered disabled state [ 2234.996326][ T8739] device hsr_slave_0 left promiscuous mode [ 2235.020233][ T8739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2235.041017][ T8739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2235.113830][ T8739] device veth1_macvtap left promiscuous mode [ 2235.150368][ T8739] device veth1_vlan left promiscuous mode [ 2235.195877][ T8739] device veth0_vlan left promiscuous mode [ 2236.886173][T13432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2236.915512][T13432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2236.951843][T13432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2237.260339][T13612] netlink: 'syz.0.10266': attribute type 11 has an invalid length. [ 2237.351816][T13612] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10266'. [ 2237.442854][T13432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2237.492893][T13432] 8021q: adding VLAN 0 to HW filter on device team0 [ 2237.540617][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2237.559373][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2237.601108][T13617] netlink: 'syz.2.10269': attribute type 5 has an invalid length. [ 2237.639796][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2237.662551][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2237.702671][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 2237.709880][ T7554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2237.759260][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2237.822508][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2237.861622][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 2237.868852][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2237.931740][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2238.002736][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2238.041611][T13632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10271'. [ 2238.193213][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2238.249358][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2238.347264][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2238.400497][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2238.478767][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2238.500057][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2238.554649][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2238.600098][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2238.643590][T13432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2238.700756][T13432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2238.762106][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2238.771542][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2239.043151][T13650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2239.050976][T13650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2239.059900][T13650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2239.073539][T13650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2239.111505][T13650] batman_adv: batadv0: Interface deactivated: vlan1 [ 2239.125689][T13650] batman_adv: batadv0: Removing interface: vlan1 [ 2239.654766][T13677] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.10277'. [ 2239.956499][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2239.967638][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2240.011629][T13432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2240.306090][T13697] netlink: 'syz.0.10281': attribute type 11 has an invalid length. [ 2240.331086][T13697] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10281'. [ 2240.406189][T13700] netlink: 'syz.2.10282': attribute type 2 has an invalid length. [ 2241.139590][T13709] rxe_eth0 speed is unknown, defaulting to 1000 [ 2241.332439][T13725] netlink: 'syz.1.10285': attribute type 21 has an invalid length. [ 2241.340505][T13725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10285'. [ 2241.531636][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2241.564043][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2241.716370][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2241.725546][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2241.737736][T13432] device veth0_vlan entered promiscuous mode [ 2241.791803][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2241.803407][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2241.823217][T13432] device veth1_vlan entered promiscuous mode [ 2241.897526][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2241.916627][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2241.935182][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2241.955977][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2241.978655][T13432] device veth0_macvtap entered promiscuous mode [ 2242.090148][T13432] device veth1_macvtap entered promiscuous mode [ 2242.149249][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.160071][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.195669][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.236213][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.270975][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2242.302059][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.329416][T13432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2242.376250][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2242.392462][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2242.422524][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2242.448489][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2242.487851][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.511561][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.530959][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.543262][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.604834][T13753] netlink: 'syz.0.10292': attribute type 11 has an invalid length. [ 2242.613654][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2242.640847][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2242.661964][T13432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2242.675035][T13753] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10292'. [ 2242.698111][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2242.708380][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2242.729684][T13432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.756805][T13432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.785061][T13432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.800191][T13432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2243.192567][ T8721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2243.210120][ T8721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.249134][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2243.395222][ T7554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2243.412724][ T7554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.440665][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2243.974127][T13775] : port 1(gretap0) entered blocking state [ 2243.980325][T13775] : port 1(gretap0) entered disabled state [ 2244.015967][T13775] device gretap0 entered promiscuous mode [ 2244.376285][T13782] netlink: 'syz.0.10297': attribute type 10 has an invalid length. [ 2244.410969][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10297'. [ 2245.322458][T13822] netlink: 'syz.4.10303': attribute type 11 has an invalid length. [ 2245.378417][T13822] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10303'. [ 2246.538506][T13836] netlink: 'syz.1.10305': attribute type 12 has an invalid length. [ 2246.553898][T16028] Bluetooth: hci3: unknown advertising packet type: 0x3a [ 2246.553984][T16028] Bluetooth: hci3: unknown advertising packet type: 0x64 [ 2246.663980][T13836] netlink: 'syz.1.10305': attribute type 15 has an invalid length. [ 2247.145738][T13855] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10312'. [ 2248.740569][T13836] netlink: 763 bytes leftover after parsing attributes in process `syz.1.10305'. [ 2249.600190][T13886] netlink: 'syz.0.10317': attribute type 11 has an invalid length. [ 2249.671370][T13886] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10317'. [ 2249.768090][T13889] netlink: 'syz.3.10320': attribute type 16 has an invalid length. [ 2249.797503][T13889] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10320'. [ 2249.868066][T13892] netlink: 'syz.4.10323': attribute type 3 has an invalid length. [ 2249.942601][T13892] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10323'. [ 2249.954725][T13889] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10320'. [ 2249.990978][T13889] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10320'. [ 2250.000124][T13889] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10320'. [ 2250.013757][T13896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10321'. [ 2250.111190][T13896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10321'. [ 2250.146853][T13892] netlink: 'syz.4.10323': attribute type 11 has an invalid length. [ 2250.218252][T13892] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.10323'. [ 2250.304691][T13892] netlink: 'syz.4.10323': attribute type 11 has an invalid length. [ 2250.371761][T13892] netlink: 'syz.4.10323': attribute type 11 has an invalid length. [ 2250.484006][T13892] netlink: 'syz.4.10323': attribute type 11 has an invalid length. [ 2250.586480][T13892] netlink: 'syz.4.10323': attribute type 11 has an invalid length. [ 2252.983759][T13943] netlink: 'syz.4.10334': attribute type 11 has an invalid length. [ 2254.732994][T13977] netlink: 'syz.0.10340': attribute type 10 has an invalid length. [ 2255.123127][T13977] team0 (unregistering): Port device team_slave_0 removed [ 2255.218397][T13977] team0 (unregistering): Port device team_slave_1 removed [ 2255.306007][T13977] team0 (unregistering): Port device geneve1 removed [ 2255.484565][T13985] __nla_validate_parse: 6 callbacks suppressed [ 2255.484587][T13985] netlink: 122404 bytes leftover after parsing attributes in process `syz.3.10343'. [ 2257.098258][T14015] netlink: 'syz.3.10350': attribute type 15 has an invalid length. [ 2257.167783][T14015] netlink: 'syz.3.10350': attribute type 7 has an invalid length. [ 2257.188933][T14017] netlink: 'syz.2.10348': attribute type 11 has an invalid length. [ 2257.292339][T14017] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10348'. [ 2257.577182][T14020] netlink: 'syz.0.10351': attribute type 21 has an invalid length. [ 2257.650967][T14020] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10351'. [ 2257.660370][T14020] netlink: 'syz.0.10351': attribute type 5 has an invalid length. [ 2257.730936][T14020] netlink: 'syz.0.10351': attribute type 6 has an invalid length. [ 2257.738876][T14020] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10351'. [ 2257.822348][T14023] netlink: 'syz.0.10351': attribute type 21 has an invalid length. [ 2257.902163][T14023] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10351'. [ 2257.925001][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10351'. [ 2258.382683][T14030] netlink: 'syz.3.10355': attribute type 39 has an invalid length. [ 2258.843553][T14030] device hsr_slave_1 left promiscuous mode [ 2260.107672][T14067] netlink: 'syz.3.10363': attribute type 11 has an invalid length. [ 2260.166774][T14067] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10363'. [ 2264.132676][T14090] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10368'. [ 2264.372785][T14098] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10370'. [ 2264.566302][T14102] netlink: 'syz.2.10372': attribute type 29 has an invalid length. [ 2264.629319][T14102] netlink: 'syz.2.10372': attribute type 29 has an invalid length. [ 2264.668335][T14103] netlink: 'syz.2.10372': attribute type 29 has an invalid length. [ 2264.691532][T14108] FAULT_INJECTION: forcing a failure. [ 2264.691532][T14108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.721020][T14109] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.10374'. [ 2264.739567][T14108] CPU: 0 PID: 14108 Comm: syz.3.10375 Not tainted syzkaller #0 [ 2264.747302][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2264.756532][T14103] netlink: 'syz.2.10372': attribute type 29 has an invalid length. [ 2264.757384][T14108] Call Trace: [ 2264.757396][T14108] [ 2264.757406][T14108] dump_stack_lvl+0x188/0x24e [ 2264.776469][T14108] ? show_regs_print_info+0x12/0x12 [ 2264.781737][T14108] ? load_image+0x410/0x410 [ 2264.786396][T14108] ? __lock_acquire+0x7ea0/0x7ea0 [ 2264.791497][T14108] should_fail_ex+0x390/0x4c0 [ 2264.796238][T14108] _copy_from_user+0x2c/0x170 [ 2264.800951][T14108] iovec_from_user+0x143/0x360 [ 2264.805763][T14108] __import_iovec+0x6c/0x510 [ 2264.810399][T14108] import_iovec+0x6f/0xa0 [ 2264.814777][T14108] ___sys_sendmsg+0x252/0x360 [ 2264.819589][T14108] ? __sys_sendmsg+0x2a0/0x2a0 [ 2264.824406][T14108] ? __lock_acquire+0x7ea0/0x7ea0 [ 2264.829490][T14108] __se_sys_sendmsg+0x1c3/0x2b0 [ 2264.834497][T14108] ? __x64_sys_sendmsg+0x80/0x80 [ 2264.839498][T14108] ? lockdep_hardirqs_on+0x94/0x140 [ 2264.844773][T14108] do_syscall_64+0x4c/0xa0 [ 2264.849242][T14108] ? clear_bhb_loop+0x60/0xb0 [ 2264.853955][T14108] ? clear_bhb_loop+0x60/0xb0 [ 2264.858663][T14108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2264.864613][T14108] RIP: 0033:0x7f556339f559 [ 2264.869070][T14108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2264.888821][T14108] RSP: 002b:00007f55641c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2264.897271][T14108] RAX: ffffffffffffffda RBX: 00007f5563625fa0 RCX: 00007f556339f559 [ 2264.905281][T14108] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2264.913284][T14108] RBP: 00007f55641c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2264.921370][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.929395][T14108] R13: 00007f5563626038 R14: 00007f5563625fa0 R15: 00007fff1eb28de8 [ 2264.937412][T14108] [ 2264.950673][T14109] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2264.970205][T14109] CPU: 0 PID: 14109 Comm: syz.0.10374 Not tainted syzkaller #0 [ 2264.973848][T14111] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.10372'. [ 2264.977824][T14109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2264.977845][T14109] Call Trace: [ 2264.977855][T14109] [ 2264.977867][T14109] dump_stack_lvl+0x188/0x24e [ 2264.977905][T14109] ? show_regs_print_info+0x12/0x12 [ 2264.977932][T14109] ? load_image+0x410/0x410 [ 2265.018487][T14109] sysfs_warn_dup+0x8a/0xa0 [ 2265.023076][T14109] sysfs_do_create_link_sd+0xc0/0x110 [ 2265.028536][T14109] device_add+0x83b/0x1050 [ 2265.033051][T14109] wiphy_register+0x1d8b/0x2aa0 [ 2265.038001][T14109] ? cfg80211_event_work+0x40/0x40 [ 2265.041477][T14111] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2265.043197][T14109] ? minstrel_ht_alloc+0x894/0xa20 [ 2265.056233][T14109] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2265.061943][T14111] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.10372'. [ 2265.062356][T14109] ieee80211_register_hw+0x2e33/0x3b00 [ 2265.072594][T14111] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2265.077255][T14109] ? ieee80211_register_hw+0xf01/0x3b00 [ 2265.077301][T14109] ? ieee80211_register_hw+0xf01/0x3b00 [ 2265.077348][T14109] ? ieee80211_tasklet_handler+0x20/0x20 [ 2265.102091][T14109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2265.108090][T14109] ? __debug_object_init+0xed/0x440 [ 2265.113361][T14109] ? memset+0x1e/0x40 [ 2265.117402][T14109] ? __hrtimer_init+0x189/0x270 [ 2265.122338][T14109] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2265.128180][T14109] ? memcpy+0x3c/0x60 [ 2265.132238][T14109] hwsim_new_radio_nl+0xab7/0xc90 [ 2265.137367][T14109] genl_family_rcv_msg_doit+0x22f/0x350 [ 2265.143000][T14109] ? end_current_label_crit_section+0x170/0x170 [ 2265.143040][T14111] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.10372'. [ 2265.149306][T14109] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2265.149352][T14109] ? bpf_lsm_capable+0x5/0x10 [ 2265.149382][T14109] ? security_capable+0x85/0xb0 [ 2265.174333][T14109] genl_rcv_msg+0x601/0x790 [ 2265.178909][T14109] ? genl_bind+0x360/0x360 [ 2265.183377][T14109] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2265.189797][T14109] netlink_rcv_skb+0x1ef/0x440 [ 2265.194619][T14109] ? genl_bind+0x360/0x360 [ 2265.199097][T14109] ? netlink_ack+0x1160/0x1160 [ 2265.203910][T14109] ? down_read+0x1a8/0x2d0 [ 2265.208364][T14109] genl_rcv+0x24/0x40 [ 2265.212376][T14109] netlink_unicast+0x7ad/0x920 [ 2265.217209][T14109] netlink_sendmsg+0x8ad/0xbd0 [ 2265.222039][T14109] ? netlink_getsockopt+0x550/0x550 [ 2265.227280][T14109] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2265.232870][T14109] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2265.238191][T14109] ? security_socket_sendmsg+0x7c/0xa0 [ 2265.243692][T14109] ? netlink_getsockopt+0x550/0x550 [ 2265.248934][T14109] ____sys_sendmsg+0x5ed/0x9a0 [ 2265.253766][T14109] ? __sys_sendmsg_sock+0x30/0x30 [ 2265.258836][T14109] ? __import_iovec+0x306/0x510 [ 2265.263731][T14109] ? import_iovec+0x6f/0xa0 [ 2265.268275][T14109] ___sys_sendmsg+0x2a2/0x360 [ 2265.272999][T14109] ? __sys_sendmsg+0x2a0/0x2a0 [ 2265.277846][T14109] __se_sys_sendmsg+0x1c3/0x2b0 [ 2265.282760][T14109] ? __x64_sys_sendmsg+0x80/0x80 [ 2265.287752][T14109] ? lockdep_hardirqs_on+0x94/0x140 [ 2265.292988][T14109] do_syscall_64+0x4c/0xa0 [ 2265.297453][T14109] ? clear_bhb_loop+0x60/0xb0 [ 2265.302180][T14109] ? clear_bhb_loop+0x60/0xb0 [ 2265.306978][T14109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2265.312928][T14109] RIP: 0033:0x7f41c759f559 [ 2265.317369][T14109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2265.337089][T14109] RSP: 002b:00007f41c8390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2265.345541][T14109] RAX: ffffffffffffffda RBX: 00007f41c7825fa0 RCX: 00007f41c759f559 [ 2265.353549][T14109] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2265.361551][T14109] RBP: 00007f41c7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 2265.370004][T14109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2265.378093][T14109] R13: 00007f41c7826038 R14: 00007f41c7825fa0 R15: 00007ffe3c1aa7a8 [ 2265.386286][T14109] [ 2265.390326][T14111] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2265.583231][T14103] netlink: 'syz.2.10372': attribute type 29 has an invalid length. [ 2265.814762][T14133] netlink: 'syz.2.10379': attribute type 10 has an invalid length. [ 2266.190189][T14139] netlink: 'syz.3.10381': attribute type 11 has an invalid length. [ 2266.209242][T14139] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10381'. [ 2266.527502][T14142] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.10383'. [ 2266.564102][T14142] openvswitch: netlink: Flow actions attr not present in new flow. [ 2266.605423][T14143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10384'. [ 2267.117963][T14154] FAULT_INJECTION: forcing a failure. [ 2267.117963][T14154] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.165972][T14154] CPU: 1 PID: 14154 Comm: syz.4.10388 Not tainted syzkaller #0 [ 2267.173668][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2267.183774][T14154] Call Trace: [ 2267.187107][T14154] [ 2267.190089][T14154] dump_stack_lvl+0x188/0x24e [ 2267.194829][T14154] ? show_regs_print_info+0x12/0x12 [ 2267.200099][T14154] ? load_image+0x410/0x410 [ 2267.204685][T14154] ? __might_sleep+0xd0/0xd0 [ 2267.209361][T14154] ? __lock_acquire+0x7ea0/0x7ea0 [ 2267.214462][T14154] ? verify_lock_unused+0x140/0x140 [ 2267.219733][T14154] should_fail_ex+0x390/0x4c0 [ 2267.224486][T14154] should_failslab+0x5/0x20 [ 2267.229058][T14154] slab_pre_alloc_hook+0x59/0x300 [ 2267.234148][T14154] ? __get_vm_area_node+0x122/0x330 [ 2267.239442][T14154] __kmem_cache_alloc_node+0x4f/0x270 [ 2267.244896][T14154] ? __get_vm_area_node+0x122/0x330 [ 2267.250164][T14154] kmalloc_node_trace+0x22/0xe0 [ 2267.255075][T14154] __get_vm_area_node+0x122/0x330 [ 2267.260167][T14154] ? __local_bh_enable_ip+0x136/0x1c0 [ 2267.265612][T14154] __vmalloc_node_range+0x357/0x1380 [ 2267.270982][T14154] ? netlink_sendmsg+0x5ec/0xbd0 [ 2267.276191][T14154] ? netlink_insert+0x28d/0x13b0 [ 2267.281213][T14154] ? free_vm_area+0x50/0x50 [ 2267.285801][T14154] ? netlink_sendmsg+0x5ec/0xbd0 [ 2267.290820][T14154] vmalloc+0x75/0x80 [ 2267.294790][T14154] ? netlink_sendmsg+0x5ec/0xbd0 [ 2267.299818][T14154] netlink_sendmsg+0x5ec/0xbd0 [ 2267.304689][T14154] ? netlink_getsockopt+0x550/0x550 [ 2267.309966][T14154] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2267.315594][T14154] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2267.320929][T14154] ? security_socket_sendmsg+0x7c/0xa0 [ 2267.326470][T14154] ? netlink_getsockopt+0x550/0x550 [ 2267.331766][T14154] ____sys_sendmsg+0x5ed/0x9a0 [ 2267.336607][T14154] ? __sys_sendmsg_sock+0x30/0x30 [ 2267.341692][T14154] ? __import_iovec+0x306/0x510 [ 2267.346623][T14154] ? import_iovec+0x6f/0xa0 [ 2267.351193][T14154] ___sys_sendmsg+0x2a2/0x360 [ 2267.355943][T14154] ? __sys_sendmsg+0x2a0/0x2a0 [ 2267.360783][T14154] ? __lock_acquire+0x7ea0/0x7ea0 [ 2267.365895][T14154] __se_sys_sendmsg+0x1c3/0x2b0 [ 2267.370838][T14154] ? __x64_sys_sendmsg+0x80/0x80 [ 2267.375855][T14154] ? lockdep_hardirqs_on+0x94/0x140 [ 2267.381127][T14154] do_syscall_64+0x4c/0xa0 [ 2267.385591][T14154] ? clear_bhb_loop+0x60/0xb0 [ 2267.390327][T14154] ? clear_bhb_loop+0x60/0xb0 [ 2267.395054][T14154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2267.401006][T14154] RIP: 0033:0x7f57a859f559 [ 2267.405464][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2267.425319][T14154] RSP: 002b:00007f57a9399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2267.433790][T14154] RAX: ffffffffffffffda RBX: 00007f57a8825fa0 RCX: 00007f57a859f559 [ 2267.441816][T14154] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2267.449906][T14154] RBP: 00007f57a9399090 R08: 0000000000000000 R09: 0000000000000000 [ 2267.457943][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2267.465982][T14154] R13: 00007f57a8826038 R14: 00007f57a8825fa0 R15: 00007fffd51fb818 [ 2267.474018][T14154] [ 2267.518630][T14159] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.10389'. [ 2267.595531][T14159] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2267.631191][T14154] syz.4.10388: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2267.646904][T14159] CPU: 1 PID: 14159 Comm: syz.2.10389 Not tainted syzkaller #0 [ 2267.654538][T14159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2267.664662][T14159] Call Trace: [ 2267.667998][T14159] [ 2267.670996][T14159] dump_stack_lvl+0x188/0x24e [ 2267.675741][T14159] ? show_regs_print_info+0x12/0x12 [ 2267.681132][T14159] ? load_image+0x410/0x410 [ 2267.685726][T14159] sysfs_warn_dup+0x8a/0xa0 [ 2267.690313][T14159] sysfs_do_create_link_sd+0xc0/0x110 [ 2267.696202][T14159] device_add+0x83b/0x1050 [ 2267.700696][T14159] wiphy_register+0x1d8b/0x2aa0 [ 2267.705647][T14159] ? cfg80211_event_work+0x40/0x40 [ 2267.710833][T14159] ? minstrel_ht_alloc+0x894/0xa20 [ 2267.716033][T14159] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2267.722178][T14159] ieee80211_register_hw+0x2e33/0x3b00 [ 2267.727745][T14159] ? ieee80211_register_hw+0xf01/0x3b00 [ 2267.733381][T14159] ? ieee80211_register_hw+0xf01/0x3b00 [ 2267.739018][T14159] ? ieee80211_tasklet_handler+0x20/0x20 [ 2267.744755][T14159] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2267.750746][T14159] ? __debug_object_init+0xed/0x440 [ 2267.756012][T14159] ? memset+0x1e/0x40 [ 2267.760058][T14159] ? __hrtimer_init+0x189/0x270 [ 2267.764975][T14159] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2267.770758][T14159] ? memcpy+0x3c/0x60 [ 2267.774799][T14159] hwsim_new_radio_nl+0xab7/0xc90 [ 2267.779877][T14159] genl_family_rcv_msg_doit+0x22f/0x350 [ 2267.785467][T14159] ? end_current_label_crit_section+0x170/0x170 [ 2267.791783][T14159] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2267.797741][T14159] ? bpf_lsm_capable+0x5/0x10 [ 2267.802498][T14159] ? security_capable+0x85/0xb0 [ 2267.807444][T14159] genl_rcv_msg+0x601/0x790 [ 2267.812028][T14159] ? lock_chain_count+0x20/0x20 [ 2267.816919][T14159] ? genl_bind+0x360/0x360 [ 2267.821366][T14159] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2267.827758][T14159] netlink_rcv_skb+0x1ef/0x440 [ 2267.832569][T14159] ? genl_bind+0x360/0x360 [ 2267.837032][T14159] ? netlink_ack+0x1160/0x1160 [ 2267.841845][T14159] ? down_read+0x1a8/0x2d0 [ 2267.846312][T14159] genl_rcv+0x24/0x40 [ 2267.850327][T14159] netlink_unicast+0x7ad/0x920 [ 2267.855144][T14159] netlink_sendmsg+0x8ad/0xbd0 [ 2267.859954][T14159] ? netlink_getsockopt+0x550/0x550 [ 2267.865185][T14159] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2267.870769][T14159] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2267.876088][T14159] ? security_socket_sendmsg+0x7c/0xa0 [ 2267.881586][T14159] ? netlink_getsockopt+0x550/0x550 [ 2267.886822][T14159] ____sys_sendmsg+0x5ed/0x9a0 [ 2267.891641][T14159] ? __sys_sendmsg_sock+0x30/0x30 [ 2267.896700][T14159] ? __import_iovec+0x306/0x510 [ 2267.901597][T14159] ? import_iovec+0x6f/0xa0 [ 2267.906139][T14159] ___sys_sendmsg+0x2a2/0x360 [ 2267.910861][T14159] ? __sys_sendmsg+0x2a0/0x2a0 [ 2267.915708][T14159] __se_sys_sendmsg+0x1c3/0x2b0 [ 2267.920593][T14159] ? __x64_sys_sendmsg+0x80/0x80 [ 2267.925579][T14159] ? lockdep_hardirqs_on+0x94/0x140 [ 2267.930816][T14159] do_syscall_64+0x4c/0xa0 [ 2267.935258][T14159] ? clear_bhb_loop+0x60/0xb0 [ 2267.939956][T14159] ? clear_bhb_loop+0x60/0xb0 [ 2267.944668][T14159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2267.950599][T14159] RIP: 0033:0x7f0f98d9f559 [ 2267.955039][T14159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2267.974673][T14159] RSP: 002b:00007f0f99d07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2267.983122][T14159] RAX: ffffffffffffffda RBX: 00007f0f99025fa0 RCX: 00007f0f98d9f559 [ 2267.991128][T14159] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2267.999136][T14159] RBP: 00007f0f98e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 2268.007150][T14159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2268.015148][T14159] R13: 00007f0f99026038 R14: 00007f0f99025fa0 R15: 00007fff0d1cd108 [ 2268.023164][T14159] [ 2268.070067][T14154] CPU: 0 PID: 14154 Comm: syz.4.10388 Not tainted syzkaller #0 [ 2268.077708][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2268.087811][T14154] Call Trace: [ 2268.091245][T14154] [ 2268.094214][T14154] dump_stack_lvl+0x188/0x24e [ 2268.098943][T14154] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2268.105433][T14154] ? show_regs_print_info+0x12/0x12 [ 2268.110696][T14154] ? load_image+0x410/0x410 [ 2268.115252][T14154] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2268.121710][T14154] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2268.128283][T14154] warn_alloc+0x242/0x330 [ 2268.132679][T14154] ? __get_vm_area_node+0x122/0x330 [ 2268.137958][T14154] ? zone_watermark_ok_safe+0x270/0x270 [ 2268.143569][T14154] ? rcu_is_watching+0x11/0xa0 [ 2268.148395][T14154] ? __get_vm_area_node+0x318/0x330 [ 2268.153646][T14154] ? __local_bh_enable_ip+0x136/0x1c0 [ 2268.159070][T14154] __vmalloc_node_range+0x37c/0x1380 [ 2268.164420][T14154] ? netlink_insert+0x28d/0x13b0 [ 2268.169464][T14154] ? free_vm_area+0x50/0x50 [ 2268.174032][T14154] ? netlink_sendmsg+0x5ec/0xbd0 [ 2268.179025][T14154] vmalloc+0x75/0x80 [ 2268.182972][T14154] ? netlink_sendmsg+0x5ec/0xbd0 [ 2268.187968][T14154] netlink_sendmsg+0x5ec/0xbd0 [ 2268.192835][T14154] ? netlink_getsockopt+0x550/0x550 [ 2268.198117][T14154] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2268.203729][T14154] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2268.209060][T14154] ? security_socket_sendmsg+0x7c/0xa0 [ 2268.214571][T14154] ? netlink_getsockopt+0x550/0x550 [ 2268.219842][T14154] ____sys_sendmsg+0x5ed/0x9a0 [ 2268.224685][T14154] ? __sys_sendmsg_sock+0x30/0x30 [ 2268.229792][T14154] ? __import_iovec+0x306/0x510 [ 2268.234722][T14154] ? import_iovec+0x6f/0xa0 [ 2268.239308][T14154] ___sys_sendmsg+0x2a2/0x360 [ 2268.244079][T14154] ? __sys_sendmsg+0x2a0/0x2a0 [ 2268.248996][T14154] ? __lock_acquire+0x7ea0/0x7ea0 [ 2268.254117][T14154] __se_sys_sendmsg+0x1c3/0x2b0 [ 2268.259033][T14154] ? __x64_sys_sendmsg+0x80/0x80 [ 2268.264053][T14154] ? lockdep_hardirqs_on+0x94/0x140 [ 2268.269319][T14154] do_syscall_64+0x4c/0xa0 [ 2268.273787][T14154] ? clear_bhb_loop+0x60/0xb0 [ 2268.278523][T14154] ? clear_bhb_loop+0x60/0xb0 [ 2268.283250][T14154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2268.289205][T14154] RIP: 0033:0x7f57a859f559 [ 2268.293683][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2268.313451][T14154] RSP: 002b:00007f57a9399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2268.321917][T14154] RAX: ffffffffffffffda RBX: 00007f57a8825fa0 RCX: 00007f57a859f559 [ 2268.329941][T14154] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2268.337960][T14154] RBP: 00007f57a9399090 R08: 0000000000000000 R09: 0000000000000000 [ 2268.345979][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2268.353996][T14154] R13: 00007f57a8826038 R14: 00007f57a8825fa0 R15: 00007fffd51fb818 [ 2268.362118][T14154] [ 2268.390758][T14154] Mem-Info: [ 2268.427078][T14154] active_anon:11663 inactive_anon:0 isolated_anon:0 [ 2268.427078][T14154] active_file:22032 inactive_file:40829 isolated_file:0 [ 2268.427078][T14154] unevictable:768 dirty:150 writeback:0 [ 2268.427078][T14154] slab_reclaimable:22353 slab_unreclaimable:100322 [ 2268.427078][T14154] mapped:30204 shmem:1364 pagetables:617 [ 2268.427078][T14154] sec_pagetables:0 bounce:0 [ 2268.427078][T14154] kernel_misc_reclaimable:0 [ 2268.427078][T14154] free:1298930 free_pcp:6606 free_cma:0 [ 2268.494434][T14165] netlink: 'syz.3.10393': attribute type 10 has an invalid length. [ 2268.616437][T14154] Node 0 active_anon:46652kB inactive_anon:0kB active_file:88128kB inactive_file:163112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120816kB dirty:596kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11128kB pagetables:2468kB sec_pagetables:0kB all_unreclaimable? no [ 2268.728498][T14154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2268.765231][T14154] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2268.798653][T14154] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 2268.804831][T14154] Node 0 DMA32 free:1272228kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:46652kB inactive_anon:0kB active_file:88128kB inactive_file:163112kB unevictable:1536kB writepending:596kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:17920kB local_pcp:1808kB free_cma:0kB [ 2268.838555][T14154] lowmem_reserve[]: 0 0 1 1 1 [ 2268.843502][T14154] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 2268.875751][T14171] netlink: 'syz.1.10395': attribute type 11 has an invalid length. [ 2268.887595][T14154] lowmem_reserve[]: 0 0 0 0 0 [ 2268.892487][T14154] Node 1 Normal free:3908244kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:9152kB local_pcp:9152kB free_cma:0kB [ 2268.922253][T14154] lowmem_reserve[]: 0 0 0 0 0 [ 2268.927074][T14154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2268.981246][T14154] Node 0 DMA32: 3873*4kB (UM) 3580*8kB (UME) 2616*16kB (UME) 1232*32kB (UME) 1120*64kB (UME) 713*128kB (UME) 519*256kB (UME) 378*512kB (UM) 174*1024kB (UM) 6*2048kB (UME) 114*4096kB (UM) = 1272164kB [ 2269.011202][T14154] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 2269.023789][T14154] Node 1 Normal: 251*4kB (UE) 47*8kB (UE) 31*16kB (UME) 184*32kB (UME) 51*64kB (UME) 15*128kB (UME) 14*256kB (UME) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3908244kB [ 2269.051174][T14154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.068426][T14154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2269.078547][T14154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2269.139430][T14154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2269.172035][T14154] 64225 total pagecache pages [ 2269.177194][T14154] 0 pages in swap cache [ 2269.221605][T14154] Free swap = 124728kB [ 2269.225862][T14154] Total swap = 124996kB [ 2269.230071][T14154] 2097051 pages RAM [ 2269.307232][T14154] 0 pages HighMem/MovableOnly [ 2269.312319][T14154] 419818 pages reserved [ 2269.316628][T14154] 0 pages cma reserved [ 2269.353440][T14180] __nla_validate_parse: 1 callbacks suppressed [ 2269.353481][T14180] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10397'. [ 2269.498445][T14185] netlink: 'syz.0.10399': attribute type 21 has an invalid length. [ 2269.512484][T14185] IPv6: NLM_F_CREATE should be specified when creating new route [ 2270.349593][T14202] netlink: 'syz.3.10403': attribute type 2 has an invalid length. [ 2270.390889][T14202] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.10403'. [ 2270.489666][T14208] netlink: 139280 bytes leftover after parsing attributes in process `syz.1.10405'. [ 2270.536529][T14208] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2270.557455][T14208] CPU: 0 PID: 14208 Comm: syz.1.10405 Not tainted syzkaller #0 [ 2270.565110][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2270.575231][T14208] Call Trace: [ 2270.578560][T14208] [ 2270.581586][T14208] dump_stack_lvl+0x188/0x24e [ 2270.586422][T14208] ? show_regs_print_info+0x12/0x12 [ 2270.591705][T14208] ? load_image+0x410/0x410 [ 2270.596290][T14208] sysfs_warn_dup+0x8a/0xa0 [ 2270.600884][T14208] sysfs_do_create_link_sd+0xc0/0x110 [ 2270.606326][T14208] device_add+0x83b/0x1050 [ 2270.610816][T14208] wiphy_register+0x1d8b/0x2aa0 [ 2270.616288][T14208] ? cfg80211_event_work+0x40/0x40 [ 2270.621475][T14208] ? minstrel_ht_alloc+0x894/0xa20 [ 2270.626663][T14208] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2270.632799][T14208] ieee80211_register_hw+0x2e33/0x3b00 [ 2270.638336][T14208] ? ieee80211_register_hw+0xf01/0x3b00 [ 2270.643945][T14208] ? ieee80211_register_hw+0xf01/0x3b00 [ 2270.649568][T14208] ? ieee80211_tasklet_handler+0x20/0x20 [ 2270.655273][T14208] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2270.661262][T14208] ? __debug_object_init+0xed/0x440 [ 2270.666617][T14208] ? memset+0x1e/0x40 [ 2270.670722][T14208] ? __hrtimer_init+0x189/0x270 [ 2270.675635][T14208] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2270.681419][T14208] ? memcpy+0x3c/0x60 [ 2270.685458][T14208] hwsim_new_radio_nl+0xab7/0xc90 [ 2270.690551][T14208] genl_family_rcv_msg_doit+0x22f/0x350 [ 2270.696156][T14208] ? end_current_label_crit_section+0x170/0x170 [ 2270.702479][T14208] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2270.708458][T14208] ? bpf_lsm_capable+0x5/0x10 [ 2270.713206][T14208] ? security_capable+0x85/0xb0 [ 2270.718132][T14208] genl_rcv_msg+0x601/0x790 [ 2270.722733][T14208] ? genl_bind+0x360/0x360 [ 2270.727220][T14208] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2270.733650][T14208] netlink_rcv_skb+0x1ef/0x440 [ 2270.738497][T14208] ? genl_bind+0x360/0x360 [ 2270.742968][T14208] ? netlink_ack+0x1160/0x1160 [ 2270.747790][T14208] ? down_read+0x1a8/0x2d0 [ 2270.752263][T14208] genl_rcv+0x24/0x40 [ 2270.756295][T14208] netlink_unicast+0x7ad/0x920 [ 2270.761117][T14208] netlink_sendmsg+0x8ad/0xbd0 [ 2270.765943][T14208] ? netlink_getsockopt+0x550/0x550 [ 2270.771199][T14208] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2270.776786][T14208] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2270.782103][T14208] ? security_socket_sendmsg+0x7c/0xa0 [ 2270.787612][T14208] ? netlink_getsockopt+0x550/0x550 [ 2270.792858][T14208] ____sys_sendmsg+0x5ed/0x9a0 [ 2270.797669][T14208] ? __sys_sendmsg_sock+0x30/0x30 [ 2270.802728][T14208] ? __import_iovec+0x306/0x510 [ 2270.807628][T14208] ? import_iovec+0x6f/0xa0 [ 2270.812195][T14208] ___sys_sendmsg+0x2a2/0x360 [ 2270.816924][T14208] ? __sys_sendmsg+0x2a0/0x2a0 [ 2270.821775][T14208] __se_sys_sendmsg+0x1c3/0x2b0 [ 2270.826667][T14208] ? __x64_sys_sendmsg+0x80/0x80 [ 2270.831666][T14208] ? lockdep_hardirqs_on+0x94/0x140 [ 2270.836910][T14208] do_syscall_64+0x4c/0xa0 [ 2270.841363][T14208] ? clear_bhb_loop+0x60/0xb0 [ 2270.846334][T14208] ? clear_bhb_loop+0x60/0xb0 [ 2270.851048][T14208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2270.857007][T14208] RIP: 0033:0x7fc99e19f559 [ 2270.861464][T14208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2270.881115][T14208] RSP: 002b:00007fc99f157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2270.889585][T14208] RAX: ffffffffffffffda RBX: 00007fc99e425fa0 RCX: 00007fc99e19f559 [ 2270.897616][T14208] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2270.905623][T14208] RBP: 00007fc99e236b20 R08: 0000000000000000 R09: 0000000000000000 [ 2270.913664][T14208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2270.921676][T14208] R13: 00007fc99e426038 R14: 00007fc99e425fa0 R15: 00007ffe51ff07c8 [ 2270.929707][T14208] [ 2271.283949][T14219] netlink: 'syz.3.10409': attribute type 11 has an invalid length. [ 2271.289478][T14212] netlink: 'syz.2.10407': attribute type 10 has an invalid length. [ 2271.313509][T14219] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10409'. [ 2271.602638][T14229] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.10411'. [ 2271.668712][T14231] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10412'. [ 2271.893298][T14237] netlink: 'syz.3.10414': attribute type 46 has an invalid length. [ 2271.966555][T14237] netlink: 'syz.3.10414': attribute type 46 has an invalid length. [ 2273.663600][T14255] netlink: 'syz.3.10421': attribute type 10 has an invalid length. [ 2273.952604][T14259] netlink: 147216 bytes leftover after parsing attributes in process `syz.0.10422'. [ 2274.072967][T14259] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2274.121056][T14259] CPU: 1 PID: 14259 Comm: syz.0.10422 Not tainted syzkaller #0 [ 2274.128705][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2274.138819][T14259] Call Trace: [ 2274.142146][T14259] [ 2274.145129][T14259] dump_stack_lvl+0x188/0x24e [ 2274.149889][T14259] ? show_regs_print_info+0x12/0x12 [ 2274.155188][T14259] ? load_image+0x410/0x410 [ 2274.159769][T14259] sysfs_warn_dup+0x8a/0xa0 [ 2274.164882][T14259] sysfs_do_create_link_sd+0xc0/0x110 [ 2274.170434][T14259] device_add+0x83b/0x1050 [ 2274.174921][T14259] wiphy_register+0x1d8b/0x2aa0 [ 2274.179872][T14259] ? cfg80211_event_work+0x40/0x40 [ 2274.185400][T14259] ? minstrel_ht_alloc+0x894/0xa20 [ 2274.190622][T14259] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2274.196754][T14259] ieee80211_register_hw+0x2e33/0x3b00 [ 2274.202302][T14259] ? ieee80211_register_hw+0xf01/0x3b00 [ 2274.207910][T14259] ? ieee80211_register_hw+0xf01/0x3b00 [ 2274.213577][T14259] ? ieee80211_tasklet_handler+0x20/0x20 [ 2274.219280][T14259] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2274.225251][T14259] ? __debug_object_init+0xed/0x440 [ 2274.230514][T14259] ? memset+0x1e/0x40 [ 2274.234553][T14259] ? __hrtimer_init+0x189/0x270 [ 2274.239466][T14259] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2274.245256][T14259] ? memcpy+0x3c/0x60 [ 2274.249304][T14259] hwsim_new_radio_nl+0xab7/0xc90 [ 2274.254404][T14259] genl_family_rcv_msg_doit+0x22f/0x350 [ 2274.260013][T14259] ? end_current_label_crit_section+0x170/0x170 [ 2274.266328][T14259] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2274.272292][T14259] ? bpf_lsm_capable+0x5/0x10 [ 2274.277031][T14259] ? security_capable+0x85/0xb0 [ 2274.281946][T14259] genl_rcv_msg+0x601/0x790 [ 2274.286521][T14259] ? genl_bind+0x360/0x360 [ 2274.291001][T14259] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2274.297411][T14259] netlink_rcv_skb+0x1ef/0x440 [ 2274.302264][T14259] ? genl_bind+0x360/0x360 [ 2274.306763][T14259] ? netlink_ack+0x1160/0x1160 [ 2274.311619][T14259] ? down_read+0x1a8/0x2d0 [ 2274.316101][T14259] genl_rcv+0x24/0x40 [ 2274.320138][T14259] netlink_unicast+0x7ad/0x920 [ 2274.324996][T14259] netlink_sendmsg+0x8ad/0xbd0 [ 2274.329840][T14259] ? netlink_getsockopt+0x550/0x550 [ 2274.335115][T14259] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2274.340736][T14259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2274.346074][T14259] ? security_socket_sendmsg+0x7c/0xa0 [ 2274.351595][T14259] ? netlink_getsockopt+0x550/0x550 [ 2274.356860][T14259] ____sys_sendmsg+0x5ed/0x9a0 [ 2274.361696][T14259] ? __sys_sendmsg_sock+0x30/0x30 [ 2274.366778][T14259] ? __import_iovec+0x306/0x510 [ 2274.371797][T14259] ? import_iovec+0x6f/0xa0 [ 2274.376379][T14259] ___sys_sendmsg+0x2a2/0x360 [ 2274.381252][T14259] ? __sys_sendmsg+0x2a0/0x2a0 [ 2274.386158][T14259] __se_sys_sendmsg+0x1c3/0x2b0 [ 2274.391074][T14259] ? __x64_sys_sendmsg+0x80/0x80 [ 2274.396096][T14259] ? lockdep_hardirqs_on+0x94/0x140 [ 2274.401365][T14259] do_syscall_64+0x4c/0xa0 [ 2274.405857][T14259] ? clear_bhb_loop+0x60/0xb0 [ 2274.410628][T14259] ? clear_bhb_loop+0x60/0xb0 [ 2274.415370][T14259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2274.421329][T14259] RIP: 0033:0x7f41c759f559 [ 2274.425797][T14259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2274.445471][T14259] RSP: 002b:00007f41c8390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2274.454010][T14259] RAX: ffffffffffffffda RBX: 00007f41c7825fa0 RCX: 00007f41c759f559 [ 2274.462051][T14259] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2274.470076][T14259] RBP: 00007f41c7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 2274.478105][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2274.486133][T14259] R13: 00007f41c7826038 R14: 00007f41c7825fa0 R15: 00007ffe3c1aa7a8 [ 2274.494181][T14259] [ 2274.861877][T14274] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10427'. [ 2274.991666][T14272] netlink: 'syz.3.10424': attribute type 11 has an invalid length. [ 2275.015438][T14272] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10424'. [ 2275.855020][T14296] netlink: 'syz.2.10434': attribute type 10 has an invalid length. [ 2276.409412][T14307] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10437'. [ 2276.453824][T14307] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 2276.475865][T14308] netlink: 'syz.2.10436': attribute type 5 has an invalid length. [ 2276.519615][T14307] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10437'. [ 2276.540273][T14307] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 2276.741769][T14316] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10439'. [ 2277.261409][T14331] netlink: 'syz.0.10442': attribute type 11 has an invalid length. [ 2277.300203][T14331] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10442'. [ 2277.572683][T14338] netlink: 'syz.0.10446': attribute type 10 has an invalid length. [ 2277.613952][T14336] netlink: 195856 bytes leftover after parsing attributes in process `syz.1.10443'. [ 2277.792648][T14336] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2277.931013][T14336] CPU: 1 PID: 14336 Comm: syz.1.10443 Not tainted syzkaller #0 [ 2277.938663][T14336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2277.948785][T14336] Call Trace: [ 2277.952141][T14336] [ 2277.955115][T14336] dump_stack_lvl+0x188/0x24e [ 2277.959846][T14336] ? show_regs_print_info+0x12/0x12 [ 2277.965098][T14336] ? load_image+0x410/0x410 [ 2277.969675][T14336] sysfs_warn_dup+0x8a/0xa0 [ 2277.974249][T14336] sysfs_do_create_link_sd+0xc0/0x110 [ 2277.979685][T14336] device_add+0x83b/0x1050 [ 2277.984206][T14336] wiphy_register+0x1d8b/0x2aa0 [ 2277.989144][T14336] ? cfg80211_event_work+0x40/0x40 [ 2277.994322][T14336] ? minstrel_ht_alloc+0x894/0xa20 [ 2277.999518][T14336] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2278.005648][T14336] ieee80211_register_hw+0x2e33/0x3b00 [ 2278.011189][T14336] ? ieee80211_register_hw+0xf01/0x3b00 [ 2278.016809][T14336] ? ieee80211_register_hw+0xf01/0x3b00 [ 2278.022520][T14336] ? ieee80211_tasklet_handler+0x20/0x20 [ 2278.028217][T14336] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2278.034197][T14336] ? __debug_object_init+0xed/0x440 [ 2278.039488][T14336] ? memset+0x1e/0x40 [ 2278.043523][T14336] ? __hrtimer_init+0x189/0x270 [ 2278.048432][T14336] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2278.054227][T14336] ? memcpy+0x3c/0x60 [ 2278.058275][T14336] hwsim_new_radio_nl+0xab7/0xc90 [ 2278.063403][T14336] genl_family_rcv_msg_doit+0x22f/0x350 [ 2278.069098][T14336] ? end_current_label_crit_section+0x170/0x170 [ 2278.075428][T14336] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2278.081394][T14336] ? bpf_lsm_capable+0x5/0x10 [ 2278.086127][T14336] ? security_capable+0x85/0xb0 [ 2278.091041][T14336] genl_rcv_msg+0x601/0x790 [ 2278.095609][T14336] ? genl_bind+0x360/0x360 [ 2278.100072][T14336] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2278.106559][T14336] netlink_rcv_skb+0x1ef/0x440 [ 2278.111415][T14336] ? genl_bind+0x360/0x360 [ 2278.115910][T14336] ? netlink_ack+0x1160/0x1160 [ 2278.120754][T14336] ? down_read+0x1a8/0x2d0 [ 2278.125228][T14336] genl_rcv+0x24/0x40 [ 2278.129386][T14336] netlink_unicast+0x7ad/0x920 [ 2278.134226][T14336] netlink_sendmsg+0x8ad/0xbd0 [ 2278.139151][T14336] ? netlink_getsockopt+0x550/0x550 [ 2278.144418][T14336] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2278.150034][T14336] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2278.155381][T14336] ? security_socket_sendmsg+0x7c/0xa0 [ 2278.160902][T14336] ? netlink_getsockopt+0x550/0x550 [ 2278.166174][T14336] ____sys_sendmsg+0x5ed/0x9a0 [ 2278.171023][T14336] ? __sys_sendmsg_sock+0x30/0x30 [ 2278.176152][T14336] ? __import_iovec+0x306/0x510 [ 2278.181082][T14336] ? import_iovec+0x6f/0xa0 [ 2278.185663][T14336] ___sys_sendmsg+0x2a2/0x360 [ 2278.190417][T14336] ? __sys_sendmsg+0x2a0/0x2a0 [ 2278.195310][T14336] __se_sys_sendmsg+0x1c3/0x2b0 [ 2278.200229][T14336] ? __x64_sys_sendmsg+0x80/0x80 [ 2278.205293][T14336] ? lockdep_hardirqs_on+0x94/0x140 [ 2278.210565][T14336] do_syscall_64+0x4c/0xa0 [ 2278.215139][T14336] ? clear_bhb_loop+0x60/0xb0 [ 2278.219977][T14336] ? clear_bhb_loop+0x60/0xb0 [ 2278.224720][T14336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2278.230747][T14336] RIP: 0033:0x7fc99e19f559 [ 2278.235311][T14336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2278.254982][T14336] RSP: 002b:00007fc99f157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2278.263462][T14336] RAX: ffffffffffffffda RBX: 00007fc99e425fa0 RCX: 00007fc99e19f559 [ 2278.271486][T14336] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2278.279612][T14336] RBP: 00007fc99e236b20 R08: 0000000000000000 R09: 0000000000000000 [ 2278.287674][T14336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2278.295801][T14336] R13: 00007fc99e426038 R14: 00007fc99e425fa0 R15: 00007ffe51ff07c8 [ 2278.303857][T14336] [ 2279.293593][T14357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10450'. [ 2279.985969][T14371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10452'. [ 2280.366224][T14384] netlink: 'syz.0.10456': attribute type 11 has an invalid length. [ 2280.444380][T14384] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10456'. [ 2280.521181][T14388] netlink: 'syz.3.10457': attribute type 10 has an invalid length. [ 2281.140040][T14398] FAULT_INJECTION: forcing a failure. [ 2281.140040][T14398] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.185737][T14398] CPU: 1 PID: 14398 Comm: syz.0.10459 Not tainted syzkaller #0 [ 2281.193383][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2281.203504][T14398] Call Trace: [ 2281.206843][T14398] [ 2281.209827][T14398] dump_stack_lvl+0x188/0x24e [ 2281.214575][T14398] ? show_regs_print_info+0x12/0x12 [ 2281.219841][T14398] ? load_image+0x410/0x410 [ 2281.224540][T14398] ? __might_sleep+0xd0/0xd0 [ 2281.229759][T14398] ? __lock_acquire+0x7ea0/0x7ea0 [ 2281.234866][T14398] should_fail_ex+0x390/0x4c0 [ 2281.239623][T14398] should_failslab+0x5/0x20 [ 2281.244192][T14398] slab_pre_alloc_hook+0x59/0x300 [ 2281.249286][T14398] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2281.255169][T14398] __kmem_cache_alloc_node+0x4f/0x270 [ 2281.260618][T14398] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2281.266411][T14398] __kmalloc+0xa3/0x240 [ 2281.270636][T14398] tomoyo_realpath_from_path+0xe2/0x5c0 [ 2281.276248][T14398] ? tomoyo_domain+0xd2/0x120 [ 2281.281170][T14398] ? tomoyo_path_number_perm+0x205/0x650 [ 2281.286883][T14398] tomoyo_path_number_perm+0x22f/0x650 [ 2281.292411][T14398] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2281.297953][T14398] ? ksys_write+0x1ce/0x260 [ 2281.302646][T14398] ? common_file_perm+0x171/0x1c0 [ 2281.307780][T14398] ? __fget_files+0x28/0x460 [ 2281.312568][T14398] security_file_ioctl+0x6c/0xa0 [ 2281.317587][T14398] __se_sys_ioctl+0x48/0x170 [ 2281.322246][T14398] do_syscall_64+0x4c/0xa0 [ 2281.326724][T14398] ? clear_bhb_loop+0x60/0xb0 [ 2281.331460][T14398] ? clear_bhb_loop+0x60/0xb0 [ 2281.336236][T14398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2281.342178][T14398] RIP: 0033:0x7f41c759f559 [ 2281.346627][T14398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.366357][T14398] RSP: 002b:00007f41c57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2281.374811][T14398] RAX: ffffffffffffffda RBX: 00007f41c7826090 RCX: 00007f41c759f559 [ 2281.382807][T14398] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000f [ 2281.390829][T14398] RBP: 00007f41c57f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.398841][T14398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.407045][T14398] R13: 00007f41c7826128 R14: 00007f41c7826090 R15: 00007ffe3c1aa7a8 [ 2281.415064][T14398] [ 2281.461219][T14398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2282.327448][T14418] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10464'. [ 2282.385870][T14424] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10466'. [ 2282.608606][T14427] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.10468'. [ 2282.632430][T14432] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.10468'. [ 2282.651036][T14432] netlink: zone id is out of range [ 2282.669896][T14427] netlink: zone id is out of range [ 2282.676324][T14432] netlink: zone id is out of range [ 2282.704927][T14427] netlink: zone id is out of range [ 2282.712599][T14432] netlink: zone id is out of range [ 2282.717988][T14427] netlink: zone id is out of range [ 2282.728193][T14432] netlink: zone id is out of range [ 2282.740114][T14427] netlink: zone id is out of range [ 2282.773303][T14427] netlink: del zone limit has 4 unknown bytes [ 2282.779962][T14432] netlink: del zone limit has 4 unknown bytes [ 2282.927505][T14435] netlink: 'syz.0.10470': attribute type 11 has an invalid length. [ 2282.948128][T14435] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10470'. [ 2283.124576][T14444] netlink: 'syz.3.10473': attribute type 10 has an invalid length. [ 2283.991335][T14468] netlink: 'syz.2.10477': attribute type 29 has an invalid length. [ 2284.131095][T14468] netlink: 'syz.2.10477': attribute type 29 has an invalid length. [ 2284.262295][T14473] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10479'. [ 2285.267159][T14487] netlink: 'syz.3.10484': attribute type 11 has an invalid length. [ 2285.337309][T14487] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10484'. [ 2285.749900][T14503] netlink: 'syz.2.10490': attribute type 10 has an invalid length. [ 2286.117319][T14512] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10493'. [ 2286.132018][T14513] FAULT_INJECTION: forcing a failure. [ 2286.132018][T14513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2286.162308][T14513] CPU: 1 PID: 14513 Comm: syz.4.10492 Not tainted syzkaller #0 [ 2286.169940][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2286.180045][T14513] Call Trace: [ 2286.183365][T14513] [ 2286.186334][T14513] dump_stack_lvl+0x188/0x24e [ 2286.191062][T14513] ? show_regs_print_info+0x12/0x12 [ 2286.196304][T14513] ? load_image+0x410/0x410 [ 2286.200868][T14513] ? __lock_acquire+0x7ea0/0x7ea0 [ 2286.205963][T14513] should_fail_ex+0x390/0x4c0 [ 2286.210707][T14513] _copy_from_user+0x2c/0x170 [ 2286.215457][T14513] get_user_ifreq+0x67/0x170 [ 2286.220115][T14513] br_ioctl_stub+0x171/0xcf0 [ 2286.224769][T14513] ? rcu_is_watching+0x11/0xa0 [ 2286.229591][T14513] ? rcu_read_unlock+0xa0/0xa0 [ 2286.234395][T14513] ? __mutex_lock+0x1ab/0xae0 [ 2286.239131][T14513] ? mutex_lock_nested+0x10/0x10 [ 2286.244128][T14513] ? rcu_read_unlock+0xa0/0xa0 [ 2286.248917][T14513] sock_ioctl+0x453/0x700 [ 2286.253291][T14513] ? sock_poll+0x420/0x420 [ 2286.257748][T14513] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2286.262719][T14513] ? security_file_ioctl+0x7c/0xa0 [ 2286.267867][T14513] ? sock_poll+0x420/0x420 [ 2286.272326][T14513] __se_sys_ioctl+0xfa/0x170 [ 2286.276966][T14513] do_syscall_64+0x4c/0xa0 [ 2286.281408][T14513] ? clear_bhb_loop+0x60/0xb0 [ 2286.286110][T14513] ? clear_bhb_loop+0x60/0xb0 [ 2286.290825][T14513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2286.296754][T14513] RIP: 0033:0x7f57a859f559 [ 2286.301208][T14513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2286.320850][T14513] RSP: 002b:00007f57a67f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2286.329301][T14513] RAX: ffffffffffffffda RBX: 00007f57a8826090 RCX: 00007f57a859f559 [ 2286.337303][T14513] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000f [ 2286.345301][T14513] RBP: 00007f57a67f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2286.353303][T14513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2286.361303][T14513] R13: 00007f57a8826128 R14: 00007f57a8826090 R15: 00007fffd51fb818 [ 2286.369319][T14513] [ 2286.964074][T14533] netlink: 'syz.0.10499': attribute type 11 has an invalid length. [ 2286.991352][T14533] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10499'. [ 2287.093293][T14534] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.10495'. [ 2287.660351][T14551] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10507'. [ 2287.972158][T14551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2288.106611][T14551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2288.212539][T14551] bond0 (unregistering): Released all slaves [ 2288.361902][T14565] netlink: 'syz.3.10511': attribute type 10 has an invalid length. [ 2288.465120][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.471692][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.577471][T14568] FAULT_INJECTION: forcing a failure. [ 2288.577471][T14568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.701345][T14568] CPU: 1 PID: 14568 Comm: syz.1.10510 Not tainted syzkaller #0 [ 2288.709254][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2288.719380][T14568] Call Trace: [ 2288.722886][T14568] [ 2288.725882][T14568] dump_stack_lvl+0x188/0x24e [ 2288.730653][T14568] ? show_regs_print_info+0x12/0x12 [ 2288.735919][T14568] ? load_image+0x410/0x410 [ 2288.740500][T14568] ? __lock_acquire+0x7ea0/0x7ea0 [ 2288.745592][T14568] ? snprintf+0xe5/0x140 [ 2288.749917][T14568] should_fail_ex+0x390/0x4c0 [ 2288.754669][T14568] _copy_to_user+0x2c/0x130 [ 2288.759241][T14568] simple_read_from_buffer+0xe3/0x150 [ 2288.764682][T14568] proc_fail_nth_read+0x1a6/0x220 [ 2288.769765][T14568] ? proc_fault_inject_write+0x310/0x310 [ 2288.775473][T14568] ? fsnotify_perm+0x248/0x550 [ 2288.780285][T14568] ? proc_fault_inject_write+0x310/0x310 [ 2288.785964][T14568] vfs_read+0x2db/0x960 [ 2288.790166][T14568] ? kernel_read+0x1e0/0x1e0 [ 2288.794793][T14568] ? __fget_files+0x28/0x460 [ 2288.799503][T14568] ? __fget_files+0x3fc/0x460 [ 2288.804220][T14568] ? __fdget_pos+0x2ae/0x360 [ 2288.808839][T14568] ? ksys_read+0x70/0x260 [ 2288.813205][T14568] ksys_read+0x14d/0x260 [ 2288.817492][T14568] ? vfs_write+0x9a0/0x9a0 [ 2288.821954][T14568] ? lockdep_hardirqs_on+0x94/0x140 [ 2288.827211][T14568] do_syscall_64+0x4c/0xa0 [ 2288.831651][T14568] ? clear_bhb_loop+0x60/0xb0 [ 2288.836356][T14568] ? clear_bhb_loop+0x60/0xb0 [ 2288.841068][T14568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2288.847003][T14568] RIP: 0033:0x7fc99e15fd8e [ 2288.851454][T14568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2288.871092][T14568] RSP: 002b:00007fc99f135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2288.879626][T14568] RAX: ffffffffffffffda RBX: 00007fc99f1366c0 RCX: 00007fc99e15fd8e [ 2288.887624][T14568] RDX: 000000000000000f RSI: 00007fc99f1360a0 RDI: 0000000000000010 [ 2288.895711][T14568] RBP: 00007fc99f136090 R08: 0000000000000000 R09: 0000000000000000 [ 2288.903733][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2288.911744][T14568] R13: 00007fc99e426128 R14: 00007fc99e426090 R15: 00007ffe51ff07c8 [ 2288.919769][T14568] [ 2289.306594][T14587] netlink: 'syz.2.10515': attribute type 11 has an invalid length. [ 2289.347143][T14587] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10515'. [ 2293.165834][T14620] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10525'. [ 2293.200266][T14622] netlink: 'syz.1.10526': attribute type 10 has an invalid length. [ 2293.724149][T14648] netlink: 'syz.0.10531': attribute type 11 has an invalid length. [ 2293.773919][T14648] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10531'. [ 2294.721405][T14673] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10540'. [ 2294.948088][T14681] netlink: 'syz.3.10543': attribute type 2 has an invalid length. [ 2295.307954][T14688] netlink: 'syz.4.10547': attribute type 11 has an invalid length. [ 2295.367767][T14688] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10547'. [ 2295.409364][T14690] netlink: 'syz.1.10545': attribute type 10 has an invalid length. [ 2295.659254][T14696] netlink: 'syz.3.10549': attribute type 21 has an invalid length. [ 2296.059492][T29632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2296.069907][T29632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2296.078778][T29632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2296.087461][T29632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2296.097633][T29632] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2296.107016][T29632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2296.168310][T14705] rxe_eth0 speed is unknown, defaulting to 1000 [ 2296.517760][T14716] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10553'. [ 2296.546559][T14718] FAULT_INJECTION: forcing a failure. [ 2296.546559][T14718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2296.571129][T14718] CPU: 0 PID: 14718 Comm: syz.4.10554 Not tainted syzkaller #0 [ 2296.578774][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2296.588889][T14718] Call Trace: [ 2296.592213][T14718] [ 2296.595197][T14718] dump_stack_lvl+0x188/0x24e [ 2296.599931][T14718] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2296.606180][T14718] ? show_regs_print_info+0x12/0x12 [ 2296.611413][T14718] ? load_image+0x410/0x410 [ 2296.615986][T14718] should_fail_ex+0x390/0x4c0 [ 2296.620709][T14718] _copy_from_user+0x2c/0x170 [ 2296.625427][T14718] __sys_bpf+0x2ea/0x780 [ 2296.629714][T14718] ? bpf_link_show_fdinfo+0x380/0x380 [ 2296.635136][T14718] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2296.641333][T14718] __x64_sys_bpf+0x78/0x90 [ 2296.645817][T14718] do_syscall_64+0x4c/0xa0 [ 2296.650266][T14718] ? clear_bhb_loop+0x60/0xb0 [ 2296.654991][T14718] ? clear_bhb_loop+0x60/0xb0 [ 2296.659713][T14718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2296.665642][T14718] RIP: 0033:0x7f57a859f559 [ 2296.670087][T14718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2296.689724][T14718] RSP: 002b:00007f57a9399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2296.698179][T14718] RAX: ffffffffffffffda RBX: 00007f57a8825fa0 RCX: 00007f57a859f559 [ 2296.706179][T14718] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 2296.714199][T14718] RBP: 00007f57a9399090 R08: 0000000000000000 R09: 0000000000000000 [ 2296.722216][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2296.730236][T14718] R13: 00007f57a8826038 R14: 00007f57a8825fa0 R15: 00007fffd51fb818 [ 2296.738276][T14718] [ 2297.314750][ T937] device .*! left promiscuous mode [ 2297.585174][T14736] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10561'. [ 2297.675425][T14740] netlink: 'syz.3.10562': attribute type 10 has an invalid length. [ 2297.722672][T14736] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2297.789617][T14736] CPU: 0 PID: 14736 Comm: syz.0.10561 Not tainted syzkaller #0 [ 2297.797352][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2297.807473][T14736] Call Trace: [ 2297.810794][T14736] [ 2297.813768][T14736] dump_stack_lvl+0x188/0x24e [ 2297.818506][T14736] ? show_regs_print_info+0x12/0x12 [ 2297.823760][T14736] ? load_image+0x410/0x410 [ 2297.828327][T14736] sysfs_warn_dup+0x8a/0xa0 [ 2297.832883][T14736] sysfs_do_create_link_sd+0xc0/0x110 [ 2297.838328][T14736] device_add+0x83b/0x1050 [ 2297.842807][T14736] wiphy_register+0x1d8b/0x2aa0 [ 2297.847728][T14736] ? cfg80211_event_work+0x40/0x40 [ 2297.852886][T14736] ? minstrel_ht_alloc+0x894/0xa20 [ 2297.858045][T14736] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2297.864194][T14736] ieee80211_register_hw+0x2e33/0x3b00 [ 2297.869738][T14736] ? ieee80211_register_hw+0xf01/0x3b00 [ 2297.875327][T14736] ? ieee80211_register_hw+0xf01/0x3b00 [ 2297.880932][T14736] ? ieee80211_tasklet_handler+0x20/0x20 [ 2297.886607][T14736] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2297.892568][T14736] ? __debug_object_init+0xed/0x440 [ 2297.897837][T14736] ? memset+0x1e/0x40 [ 2297.901864][T14736] ? __hrtimer_init+0x189/0x270 [ 2297.906755][T14736] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2297.912513][T14736] ? memcpy+0x3c/0x60 [ 2297.916529][T14736] hwsim_new_radio_nl+0xab7/0xc90 [ 2297.921593][T14736] genl_family_rcv_msg_doit+0x22f/0x350 [ 2297.927175][T14736] ? end_current_label_crit_section+0x170/0x170 [ 2297.933462][T14736] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2297.939393][T14736] ? bpf_lsm_capable+0x5/0x10 [ 2297.944204][T14736] ? security_capable+0x85/0xb0 [ 2297.949097][T14736] genl_rcv_msg+0x601/0x790 [ 2297.953655][T14736] ? genl_bind+0x360/0x360 [ 2297.958098][T14736] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2297.964471][T14736] netlink_rcv_skb+0x1ef/0x440 [ 2297.969277][T14736] ? genl_bind+0x360/0x360 [ 2297.973772][T14736] ? netlink_ack+0x1160/0x1160 [ 2297.978587][T14736] ? down_read+0x1a8/0x2d0 [ 2297.983039][T14736] genl_rcv+0x24/0x40 [ 2297.987053][T14736] netlink_unicast+0x7ad/0x920 [ 2297.991861][T14736] netlink_sendmsg+0x8ad/0xbd0 [ 2297.996702][T14736] ? netlink_getsockopt+0x550/0x550 [ 2298.001947][T14736] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2298.007560][T14736] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2298.012879][T14736] ? security_socket_sendmsg+0x7c/0xa0 [ 2298.018401][T14736] ? netlink_getsockopt+0x550/0x550 [ 2298.023645][T14736] ____sys_sendmsg+0x5ed/0x9a0 [ 2298.028459][T14736] ? __sys_sendmsg_sock+0x30/0x30 [ 2298.033512][T14736] ? __import_iovec+0x306/0x510 [ 2298.038423][T14736] ? import_iovec+0x6f/0xa0 [ 2298.042967][T14736] ___sys_sendmsg+0x2a2/0x360 [ 2298.047693][T14736] ? __sys_sendmsg+0x2a0/0x2a0 [ 2298.052539][T14736] __se_sys_sendmsg+0x1c3/0x2b0 [ 2298.057431][T14736] ? __x64_sys_sendmsg+0x80/0x80 [ 2298.062418][T14736] ? lockdep_hardirqs_on+0x94/0x140 [ 2298.067672][T14736] do_syscall_64+0x4c/0xa0 [ 2298.072115][T14736] ? clear_bhb_loop+0x60/0xb0 [ 2298.076829][T14736] ? clear_bhb_loop+0x60/0xb0 [ 2298.081544][T14736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2298.087479][T14736] RIP: 0033:0x7f41c759f559 [ 2298.091931][T14736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2298.111571][T14736] RSP: 002b:00007f41c8390028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2298.120020][T14736] RAX: ffffffffffffffda RBX: 00007f41c7825fa0 RCX: 00007f41c759f559 [ 2298.128026][T14736] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2298.136046][T14736] RBP: 00007f41c7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 2298.144050][T14736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2298.152050][T14736] R13: 00007f41c7826038 R14: 00007f41c7825fa0 R15: 00007ffe3c1aa7a8 [ 2298.160063][T14736] [ 2298.174764][T29632] Bluetooth: hci1: command 0x0409 tx timeout [ 2298.182982][T14705] chnl_net:caif_netlink_parms(): no params data found [ 2298.315571][T14743] netlink: 'syz.4.10563': attribute type 11 has an invalid length. [ 2298.337049][T14743] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10563'. [ 2298.530545][T14758] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10565'. [ 2298.621310][T14705] bridge0: port 1(bridge_slave_0) entered blocking state [ 2298.628664][T14705] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.663065][T14705] device bridge_slave_0 entered promiscuous mode [ 2298.731048][T14705] bridge0: port 2(bridge_slave_1) entered blocking state [ 2298.738237][T14705] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.765137][T14705] device bridge_slave_1 entered promiscuous mode [ 2298.855602][T14765] FAULT_INJECTION: forcing a failure. [ 2298.855602][T14765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2298.886514][T14765] CPU: 1 PID: 14765 Comm: syz.3.10567 Not tainted syzkaller #0 [ 2298.894155][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2298.904261][T14765] Call Trace: [ 2298.907584][T14765] [ 2298.910596][T14765] dump_stack_lvl+0x188/0x24e [ 2298.915330][T14765] ? show_regs_print_info+0x12/0x12 [ 2298.920587][T14765] ? load_image+0x410/0x410 [ 2298.925241][T14765] ? __lock_acquire+0x7ea0/0x7ea0 [ 2298.930372][T14765] should_fail_ex+0x390/0x4c0 [ 2298.935122][T14765] strncpy_from_user+0x32/0x340 [ 2298.940080][T14765] bpf_prog_load+0x200/0x1530 [ 2298.944836][T14765] ? map_freeze+0x390/0x390 [ 2298.949408][T14765] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2298.955708][T14765] ? lockdep_hardirqs_on+0x94/0x140 [ 2298.961007][T14765] ? copy_user_enhanced_fast_string+0xa/0x40 [ 2298.967049][T14765] ? bpf_lsm_bpf+0x5/0x10 [ 2298.971441][T14765] ? security_bpf+0x7a/0xa0 [ 2298.975999][T14765] __sys_bpf+0x5b8/0x780 [ 2298.980313][T14765] ? bpf_link_show_fdinfo+0x380/0x380 [ 2298.985769][T14765] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2298.992014][T14765] __x64_sys_bpf+0x78/0x90 [ 2298.996485][T14765] do_syscall_64+0x4c/0xa0 [ 2299.000979][T14765] ? clear_bhb_loop+0x60/0xb0 [ 2299.005708][T14765] ? clear_bhb_loop+0x60/0xb0 [ 2299.010450][T14765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2299.016407][T14765] RIP: 0033:0x7f556339f559 [ 2299.020870][T14765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2299.040530][T14765] RSP: 002b:00007f55641c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2299.049011][T14765] RAX: ffffffffffffffda RBX: 00007f5563625fa0 RCX: 00007f556339f559 [ 2299.057037][T14765] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 2299.065091][T14765] RBP: 00007f55641c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2299.073117][T14765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2299.081139][T14765] R13: 00007f5563626038 R14: 00007f5563625fa0 R15: 00007fff1eb28de8 [ 2299.089353][T14765] [ 2299.386999][ T937] device gretap0 left promiscuous mode [ 2299.404979][ T937] Ÿë: port 1(gretap0) entered disabled state [ 2299.491324][T14705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2299.683272][T14705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2299.853331][T14705] team0: Port device team_slave_0 added [ 2299.924428][T14705] team0: Port device team_slave_1 added [ 2300.134520][T14801] netlink: 114960 bytes leftover after parsing attributes in process `syz.4.10575'. [ 2300.220499][T14801] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 2300.230460][T29632] Bluetooth: hci1: command 0x041b tx timeout [ 2300.266328][T14799] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10574'. [ 2300.304476][T14705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2300.317806][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2300.400913][T14705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2300.440541][T14806] netlink: 'syz.3.10577': attribute type 10 has an invalid length. [ 2300.480050][T14705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2300.509768][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2300.564089][T14705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2300.767414][T14810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10578'. [ 2300.820691][T14705] device hsr_slave_0 entered promiscuous mode [ 2300.844390][T14705] device hsr_slave_1 entered promiscuous mode [ 2300.909275][T14813] netlink: 'syz.4.10579': attribute type 11 has an invalid length. [ 2300.942084][T14813] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10579'. [ 2300.992722][T14813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2301.301138][T14821] netlink: 'syz.0.10580': attribute type 10 has an invalid length. [ 2301.377221][T14827] netlink: 'syz.0.10580': attribute type 10 has an invalid length. [ 2301.662690][T14843] FAULT_INJECTION: forcing a failure. [ 2301.662690][T14843] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.704478][T14843] CPU: 1 PID: 14843 Comm: syz.1.10584 Not tainted syzkaller #0 [ 2301.712118][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2301.722225][T14843] Call Trace: [ 2301.725565][T14843] [ 2301.728539][T14843] dump_stack_lvl+0x188/0x24e [ 2301.733279][T14843] ? show_regs_print_info+0x12/0x12 [ 2301.738537][T14843] ? load_image+0x410/0x410 [ 2301.743106][T14843] ? __might_sleep+0xd0/0xd0 [ 2301.747790][T14843] ? __lock_acquire+0x7ea0/0x7ea0 [ 2301.752905][T14843] ? mark_lock+0x94/0x320 [ 2301.757298][T14843] should_fail_ex+0x390/0x4c0 [ 2301.762066][T14843] should_failslab+0x5/0x20 [ 2301.766615][T14843] slab_pre_alloc_hook+0x59/0x300 [ 2301.771692][T14843] ? __get_vm_area_node+0x122/0x330 [ 2301.776944][T14843] __kmem_cache_alloc_node+0x4f/0x270 [ 2301.782376][T14843] ? __get_vm_area_node+0x122/0x330 [ 2301.787629][T14843] kmalloc_node_trace+0x22/0xe0 [ 2301.792527][T14843] __get_vm_area_node+0x122/0x330 [ 2301.797660][T14843] __vmalloc_node_range+0x357/0x1380 [ 2301.803003][T14843] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2301.808633][T14843] ? aa_get_newest_label+0xf9/0x5b0 [ 2301.813919][T14843] ? free_vm_area+0x50/0x50 [ 2301.818484][T14843] ? end_current_label_crit_section+0x170/0x170 [ 2301.824788][T14843] ? __lock_acquire+0x7ea0/0x7ea0 [ 2301.829874][T14843] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2301.835913][T14843] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2301.841541][T14843] __vmalloc+0x76/0x80 [ 2301.845665][T14843] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2301.851310][T14843] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2301.856747][T14843] ? bpf_prog_alloc+0x13/0x1b0 [ 2301.861582][T14843] bpf_prog_alloc+0x1c/0x1b0 [ 2301.866225][T14843] bpf_prog_load+0x7d4/0x1530 [ 2301.870966][T14843] ? map_freeze+0x390/0x390 [ 2301.875519][T14843] ? __might_fault+0xa6/0x120 [ 2301.880250][T14843] ? __might_fault+0xa6/0x120 [ 2301.884975][T14843] ? __might_fault+0xc2/0x120 [ 2301.889705][T14843] ? __might_fault+0xa6/0x120 [ 2301.894427][T14843] ? bpf_lsm_bpf+0x5/0x10 [ 2301.898807][T14843] ? security_bpf+0x7a/0xa0 [ 2301.903352][T14843] __sys_bpf+0x5b8/0x780 [ 2301.907643][T14843] ? bpf_link_show_fdinfo+0x380/0x380 [ 2301.913069][T14843] ? lock_chain_count+0x20/0x20 [ 2301.917965][T14843] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2301.923995][T14843] __x64_sys_bpf+0x78/0x90 [ 2301.928482][T14843] do_syscall_64+0x4c/0xa0 [ 2301.932930][T14843] ? clear_bhb_loop+0x60/0xb0 [ 2301.937631][T14843] ? clear_bhb_loop+0x60/0xb0 [ 2301.942337][T14843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2301.948300][T14843] RIP: 0033:0x7fc99e19f559 [ 2301.952747][T14843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2301.972398][T14843] RSP: 002b:00007fc99f157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2301.980846][T14843] RAX: ffffffffffffffda RBX: 00007fc99e425fa0 RCX: 00007fc99e19f559 [ 2301.988844][T14843] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 2301.996892][T14843] RBP: 00007fc99f157090 R08: 0000000000000000 R09: 0000000000000000 [ 2302.004897][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2302.012919][T14843] R13: 00007fc99e426038 R14: 00007fc99e425fa0 R15: 00007ffe51ff07c8 [ 2302.020938][T14843] [ 2302.067896][T14836] netlink: 'syz.4.10583': attribute type 10 has an invalid length. [ 2302.178598][T14836] team0: Device nlmon0 is of different type [ 2302.255939][T14843] syz.1.10584: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2302.274050][T14843] CPU: 0 PID: 14843 Comm: syz.1.10584 Not tainted syzkaller #0 [ 2302.281657][T14843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2302.291760][T14843] Call Trace: [ 2302.295084][T14843] [ 2302.298060][T14843] dump_stack_lvl+0x188/0x24e [ 2302.302794][T14843] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2302.309275][T14843] ? show_regs_print_info+0x12/0x12 [ 2302.314533][T14843] ? load_image+0x410/0x410 [ 2302.319102][T14843] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2302.325580][T14843] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2302.332145][T14843] warn_alloc+0x242/0x330 [ 2302.336539][T14843] ? __get_vm_area_node+0x122/0x330 [ 2302.341805][T14843] ? zone_watermark_ok_safe+0x270/0x270 [ 2302.347427][T14843] ? rcu_is_watching+0x11/0xa0 [ 2302.352263][T14843] ? __get_vm_area_node+0x318/0x330 [ 2302.357525][T14843] __vmalloc_node_range+0x37c/0x1380 [ 2302.362907][T14843] ? aa_get_newest_label+0xf9/0x5b0 [ 2302.368171][T14843] ? free_vm_area+0x50/0x50 [ 2302.372752][T14843] ? end_current_label_crit_section+0x170/0x170 [ 2302.379065][T14843] ? __lock_acquire+0x7ea0/0x7ea0 [ 2302.384144][T14843] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2302.390194][T14843] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2302.395808][T14843] __vmalloc+0x76/0x80 [ 2302.399946][T14843] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2302.405574][T14843] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2302.411005][T14843] ? bpf_prog_alloc+0x13/0x1b0 [ 2302.415840][T14843] bpf_prog_alloc+0x1c/0x1b0 [ 2302.420497][T14843] bpf_prog_load+0x7d4/0x1530 [ 2302.425276][T14843] ? map_freeze+0x390/0x390 [ 2302.429841][T14843] ? __might_fault+0xa6/0x120 [ 2302.434578][T14843] ? __might_fault+0xa6/0x120 [ 2302.439309][T14843] ? __might_fault+0xc2/0x120 [ 2302.444056][T14843] ? __might_fault+0xa6/0x120 [ 2302.448790][T14843] ? bpf_lsm_bpf+0x5/0x10 [ 2302.453173][T14843] ? security_bpf+0x7a/0xa0 [ 2302.457727][T14843] __sys_bpf+0x5b8/0x780 [ 2302.462030][T14843] ? bpf_link_show_fdinfo+0x380/0x380 [ 2302.467473][T14843] ? lock_chain_count+0x20/0x20 [ 2302.472378][T14843] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2302.478452][T14843] __x64_sys_bpf+0x78/0x90 [ 2302.482954][T14843] do_syscall_64+0x4c/0xa0 [ 2302.487424][T14843] ? clear_bhb_loop+0x60/0xb0 [ 2302.492148][T14843] ? clear_bhb_loop+0x60/0xb0 [ 2302.496875][T14843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2302.502835][T14843] RIP: 0033:0x7fc99e19f559 [ 2302.507292][T14843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2302.526954][T14843] RSP: 002b:00007fc99f157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2302.535433][T14843] RAX: ffffffffffffffda RBX: 00007fc99e425fa0 RCX: 00007fc99e19f559 [ 2302.543460][T14843] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 2302.551483][T14843] RBP: 00007fc99f157090 R08: 0000000000000000 R09: 0000000000000000 [ 2302.559504][T14843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2302.567519][T14843] R13: 00007fc99e426038 R14: 00007fc99e425fa0 R15: 00007ffe51ff07c8 [ 2302.575555][T14843] [ 2302.579297][T16028] Bluetooth: hci1: command 0x040f tx timeout [ 2302.597187][T14851] netlink: 'syz.0.10586': attribute type 19 has an invalid length. [ 2302.607494][T14851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10586'. [ 2302.662404][T14851] netlink: 'syz.0.10586': attribute type 19 has an invalid length. [ 2302.746394][T14851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10586'. [ 2302.772554][T14843] Mem-Info: [ 2302.776180][T14843] active_anon:11800 inactive_anon:0 isolated_anon:0 [ 2302.776180][T14843] active_file:22056 inactive_file:40844 isolated_file:0 [ 2302.776180][T14843] unevictable:768 dirty:133 writeback:0 [ 2302.776180][T14843] slab_reclaimable:22327 slab_unreclaimable:100490 [ 2302.776180][T14843] mapped:30279 shmem:1370 pagetables:660 [ 2302.776180][T14843] sec_pagetables:0 bounce:0 [ 2302.776180][T14843] kernel_misc_reclaimable:0 [ 2302.776180][T14843] free:1299699 free_pcp:6512 free_cma:0 [ 2302.891214][T14851] netlink: 'syz.0.10586': attribute type 19 has an invalid length. [ 2302.925852][T14851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10586'. [ 2302.997067][T14843] Node 0 active_anon:47336kB inactive_anon:0kB active_file:88224kB inactive_file:163172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121156kB dirty:528kB writeback:0kB shmem:3948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11388kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no [ 2303.124843][T14843] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2303.222261][T14843] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2303.281468][T14870] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10589'. [ 2303.351678][T14843] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 2303.361848][T14843] Node 0 DMA32 free:1273936kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:47004kB inactive_anon:0kB active_file:88224kB inactive_file:163172kB unevictable:1536kB writepending:528kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:21500kB local_pcp:14552kB free_cma:0kB [ 2303.440635][T14843] lowmem_reserve[]: 0 0 1 1 1 [ 2303.488657][T14843] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2303.582599][T14876] netlink: 'syz.3.10591': attribute type 10 has an invalid length. [ 2303.630227][T14843] lowmem_reserve[]: 0 0 0 0 0 [ 2303.642176][T14843] Node 1 Normal free:3908500kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:8896kB local_pcp:8896kB free_cma:0kB [ 2303.700197][T14875] netlink: 'syz.4.10592': attribute type 11 has an invalid length. [ 2303.711133][T14875] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10592'. [ 2303.925780][T14875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2303.959750][T14843] lowmem_reserve[]: 0 0 0 0 0 [ 2303.971928][T14843] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2303.985341][T14843] Node 0 DMA32: 3090*4kB (UM) 2435*8kB (UME) 1627*16kB (UME) 1530*32kB (UME) 1086*64kB (UME) 658*128kB (UME) 500*256kB (UME) 366*512kB (UM) 174*1024kB (UM) 16*2048kB (UME) 119*4096kB (UM) = 1274320kB [ 2304.011096][T14843] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2304.040837][T14843] Node 1 Normal: 251*4kB (UE) 47*8kB (UE) 31*16kB (UME) 184*32kB (UME) 51*64kB (UME) 15*128kB (UME) 15*256kB (UME) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3908500kB [ 2304.068264][ T937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2304.084203][ T937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2304.102019][ T937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2304.109898][T14843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2304.126659][ T937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2304.135096][T14843] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2304.155039][ T937] bridge0: port 4(veth1_to_team) entered disabled state [ 2304.168020][T14843] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2304.180154][ T937] device bridge_slave_1 left promiscuous mode [ 2304.191774][T14843] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2304.208677][ T937] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.221114][T14843] 64270 total pagecache pages [ 2304.227629][ T937] device bridge_slave_0 left promiscuous mode [ 2304.241435][T14843] 0 pages in swap cache [ 2304.245905][ T937] bridge0: port 1(bridge_slave_0) entered disabled state [ 2304.262059][T14843] Free swap = 124728kB [ 2304.266525][T14843] Total swap = 124996kB [ 2304.281888][T14843] 2097051 pages RAM [ 2304.290639][T14843] 0 pages HighMem/MovableOnly [ 2304.307050][T14843] 419818 pages reserved [ 2304.331633][ T937] device veth1_macvtap left promiscuous mode [ 2304.339212][T14843] 0 pages cma reserved [ 2304.435302][T14889] netlink: 66320 bytes leftover after parsing attributes in process `syz.3.10593'. [ 2304.624801][T29632] Bluetooth: hci1: command 0x0419 tx timeout [ 2305.565209][T14889] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2305.579843][T14889] CPU: 1 PID: 14889 Comm: syz.3.10593 Not tainted syzkaller #0 [ 2305.587473][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2305.597583][T14889] Call Trace: [ 2305.600915][T14889] [ 2305.603899][T14889] dump_stack_lvl+0x188/0x24e [ 2305.608654][T14889] ? show_regs_print_info+0x12/0x12 [ 2305.613911][T14889] ? load_image+0x410/0x410 [ 2305.618499][T14889] sysfs_warn_dup+0x8a/0xa0 [ 2305.623062][T14889] sysfs_do_create_link_sd+0xc0/0x110 [ 2305.628500][T14889] device_add+0x83b/0x1050 [ 2305.632992][T14889] wiphy_register+0x1d8b/0x2aa0 [ 2305.637933][T14889] ? cfg80211_event_work+0x40/0x40 [ 2305.643105][T14889] ? minstrel_ht_alloc+0x894/0xa20 [ 2305.648282][T14889] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2305.654433][T14889] ieee80211_register_hw+0x2e33/0x3b00 [ 2305.659979][T14889] ? ieee80211_register_hw+0xf01/0x3b00 [ 2305.665593][T14889] ? ieee80211_register_hw+0xf01/0x3b00 [ 2305.671220][T14889] ? ieee80211_tasklet_handler+0x20/0x20 [ 2305.676912][T14889] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2305.682864][T14889] ? __debug_object_init+0xed/0x440 [ 2305.688104][T14889] ? memset+0x1e/0x40 [ 2305.692164][T14889] ? __hrtimer_init+0x189/0x270 [ 2305.697060][T14889] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2305.702820][T14889] ? memcpy+0x3c/0x60 [ 2305.706837][T14889] hwsim_new_radio_nl+0xab7/0xc90 [ 2305.711924][T14889] genl_family_rcv_msg_doit+0x22f/0x350 [ 2305.717501][T14889] ? end_current_label_crit_section+0x170/0x170 [ 2305.723789][T14889] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2305.729724][T14889] ? bpf_lsm_capable+0x5/0x10 [ 2305.734457][T14889] ? security_capable+0x85/0xb0 [ 2305.739367][T14889] genl_rcv_msg+0x601/0x790 [ 2305.743937][T14889] ? genl_bind+0x360/0x360 [ 2305.748399][T14889] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2305.754781][T14889] netlink_rcv_skb+0x1ef/0x440 [ 2305.759595][T14889] ? genl_bind+0x360/0x360 [ 2305.764054][T14889] ? netlink_ack+0x1160/0x1160 [ 2305.768901][T14889] ? down_read+0x1a8/0x2d0 [ 2305.773375][T14889] genl_rcv+0x24/0x40 [ 2305.777402][T14889] netlink_unicast+0x7ad/0x920 [ 2305.782224][T14889] netlink_sendmsg+0x8ad/0xbd0 [ 2305.787057][T14889] ? netlink_getsockopt+0x550/0x550 [ 2305.792299][T14889] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2305.797908][T14889] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2305.803256][T14889] ? security_socket_sendmsg+0x7c/0xa0 [ 2305.809024][T14889] ? netlink_getsockopt+0x550/0x550 [ 2305.814279][T14889] ____sys_sendmsg+0x5ed/0x9a0 [ 2305.819092][T14889] ? __sys_sendmsg_sock+0x30/0x30 [ 2305.824178][T14889] ? __import_iovec+0x306/0x510 [ 2305.829078][T14889] ? import_iovec+0x6f/0xa0 [ 2305.833629][T14889] ___sys_sendmsg+0x2a2/0x360 [ 2305.838359][T14889] ? __sys_sendmsg+0x2a0/0x2a0 [ 2305.843200][T14889] __se_sys_sendmsg+0x1c3/0x2b0 [ 2305.848089][T14889] ? __x64_sys_sendmsg+0x80/0x80 [ 2305.853084][T14889] ? lockdep_hardirqs_on+0x94/0x140 [ 2305.858314][T14889] do_syscall_64+0x4c/0xa0 [ 2305.862763][T14889] ? clear_bhb_loop+0x60/0xb0 [ 2305.867469][T14889] ? clear_bhb_loop+0x60/0xb0 [ 2305.872186][T14889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2305.878146][T14889] RIP: 0033:0x7f556339f559 [ 2305.882586][T14889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2305.902247][T14889] RSP: 002b:00007f55641c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2305.910700][T14889] RAX: ffffffffffffffda RBX: 00007f5563625fa0 RCX: 00007f556339f559 [ 2305.918711][T14889] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2305.926713][T14889] RBP: 00007f5563436b20 R08: 0000000000000000 R09: 0000000000000000 [ 2305.934722][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2305.942724][T14889] R13: 00007f5563626038 R14: 00007f5563625fa0 R15: 00007fff1eb28de8 [ 2305.950762][T14889] [ 2306.357969][T14905] netlink: 'syz.1.10598': attribute type 10 has an invalid length. [ 2306.649424][T14705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2306.686716][T14705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2306.740128][T14705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2306.778669][T14705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2306.896469][T14917] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10601'. [ 2306.912163][T14920] netlink: 'syz.1.10602': attribute type 10 has an invalid length. [ 2307.050698][T14705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2307.127205][ T939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2307.147098][ T939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2307.174512][T14924] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10603'. [ 2307.192353][T14705] 8021q: adding VLAN 0 to HW filter on device team0 [ 2307.248798][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2307.279694][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2307.302712][T31013] bridge0: port 1(bridge_slave_0) entered blocking state [ 2307.310332][T31013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2307.334767][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2307.349198][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2307.365763][T31013] bridge0: port 2(bridge_slave_1) entered blocking state [ 2307.373150][T31013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2307.411125][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2307.427948][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2307.494664][T14934] netlink: 'syz.0.10605': attribute type 11 has an invalid length. [ 2307.537464][T14934] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10605'. [ 2307.558049][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2307.567034][T14934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2307.580285][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2307.595042][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2307.622649][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2307.650667][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2307.687942][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2307.782253][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2307.801579][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2307.817240][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2307.856629][T31013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2307.900257][T14705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2308.044541][T14953] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.10609'. [ 2308.443263][T14961] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10610'. [ 2308.585091][T14961] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.644639][T14961] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.695443][T14961] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.720823][T14961] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.883843][T14957] rxe_eth0 speed is unknown, defaulting to 1000 [ 2308.935251][T14970] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10613'. [ 2309.378177][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2309.416697][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2309.490052][T14705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2309.567464][T14991] netlink: 'syz.4.10618': attribute type 10 has an invalid length. [ 2309.587375][T14991] device veth0_macvtap left promiscuous mode [ 2309.715043][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2309.771499][T14997] netlink: 'syz.3.10619': attribute type 11 has an invalid length. [ 2309.792626][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2309.840233][T14997] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10619'. [ 2309.862526][ T8739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2309.876374][ T8739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2309.893213][T14997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2309.905964][T14705] device veth0_vlan entered promiscuous mode [ 2309.931085][ T8739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2309.946014][ T8739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2309.978089][T14705] device veth1_vlan entered promiscuous mode [ 2310.107608][T14705] device veth0_macvtap entered promiscuous mode [ 2310.152698][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2310.162275][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2310.192793][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2310.237476][T14705] device veth1_macvtap entered promiscuous mode [ 2310.274458][T15007] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.10621'. [ 2310.297207][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.310243][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.321598][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.332663][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.344100][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.359095][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.377985][T14705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2310.549374][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2310.567403][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2310.602097][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2310.636922][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.660673][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.680031][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.717007][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.733854][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.758183][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.782185][T14705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2310.840959][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2310.850110][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2310.915046][T14705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2310.934086][T14705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2310.960713][T14705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2310.970896][T14705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.015883][T15025] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10624'. [ 2311.281787][ T8739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2311.289724][ T8739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2311.347630][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2311.488724][ T8721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2311.497232][ T8721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2311.536621][ T8739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2313.155309][T15068] netlink: 'syz.4.10630': attribute type 11 has an invalid length. [ 2313.196091][T15068] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10630'. [ 2313.297570][T15068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2314.012867][T15065] netlink: 'syz.3.10632': attribute type 10 has an invalid length. [ 2314.350054][T15089] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10635'. [ 2314.429373][T15087] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10634'. [ 2314.467733][T15093] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.10637'. [ 2315.085306][T15117] : port 1(gretap0) entered blocking state [ 2315.116311][T15117] : port 1(gretap0) entered disabled state [ 2315.148907][T15117] device gretap0 entered promiscuous mode [ 2315.222612][T15119] netlink: 'syz.4.10645': attribute type 10 has an invalid length. [ 2315.996304][T15134] netlink: 'syz.2.10648': attribute type 11 has an invalid length. [ 2316.033113][T15135] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10650'. [ 2316.061418][T15134] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10648'. [ 2316.102162][T15134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2316.397892][T15147] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.10655'. [ 2317.538965][T15163] netlink: 'syz.1.10660': attribute type 10 has an invalid length. [ 2317.579725][T15163] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10660'. [ 2317.670586][T15165] netlink: 'syz.4.10661': attribute type 10 has an invalid length. [ 2317.909877][T15168] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10662'. [ 2317.980596][T15174] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10664'. [ 2318.219923][T15178] netlink: 'syz.3.10666': attribute type 11 has an invalid length. [ 2318.240982][T15178] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10666'. [ 2318.283145][T15184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2319.926313][T15217] __nla_validate_parse: 5 callbacks suppressed [ 2319.926335][T15217] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.10683'. [ 2319.995998][T15220] netlink: 'syz.2.10684': attribute type 10 has an invalid length. [ 2320.022351][T15220] device veth0_macvtap left promiscuous mode [ 2320.049979][T15218] netlink: 'syz.3.10682': attribute type 11 has an invalid length. [ 2320.104982][T15218] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10682'. [ 2320.195355][T15218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2320.459999][T15229] netlink: 'syz.4.10685': attribute type 3 has an invalid length. [ 2320.516639][T15227] netlink: 'syz.4.10685': attribute type 3 has an invalid length. [ 2320.597917][T15229] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10685'. [ 2320.608910][T15227] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10685'. [ 2320.660459][T15234] netlink: 'syz.3.10686': attribute type 2 has an invalid length. [ 2320.721924][T15234] netlink: 'syz.3.10686': attribute type 1 has an invalid length. [ 2320.743076][T15234] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10686'. [ 2321.018118][T15237] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10687'. [ 2322.237730][T15258] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.10697'. [ 2322.366793][T15260] netlink: 'syz.3.10698': attribute type 10 has an invalid length. [ 2322.437184][T15256] netlink: 'syz.0.10696': attribute type 11 has an invalid length. [ 2322.455654][T15256] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10696'. [ 2322.478564][T15256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2322.512401][T15265] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10700'. [ 2322.965726][T15282] netlink: 'syz.1.10706': attribute type 22 has an invalid length. [ 2323.011828][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10706'. [ 2323.669954][T15294] tipc: Started in network mode [ 2323.675550][T15294] tipc: Node identity 9215a268, cluster identity 4711 [ 2323.714107][T15294] tipc: Node number set to 2450891368 [ 2324.247651][T15301] netlink: 'syz.1.10714': attribute type 11 has an invalid length. [ 2324.366223][T15300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2324.447170][T15312] netlink: 'syz.2.10719': attribute type 3 has an invalid length. [ 2324.961162][T15323] netlink: 'syz.4.10723': attribute type 10 has an invalid length. [ 2325.309586][T15340] __nla_validate_parse: 4 callbacks suppressed [ 2325.309618][T15340] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10727'. [ 2325.465696][T15332] can: request_module (can-proto-0) failed. [ 2325.769565][T15340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2325.995454][T15340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2326.027526][T15340] bond0 (unregistering): Released all slaves [ 2326.065336][T15344] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.10729'. [ 2326.136584][T15344] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2326.167596][T15344] CPU: 1 PID: 15344 Comm: syz.4.10729 Not tainted syzkaller #0 [ 2326.175244][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2326.185384][T15344] Call Trace: [ 2326.188737][T15344] [ 2326.191716][T15344] dump_stack_lvl+0x188/0x24e [ 2326.196454][T15344] ? show_regs_print_info+0x12/0x12 [ 2326.201713][T15344] ? load_image+0x410/0x410 [ 2326.206281][T15344] sysfs_warn_dup+0x8a/0xa0 [ 2326.210846][T15344] sysfs_do_create_link_sd+0xc0/0x110 [ 2326.216289][T15344] device_add+0x83b/0x1050 [ 2326.220774][T15344] wiphy_register+0x1d8b/0x2aa0 [ 2326.225711][T15344] ? cfg80211_event_work+0x40/0x40 [ 2326.230900][T15344] ? minstrel_ht_alloc+0x894/0xa20 [ 2326.236080][T15344] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2326.242204][T15344] ieee80211_register_hw+0x2e33/0x3b00 [ 2326.247739][T15344] ? ieee80211_register_hw+0xf01/0x3b00 [ 2326.253342][T15344] ? ieee80211_register_hw+0xf01/0x3b00 [ 2326.259071][T15344] ? ieee80211_tasklet_handler+0x20/0x20 [ 2326.264764][T15344] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2326.270720][T15344] ? __debug_object_init+0xed/0x440 [ 2326.275974][T15344] ? memset+0x1e/0x40 [ 2326.279995][T15344] ? __hrtimer_init+0x189/0x270 [ 2326.284890][T15344] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2326.290677][T15344] ? memcpy+0x3c/0x60 [ 2326.294717][T15344] hwsim_new_radio_nl+0xab7/0xc90 [ 2326.299809][T15344] genl_family_rcv_msg_doit+0x22f/0x350 [ 2326.305438][T15344] ? end_current_label_crit_section+0x170/0x170 [ 2326.311838][T15344] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2326.317888][T15344] ? bpf_lsm_capable+0x5/0x10 [ 2326.322631][T15344] ? security_capable+0x85/0xb0 [ 2326.327645][T15344] genl_rcv_msg+0x601/0x790 [ 2326.332220][T15344] ? lock_chain_count+0x20/0x20 [ 2326.337148][T15344] ? genl_bind+0x360/0x360 [ 2326.341619][T15344] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2326.348109][T15344] netlink_rcv_skb+0x1ef/0x440 [ 2326.352954][T15344] ? genl_bind+0x360/0x360 [ 2326.357428][T15344] ? netlink_ack+0x1160/0x1160 [ 2326.362280][T15344] ? down_read+0x1a8/0x2d0 [ 2326.366846][T15344] genl_rcv+0x24/0x40 [ 2326.370885][T15344] netlink_unicast+0x7ad/0x920 [ 2326.375777][T15344] netlink_sendmsg+0x8ad/0xbd0 [ 2326.380672][T15344] ? netlink_getsockopt+0x550/0x550 [ 2326.385908][T15344] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2326.391491][T15344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2326.396815][T15344] ? security_socket_sendmsg+0x7c/0xa0 [ 2326.402406][T15344] ? netlink_getsockopt+0x550/0x550 [ 2326.407684][T15344] ____sys_sendmsg+0x5ed/0x9a0 [ 2326.412524][T15344] ? __sys_sendmsg_sock+0x30/0x30 [ 2326.417635][T15344] ? __import_iovec+0x306/0x510 [ 2326.422603][T15344] ? import_iovec+0x6f/0xa0 [ 2326.427200][T15344] ___sys_sendmsg+0x2a2/0x360 [ 2326.431951][T15344] ? __sys_sendmsg+0x2a0/0x2a0 [ 2326.436839][T15344] __se_sys_sendmsg+0x1c3/0x2b0 [ 2326.441778][T15344] ? __x64_sys_sendmsg+0x80/0x80 [ 2326.446818][T15344] ? lockdep_hardirqs_on+0x94/0x140 [ 2326.452086][T15344] do_syscall_64+0x4c/0xa0 [ 2326.456574][T15344] ? clear_bhb_loop+0x60/0xb0 [ 2326.461316][T15344] ? clear_bhb_loop+0x60/0xb0 [ 2326.466052][T15344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2326.472010][T15344] RIP: 0033:0x7f57a859f559 [ 2326.476498][T15344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2326.496165][T15344] RSP: 002b:00007f57a9399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2326.504658][T15344] RAX: ffffffffffffffda RBX: 00007f57a8825fa0 RCX: 00007f57a859f559 [ 2326.512692][T15344] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 2326.520722][T15344] RBP: 00007f57a8636b20 R08: 0000000000000000 R09: 0000000000000000 [ 2326.528841][T15344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2326.536894][T15344] R13: 00007f57a8826038 R14: 00007f57a8825fa0 R15: 00007fffd51fb818 [ 2326.544959][T15344] [ 2327.087195][T15377] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.10736'. [ 2327.461062][T15388] netlink: 'syz.1.10740': attribute type 10 has an invalid length. [ 2327.463029][T15380] netlink: 'syz.0.10739': attribute type 4 has an invalid length. [ 2327.565839][T15380] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.10739'. [ 2328.376156][T15396] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10744'. [ 2328.521616][T15401] netlink: 'syz.1.10746': attribute type 22 has an invalid length. [ 2328.553422][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10746'. [ 2328.635945][T15407] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.10750'. [ 2328.907931][T15416] netlink: 'syz.3.10753': attribute type 19 has an invalid length. [ 2328.946524][T15416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10753'. [ 2329.014745][T15425] netlink: 'syz.0.10756': attribute type 10 has an invalid length. [ 2329.330155][T15429] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10758'. [ 2329.377416][T15429] device hsr_slave_0 left promiscuous mode [ 2329.586959][T15430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10758'. [ 2330.247652][T15451] Ÿë: port 2(veth0_to_team) entered blocking state [ 2330.265570][T15451] Ÿë: port 2(veth0_to_team) entered disabled state [ 2330.302281][T15451] device veth0_to_team entered promiscuous mode [ 2330.383375][T15460] netlink: 'syz.1.10769': attribute type 3 has an invalid length. [ 2330.442679][T15460] __nla_validate_parse: 1 callbacks suppressed [ 2330.442700][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.508512][T15460] netlink: 'syz.1.10769': attribute type 3 has an invalid length. [ 2330.520095][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.535140][T15460] netlink: 'syz.1.10769': attribute type 3 has an invalid length. [ 2330.551569][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.593680][T15460] netlink: 'syz.1.10769': attribute type 3 has an invalid length. [ 2330.606686][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.633199][T15460] netlink: 'syz.1.10769': attribute type 3 has an invalid length. [ 2330.651108][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.685119][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.709857][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.742372][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.757898][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2330.776710][T15460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10769'. [ 2331.624342][T15490] IPv6: NLM_F_CREATE should be specified when creating new route [ 2331.633365][T15490] IPv6: Can't replace route, no match found [ 2331.782537][T15497] netlink: 'syz.1.10780': attribute type 11 has an invalid length. [ 2331.871748][T15495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2332.670267][T15529] validate_nla: 55 callbacks suppressed [ 2332.670290][T15529] netlink: 'syz.1.10794': attribute type 10 has an invalid length. [ 2333.040851][T15520] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2333.410132][T15535] netlink: 'syz.0.10795': attribute type 11 has an invalid length. [ 2333.518495][T15534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2333.666829][T15545] rxe_eth0 speed is unknown, defaulting to 1000 [ 2334.320352][T15558] netlink: 'syz.2.10801': attribute type 10 has an invalid length. [ 2334.442744][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2334.652140][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 2335.909865][T15563] __nla_validate_parse: 53 callbacks suppressed [ 2335.909882][T15563] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10803'. [ 2336.059888][T15577] netlink: 'syz.0.10808': attribute type 10 has an invalid length. [ 2336.230412][T15584] netlink: 'syz.1.10809': attribute type 11 has an invalid length. [ 2336.258827][T15584] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10809'. [ 2336.361788][T15578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2337.227842][T15594] netlink: 'syz.0.10814': attribute type 3 has an invalid length. [ 2337.277253][T15594] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10814'. [ 2337.312677][T15597] : port 1(ip6gretap0) entered blocking state [ 2337.329013][T15600] netlink: 'syz.0.10814': attribute type 3 has an invalid length. [ 2337.339324][T15597] : port 1(ip6gretap0) entered disabled state [ 2337.382783][T15597] device ip6gretap0 entered promiscuous mode [ 2337.397580][T15600] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10814'. [ 2337.432371][T15602] device ip6gretap0 left promiscuous mode [ 2337.442276][T15606] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.10816'. [ 2337.453421][T15602] : port 1(ip6gretap0) entered disabled state [ 2337.462717][T15606] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10816'. [ 2337.695485][T15611] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10818'. [ 2338.085206][T15626] netlink: 'syz.2.10824': attribute type 10 has an invalid length. [ 2338.108031][T15617] netlink: 'syz.3.10821': attribute type 11 has an invalid length. [ 2338.129951][T15617] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10821'. [ 2338.221243][T15616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.424252][T15652] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10834'. [ 2339.844867][T15658] netlink: 'syz.1.10836': attribute type 11 has an invalid length. [ 2339.871199][T15658] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10836'. [ 2339.912342][T15657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.970151][T15669] netlink: 'syz.4.10841': attribute type 10 has an invalid length. [ 2340.587073][T15680] netlink: 'syz.3.10843': attribute type 16 has an invalid length. [ 2340.611858][T15679] netlink: 'syz.3.10843': attribute type 16 has an invalid length. [ 2341.092021][T15694] __nla_validate_parse: 3 callbacks suppressed [ 2341.092066][T15694] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10848'. [ 2341.212593][T15696] netlink: 'syz.4.10847': attribute type 25 has an invalid length. [ 2341.322471][T15696] netlink: 'syz.4.10847': attribute type 28 has an invalid length. [ 2342.027613][T15721] netlink: 'syz.3.10852': attribute type 11 has an invalid length. [ 2342.095190][T15721] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10852'. [ 2342.246939][T15727] netlink: 'syz.4.10857': attribute type 10 has an invalid length. [ 2342.666727][T15709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2342.777327][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10859'. [ 2342.914933][T15736] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10860'. [ 2344.265155][T15762] netlink: 'syz.4.10869': attribute type 10 has an invalid length. [ 2344.322442][T15762] team0: Device hsr_slave_0 failed to register rx_handler [ 2344.429938][T15770] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10873'. [ 2344.655736][T15777] netlink: 'syz.0.10874': attribute type 10 has an invalid length. [ 2345.075181][T15786] netlink: 'syz.4.10876': attribute type 3 has an invalid length. [ 2345.184351][T15786] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10876'. [ 2348.352355][T15817] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10884'. [ 2348.863695][T15834] netlink: 'syz.1.10889': attribute type 10 has an invalid length. [ 2349.946174][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.952641][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2350.300937][T15850] netlink: 'syz.3.10891': attribute type 17 has an invalid length. [ 2350.359946][T15850] netlink: 'syz.3.10891': attribute type 16 has an invalid length. [ 2350.414239][T15850] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10891'. [ 2376.150907][ T4987] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2665 jiffies s: 201437 root: 0x2/. [ 2376.171127][ T4987] rcu: blocking rcu_node structures (internal RCU debug): [ 2376.178359][ T4987] Sending NMI from CPU 0 to CPUs 1: [ 2376.183959][ C1] NMI backtrace for cpu 1 [ 2376.183970][ C1] CPU: 1 PID: 15828 Comm: syz.2.10887 Not tainted syzkaller #0 [ 2376.183997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2376.184014][ C1] RIP: 0010:kasan_check_range+0x1b0/0x290 [ 2376.184047][ C1] Code: f3 4d 01 f3 49 89 df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b <41> 5c 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff [ 2376.184063][ C1] RSP: 0018:ffffc900001e0620 EFLAGS: 00000056 [ 2376.184078][ C1] RAX: ffffffff818ea301 RBX: ffff8880b8d3bbb0 RCX: ffffffff818ea40a [ 2376.184092][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b8d3bbb8 [ 2376.184103][ C1] RBP: 0000000000000001 R08: ffff8880b8d3bbbb R09: 1ffff110171a7777 [ 2376.184115][ C1] R10: dffffc0000000000 R11: ffffed10171a7778 R12: dffffc0000000001 [ 2376.184128][ C1] R13: dffffc0000000000 R14: 1ffff110171a7777 R15: 0000000000000001 [ 2376.184140][ C1] FS: 00007f67a4f216c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 2376.184156][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2376.184168][ C1] CR2: 0000000000000000 CR3: 00000000566cb000 CR4: 00000000003506e0 [ 2376.184183][ C1] DR0: 0000000000000000 DR1: 0000200000000200 DR2: 0000200000000200 [ 2376.184194][ C1] DR3: 0000200000000200 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2376.184206][ C1] Call Trace: [ 2376.184212][ C1] [ 2376.184222][ C1] irq_work_queue_on+0xaa/0x260 [ 2376.184252][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 2376.184276][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 2376.184295][ C1] ? __cant_sleep+0x220/0x220 [ 2376.184318][ C1] __rcu_read_unlock+0x78/0xd0 [ 2376.184334][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 2376.184358][ C1] trace_call_bpf+0x5bb/0x6b0 [ 2376.184382][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 2376.184410][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2376.184437][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 2376.184454][ C1] ? sched_clock_cpu+0x6e/0x260 [ 2376.184478][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 2376.184509][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 2376.184536][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2376.184554][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2376.184581][ C1] ? __irq_exit_rcu+0x147/0x230 [ 2376.184598][ C1] ? irq_exit_rcu+0x20/0x20 [ 2376.184616][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2376.184634][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 2376.184660][ C1] trace_hardirqs_on+0x24/0x40 [ 2376.184682][ C1] asm_sysvec_irq_work+0x16/0x20 [ 2376.184698][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2376.184717][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 68 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2376.184731][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 2376.184744][ C1] RAX: b1dba52e9f12f800 RBX: 1ffff9200003c164 RCX: b1dba52e9f12f800 [ 2376.184758][ C1] RDX: dffffc0000000000 RSI: ffffffff8aac19a0 RDI: ffffffff8aff71e0 [ 2376.184771][ C1] RBP: ffffc900001e0bd0 R08: ffffffff91b702ef R09: 1ffffffff236e05d [ 2376.184784][ C1] R10: dffffc0000000000 R11: fffffbfff236e05e R12: 0000000000000246 [ 2376.184796][ C1] R13: dffffc0000000000 R14: ffff8880b8d3bb00 R15: 0000000000000002 [ 2376.184820][ C1] ? kmem_cache_free+0xe0/0x2a0 [ 2376.184842][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 2376.184868][ C1] __rcu_read_unlock+0x78/0xd0 [ 2376.184884][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 2376.184913][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2376.184935][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 2376.184964][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 2376.184984][ C1] __hrtimer_run_queues+0x522/0xc90 [ 2376.185016][ C1] ? hw_scan_work+0xf00/0xf00 [ 2376.185040][ C1] ? hrtimer_interrupt+0x980/0x980 [ 2376.185066][ C1] hrtimer_run_softirq+0x173/0x290 [ 2376.185089][ C1] handle_softirqs+0x291/0x910 [ 2376.185109][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 2376.185129][ C1] ? do_softirq+0x210/0x210 [ 2376.185143][ C1] ? hrtimer_interrupt+0x775/0x980 [ 2376.185165][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 2376.185184][ C1] __irq_exit_rcu+0x13b/0x230 [ 2376.185201][ C1] ? irq_exit_rcu+0x20/0x20 [ 2376.185225][ C1] irq_exit_rcu+0x5/0x20 [ 2376.185240][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2376.185262][ C1] [ 2376.185267][ C1] [ 2376.185273][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2376.185291][ C1] RIP: 0010:__schedule+0x0/0x4030 [ 2376.185309][ C1] Code: a0 f8 ba 8e 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d7 be 01 00 e8 42 f8 3e f7 4c 89 ff 48 c7 c6 00 46 93 8b e8 03 45 7a f7 0f 0b 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 60 01 [ 2376.185324][ C1] RSP: 0018:ffffc900048ff538 EFLAGS: 00000286 [ 2376.185337][ C1] RAX: b1dba52e9f12f800 RBX: 0000000000000000 RCX: b1dba52e9f12f800 [ 2376.185350][ C1] RDX: dffffc0000000000 RSI: ffffffff8aac19a0 RDI: 0000000000000001 [ 2376.185362][ C1] RBP: ffffc900048ff5e0 R08: ffffffff91b702ef R09: 1ffffffff236e05d [ 2376.185375][ C1] R10: dffffc0000000000 R11: fffffbfff236e05e R12: 0000000000000000 [ 2376.185387][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200091fea8 [ 2376.185411][ C1] preempt_schedule_irq+0xbb/0x160 [ 2376.185430][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 2376.185451][ C1] ? rcu_is_watching+0x11/0xa0 [ 2376.185480][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 2376.185508][ C1] irqentry_exit+0x63/0x70 [ 2376.185528][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2376.185545][ C1] RIP: 0010:obj_cgroup_charge+0x32a/0x620 [ 2376.185569][ C1] Code: 84 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 41 c6 44 1f 08 f8 0f 85 21 01 00 00 41 f7 c4 00 02 00 00 74 01 fb 45 31 e4 <80> 7c 24 14 00 0f 85 a0 00 00 00 48 8b 44 24 18 49 89 c6 49 c1 ee [ 2376.185584][ C1] RSP: 0018:ffffc900048ff6a0 EFLAGS: 00000246 [ 2376.185597][ C1] RAX: b1dba52e9f12f800 RBX: dffffc0000000000 RCX: b1dba52e9f12f800 [ 2376.185611][ C1] RDX: dffffc0000000000 RSI: ffffffff8aac19a0 RDI: ffffffff8aff71e0 [ 2376.185624][ C1] RBP: ffffc900048ff790 R08: ffffffff91b702ef R09: 1ffffffff236e05d [ 2376.185637][ C1] R10: dffffc0000000000 R11: fffffbfff236e05e R12: 0000000000000000 [ 2376.185649][ C1] R13: ffff8880b8d36910 R14: ffff8880b8d36938 R15: 1ffff9200091fedc [ 2376.185677][ C1] ? obj_cgroup_charge+0xe9/0x620 [ 2376.185700][ C1] ? mod_objcg_mlstate+0x320/0x320 [ 2376.185727][ C1] ? get_obj_cgroup_from_current+0xd0/0x280 [ 2376.185754][ C1] slab_pre_alloc_hook+0x2e2/0x300 [ 2376.185778][ C1] kmem_cache_alloc+0x56/0x2f0 [ 2376.185797][ C1] ? vm_area_dup+0x23/0x1a0 [ 2376.185817][ C1] vm_area_dup+0x23/0x1a0 [ 2376.185835][ C1] copy_mm+0xb13/0x1680 [ 2376.185863][ C1] ? copy_signal+0x640/0x640 [ 2376.185896][ C1] ? __init_rwsem+0x11e/0x160 [ 2376.185917][ C1] ? copy_signal+0x51f/0x640 [ 2376.185939][ C1] copy_process+0x1952/0x4070 [ 2376.185967][ C1] ? copy_process+0x974/0x4070 [ 2376.185994][ C1] ? idle_dummy+0x10/0x10 [ 2376.186025][ C1] kernel_clone+0x24b/0x900 [ 2376.186044][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 2376.186069][ C1] ? create_io_thread+0x170/0x170 [ 2376.186100][ C1] __x64_sys_clone+0x1a7/0x220 [ 2376.186121][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 2376.186143][ C1] ? 0xffffffffff600000 [ 2376.186171][ C1] do_syscall_64+0x4c/0xa0 [ 2376.186187][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2376.186203][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2376.186221][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2376.186247][ C1] RIP: 0033:0x7f67a3f9f559 [ 2376.186262][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2376.186281][ C1] RSP: 002b:00007f67a4f20fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2376.186298][ C1] RAX: ffffffffffffffda RBX: 00007f67a4225fa0 RCX: 00007f67a3f9f559 [ 2376.186310][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080 [ 2376.186321][ C1] RBP: 00007f67a4036b20 R08: ffffffffff600000 R09: ffffffffff600000 [ 2376.186334][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2376.186344][ C1] R13: 00007f67a4226038 R14: 00007f67a4225fa0 R15: 00007ffdd633db28 [ 2376.186361][ C1] ? 0xffffffffff600000 [ 2376.186373][ C1] ? 0xffffffffff600000 [ 2376.186390][ C1]