last executing test programs: 7m31.781969869s ago: executing program 0 (id=2818): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc00, 0xc, 0x80000001, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1e23fffff0fffffff4880000090000006c05fcff1000000085100000fdffffff18240000", @ANYRES32=r8, @ANYBLOB="00000000f10f00001812004039ba851b05f7207f5a7096ab22bd3d545a911ee9d50845d52a1573e27df3f0fa3034ba2ee9eef115bd280574737738d07f51e8f3bfce9d4e973f", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018190000", @ANYRES32=r7, @ANYBLOB="000000000000000009a50e00030000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0xc49, 0xae, &(0x7f0000000680)=""/174, 0x82100, 0x8, '\x00', r11, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x2, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 7m30.710346407s ago: executing program 0 (id=2823): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6498c2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000540)=0x5) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c55932625", 0xcc}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb", 0xa9}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a", 0x8a}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') r6 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, r1, 0x3) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000300)=r0, 0xffffffffffffff6e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x4, 0x0, 0x11) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7f, @mcast1, 0x3}, 0x80, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES8=r7], 0x20) 7m30.569590311s ago: executing program 0 (id=2825): bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x7, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000015b000000000090000000810005"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e", 0x18}], 0x2}, 0x200ce0c0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20040080) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x0, 0x7, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004804) 7m30.370979476s ago: executing program 0 (id=2826): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900060000000401a80016200a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db7010000", 0xa2}], 0x1}, 0x844) 7m30.331768727s ago: executing program 0 (id=2827): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000400)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x8001, 0x2, 0x3}, {0x70a, 0x4, 0xc, 0x93b0}, {0x9, 0xff, 0xde, 0x8}, {0x5, 0xe5, 0x7f, 0x10001}, {0xa, 0x9, 0x8, 0x3}, {0xffff, 0x0, 0xd, 0x3}, {0x101, 0xff, 0x2, 0x10}, {0xfffd, 0x44, 0xc}]}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005009400000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xb0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710046000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 7m29.717676423s ago: executing program 0 (id=2832): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="f8dd0b874785da996295db1d035b2c8dea69f03c2da7a4deb455bf4ed78a911894265c71d259802b582962033b7ef6", @ANYRES64=0x0], 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x101, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x80, 0x20, 0x80000000000}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x7f, 0xd, 0x2, 0x0, 0x3, 0x61800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x2}, 0x8080, 0xb83, 0x8, 0x2, 0x5, 0x2, 0x4, 0x0, 0x4be, 0x0, 0x5}, 0x0, 0xa, r0, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x4000010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000000000ffdf"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x23, &(0x7f00000005c0)=""/35, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x1, 0x80000000}, 0x10, 0x0, r0, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x5, 0x1, 0xc}, {0x1, 0x5, 0x3, 0x8}, {0x3, 0x5, 0x3, 0xb}, {0x5, 0x2, 0x6, 0x5}, {0x3, 0x4, 0x4, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000280)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r6, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0x0, 0x0, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) 7m14.613369892s ago: executing program 32 (id=2832): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="f8dd0b874785da996295db1d035b2c8dea69f03c2da7a4deb455bf4ed78a911894265c71d259802b582962033b7ef6", @ANYRES64=0x0], 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x101, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x80, 0x20, 0x80000000000}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x7f, 0xd, 0x2, 0x0, 0x3, 0x61800, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x2}, 0x8080, 0xb83, 0x8, 0x2, 0x5, 0x2, 0x4, 0x0, 0x4be, 0x0, 0x5}, 0x0, 0xa, r0, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x4000010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000000000ffdf"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x23, &(0x7f00000005c0)=""/35, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x1, 0x80000000}, 0x10, 0x0, r0, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x5, 0x1, 0xc}, {0x1, 0x5, 0x3, 0x8}, {0x3, 0x5, 0x3, 0xb}, {0x5, 0x2, 0x6, 0x5}, {0x3, 0x4, 0x4, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000280)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r6, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0x0, 0x0, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) 6m12.888343801s ago: executing program 5 (id=3317): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000290000000000000000000000000000200000122b80c8938b4dc5c7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f0000000500)=""/254, 0xffffffffffffff6c}, {&(0x7f0000000600)=""/139}], 0x2}, 0x146) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000100)}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRES32=r2, @ANYRES64=r1, @ANYRESDEC=r3], 0x50) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 6m12.383388664s ago: executing program 5 (id=3322): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 6m11.78779964s ago: executing program 5 (id=3328): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00104006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100", 0x9b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b37, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 6m11.369566531s ago: executing program 5 (id=3333): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) openat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000008000008500000017000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5eaa00000000000071101300000000003583"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 6m10.595510471s ago: executing program 5 (id=3341): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8995, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m7.700488487s ago: executing program 5 (id=3353): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x60c) r1 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x100410, 0x200, 0x2, 0x3, 0x9, 0x9, 0xffbd, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='\x00', 0x0, 0x10}, 0x18) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x60c) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x100410, 0x200, 0x2, 0x3, 0x9, 0x9, 0xffbd, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='\x00', 0x0, 0x10}, 0x18) (async) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r2}) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) (async) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0xa, 0x1, 0x106) (async) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 5m52.660960154s ago: executing program 33 (id=3353): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x60c) r1 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x100410, 0x200, 0x2, 0x3, 0x9, 0x9, 0xffbd, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='\x00', 0x0, 0x10}, 0x18) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r2}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x60c) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x100410, 0x200, 0x2, 0x3, 0x9, 0x9, 0xffbd, 0x0, 0x8000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='\x00', 0x0, 0x10}, 0x18) (async) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r2}) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) (async) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0xa, 0x1, 0x106) (async) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 20.289859594s ago: executing program 2 (id=6459): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 20.110939859s ago: executing program 2 (id=6463): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4eb1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x9}, 0x200, 0xc8, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c25", 0xe}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x6, 0x4b, 0x16, 0x0, 0x7, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x10c004, 0x4, 0x1, 0x6, 0x0, 0x3, 0x6, 0x0, 0x2, 0x0, 0x6}, r3, 0xd, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x95a3, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x0, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r6, r4, r0, r6], &(0x7f0000000700)=[{0x4, 0x4, 0xf, 0xb}, {0x1, 0x5, 0xa, 0xb}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000840) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) 13.370729387s ago: executing program 6 (id=6494): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24c1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="f28a08d900"/14, 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 10.338418057s ago: executing program 6 (id=6496): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 10.164165832s ago: executing program 6 (id=6499): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e12050021", 0x2b}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_subtree(r1, 0x0, 0xfdef) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x31, 0x0, 0xc, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x16) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x4, 0x0}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r4, r0, 0x1c, 0x20, 0x0, @void, @void, @void, @value=r5, r3}, 0x20) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="350500"/20, @ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="02000000040000000100000000000000000000000000000000000000ddebfc3fa36c15996f6135ca8cbf9b2319b9eb48b344807e523165056798d0c24a97502c8989a44628fea2d6d5affbaaa8feabb73c5ef6a9"], 0x50) write$cgroup_devices(r1, 0x0, 0xffdd) 9.791616422s ago: executing program 1 (id=6504): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000740), 0x8, 0x74, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007910a2000000000007000000000000009100000000000000", @ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94) close(r0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r5, @ANYRESHEX=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802004320ab32595e0263000000000085000000d000000095000000000000001047a206d613904ad056aa0e8cf3774ea74bc8e1c2d6e2388beabb04204fc4c4887db8042994fb7334665e5a628fafa832e3920da5ddc91335646be2a0f23614083e5857892a02b8bfc4b6f091379cf80af4d65fa63f0091709407013466df504f6c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r12 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r12, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r11, 0x4000, r10}, 0x18) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 9.701367584s ago: executing program 6 (id=6505): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 9.670355674s ago: executing program 6 (id=6506): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24c1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="f28a08d900"/14, 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.624758035s ago: executing program 2 (id=6507): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000180)="cd91c0", 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r1, @ANYBLOB="6348fbc9e6f5eace0000004000000000fd1e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b30, &(0x7f0000000240)={'wlan1\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000007, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000600258848000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 8.794716698s ago: executing program 1 (id=6510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0xd, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086", 0x0, 0x100, 0x2000000, 0x0, 0x137, &(0x7f0000000440), &(0x7f0000000a00)="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"}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000006000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0xc801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000030000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003522c73fb2d4949a59e825972745f5c898b51f526061dd854c24909dad2026072d11da0b9a8b90b37ed03415bce3b89362f7951ee1b9ff719b40f1c118cd0807be25aa339b95cce03dac407d89858583c3141ea36d09f65709e184d6c55f40b9e5992a0fe5712a20b509fac9c8e5c689ed916438db1e1004e67751a15523c1e26b2806e638e0ee2eba368b80fe330ab51d215694b82506491b46c9558fd0f652b3be854c4fbcee66cd0cfffb"], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe0ba1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 8.738984379s ago: executing program 6 (id=6511): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x31, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg(r0, &(0x7f0000002240)={&(0x7f0000000c00)=@xdp={0x2c, 0xa, 0x0, 0x16}, 0x80, 0x0}, 0x24004080) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@generic={0x5, 0x5, 0x9, 0x6, 0x2}]}, 0x0, 0x829c, 0x0, 0x0, 0x40f00, 0xd, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2aea5, r0, 0x0, &(0x7f0000000780)}, 0x94) socketpair(0x2, 0x6, 0x5, &(0x7f0000000440)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000003b80), 0x6e, &(0x7f00000013c0), 0x0, &(0x7f00000025c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x6888239570fc2d71) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x400000, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x64}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), 0x0, 0xa7c, r4}, 0x38) 8.611903762s ago: executing program 1 (id=6512): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x5) socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$tipc(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c4}, 0x41) recvmsg$kcm(r0, &(0x7f0000002e80)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x29, 0xf, 0x0) 7.896965561s ago: executing program 1 (id=6516): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4eb1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x9}, 0x200, 0xc8, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c25", 0xe}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x6, 0x4b, 0x16, 0x0, 0x7, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x10c004, 0x4, 0x1, 0x6, 0x0, 0x3, 0x6, 0x0, 0x2, 0x0, 0x6}, r3, 0xd, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x95a3, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x0, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r6, r4, r0, r6], &(0x7f0000000700)=[{0x4, 0x4, 0xf, 0xb}, {0x1, 0x5, 0xa, 0xb}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000840) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) 6.125370998s ago: executing program 4 (id=6523): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0xd, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086", 0x0, 0x100, 0x2000000, 0x0, 0x137, &(0x7f0000000440), &(0x7f0000000a00)="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"}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000006000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0xc801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000030000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003522c73fb2d4949a59e825972745f5c898b51f526061dd854c24909dad2026072d11da0b9a8b90b37ed03415bce3b89362f7951ee1b9ff719b40f1c118cd0807be25aa339b95cce03dac407d89858583c3141ea36d09f65709e184d6c55f40b9e5992a0fe5712a20b509fac9c8e5c689ed916438db1e1004e67751a15523c1e26b2806e638e0ee2eba368b80fe330ab51d215694b82506491b46c9558fd0f652b3be854c4fbcee66cd0cfffb"], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe0ba1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5.753979518s ago: executing program 4 (id=6526): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) close(r2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r0}, 0x18) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = syz_clone(0x8000, &(0x7f0000000040), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)="0fe12426452d59ae1a4c8b7238607ece266e248c153d29147d9feea95eaf006dd0b5e8be35cc50b7f92cfebeee504d319a5242b3fa95dae15e54607f7c") r4 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x3, 0x4, 0xcb, 0x8, 0x0, 0xbc3, 0x400, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x5, @perf_config_ext={0x3, 0x9}, 0x8082, 0x3, 0x10001, 0x5, 0xc0000, 0x7, 0x3ff, 0x0, 0x5, 0x0, 0xe0}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0x6, 0x3, 0x8, 0x0, 0x4, 0x1c23c, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x9}, 0x101020, 0x5, 0x5, 0x0, 0x1, 0x7, 0x6e3, 0x0, 0x8c, 0x0, 0x8}, r3, 0x0, r4, 0x9) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20000000}, 0x408e0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000007c0)="27031c1116001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d", 0x4f}, {&(0x7f0000000180)="3e1ec8b3adedf6326aa6e126825a2f", 0xf}], 0x2}, 0x24040008) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4.91264483s ago: executing program 4 (id=6529): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 4.553845369s ago: executing program 4 (id=6530): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014000000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext={0x7a1b, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688803546", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.284082376s ago: executing program 3 (id=6531): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\b', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4, 0x1000000}], 0x10, 0x40004}, 0x94) close(0x3) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x1002}, 0x100) recvmsg$unix(r9, &(0x7f00000007c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/13, 0xd}, {&(0x7f0000000580)=""/220, 0xdc}], 0x6, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r10, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x1c) 1.405171272s ago: executing program 3 (id=6532): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24c1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="f28a08d900"/14, 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.395838903s ago: executing program 4 (id=6533): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000740), 0x8, 0x74, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007910a2000000000007000000000000009100000000000000", @ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94) close(r0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r5, @ANYRESHEX=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802004320ab32595e0263000000000085000000d000000095000000000000001047a206d613904ad056aa0e8cf3774ea74bc8e1c2d6e2388beabb04204fc4c4887db8042994fb7334665e5a628fafa832e3920da5ddc91335646be2a0f23614083e5857892a02b8bfc4b6f091379cf80af4d65fa63f0091709407013466df504f6c81"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r12 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r12, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', r11, 0x4000, r10}, 0x18) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.304975205s ago: executing program 2 (id=6534): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = gettid() r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x200000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@bloom_filter={0x1e, 0x8, 0x80, 0x6, 0x6200, 0xffffffffffffffff, 0x7, '\x00', 0x0, r8, 0x3, 0x5, 0x0, 0x9}, 0x50) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e105000000894f000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa631", 0x51}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x81}, {&(0x7f0000000280)="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", 0x191}, {0x0}], 0x4}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="020000000400000004000017010000", @ANYRES32, @ANYBLOB="00000000a52e00"/20, @ANYRESOCT=r3, @ANYRES64=r9, @ANYBLOB="0000000001000000000000000000000076f529000000000000000000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000037ff000000000000080000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000080000000000000005000000185500000100000000000000000000001821", @ANYBLOB="0000000004000000950000000000000079a5", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf9100ec00000000b702000001000000"], &(0x7f0000000640)='syzkaller\x00', 0xc, 0xd0, &(0x7f0000000680)=""/208, 0x41000, 0x10, '\x00', r10, 0x25, r8, 0x8, &(0x7f0000000780)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xf, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800), &(0x7f0000000840)=[{0x4, 0x5, 0x4, 0x1}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) 853.079277ms ago: executing program 2 (id=6535): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x13, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd4000000e00", 0x0, 0x100, 0x2000000, 0x0, 0x137, &(0x7f0000000440), &(0x7f0000000a00)="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"}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000006000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0xc801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000030000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003522c73fb2d4949a59e825972745f5c898b51f526061dd854c24909dad2026072d11da0b9a8b90b37ed03415bce3b89362f7951ee1b9ff719b40f1c118cd0807be25aa339b95cce03dac407d89858583c3141ea36d09f65709e184d6c55f40b9e5992a0fe5712a20b509fac9c8e5c689ed916438db1e1004e67751a15523c1e26b2806e638e0ee2eba368b80fe330ab51d215694b82506491b46c9558fd0f652b3be854c4fbcee66cd0cfffb"], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe0ba1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 721.975101ms ago: executing program 3 (id=6536): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) 584.331914ms ago: executing program 2 (id=6537): socketpair(0x1e, 0x1, 0x4, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4003, @dev}, 0x10, 0x0}, 0x3000c0c5) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000000), 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) syz_clone(0x4004271f, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0xfffffffffffffd4d, 0x0}, 0x10) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v\x00'/20, @ANYRES32, @ANYBLOB="00000000f6dd2587cda955c439ad0e681a991d7a0000f8e857fa53705804000600000000", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r2, @ANYBLOB="0000000000000000000000000000000000000000262b4f201184ac0acec6fced2c7da73f4ac47185a8264b0f3a3e6d1664483823c7b232838b8bde04d6a04b8a13531a3135c92bd010e55644f0b37137b2010400009471a6bd6aae40a83e3a1bc0dfe1c3c7", @ANYRES32=0x0, @ANYBLOB="95d85b995a1643bb5db14f2d340cbef6f12456983fa47841f2cd253220a90a614faf553a08b183d808c75771591f75a282a504f7e35a0ed863c8d34866caa209808735aecf968993b01fc95b4576d4419d23fed0128c5fec45d538ecc96fb7bb9a989f9a65e0e01df570566dbd31ab82806c0b0a56a78efc37800ebf4025486244ec7c59f7f0e260037826fccd6fa850f8fa08ae007b6c687b603bf1c24cf8b26adb8aeb80f292009a70e48d7225068d81e9f119b52392ff62d6333e", @ANYBLOB="010000000100000002000000000000"], 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 584.113404ms ago: executing program 3 (id=6538): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r2, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 253.275183ms ago: executing program 1 (id=6539): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1ebbb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa5210b16eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af2"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 247.733143ms ago: executing program 3 (id=6540): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000640)="5500000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 210.492964ms ago: executing program 1 (id=6541): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00104006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce", 0x75}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000e00)={&(0x7f0000000600)=@alg, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000000980)=""/76, 0x4c}, {&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000bc0)=""/9, 0x9}, {&(0x7f0000000c00)=""/74, 0x4a}], 0x7, &(0x7f0000000d00)=""/206, 0xce}, 0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000440)=[{0x94, 0x5, 0x0, 0xfffff004}, {0x6}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x20000000000000, &(0x7f0000000200)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1b, 0x0, 0x3, 0x1, 0x8, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000052a7dbfa0a706d374142254e1b00000000001000000000009520080017000000"], &(0x7f00000005c0)='GPL\x00'}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 128.719826ms ago: executing program 4 (id=6542): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @random="0200ff7fffff"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a0479", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) 0s ago: executing program 3 (id=6543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x5, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x8, 0xffffffff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r3], 0xfe33) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x80000000000}) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x8, 0x7f, 0xd, 0x2, 0x0, 0x3, 0x40000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000800), 0x2}, 0x8080, 0xb83, 0x8, 0x2, 0x9, 0x2, 0x6, 0x0, 0x4be, 0x0, 0x5}, 0x0, 0xa, r4, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x4, &(0x7f0000000000)='GPL\x00'}, 0x30) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 0000000000002e [ 725.693142][T21882] RAX: ffffffffffffffda RBX: 00007f6eb365efa0 RCX: 00007f6eb33d7019 [ 725.701252][T21882] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 725.709271][T21882] RBP: 00007f6eb346e00c R08: 0000000000000000 R09: 0000000000000000 [ 725.717291][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.725308][T21882] R13: 00007f6eb365f038 R14: 00007f6eb365efa0 R15: 00007ffcacbc0308 [ 725.733368][T21882] [ 725.790560][T21884] netlink: 182 bytes leftover after parsing attributes in process `syz.1.5919'. [ 725.829607][T21891] validate_nla: 6 callbacks suppressed [ 725.829626][T21891] netlink: 'syz.1.5919': attribute type 10 has an invalid length. [ 725.855266][T21891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5919'. [ 725.935749][T21891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.019181][T21894] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5922'. [ 726.048813][T21900] netlink: 'syz.2.5924': attribute type 21 has an invalid length. [ 726.657076][T21914] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5927'. [ 727.185337][T21938] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5935'. [ 727.247432][T21942] netlink: 'syz.1.5937': attribute type 21 has an invalid length. [ 727.272386][T21944] netlink: 'syz.2.5935': attribute type 29 has an invalid length. [ 727.313426][T21938] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 727.334364][T21938] CPU: 0 PID: 21938 Comm: syz.2.5935 Not tainted syzkaller #0 [ 727.341914][T21938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.352016][T21938] Call Trace: [ 727.355343][T21938] [ 727.358321][T21938] dump_stack_lvl+0x188/0x250 [ 727.363076][T21938] ? show_regs_print_info+0x20/0x20 [ 727.368337][T21938] ? load_image+0x410/0x410 [ 727.372926][T21938] sysfs_warn_dup+0x8a/0xa0 [ 727.377480][T21938] sysfs_do_create_link_sd+0xc0/0x110 [ 727.382909][T21938] device_add+0x83b/0x1050 [ 727.387392][T21938] wiphy_register+0x1e74/0x2c40 [ 727.392347][T21938] ? cfg80211_event_work+0x40/0x40 [ 727.397514][T21938] ? minstrel_ht_alloc+0x807/0x980 [ 727.402684][T21938] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 727.408811][T21938] ieee80211_register_hw+0x2a03/0x3a60 [ 727.414347][T21938] ? ieee80211_register_hw+0xae1/0x3a60 [ 727.420001][T21938] ? ieee80211_tasklet_handler+0x20/0x20 [ 727.425699][T21938] ? rcu_is_watching+0x11/0xa0 [ 727.430529][T21938] ? hrtimer_init+0x10c/0x220 [ 727.435266][T21938] mac80211_hwsim_new_radio+0x209d/0x4050 [ 727.441059][T21938] hwsim_new_radio_nl+0xa7d/0xc50 [ 727.446158][T21938] genl_rcv_msg+0xd0b/0xfa0 [ 727.450736][T21938] ? genl_bind+0x370/0x370 [ 727.455211][T21938] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 727.460995][T21938] ? verify_lock_unused+0x140/0x140 [ 727.466250][T21938] ? perf_trace_lock_acquire+0x341/0x3f0 [ 727.471937][T21938] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 727.478575][T21938] ? dev_queue_xmit+0x20/0x20 [ 727.483307][T21938] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 727.489821][T21938] netlink_rcv_skb+0x1e9/0x430 [ 727.494642][T21938] ? genl_bind+0x370/0x370 [ 727.499110][T21938] ? netlink_ack+0xb10/0xb10 [ 727.503773][T21938] ? down_read+0x1aa/0x2e0 [ 727.508282][T21938] genl_rcv+0x24/0x40 [ 727.512383][T21938] netlink_unicast+0x78f/0x940 [ 727.517216][T21938] netlink_sendmsg+0x8ba/0xbe0 [ 727.522070][T21938] ? netlink_getsockopt+0x570/0x570 [ 727.527317][T21938] ? aa_sock_msg_perm+0x94/0x150 [ 727.532314][T21938] ? apparmor_socket_sendmsg+0x88/0x230 [ 727.537911][T21938] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 727.543235][T21938] ? security_socket_sendmsg+0x7c/0xa0 [ 727.548747][T21938] ? netlink_getsockopt+0x570/0x570 [ 727.554000][T21938] ____sys_sendmsg+0x5be/0x8f0 [ 727.558832][T21938] ? __sys_sendmsg_sock+0x30/0x30 [ 727.563920][T21938] ? import_iovec+0x6f/0xa0 [ 727.568481][T21938] ___sys_sendmsg+0x236/0x2e0 [ 727.573216][T21938] ? __sys_sendmsg+0x290/0x290 [ 727.578107][T21938] __se_sys_sendmsg+0x1b7/0x2a0 [ 727.583012][T21938] ? __x64_sys_sendmsg+0x80/0x80 [ 727.588025][T21938] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 727.594084][T21938] ? lockdep_hardirqs_on+0x94/0x140 [ 727.599338][T21938] do_syscall_64+0x4c/0xa0 [ 727.603806][T21938] ? clear_bhb_loop+0x30/0x80 [ 727.608537][T21938] ? clear_bhb_loop+0x30/0x80 [ 727.613261][T21938] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 727.619200][T21938] RIP: 0033:0x7f6eb33d7019 [ 727.623654][T21938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.643306][T21938] RSP: 002b:00007f6eb162f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.651774][T21938] RAX: ffffffffffffffda RBX: 00007f6eb365efa0 RCX: 00007f6eb33d7019 [ 727.659805][T21938] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 727.667815][T21938] RBP: 00007f6eb346e00c R08: 0000000000000000 R09: 0000000000000000 [ 727.675827][T21938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.683927][T21938] R13: 00007f6eb365f038 R14: 00007f6eb365efa0 R15: 00007ffcacbc0308 [ 727.691980][T21938] [ 727.758085][T21944] netlink: 'syz.2.5935': attribute type 29 has an invalid length. [ 727.799845][T21950] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5938'. [ 728.318584][T21978] netlink: 'syz.1.5949': attribute type 3 has an invalid length. [ 728.680441][T21992] __nla_validate_parse: 2 callbacks suppressed [ 728.680463][T21992] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5952'. [ 728.723933][T21995] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5955'. [ 728.738775][T21998] netlink: 'syz.3.5954': attribute type 21 has an invalid length. [ 728.767861][T21995] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 728.805276][T21995] CPU: 0 PID: 21995 Comm: syz.6.5955 Not tainted syzkaller #0 [ 728.812823][T21995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 728.822929][T21995] Call Trace: [ 728.826255][T21995] [ 728.829231][T21995] dump_stack_lvl+0x188/0x250 [ 728.833984][T21995] ? show_regs_print_info+0x20/0x20 [ 728.839242][T21995] ? load_image+0x410/0x410 [ 728.843832][T21995] sysfs_warn_dup+0x8a/0xa0 [ 728.848388][T21995] sysfs_do_create_link_sd+0xc0/0x110 [ 728.853817][T21995] device_add+0x83b/0x1050 [ 728.858311][T21995] wiphy_register+0x1e74/0x2c40 [ 728.863266][T21995] ? cfg80211_event_work+0x40/0x40 [ 728.868435][T21995] ? minstrel_ht_alloc+0x807/0x980 [ 728.873615][T21995] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 728.879747][T21995] ieee80211_register_hw+0x2a03/0x3a60 [ 728.885281][T21995] ? ieee80211_register_hw+0xae1/0x3a60 [ 728.890907][T21995] ? ieee80211_tasklet_handler+0x20/0x20 [ 728.896611][T21995] ? rcu_is_watching+0x11/0xa0 [ 728.901436][T21995] ? hrtimer_init+0x10c/0x220 [ 728.906174][T21995] mac80211_hwsim_new_radio+0x209d/0x4050 [ 728.908127][T22006] netlink: 'syz.6.5955': attribute type 29 has an invalid length. [ 728.912018][T21995] hwsim_new_radio_nl+0xa7d/0xc50 [ 728.924936][T21995] genl_rcv_msg+0xd0b/0xfa0 [ 728.929518][T21995] ? genl_bind+0x370/0x370 [ 728.933991][T21995] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 728.939773][T21995] ? verify_lock_unused+0x140/0x140 [ 728.945042][T21995] ? perf_trace_lock_acquire+0x341/0x3f0 [ 728.950756][T21995] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 728.957400][T21995] ? perf_trace_lock+0xe4/0x390 [ 728.962303][T21995] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 728.968711][T21995] netlink_rcv_skb+0x1e9/0x430 [ 728.973522][T21995] ? genl_bind+0x370/0x370 [ 728.977981][T21995] ? netlink_ack+0xb10/0xb10 [ 728.982618][T21995] ? down_read+0x1aa/0x2e0 [ 728.987072][T21995] genl_rcv+0x24/0x40 [ 728.991095][T21995] netlink_unicast+0x78f/0x940 [ 728.995912][T21995] netlink_sendmsg+0x8ba/0xbe0 [ 729.000722][T21995] ? netlink_getsockopt+0x570/0x570 [ 729.005954][T21995] ? aa_sock_msg_perm+0x94/0x150 [ 729.010931][T21995] ? apparmor_socket_sendmsg+0x88/0x230 [ 729.016522][T21995] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 729.021839][T21995] ? security_socket_sendmsg+0x7c/0xa0 [ 729.027325][T21995] ? netlink_getsockopt+0x570/0x570 [ 729.032588][T21995] ____sys_sendmsg+0x5be/0x8f0 [ 729.037397][T21995] ? __sys_sendmsg_sock+0x30/0x30 [ 729.042469][T21995] ? import_iovec+0x6f/0xa0 [ 729.047012][T21995] ___sys_sendmsg+0x236/0x2e0 [ 729.051738][T21995] ? __sys_sendmsg+0x290/0x290 [ 729.056555][T21995] ? trace_event_raw_event_lock+0x250/0x250 [ 729.062522][T21995] __se_sys_sendmsg+0x1b7/0x2a0 [ 729.067407][T21995] ? __x64_sys_sendmsg+0x80/0x80 [ 729.072369][T21995] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 729.078576][T21995] ? lockdep_hardirqs_on+0x94/0x140 [ 729.083813][T21995] do_syscall_64+0x4c/0xa0 [ 729.088258][T21995] ? clear_bhb_loop+0x30/0x80 [ 729.092959][T21995] ? clear_bhb_loop+0x30/0x80 [ 729.097666][T21995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 729.103581][T21995] RIP: 0033:0x7fe7c76ff019 [ 729.108027][T21995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.127663][T21995] RSP: 002b:00007fe7c5957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.136104][T21995] RAX: ffffffffffffffda RBX: 00007fe7c7986fa0 RCX: 00007fe7c76ff019 [ 729.144100][T21995] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 729.152102][T21995] RBP: 00007fe7c779600c R08: 0000000000000000 R09: 0000000000000000 [ 729.160181][T21995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.168176][T21995] R13: 00007fe7c7987038 R14: 00007fe7c7986fa0 R15: 00007fffe70a7fb8 [ 729.176205][T21995] [ 729.414435][T22006] netlink: 'syz.6.5955': attribute type 29 has an invalid length. [ 729.616722][T22021] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5963'. [ 729.794208][T22032] netlink: 'syz.1.5965': attribute type 21 has an invalid length. [ 729.894874][T22038] netlink: 'syz.1.5965': attribute type 11 has an invalid length. [ 729.933396][T22038] netlink: 208672 bytes leftover after parsing attributes in process `syz.1.5965'. [ 730.474700][T22051] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5971'. [ 730.908355][T22062] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5977'. [ 730.943553][T22062] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 730.976101][T22067] validate_nla: 2 callbacks suppressed [ 730.976119][T22067] netlink: 'syz.1.5977': attribute type 29 has an invalid length. [ 730.995551][T22067] netlink: 'syz.1.5977': attribute type 29 has an invalid length. [ 731.332794][T22070] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5980'. [ 731.355120][T22074] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5983'. [ 731.796209][T22085] netlink: 'syz.2.5985': attribute type 21 has an invalid length. [ 732.231323][T22115] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5996'. [ 732.302968][T22122] netlink: 'syz.2.5996': attribute type 29 has an invalid length. [ 732.373331][T22115] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 732.399177][T22115] CPU: 0 PID: 22115 Comm: syz.2.5996 Not tainted syzkaller #0 [ 732.406994][T22115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.417090][T22115] Call Trace: [ 732.420408][T22115] [ 732.423372][T22115] dump_stack_lvl+0x188/0x250 [ 732.428110][T22115] ? show_regs_print_info+0x20/0x20 [ 732.433374][T22115] ? load_image+0x410/0x410 [ 732.437942][T22115] sysfs_warn_dup+0x8a/0xa0 [ 732.442494][T22115] sysfs_do_create_link_sd+0xc0/0x110 [ 732.447915][T22115] device_add+0x83b/0x1050 [ 732.452380][T22115] wiphy_register+0x1e74/0x2c40 [ 732.457294][T22115] ? cfg80211_event_work+0x40/0x40 [ 732.462449][T22115] ? minstrel_ht_alloc+0x807/0x980 [ 732.467620][T22115] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 732.473766][T22115] ieee80211_register_hw+0x2a03/0x3a60 [ 732.479285][T22115] ? ieee80211_register_hw+0xae1/0x3a60 [ 732.484903][T22115] ? ieee80211_tasklet_handler+0x20/0x20 [ 732.490595][T22115] ? rcu_is_watching+0x11/0xa0 [ 732.495537][T22115] ? hrtimer_init+0x10c/0x220 [ 732.500267][T22115] mac80211_hwsim_new_radio+0x209d/0x4050 [ 732.506110][T22115] hwsim_new_radio_nl+0xa7d/0xc50 [ 732.511200][T22115] genl_rcv_msg+0xd0b/0xfa0 [ 732.515776][T22115] ? genl_bind+0x370/0x370 [ 732.520255][T22115] ? __dev_queue_xmit+0x1b64/0x2e50 [ 732.525493][T22115] ? verify_lock_unused+0x140/0x140 [ 732.530755][T22115] ? dev_queue_xmit+0x20/0x20 [ 732.535489][T22115] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 732.541892][T22115] netlink_rcv_skb+0x1e9/0x430 [ 732.546705][T22115] ? genl_bind+0x370/0x370 [ 732.551170][T22115] ? netlink_ack+0xb10/0xb10 [ 732.555826][T22115] ? down_read+0x1aa/0x2e0 [ 732.560286][T22115] genl_rcv+0x24/0x40 [ 732.564305][T22115] netlink_unicast+0x78f/0x940 [ 732.569128][T22115] netlink_sendmsg+0x8ba/0xbe0 [ 732.573947][T22115] ? netlink_getsockopt+0x570/0x570 [ 732.579187][T22115] ? aa_sock_msg_perm+0x94/0x150 [ 732.584180][T22115] ? apparmor_socket_sendmsg+0x88/0x230 [ 732.589792][T22115] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 732.595126][T22115] ? security_socket_sendmsg+0x7c/0xa0 [ 732.600636][T22115] ? netlink_getsockopt+0x570/0x570 [ 732.605882][T22115] ____sys_sendmsg+0x5be/0x8f0 [ 732.610702][T22115] ? __sys_sendmsg_sock+0x30/0x30 [ 732.615777][T22115] ? import_iovec+0x6f/0xa0 [ 732.620328][T22115] ___sys_sendmsg+0x236/0x2e0 [ 732.625065][T22115] ? __sys_sendmsg+0x290/0x290 [ 732.629952][T22115] __se_sys_sendmsg+0x1b7/0x2a0 [ 732.634853][T22115] ? __x64_sys_sendmsg+0x80/0x80 [ 732.639833][T22115] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 732.645880][T22115] ? lockdep_hardirqs_on+0x94/0x140 [ 732.651129][T22115] do_syscall_64+0x4c/0xa0 [ 732.655593][T22115] ? clear_bhb_loop+0x30/0x80 [ 732.660309][T22115] ? clear_bhb_loop+0x30/0x80 [ 732.665037][T22115] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 732.670973][T22115] RIP: 0033:0x7f6eb33d7019 [ 732.675464][T22115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.695106][T22115] RSP: 002b:00007f6eb162f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.703560][T22115] RAX: ffffffffffffffda RBX: 00007f6eb365efa0 RCX: 00007f6eb33d7019 [ 732.711567][T22115] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 732.719570][T22115] RBP: 00007f6eb346e00c R08: 0000000000000000 R09: 0000000000000000 [ 732.727571][T22115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.735567][T22115] R13: 00007f6eb365f038 R14: 00007f6eb365efa0 R15: 00007ffcacbc0308 [ 732.743595][T22115] [ 732.785675][T22122] netlink: 'syz.2.5996': attribute type 29 has an invalid length. [ 732.866401][T22132] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6000'. [ 733.678977][T22141] netlink: 'syz.3.6006': attribute type 21 has an invalid length. [ 733.714316][T22140] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6005'. [ 734.236177][T22175] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6017'. [ 734.312889][T22175] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 734.371439][T22175] CPU: 1 PID: 22175 Comm: syz.1.6017 Not tainted syzkaller #0 [ 734.378983][T22175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.389083][T22175] Call Trace: [ 734.392552][T22175] [ 734.395519][T22175] dump_stack_lvl+0x188/0x250 [ 734.400252][T22175] ? show_regs_print_info+0x20/0x20 [ 734.405497][T22175] ? load_image+0x410/0x410 [ 734.410057][T22175] sysfs_warn_dup+0x8a/0xa0 [ 734.414596][T22175] sysfs_do_create_link_sd+0xc0/0x110 [ 734.420015][T22175] device_add+0x83b/0x1050 [ 734.424474][T22175] wiphy_register+0x1e74/0x2c40 [ 734.429396][T22175] ? cfg80211_event_work+0x40/0x40 [ 734.434562][T22175] ? minstrel_ht_alloc+0x807/0x980 [ 734.439717][T22175] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 734.445843][T22175] ieee80211_register_hw+0x2a03/0x3a60 [ 734.451348][T22175] ? ieee80211_register_hw+0xae1/0x3a60 [ 734.456942][T22175] ? ieee80211_tasklet_handler+0x20/0x20 [ 734.462710][T22175] ? rcu_is_watching+0x11/0xa0 [ 734.467520][T22175] ? hrtimer_init+0x10c/0x220 [ 734.472243][T22175] mac80211_hwsim_new_radio+0x209d/0x4050 [ 734.478030][T22175] hwsim_new_radio_nl+0xa7d/0xc50 [ 734.483117][T22175] genl_rcv_msg+0xd0b/0xfa0 [ 734.487687][T22175] ? genl_bind+0x370/0x370 [ 734.492140][T22175] ? __dev_queue_xmit+0x1b64/0x2e50 [ 734.497363][T22175] ? verify_lock_unused+0x140/0x140 [ 734.501979][T22177] netlink: 'syz.1.6017': attribute type 29 has an invalid length. [ 734.502654][T22175] ? dev_queue_xmit+0x20/0x20 [ 734.515124][T22175] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 734.521537][T22175] netlink_rcv_skb+0x1e9/0x430 [ 734.526361][T22175] ? genl_bind+0x370/0x370 [ 734.530832][T22175] ? netlink_ack+0xb10/0xb10 [ 734.535473][T22175] ? down_read+0x1aa/0x2e0 [ 734.539935][T22175] genl_rcv+0x24/0x40 [ 734.543945][T22175] netlink_unicast+0x78f/0x940 [ 734.548759][T22175] netlink_sendmsg+0x8ba/0xbe0 [ 734.553576][T22175] ? netlink_getsockopt+0x570/0x570 [ 734.558808][T22175] ? aa_sock_msg_perm+0x94/0x150 [ 734.563785][T22175] ? apparmor_socket_sendmsg+0x88/0x230 [ 734.569369][T22175] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 734.574729][T22175] ? security_socket_sendmsg+0x7c/0xa0 [ 734.580226][T22175] ? netlink_getsockopt+0x570/0x570 [ 734.585476][T22175] ____sys_sendmsg+0x5be/0x8f0 [ 734.590298][T22175] ? __sys_sendmsg_sock+0x30/0x30 [ 734.595375][T22175] ? import_iovec+0x6f/0xa0 [ 734.599937][T22175] ___sys_sendmsg+0x236/0x2e0 [ 734.604672][T22175] ? __sys_sendmsg+0x290/0x290 [ 734.609608][T22175] __se_sys_sendmsg+0x1b7/0x2a0 [ 734.614633][T22175] ? __x64_sys_sendmsg+0x80/0x80 [ 734.619622][T22175] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 734.625683][T22175] ? lockdep_hardirqs_on+0x94/0x140 [ 734.630940][T22175] do_syscall_64+0x4c/0xa0 [ 734.635530][T22175] ? clear_bhb_loop+0x30/0x80 [ 734.640257][T22175] ? clear_bhb_loop+0x30/0x80 [ 734.644976][T22175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 734.650908][T22175] RIP: 0033:0x7f6a12f4a019 [ 734.655362][T22175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.675116][T22175] RSP: 002b:00007f6a111a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.683586][T22175] RAX: ffffffffffffffda RBX: 00007f6a131d1fa0 RCX: 00007f6a12f4a019 [ 734.691601][T22175] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 734.699621][T22175] RBP: 00007f6a12fe100c R08: 0000000000000000 R09: 0000000000000000 [ 734.707648][T22175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.715660][T22175] R13: 00007f6a131d2038 R14: 00007f6a131d1fa0 R15: 00007fff7715f618 [ 734.723689][T22175] [ 734.773323][T22177] netlink: 'syz.1.6017': attribute type 29 has an invalid length. [ 734.971054][T22181] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6019'. [ 735.094810][T22185] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6022'. [ 735.177606][T22193] netlink: 'syz.4.6025': attribute type 3 has an invalid length. [ 735.228935][T22194] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6025'. [ 735.234278][T22193] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6025'. [ 735.343077][T22199] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6025'. [ 735.420463][T22208] netlink: 'syz.3.6030': attribute type 21 has an invalid length. [ 735.732152][T22215] FAULT_INJECTION: forcing a failure. [ 735.732152][T22215] name failslab, interval 1, probability 0, space 0, times 0 [ 735.819951][T22215] CPU: 0 PID: 22215 Comm: syz.2.6031 Not tainted syzkaller #0 [ 735.827490][T22215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.837584][T22215] Call Trace: [ 735.840901][T22215] [ 735.843874][T22215] dump_stack_lvl+0x188/0x250 [ 735.848602][T22215] ? show_regs_print_info+0x20/0x20 [ 735.853841][T22215] ? load_image+0x410/0x410 [ 735.858386][T22215] ? __might_sleep+0xf0/0xf0 [ 735.863115][T22215] ? __lock_acquire+0x7b50/0x7b50 [ 735.868185][T22215] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 735.874034][T22215] should_fail+0x383/0x4b0 [ 735.878501][T22215] should_failslab+0x5/0x20 [ 735.883037][T22215] slab_pre_alloc_hook+0x51/0xc0 [ 735.888010][T22215] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 735.893764][T22215] ? __get_vm_area_node+0x119/0x2d0 [ 735.899004][T22215] __get_vm_area_node+0x119/0x2d0 [ 735.904073][T22215] ? lock_chain_count+0x20/0x20 [ 735.908988][T22215] __vmalloc_node_range+0xef/0x8b0 [ 735.914139][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 735.919726][T22215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 735.925928][T22215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 735.932163][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 735.937755][T22215] __vmalloc+0x76/0x80 [ 735.941866][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 735.947460][T22215] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 735.952888][T22215] bpf_prog_alloc+0x1a/0x1e0 [ 735.957520][T22215] bpf_prog_load+0x7d1/0x14e0 [ 735.962259][T22215] ? map_freeze+0x360/0x360 [ 735.966802][T22215] ? __might_fault+0xb7/0x110 [ 735.971512][T22215] ? lockdep_hardirqs_on+0x94/0x140 [ 735.976773][T22215] ? __might_fault+0xb3/0x110 [ 735.981491][T22215] ? bpf_lsm_bpf+0x5/0x10 [ 735.985860][T22215] ? security_bpf+0x7a/0xa0 [ 735.990413][T22215] __sys_bpf+0x532/0x6f0 [ 735.994733][T22215] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 736.001013][T22215] ? bpf_link_show_fdinfo+0x380/0x380 [ 736.006417][T22215] ? rcu_nmi_exit+0x6f/0xf0 [ 736.010977][T22215] __x64_sys_bpf+0x78/0x90 [ 736.015437][T22215] do_syscall_64+0x4c/0xa0 [ 736.019887][T22215] ? clear_bhb_loop+0x30/0x80 [ 736.024602][T22215] ? clear_bhb_loop+0x30/0x80 [ 736.029320][T22215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 736.035266][T22215] RIP: 0033:0x7f6eb33d7019 [ 736.039712][T22215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.059352][T22215] RSP: 002b:00007f6eb162f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.067813][T22215] RAX: ffffffffffffffda RBX: 00007f6eb365efa0 RCX: 00007f6eb33d7019 [ 736.075832][T22215] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 736.083846][T22215] RBP: 00007f6eb162f090 R08: 0000000000000000 R09: 0000000000000000 [ 736.091861][T22215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.099880][T22215] R13: 00007f6eb365f038 R14: 00007f6eb365efa0 R15: 00007ffcacbc0308 [ 736.107907][T22215] [ 736.315247][T22228] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6035'. [ 736.355921][T22228] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 736.419777][T22228] CPU: 0 PID: 22228 Comm: syz.6.6035 Not tainted syzkaller #0 [ 736.427306][T22228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.427417][T22232] netlink: 'syz.6.6035': attribute type 29 has an invalid length. [ 736.437397][T22228] Call Trace: [ 736.437409][T22228] [ 736.437419][T22228] dump_stack_lvl+0x188/0x250 [ 736.437457][T22228] ? show_regs_print_info+0x20/0x20 [ 736.437486][T22228] ? load_image+0x410/0x410 [ 736.465974][T22228] sysfs_warn_dup+0x8a/0xa0 [ 736.470534][T22228] sysfs_do_create_link_sd+0xc0/0x110 [ 736.475956][T22228] device_add+0x83b/0x1050 [ 736.480417][T22228] wiphy_register+0x1e74/0x2c40 [ 736.485332][T22228] ? cfg80211_event_work+0x40/0x40 [ 736.490495][T22228] ? minstrel_ht_alloc+0x807/0x980 [ 736.495660][T22228] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 736.501772][T22228] ieee80211_register_hw+0x2a03/0x3a60 [ 736.507279][T22228] ? ieee80211_register_hw+0xae1/0x3a60 [ 736.512873][T22228] ? ieee80211_tasklet_handler+0x20/0x20 [ 736.518553][T22228] ? rcu_is_watching+0x11/0xa0 [ 736.523363][T22228] ? hrtimer_init+0x10c/0x220 [ 736.528084][T22228] mac80211_hwsim_new_radio+0x209d/0x4050 [ 736.533862][T22228] hwsim_new_radio_nl+0xa7d/0xc50 [ 736.538941][T22228] genl_rcv_msg+0xd0b/0xfa0 [ 736.543481][T22228] ? genl_bind+0x370/0x370 [ 736.547934][T22228] ? __dev_queue_xmit+0x1b64/0x2e50 [ 736.553186][T22228] ? verify_lock_unused+0x140/0x140 [ 736.558425][T22228] ? dev_queue_xmit+0x20/0x20 [ 736.563129][T22228] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 736.569506][T22228] netlink_rcv_skb+0x1e9/0x430 [ 736.574301][T22228] ? genl_bind+0x370/0x370 [ 736.578745][T22228] ? netlink_ack+0xb10/0xb10 [ 736.583403][T22228] ? down_read+0x1aa/0x2e0 [ 736.587846][T22228] genl_rcv+0x24/0x40 [ 736.591844][T22228] netlink_unicast+0x78f/0x940 [ 736.596644][T22228] netlink_sendmsg+0x8ba/0xbe0 [ 736.601467][T22228] ? netlink_getsockopt+0x570/0x570 [ 736.606716][T22228] ? aa_sock_msg_perm+0x94/0x150 [ 736.611671][T22228] ? apparmor_socket_sendmsg+0x88/0x230 [ 736.617238][T22228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 736.622548][T22228] ? security_socket_sendmsg+0x7c/0xa0 [ 736.628027][T22228] ? netlink_getsockopt+0x570/0x570 [ 736.633256][T22228] ____sys_sendmsg+0x5be/0x8f0 [ 736.638052][T22228] ? __sys_sendmsg_sock+0x30/0x30 [ 736.643106][T22228] ? import_iovec+0x6f/0xa0 [ 736.647631][T22228] ___sys_sendmsg+0x236/0x2e0 [ 736.652333][T22228] ? __sys_sendmsg+0x290/0x290 [ 736.657155][T22228] __se_sys_sendmsg+0x1b7/0x2a0 [ 736.662025][T22228] ? __x64_sys_sendmsg+0x80/0x80 [ 736.666979][T22228] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 736.673039][T22228] ? lockdep_hardirqs_on+0x94/0x140 [ 736.678267][T22228] do_syscall_64+0x4c/0xa0 [ 736.682702][T22228] ? clear_bhb_loop+0x30/0x80 [ 736.687402][T22228] ? clear_bhb_loop+0x30/0x80 [ 736.692106][T22228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 736.698030][T22228] RIP: 0033:0x7fe7c76ff019 [ 736.702487][T22228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.722357][T22228] RSP: 002b:00007fe7c5957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.730803][T22228] RAX: ffffffffffffffda RBX: 00007fe7c7986fa0 RCX: 00007fe7c76ff019 [ 736.738804][T22228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 736.746961][T22228] RBP: 00007fe7c779600c R08: 0000000000000000 R09: 0000000000000000 [ 736.754974][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.762968][T22228] R13: 00007fe7c7987038 R14: 00007fe7c7986fa0 R15: 00007fffe70a7fb8 [ 736.770983][T22228] [ 736.825503][T22215] syz.2.6031: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 736.862676][T22215] CPU: 1 PID: 22215 Comm: syz.2.6031 Not tainted syzkaller #0 [ 736.870201][T22215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.880295][T22215] Call Trace: [ 736.883613][T22215] [ 736.886581][T22215] dump_stack_lvl+0x188/0x250 [ 736.891304][T22215] ? rcu_lock_release+0x5/0x20 [ 736.896103][T22215] ? show_regs_print_info+0x20/0x20 [ 736.901446][T22215] ? load_image+0x410/0x410 [ 736.906004][T22215] warn_alloc+0x245/0x320 [ 736.910376][T22215] ? zone_watermark_ok_safe+0x250/0x250 [ 736.915970][T22215] ? __get_vm_area_node+0x2b5/0x2d0 [ 736.921208][T22215] ? lock_chain_count+0x20/0x20 [ 736.926104][T22215] __vmalloc_node_range+0x2b1/0x8b0 [ 736.931336][T22215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 736.937542][T22215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 736.943734][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 736.949317][T22215] __vmalloc+0x76/0x80 [ 736.953420][T22215] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 736.959027][T22215] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 736.964449][T22215] bpf_prog_alloc+0x1a/0x1e0 [ 736.969079][T22215] bpf_prog_load+0x7d1/0x14e0 [ 736.973808][T22215] ? map_freeze+0x360/0x360 [ 736.978383][T22215] ? __might_fault+0xb7/0x110 [ 736.983105][T22215] ? lockdep_hardirqs_on+0x94/0x140 [ 736.988369][T22215] ? __might_fault+0xb3/0x110 [ 736.993097][T22215] ? bpf_lsm_bpf+0x5/0x10 [ 736.997492][T22215] ? security_bpf+0x7a/0xa0 [ 737.002045][T22215] __sys_bpf+0x532/0x6f0 [ 737.006331][T22215] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 737.012625][T22215] ? bpf_link_show_fdinfo+0x380/0x380 [ 737.018035][T22215] ? rcu_nmi_exit+0x6f/0xf0 [ 737.022593][T22215] __x64_sys_bpf+0x78/0x90 [ 737.027046][T22215] do_syscall_64+0x4c/0xa0 [ 737.031496][T22215] ? clear_bhb_loop+0x30/0x80 [ 737.036208][T22215] ? clear_bhb_loop+0x30/0x80 [ 737.040923][T22215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 737.046855][T22215] RIP: 0033:0x7f6eb33d7019 [ 737.051305][T22215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.070947][T22215] RSP: 002b:00007f6eb162f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 737.079396][T22215] RAX: ffffffffffffffda RBX: 00007f6eb365efa0 RCX: 00007f6eb33d7019 [ 737.087404][T22215] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 737.095417][T22215] RBP: 00007f6eb162f090 R08: 0000000000000000 R09: 0000000000000000 [ 737.103422][T22215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.111424][T22215] R13: 00007f6eb365f038 R14: 00007f6eb365efa0 R15: 00007ffcacbc0308 [ 737.119450][T22215] [ 737.133299][T22215] Mem-Info: [ 737.137961][T22215] active_anon:300 inactive_anon:6615 isolated_anon:0 [ 737.137961][T22215] active_file:24139 inactive_file:36985 isolated_file:0 [ 737.137961][T22215] unevictable:768 dirty:155 writeback:0 [ 737.137961][T22215] slab_reclaimable:21220 slab_unreclaimable:99675 [ 737.137961][T22215] mapped:30179 shmem:1656 pagetables:792 bounce:0 [ 737.137961][T22215] kernel_misc_reclaimable:0 [ 737.137961][T22215] free:1364453 free_pcp:9821 free_cma:0 [ 737.196724][T22235] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6037'. [ 737.209784][T22215] Node 0 active_anon:1168kB inactive_anon:25948kB active_file:96356kB inactive_file:147940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120716kB dirty:620kB writeback:0kB shmem:4544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:3168kB all_unreclaimable? no [ 737.312840][T22232] netlink: 'syz.6.6035': attribute type 29 has an invalid length. [ 737.327345][T22215] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 737.388218][T22215] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 737.453369][T22215] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 737.465881][T22215] Node 0 DMA32 free:1516004kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1168kB inactive_anon:25648kB active_file:96356kB inactive_file:147940kB unevictable:1536kB writepending:620kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:40976kB local_pcp:21096kB free_cma:0kB [ 737.588121][T22247] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6043'. [ 737.617970][T22215] lowmem_reserve[]: 0 0 0 0 0 [ 737.622867][T22215] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 737.705710][T22215] lowmem_reserve[]: 0 0 0 0 0 [ 737.710849][T22215] Node 1 Normal free:3925772kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 737.812356][T22215] lowmem_reserve[]: 0 0 0 0 0 [ 737.817838][T22215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 737.864866][T22215] Node 0 DMA32: 2983*4kB (UME) 1945*8kB (UME) 1396*16kB (UME) 479*32kB (UME) 664*64kB (UME) 609*128kB (UM) 247*256kB (UME) 103*512kB (UME) 40*1024kB (UME) 15*2048kB (UM) 279*4096kB (UM) = 1516036kB [ 737.917981][T22215] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 737.979901][T22215] Node 1 Normal: 203*4kB (UME) 38*8kB (UME) 27*16kB (UME) 158*32kB (UME) 87*64kB (UME) 25*128kB (UE) 9*256kB (UME) 7*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 952*4096kB (M) = 3925772kB [ 738.043612][T22215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.079785][T22215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 738.099869][T22215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.120356][T22215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 738.140856][T22215] 62780 total pagecache pages [ 738.151017][T22215] 0 pages in swap cache [ 738.155527][T22215] Swap cache stats: add 0, delete 0, find 0/0 [ 738.182129][T22215] Free swap = 124996kB [ 738.186826][T22215] Total swap = 124996kB [ 738.191027][T22215] 2097051 pages RAM [ 738.215425][T22215] 0 pages HighMem/MovableOnly [ 738.220158][T22215] 411499 pages reserved [ 738.243995][T22215] 0 pages cma reserved [ 738.298118][T22250] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 738.484285][T22262] netlink: 'syz.2.6048': attribute type 10 has an invalid length. [ 738.549474][T22262] netlink: 'syz.2.6048': attribute type 1 has an invalid length. [ 738.712997][T22273] netlink: 'syz.6.6052': attribute type 29 has an invalid length. [ 738.737816][T22273] netlink: 'syz.6.6052': attribute type 29 has an invalid length. [ 739.181404][T22289] netlink: 'syz.2.6060': attribute type 5 has an invalid length. [ 739.310334][T22291] __nla_validate_parse: 2 callbacks suppressed [ 739.310353][T22291] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6061'. [ 739.358754][T22294] FAULT_INJECTION: forcing a failure. [ 739.358754][T22294] name failslab, interval 1, probability 0, space 0, times 0 [ 739.426099][T22296] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.6061'. [ 739.434151][T22294] CPU: 1 PID: 22294 Comm: syz.6.6062 Not tainted syzkaller #0 [ 739.442850][T22294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.452953][T22294] Call Trace: [ 739.456276][T22294] [ 739.459243][T22294] dump_stack_lvl+0x188/0x250 [ 739.464125][T22294] ? show_regs_print_info+0x20/0x20 [ 739.469384][T22294] ? load_image+0x410/0x410 [ 739.473950][T22294] should_fail+0x383/0x4b0 [ 739.478409][T22294] should_failslab+0x5/0x20 [ 739.482960][T22294] slab_pre_alloc_hook+0x51/0xc0 [ 739.487941][T22294] ? __build_skb+0x26/0x2e0 [ 739.492489][T22294] kmem_cache_alloc+0x3d/0x280 [ 739.497309][T22294] __build_skb+0x26/0x2e0 [ 739.501693][T22294] build_skb+0x1e/0x160 [ 739.505897][T22294] bpf_prog_test_run_skb+0x25c/0x1190 [ 739.511405][T22294] ? __fget_files+0x402/0x470 [ 739.516147][T22294] ? cpu_online+0x60/0x60 [ 739.520524][T22294] bpf_prog_test_run+0x31c/0x390 [ 739.525509][T22294] __sys_bpf+0x5a5/0x6f0 [ 739.529797][T22294] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 739.536090][T22294] ? bpf_link_show_fdinfo+0x380/0x380 [ 739.541505][T22294] ? rcu_nmi_exit+0x6f/0xf0 [ 739.546082][T22294] __x64_sys_bpf+0x78/0x90 [ 739.550547][T22294] do_syscall_64+0x4c/0xa0 [ 739.555002][T22294] ? clear_bhb_loop+0x30/0x80 [ 739.559824][T22294] ? clear_bhb_loop+0x30/0x80 [ 739.564547][T22294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 739.570489][T22294] RIP: 0033:0x7fe7c76ff019 [ 739.574946][T22294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.594600][T22294] RSP: 002b:00007fe7c5957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.603065][T22294] RAX: ffffffffffffffda RBX: 00007fe7c7986fa0 RCX: 00007fe7c76ff019 [ 739.611087][T22294] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 739.619124][T22294] RBP: 00007fe7c5957090 R08: 0000000000000000 R09: 0000000000000000 [ 739.627143][T22294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.635158][T22294] R13: 00007fe7c7987038 R14: 00007fe7c7986fa0 R15: 00007fffe70a7fb8 [ 739.643189][T22294] [ 739.707389][T22292] netlink: 'syz.2.6060': attribute type 9 has an invalid length. [ 739.756480][T22292] netlink: 165200 bytes leftover after parsing attributes in process `syz.2.6060'. [ 739.766910][T22301] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6063'. [ 739.999365][T22309] netlink: 'syz.4.6066': attribute type 29 has an invalid length. [ 740.016173][T22295] netlink: 'syz.2.6060': attribute type 9 has an invalid length. [ 740.057953][T22295] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6060'. [ 740.911915][ T4209] wlan1: Trigger new scan to find an IBSS to join [ 741.040010][T22332] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 741.227667][T22335] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6078'. [ 741.731418][T22358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6088'. [ 741.749221][T22360] validate_nla: 6 callbacks suppressed [ 741.749241][T22360] netlink: 'syz.3.6089': attribute type 29 has an invalid length. [ 741.764287][T22360] netlink: 'syz.3.6089': attribute type 29 has an invalid length. [ 741.805401][T22358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6088'. [ 742.047318][T22366] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6090'. [ 742.133888][T22370] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6091'. [ 742.312146][T22380] netlink: 'syz.2.6095': attribute type 21 has an invalid length. [ 742.540397][T22391] netlink: 'syz.3.6101': attribute type 2 has an invalid length. [ 742.642335][T22397] netlink: 'syz.4.6102': attribute type 29 has an invalid length. [ 742.736965][T22397] netlink: 'syz.4.6102': attribute type 29 has an invalid length. [ 742.917566][T22401] pim6reg: tun_chr_ioctl cmd 1074025677 [ 742.923778][T22401] pim6reg: linktype set to 823 [ 743.033455][T22411] FAULT_INJECTION: forcing a failure. [ 743.033455][T22411] name failslab, interval 1, probability 0, space 0, times 0 [ 743.063327][T22411] CPU: 0 PID: 22411 Comm: syz.3.6107 Not tainted syzkaller #0 [ 743.070878][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.081076][T22411] Call Trace: [ 743.084386][T22411] [ 743.087358][T22411] dump_stack_lvl+0x188/0x250 [ 743.092094][T22411] ? show_regs_print_info+0x20/0x20 [ 743.097329][T22411] ? load_image+0x410/0x410 [ 743.101881][T22411] ? __lock_acquire+0x7b50/0x7b50 [ 743.106959][T22411] should_fail+0x383/0x4b0 [ 743.111423][T22411] should_failslab+0x5/0x20 [ 743.115966][T22411] slab_pre_alloc_hook+0x51/0xc0 [ 743.120956][T22411] ? __anon_vma_prepare+0xb6/0x430 [ 743.126112][T22411] kmem_cache_alloc+0x3d/0x280 [ 743.130907][T22411] ? find_mergeable_anon_vma+0x453/0x590 [ 743.136591][T22411] __anon_vma_prepare+0xb6/0x430 [ 743.141568][T22411] ? __pte_alloc+0x10f/0x150 [ 743.146195][T22411] handle_mm_fault+0x3c1b/0x4440 [ 743.151187][T22411] ? get_page+0xe0/0xe0 [ 743.155437][T22411] ? vmacache_find+0x4f0/0x590 [ 743.160238][T22411] ? vmacache_update+0xa0/0x100 [ 743.165130][T22411] ? find_vma+0x1df/0x230 [ 743.169505][T22411] do_user_addr_fault+0x494/0xc90 [ 743.174590][T22411] exc_page_fault+0x60/0x100 [ 743.179229][T22411] asm_exc_page_fault+0x22/0x30 [ 743.184123][T22411] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 743.189882][T22411] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 743.209527][T22411] RSP: 0018:ffffc90002fbfe80 EFLAGS: 00050293 [ 743.215642][T22411] RAX: 0000000000000005 RBX: 00007fffffffeffd RCX: 0000200000000c80 [ 743.223644][T22411] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a4200 [ 743.231660][T22411] RBP: 0000000000000005 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 743.239674][T22411] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 743.248121][T22411] R13: 0000200000000c80 R14: 000000000000001d R15: 0000000000000001 [ 743.256147][T22411] __sys_socketpair+0xb4/0x540 [ 743.260958][T22411] __x64_sys_socketpair+0x97/0xb0 [ 743.266019][T22411] do_syscall_64+0x4c/0xa0 [ 743.270468][T22411] ? clear_bhb_loop+0x30/0x80 [ 743.275192][T22411] ? clear_bhb_loop+0x30/0x80 [ 743.279904][T22411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 743.285832][T22411] RIP: 0033:0x7f8909f72019 [ 743.290279][T22411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.309962][T22411] RSP: 002b:00007f89081ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 743.318423][T22411] RAX: ffffffffffffffda RBX: 00007f890a1f9fa0 RCX: 00007f8909f72019 [ 743.326441][T22411] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001d [ 743.334491][T22411] RBP: 00007f89081ca090 R08: 0000000000000000 R09: 0000000000000000 [ 743.342493][T22411] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000001 [ 743.350546][T22411] R13: 00007f890a1fa038 R14: 00007f890a1f9fa0 R15: 00007ffc052e9c48 [ 743.358575][T22411] [ 743.968823][T22433] netlink: 'syz.6.6114': attribute type 29 has an invalid length. [ 744.251041][T22433] netlink: 'syz.6.6114': attribute type 29 has an invalid length. [ 744.331048][T22438] __nla_validate_parse: 2 callbacks suppressed [ 744.331121][T22438] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6116'. [ 744.548502][T22443] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.6118'. [ 744.904124][ T144] wlan1: Trigger new scan to find an IBSS to join [ 745.529849][T22473] netlink: 'syz.1.6129': attribute type 29 has an invalid length. [ 745.539484][T22473] netlink: 'syz.1.6129': attribute type 29 has an invalid length. [ 745.737688][T22479] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6131'. [ 746.563224][T22512] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6145'. [ 747.039703][T22533] validate_nla: 2 callbacks suppressed [ 747.039721][T22533] netlink: 'syz.1.6154': attribute type 17 has an invalid length. [ 747.068295][T22533] netlink: 'syz.1.6154': attribute type 16 has an invalid length. [ 747.076980][T22533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6154'. [ 747.094914][T22532] netlink: 'syz.4.6155': attribute type 29 has an invalid length. [ 747.147414][T22532] netlink: 'syz.4.6155': attribute type 29 has an invalid length. [ 747.247474][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.253860][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.476016][T22544] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6158'. [ 747.510970][T22548] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 748.040946][T22559] netlink: 'syz.1.6164': attribute type 29 has an invalid length. [ 748.051055][T22559] netlink: 'syz.1.6164': attribute type 29 has an invalid length. [ 748.087557][T22559] netlink: 'syz.1.6164': attribute type 29 has an invalid length. [ 748.108940][T22559] netlink: 'syz.1.6164': attribute type 29 has an invalid length. [ 748.135777][T22559] netlink: 'syz.1.6164': attribute type 29 has an invalid length. [ 748.206684][T22571] netlink: 'syz.4.6169': attribute type 29 has an invalid length. [ 748.429392][T22580] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6173'. [ 748.706121][T22599] FAULT_INJECTION: forcing a failure. [ 748.706121][T22599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.769011][T22599] CPU: 1 PID: 22599 Comm: syz.1.6180 Not tainted syzkaller #0 [ 748.776542][T22599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 748.786636][T22599] Call Trace: [ 748.789991][T22599] [ 748.792953][T22599] dump_stack_lvl+0x188/0x250 [ 748.797677][T22599] ? show_regs_print_info+0x20/0x20 [ 748.802938][T22599] ? load_image+0x410/0x410 [ 748.807494][T22599] ? __lock_acquire+0x7b50/0x7b50 [ 748.812566][T22599] should_fail+0x383/0x4b0 [ 748.817035][T22599] _copy_to_user+0x2e/0x130 [ 748.821580][T22599] simple_read_from_buffer+0xe3/0x150 [ 748.827001][T22599] proc_fail_nth_read+0x1a6/0x220 [ 748.832093][T22599] ? proc_fault_inject_write+0x310/0x310 [ 748.837771][T22599] ? fsnotify_perm+0x254/0x560 [ 748.842572][T22599] ? proc_fault_inject_write+0x310/0x310 [ 748.848243][T22599] vfs_read+0x2ff/0xd50 [ 748.852455][T22599] ? __lock_acquire+0x7b50/0x7b50 [ 748.857523][T22599] ? kernel_read+0x1e0/0x1e0 [ 748.862167][T22599] ? mutex_lock_nested+0x17/0x20 [ 748.867145][T22599] ? __fdget_pos+0x2bf/0x370 [ 748.871770][T22599] ? ksys_read+0x70/0x260 [ 748.876230][T22599] ksys_read+0x153/0x260 [ 748.880497][T22599] ? vfs_write+0xd70/0xd70 [ 748.884958][T22599] ? lockdep_hardirqs_on+0x94/0x140 [ 748.890209][T22599] do_syscall_64+0x4c/0xa0 [ 748.894666][T22599] ? clear_bhb_loop+0x30/0x80 [ 748.899386][T22599] ? clear_bhb_loop+0x30/0x80 [ 748.904105][T22599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 748.910035][T22599] RIP: 0033:0x7f6a12f0a84e [ 748.914486][T22599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 748.934123][T22599] RSP: 002b:00007f6a111a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 748.942572][T22599] RAX: ffffffffffffffda RBX: 00007f6a111a26c0 RCX: 00007f6a12f0a84e [ 748.950590][T22599] RDX: 000000000000000f RSI: 00007f6a111a20a0 RDI: 0000000000000004 [ 748.958611][T22599] RBP: 00007f6a111a2090 R08: 0000000000000000 R09: 0000000000000000 [ 748.966623][T22599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.974634][T22599] R13: 00007f6a131d2038 R14: 00007f6a131d1fa0 R15: 00007fff7715f618 [ 748.982658][T22599] [ 748.989991][ T4517] wlan1: Trigger new scan to find an IBSS to join [ 749.101140][ T4517] wlan1: Creating new IBSS network, BSSID b6:d9:95:1b:1a:9e [ 749.399601][T22618] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6187'. [ 750.080483][T22648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.115160][T22648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.160344][T22648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.190212][T22648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.016469][T22658] chnl_net:caif_netlink_parms(): no params data found [ 751.996843][T22658] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.004223][T22658] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.051473][T22658] device bridge_slave_0 entered promiscuous mode [ 752.072871][T22718] validate_nla: 9 callbacks suppressed [ 752.072891][T22718] netlink: 'syz.6.6223': attribute type 29 has an invalid length. [ 752.088404][T22658] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.106507][T22658] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.138913][T22658] device bridge_slave_1 entered promiscuous mode [ 752.153191][T22718] netlink: 'syz.6.6223': attribute type 29 has an invalid length. [ 752.289759][T22658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.311866][T22726] netlink: 'syz.3.6227': attribute type 21 has an invalid length. [ 752.329148][T22658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.492314][T22658] team0: Port device team_slave_0 added [ 752.531757][T22658] team0: Port device team_slave_1 added [ 752.664039][T18729] Bluetooth: hci1: command 0x0409 tx timeout [ 752.681859][T22658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.713263][T22658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.741286][T22658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.779405][T22658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.803774][T22658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.850852][T22658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.228648][T22658] device hsr_slave_0 entered promiscuous mode [ 753.300181][T22658] device hsr_slave_1 entered promiscuous mode [ 753.320573][T22658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.331969][T22658] Cannot create hsr debugfs directory [ 753.449864][T22757] netlink: 'syz.2.6237': attribute type 29 has an invalid length. [ 753.738989][T22757] netlink: 'syz.2.6237': attribute type 29 has an invalid length. [ 754.225004][T22658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.327426][T22658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.363444][T22773] FAULT_INJECTION: forcing a failure. [ 754.363444][T22773] name failslab, interval 1, probability 0, space 0, times 0 [ 754.403768][T22773] CPU: 1 PID: 22773 Comm: syz.3.6243 Not tainted syzkaller #0 [ 754.411382][T22773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.421475][T22773] Call Trace: [ 754.424785][T22773] [ 754.427752][T22773] dump_stack_lvl+0x188/0x250 [ 754.432476][T22773] ? show_regs_print_info+0x20/0x20 [ 754.437719][T22773] ? load_image+0x410/0x410 [ 754.442276][T22773] should_fail+0x383/0x4b0 [ 754.446730][T22773] should_failslab+0x5/0x20 [ 754.451266][T22773] slab_pre_alloc_hook+0x51/0xc0 [ 754.456241][T22773] kmem_cache_alloc_trace+0x47/0x290 [ 754.461565][T22773] ? sctp_add_bind_addr+0x89/0x350 [ 754.466745][T22773] sctp_add_bind_addr+0x89/0x350 [ 754.471729][T22773] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 754.477404][T22773] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 754.483518][T22773] ? sctp_v4_is_any+0x31/0x50 [ 754.488256][T22773] ? sctp_copy_one_addr+0x93/0x660 [ 754.493409][T22773] sctp_bind_addr_copy+0xaf/0x3c0 [ 754.498471][T22773] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 754.504846][T22773] sctp_connect_new_asoc+0x2f5/0x6a0 [ 754.510177][T22773] ? __sctp_connect+0xd80/0xd80 [ 754.515058][T22773] ? __local_bh_enable_ip+0x136/0x1c0 [ 754.520466][T22773] ? _local_bh_enable+0xa0/0xa0 [ 754.525359][T22773] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 754.530942][T22773] ? security_sctp_bind_connect+0x85/0xb0 [ 754.536702][T22773] sctp_sendmsg+0x15e1/0x2940 [ 754.541435][T22773] ? sctp_getsockopt+0x8a0/0x8a0 [ 754.546408][T22773] ? aa_af_perm+0x340/0x340 [ 754.550958][T22773] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 754.557417][T22773] ? aa_sock_msg_perm+0x94/0x150 [ 754.562392][T22773] ? sock_rps_record_flow+0x17/0x3b0 [ 754.567727][T22773] ? inet_sendmsg+0x7a/0x2a0 [ 754.572393][T22773] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 754.577717][T22773] ? inet_send_prepare+0x250/0x250 [ 754.582870][T22773] ____sys_sendmsg+0x5be/0x8f0 [ 754.587681][T22773] ? __sys_sendmsg_sock+0x30/0x30 [ 754.592758][T22773] ? import_iovec+0x6f/0xa0 [ 754.597307][T22773] ___sys_sendmsg+0x236/0x2e0 [ 754.602037][T22773] ? __sys_sendmsg+0x290/0x290 [ 754.606882][T22773] __se_sys_sendmsg+0x1b7/0x2a0 [ 754.611774][T22773] ? __x64_sys_sendmsg+0x80/0x80 [ 754.616742][T22773] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 754.622774][T22773] ? lockdep_hardirqs_on+0x94/0x140 [ 754.628016][T22773] do_syscall_64+0x4c/0xa0 [ 754.632470][T22773] ? clear_bhb_loop+0x30/0x80 [ 754.637182][T22773] ? clear_bhb_loop+0x30/0x80 [ 754.641894][T22773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 754.647820][T22773] RIP: 0033:0x7f8909f72019 [ 754.652272][T22773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.671914][T22773] RSP: 002b:00007f89081ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.680370][T22773] RAX: ffffffffffffffda RBX: 00007f890a1f9fa0 RCX: 00007f8909f72019 [ 754.688381][T22773] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 754.696389][T22773] RBP: 00007f89081ca090 R08: 0000000000000000 R09: 0000000000000000 [ 754.704395][T22773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.712404][T22773] R13: 00007f890a1fa038 R14: 00007f890a1f9fa0 R15: 00007ffc052e9c48 [ 754.720431][T22773] [ 754.742666][T22771] netlink: 'syz.2.6242': attribute type 21 has an invalid length. [ 754.750758][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 754.936544][T22658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.073483][T22792] netlink: 'syz.1.6248': attribute type 29 has an invalid length. [ 755.092463][T22792] netlink: 'syz.1.6248': attribute type 29 has an invalid length. [ 755.259456][T22658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.480217][T22658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.540829][T22658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.591474][T22658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.645291][T22658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 756.608960][T22818] netlink: 'syz.6.6259': attribute type 21 has an invalid length. [ 756.704401][T22828] netlink: 'syz.1.6261': attribute type 29 has an invalid length. [ 756.824663][ T4670] Bluetooth: hci1: command 0x040f tx timeout [ 756.872686][T22658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.929317][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 756.938278][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 756.958231][T22658] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.997081][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 757.043561][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 757.085994][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.093120][ T4517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.121528][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 757.132643][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 757.142514][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.149656][ T4517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.159793][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 757.219032][T22841] validate_nla: 1 callbacks suppressed [ 757.219051][T22841] netlink: 'syz.1.6264': attribute type 13 has an invalid length. [ 757.233143][T22841] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.6264'. [ 757.246475][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 757.261923][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 757.298247][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 757.326069][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 757.339277][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 757.390083][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 757.440236][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 757.465998][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 757.503012][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 757.520790][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 757.532477][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 757.556266][T22658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 757.571078][T22849] FAULT_INJECTION: forcing a failure. [ 757.571078][T22849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.590879][T22849] CPU: 1 PID: 22849 Comm: syz.3.6270 Not tainted syzkaller #0 [ 757.598415][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.608526][T22849] Call Trace: [ 757.611874][T22849] [ 757.614862][T22849] dump_stack_lvl+0x188/0x250 [ 757.619612][T22849] ? show_regs_print_info+0x20/0x20 [ 757.624882][T22849] ? load_image+0x410/0x410 [ 757.629459][T22849] ? __lock_acquire+0x7b50/0x7b50 [ 757.634539][T22849] ? __mutex_trylock_common+0x15c/0x260 [ 757.640175][T22849] should_fail+0x383/0x4b0 [ 757.644669][T22849] _copy_from_user+0x2e/0x170 [ 757.649414][T22849] br_ioctl_stub+0x3cc/0xbe0 [ 757.654110][T22849] ? rcu_read_unlock+0x90/0x90 [ 757.658932][T22849] ? sock_ioctl+0x434/0x700 [ 757.663580][T22849] ? rcu_read_unlock+0x90/0x90 [ 757.668391][T22849] sock_ioctl+0x453/0x700 [ 757.672785][T22849] ? sock_poll+0x420/0x420 [ 757.677320][T22849] ? bpf_lsm_file_ioctl+0x5/0x10 [ 757.682299][T22849] ? security_file_ioctl+0x7c/0xa0 [ 757.687468][T22849] ? sock_poll+0x420/0x420 [ 757.691943][T22849] __se_sys_ioctl+0xfa/0x170 [ 757.696595][T22849] do_syscall_64+0x4c/0xa0 [ 757.701063][T22849] ? clear_bhb_loop+0x30/0x80 [ 757.705788][T22849] ? clear_bhb_loop+0x30/0x80 [ 757.710529][T22849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 757.716471][T22849] RIP: 0033:0x7f8909f72019 [ 757.720935][T22849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.740832][T22849] RSP: 002b:00007f89081ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.749315][T22849] RAX: ffffffffffffffda RBX: 00007f890a1f9fa0 RCX: 00007f8909f72019 [ 757.757343][T22849] RDX: 0000200000000340 RSI: 00000000000089a0 RDI: 0000000000000008 [ 757.765371][T22849] RBP: 00007f89081ca090 R08: 0000000000000000 R09: 0000000000000000 [ 757.773400][T22849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.781421][T22849] R13: 00007f890a1fa038 R14: 00007f890a1f9fa0 R15: 00007ffc052e9c48 [ 757.789505][T22849] [ 757.931426][T22859] netlink: 'syz.1.6273': attribute type 29 has an invalid length. [ 758.003610][T22859] netlink: 'syz.1.6273': attribute type 29 has an invalid length. [ 758.033795][ T144] tipc: Left network mode [ 758.146960][T22867] sctp: [Deprecated]: syz.3.6274 (pid 22867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.146960][T22867] Use struct sctp_sack_info instead [ 758.477073][T22870] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6274'. [ 758.596082][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.603660][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.750462][T22658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.904656][ T4670] Bluetooth: hci1: command 0x0419 tx timeout [ 758.977899][T22892] netlink: 'syz.1.6283': attribute type 29 has an invalid length. [ 759.068018][T22896] netlink: 'syz.2.6284': attribute type 29 has an invalid length. [ 759.114657][T22896] netlink: 'syz.2.6284': attribute type 29 has an invalid length. [ 759.133757][T22892] netlink: 'syz.1.6283': attribute type 29 has an invalid length. [ 759.165520][T22895] netlink: 'syz.1.6283': attribute type 29 has an invalid length. [ 759.663125][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 759.675888][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 759.756233][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 759.781462][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 759.806653][T22658] device veth0_vlan entered promiscuous mode [ 759.838064][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.855481][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 760.135655][T22658] device veth1_vlan entered promiscuous mode [ 760.352648][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 760.383048][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 760.481066][T22934] netlink: 'syz.3.6295': attribute type 29 has an invalid length. [ 760.507804][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 760.525833][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 760.542151][T22658] device veth0_macvtap entered promiscuous mode [ 760.588066][T22934] netlink: 'syz.3.6295': attribute type 29 has an invalid length. [ 760.659292][T22658] device veth1_macvtap entered promiscuous mode [ 760.708864][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 760.777440][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 760.917464][T22658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.984199][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 761.004780][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 761.141515][T22658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.162215][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 761.181021][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 761.228332][T22658] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.248029][T22658] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.283121][T22954] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.6303'. [ 761.294325][T22658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.303267][T22658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.362400][ T144] device hsr_slave_1 left promiscuous mode [ 761.371169][ T144] bridge0: port 4(hsr0) entered disabled state [ 761.381336][ T144] bridge0: port 3(team0) entered disabled state [ 761.392868][ T144] device bridge_slave_1 left promiscuous mode [ 761.399986][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.410774][ T144] device bridge_slave_0 left promiscuous mode [ 761.418007][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.439392][ T144] device veth1_macvtap left promiscuous mode [ 761.446983][ T144] device veth0_macvtap left promiscuous mode [ 761.453787][ T144] device veth1_vlan left promiscuous mode [ 761.460595][ T144] device veth0_vlan left promiscuous mode [ 761.655172][ T144] device geneve1 left promiscuous mode [ 761.669083][ T144] team0 (unregistering): Port device geneve1 removed [ 761.847329][ T144] device team_slave_1 left promiscuous mode [ 761.860292][ T144] team0 (unregistering): Port device team_slave_1 removed [ 762.076120][T22964] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6308'. [ 762.305272][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.320951][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.352525][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 762.404436][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.420960][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.501918][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 762.769885][T22994] validate_nla: 3 callbacks suppressed [ 762.769917][T22994] netlink: 'syz.3.6316': attribute type 21 has an invalid length. [ 763.076242][T22993] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6201'. [ 763.467934][T23005] netlink: 'syz.3.6321': attribute type 29 has an invalid length. [ 763.504789][T23005] netlink: 'syz.3.6321': attribute type 29 has an invalid length. [ 763.988847][T23024] netlink: 'syz.3.6330': attribute type 21 has an invalid length. [ 764.126178][T23029] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6331'. [ 764.180939][T23009] chnl_net:caif_netlink_parms(): no params data found [ 764.332880][T23040] netlink: 'syz.4.6334': attribute type 29 has an invalid length. [ 764.388077][T23040] netlink: 'syz.4.6334': attribute type 29 has an invalid length. [ 764.578100][T23009] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.653438][T23009] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.721019][T23009] device bridge_slave_0 entered promiscuous mode [ 764.832909][T23009] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.885816][T23009] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.001462][T23009] device bridge_slave_1 entered promiscuous mode [ 765.389782][T23009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.409555][T23009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.487439][T23009] team0: Port device team_slave_0 added [ 765.562760][T23009] team0: Port device team_slave_1 added [ 765.641165][ T4228] Bluetooth: hci2: command 0x0409 tx timeout [ 765.724939][T23076] netlink: 'syz.4.6346': attribute type 29 has an invalid length. [ 765.767856][T23079] netlink: 'syz.3.6348': attribute type 21 has an invalid length. [ 765.782452][T23076] netlink: 'syz.4.6346': attribute type 29 has an invalid length. [ 765.813870][T23081] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6347'. [ 765.824736][T23009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.836877][T23009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.883751][T23009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.902003][T23009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.910799][T23009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.006564][T23009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.162036][T23009] device hsr_slave_0 entered promiscuous mode [ 766.213698][T23009] device hsr_slave_1 entered promiscuous mode [ 766.583726][T23110] netlink: 'syz.6.6359': attribute type 29 has an invalid length. [ 766.641848][T23009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.760993][T23009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.820140][T23114] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6360'. [ 766.910745][T23009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.045860][T23009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.518284][T23009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 767.554975][T23009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 767.627521][T23009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 767.665402][T23009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 767.702805][T23147] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6374'. [ 767.716905][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 767.919656][T23009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.961218][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 767.975101][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 767.997591][T23009] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.021646][T23159] FAULT_INJECTION: forcing a failure. [ 768.021646][T23159] name failslab, interval 1, probability 0, space 0, times 0 [ 768.037723][T23159] CPU: 0 PID: 23159 Comm: syz.4.6380 Not tainted syzkaller #0 [ 768.045249][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.055342][T23159] Call Trace: [ 768.058648][T23159] [ 768.061608][T23159] dump_stack_lvl+0x188/0x250 [ 768.066329][T23159] ? show_regs_print_info+0x20/0x20 [ 768.071648][T23159] ? load_image+0x410/0x410 [ 768.076182][T23159] ? __might_sleep+0xf0/0xf0 [ 768.080805][T23159] ? __lock_acquire+0x7b50/0x7b50 [ 768.085897][T23159] should_fail+0x383/0x4b0 [ 768.090356][T23159] should_failslab+0x5/0x20 [ 768.094889][T23159] slab_pre_alloc_hook+0x51/0xc0 [ 768.099863][T23159] __kmalloc+0x6b/0x340 [ 768.104054][T23159] ? tomoyo_encode+0x28a/0x550 [ 768.108952][T23159] tomoyo_encode+0x28a/0x550 [ 768.113581][T23159] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 768.119379][T23159] tomoyo_path_number_perm+0x251/0x6b0 [ 768.124870][T23159] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 768.130356][T23159] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 768.136380][T23159] ? ksys_write+0x1d4/0x260 [ 768.140941][T23159] ? lock_chain_count+0x20/0x20 [ 768.145879][T23159] security_file_ioctl+0x6c/0xa0 [ 768.150851][T23159] __se_sys_ioctl+0x48/0x170 [ 768.155476][T23159] do_syscall_64+0x4c/0xa0 [ 768.159922][T23159] ? clear_bhb_loop+0x30/0x80 [ 768.164624][T23159] ? clear_bhb_loop+0x30/0x80 [ 768.169445][T23159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 768.175369][T23159] RIP: 0033:0x7ffbcc8d5019 [ 768.179817][T23159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.199473][T23159] RSP: 002b:00007ffbcab2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.207936][T23159] RAX: ffffffffffffffda RBX: 00007ffbccb5cfa0 RCX: 00007ffbcc8d5019 [ 768.215939][T23159] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000004 [ 768.223938][T23159] RBP: 00007ffbcab2d090 R08: 0000000000000000 R09: 0000000000000000 [ 768.231952][T23159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.239941][T23159] R13: 00007ffbccb5d038 R14: 00007ffbccb5cfa0 R15: 00007fff49579d58 [ 768.247946][T23159] [ 768.271850][T23159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 768.336987][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 768.355078][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 768.376164][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.383361][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.411262][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 768.467162][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 768.505139][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.512355][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.018256][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 769.152900][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 769.228672][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 769.248415][T23173] validate_nla: 4 callbacks suppressed [ 769.248436][T23173] netlink: 'syz.6.6385': attribute type 29 has an invalid length. [ 769.348038][T23173] netlink: 'syz.6.6385': attribute type 29 has an invalid length. [ 769.394953][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 769.433165][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 769.473684][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 769.540743][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 769.592032][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 769.635274][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 769.749851][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 769.767774][T23177] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6387'. [ 769.785955][T18449] Bluetooth: hci2: command 0x040f tx timeout [ 769.804283][ T144] tipc: Left network mode [ 769.813709][T23009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.851108][T23009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.891404][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 769.917096][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 770.225015][T23200] netlink: 'syz.4.6396': attribute type 29 has an invalid length. [ 770.246118][T23200] netlink: 'syz.4.6396': attribute type 29 has an invalid length. [ 770.275276][T23197] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6395'. [ 770.348490][T23202] netlink: 'syz.6.6395': attribute type 3 has an invalid length. [ 770.377845][T23202] netlink: 1034 bytes leftover after parsing attributes in process `syz.6.6395'. [ 770.418027][T23197] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6395'. [ 770.448486][T23197] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 770.509547][T23197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.785113][T23214] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6401'. [ 770.947423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 770.975655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 771.052767][T23009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.180982][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 771.216787][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 771.473816][T23226] netlink: 'syz.3.6406': attribute type 16 has an invalid length. [ 771.504854][T23226] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6406'. [ 771.519689][T23231] netlink: 'syz.4.6408': attribute type 29 has an invalid length. [ 771.540818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 771.562933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 771.606435][T23009] device veth0_vlan entered promiscuous mode [ 771.614865][T23231] netlink: 'syz.4.6408': attribute type 29 has an invalid length. [ 771.663532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 771.744935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 771.829556][T23009] device veth1_vlan entered promiscuous mode [ 771.861785][T23226] netlink: 'syz.3.6406': attribute type 10 has an invalid length. [ 771.871865][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 771.883665][T23226] netlink: 991 bytes leftover after parsing attributes in process `syz.3.6406'. [ 771.921838][T23240] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6412'. [ 772.000701][T23009] device veth0_macvtap entered promiscuous mode [ 772.031636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 772.045495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 772.105017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 772.138901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 772.211905][T23009] device veth1_macvtap entered promiscuous mode [ 772.237251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 772.250363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 772.353252][T23009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.369921][T23252] sock: sock_set_timeout: `syz.3.6417' (pid 23252) tries to set negative timeout [ 772.414438][T23009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.465825][T23009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.474108][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 772.493675][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 772.527699][T23255] netlink: 'syz.3.6417': attribute type 10 has an invalid length. [ 772.755818][T23255] device wg1 entered promiscuous mode [ 772.771607][T23255] team0: Device wg1 is of different type [ 772.817457][T23250] delete_channel: no stack [ 772.845072][T23009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.876748][T23009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.945772][T23009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.971421][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 773.036925][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 773.079262][T23009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.106833][T23009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.124053][T23266] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6423'. [ 773.128633][T23009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.144712][T23266] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 773.163724][T23009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.181494][T23268] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6424'. [ 773.443475][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.468785][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.507151][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 773.592889][ T4517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.632224][ T4517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.644692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 773.779417][ T144] device hsr_slave_0 left promiscuous mode [ 773.801890][ T144] device hsr_slave_1 left promiscuous mode [ 773.858716][ T144] bridge0: port 3(hsr0) entered disabled state [ 773.884959][ T144] device bridge_slave_1 left promiscuous mode [ 773.991470][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.028214][ T144] device bridge_slave_0 left promiscuous mode [ 774.044186][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.069624][ T144] device veth1_macvtap left promiscuous mode [ 774.082586][ T144] device veth0_macvtap left promiscuous mode [ 774.103657][ T144] device veth1_vlan left promiscuous mode [ 774.114659][ T144] device veth0_vlan left promiscuous mode [ 774.321596][ T144] team0 (unregistering): Port device geneve1 removed [ 774.433774][ T144] team0 (unregistering): Port device team_slave_1 removed [ 774.451033][ T144] team0 (unregistering): Port device team_slave_0 removed [ 774.590876][T23298] validate_nla: 4 callbacks suppressed [ 774.590893][T23298] netlink: 'syz.4.6433': attribute type 29 has an invalid length. [ 774.605825][T23300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.614797][T23300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.622971][T23300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.631043][T23300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.811257][T23309] FAULT_INJECTION: forcing a failure. [ 774.811257][T23309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.856416][T23309] CPU: 0 PID: 23309 Comm: syz.1.6438 Not tainted syzkaller #0 [ 774.863949][T23309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.874175][T23309] Call Trace: [ 774.877493][T23309] [ 774.880459][T23309] dump_stack_lvl+0x188/0x250 [ 774.885188][T23309] ? show_regs_print_info+0x20/0x20 [ 774.890433][T23309] ? load_image+0x410/0x410 [ 774.894988][T23309] ? __lock_acquire+0x7b50/0x7b50 [ 774.900059][T23309] should_fail+0x383/0x4b0 [ 774.904525][T23309] _copy_from_user+0x2e/0x170 [ 774.909278][T23309] bpf_test_init+0x136/0x1b0 [ 774.913914][T23309] bpf_prog_test_run_skb+0x181/0x1190 [ 774.919330][T23309] ? __fget_files+0x402/0x470 [ 774.924063][T23309] ? cpu_online+0x60/0x60 [ 774.928444][T23309] bpf_prog_test_run+0x31c/0x390 [ 774.933427][T23309] __sys_bpf+0x5a5/0x6f0 [ 774.937799][T23309] ? bpf_link_show_fdinfo+0x380/0x380 [ 774.943232][T23309] __x64_sys_bpf+0x78/0x90 [ 774.947692][T23309] do_syscall_64+0x4c/0xa0 [ 774.952147][T23309] ? clear_bhb_loop+0x30/0x80 [ 774.956859][T23309] ? clear_bhb_loop+0x30/0x80 [ 774.961682][T23309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.967623][T23309] RIP: 0033:0x7f6a12f4a019 [ 774.972083][T23309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.991752][T23309] RSP: 002b:00007f6a111a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.000216][T23309] RAX: ffffffffffffffda RBX: 00007f6a131d1fa0 RCX: 00007f6a12f4a019 [ 775.008229][T23309] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 775.016265][T23309] RBP: 00007f6a111a2090 R08: 0000000000000000 R09: 0000000000000000 [ 775.024270][T23309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.032287][T23309] R13: 00007f6a131d2038 R14: 00007f6a131d1fa0 R15: 00007fff7715f618 [ 775.040296][T23309] [ 775.240667][T23323] netlink: 'syz.6.6444': attribute type 21 has an invalid length. [ 775.346431][T23330] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 775.439576][T23333] __nla_validate_parse: 3 callbacks suppressed [ 775.439593][T23333] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6448'. [ 775.461901][T23305] chnl_net:caif_netlink_parms(): no params data found [ 775.578992][T23344] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6451'. [ 775.628635][T23349] netlink: 'syz.1.6451': attribute type 29 has an invalid length. [ 775.669275][T23349] netlink: 'syz.1.6451': attribute type 29 has an invalid length. [ 775.683296][T23344] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 775.693303][T23344] CPU: 0 PID: 23344 Comm: syz.1.6451 Not tainted syzkaller #0 [ 775.700821][T23344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.710916][T23344] Call Trace: [ 775.714229][T23344] [ 775.717231][T23344] dump_stack_lvl+0x188/0x250 [ 775.721977][T23344] ? show_regs_print_info+0x20/0x20 [ 775.727228][T23344] ? load_image+0x410/0x410 [ 775.731816][T23344] sysfs_warn_dup+0x8a/0xa0 [ 775.736368][T23344] sysfs_do_create_link_sd+0xc0/0x110 [ 775.741793][T23344] device_add+0x83b/0x1050 [ 775.746273][T23344] wiphy_register+0x1e74/0x2c40 [ 775.751240][T23344] ? cfg80211_event_work+0x40/0x40 [ 775.756408][T23344] ? minstrel_ht_alloc+0x807/0x980 [ 775.761588][T23344] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 775.767716][T23344] ieee80211_register_hw+0x2a03/0x3a60 [ 775.773212][T23344] ? ieee80211_register_hw+0xae1/0x3a60 [ 775.778796][T23344] ? ieee80211_tasklet_handler+0x20/0x20 [ 775.784460][T23344] ? rcu_is_watching+0x11/0xa0 [ 775.789266][T23344] ? hrtimer_init+0x10c/0x220 [ 775.793985][T23344] mac80211_hwsim_new_radio+0x209d/0x4050 [ 775.799796][T23344] hwsim_new_radio_nl+0xa7d/0xc50 [ 775.804907][T23344] genl_rcv_msg+0xd0b/0xfa0 [ 775.809488][T23344] ? genl_bind+0x370/0x370 [ 775.813958][T23344] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 775.819730][T23344] ? verify_lock_unused+0x140/0x140 [ 775.824974][T23344] ? perf_trace_lock_acquire+0x341/0x3f0 [ 775.830656][T23344] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 775.837283][T23344] ? dev_queue_xmit+0x20/0x20 [ 775.841994][T23344] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 775.848381][T23344] netlink_rcv_skb+0x1e9/0x430 [ 775.853183][T23344] ? genl_bind+0x370/0x370 [ 775.857629][T23344] ? netlink_ack+0xb10/0xb10 [ 775.862267][T23344] ? down_read+0x1aa/0x2e0 [ 775.866730][T23344] genl_rcv+0x24/0x40 [ 775.870738][T23344] netlink_unicast+0x78f/0x940 [ 775.875546][T23344] netlink_sendmsg+0x8ba/0xbe0 [ 775.880377][T23344] ? netlink_getsockopt+0x570/0x570 [ 775.885609][T23344] ? aa_sock_msg_perm+0x94/0x150 [ 775.890585][T23344] ? apparmor_socket_sendmsg+0x88/0x230 [ 775.896161][T23344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 775.901483][T23344] ? security_socket_sendmsg+0x7c/0xa0 [ 775.906972][T23344] ? netlink_getsockopt+0x570/0x570 [ 775.912202][T23344] ____sys_sendmsg+0x5be/0x8f0 [ 775.917008][T23344] ? __sys_sendmsg_sock+0x30/0x30 [ 775.922168][T23344] ? import_iovec+0x6f/0xa0 [ 775.926706][T23344] ___sys_sendmsg+0x236/0x2e0 [ 775.931435][T23344] ? __sys_sendmsg+0x290/0x290 [ 775.936301][T23344] __se_sys_sendmsg+0x1b7/0x2a0 [ 775.941181][T23344] ? __x64_sys_sendmsg+0x80/0x80 [ 775.946153][T23344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 775.952186][T23344] ? lockdep_hardirqs_on+0x94/0x140 [ 775.957436][T23344] do_syscall_64+0x4c/0xa0 [ 775.961881][T23344] ? clear_bhb_loop+0x30/0x80 [ 775.966580][T23344] ? clear_bhb_loop+0x30/0x80 [ 775.971289][T23344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 775.977213][T23344] RIP: 0033:0x7f6a12f4a019 [ 775.981656][T23344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.001284][T23344] RSP: 002b:00007f6a111a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.009734][T23344] RAX: ffffffffffffffda RBX: 00007f6a131d1fa0 RCX: 00007f6a12f4a019 [ 776.017749][T23344] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 776.025753][T23344] RBP: 00007f6a12fe100c R08: 0000000000000000 R09: 0000000000000000 [ 776.033750][T23344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.041827][T23344] R13: 00007f6a131d2038 R14: 00007f6a131d1fa0 R15: 00007fff7715f618 [ 776.049858][T23344] [ 776.083270][T23348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.158981][T23348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.226772][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 776.359870][T23348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.387578][T23348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.495877][T23305] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.514521][T23305] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.529636][T23305] device bridge_slave_0 entered promiscuous mode [ 776.588152][T23305] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.596948][T23305] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.612534][T23305] device bridge_slave_1 entered promiscuous mode [ 776.682025][T23305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.703571][T23305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.806612][T23305] team0: Port device team_slave_0 added [ 776.847777][T23305] team0: Port device team_slave_1 added [ 776.869028][T23375] netlink: 'syz.6.6461': attribute type 29 has an invalid length. [ 776.901656][T23375] netlink: 'syz.6.6461': attribute type 29 has an invalid length. [ 776.927876][T23305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.936033][T23305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.968298][T23305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.990333][T23375] netlink: 'syz.6.6461': attribute type 29 has an invalid length. [ 777.006203][T23381] netlink: 'syz.2.6463': attribute type 21 has an invalid length. [ 777.034712][T23305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.041752][T23305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.097123][T23385] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6465'. [ 777.147584][T23389] netlink: 'syz.4.6465': attribute type 29 has an invalid length. [ 777.156389][T23305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.213406][T23386] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6464'. [ 777.244334][T23389] netlink: 'syz.4.6465': attribute type 29 has an invalid length. [ 777.255873][T23385] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 777.268727][T23385] CPU: 0 PID: 23385 Comm: syz.4.6465 Not tainted syzkaller #0 [ 777.276258][T23385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.286388][T23385] Call Trace: [ 777.289712][T23385] [ 777.292689][T23385] dump_stack_lvl+0x188/0x250 [ 777.297427][T23385] ? show_regs_print_info+0x20/0x20 [ 777.302681][T23385] ? load_image+0x410/0x410 [ 777.307266][T23385] sysfs_warn_dup+0x8a/0xa0 [ 777.312039][T23385] sysfs_do_create_link_sd+0xc0/0x110 [ 777.317467][T23385] device_add+0x83b/0x1050 [ 777.321951][T23385] wiphy_register+0x1e74/0x2c40 [ 777.326894][T23385] ? cfg80211_event_work+0x40/0x40 [ 777.332071][T23385] ? minstrel_ht_alloc+0x807/0x980 [ 777.337255][T23385] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 777.343390][T23385] ieee80211_register_hw+0x2a03/0x3a60 [ 777.348921][T23385] ? ieee80211_register_hw+0xae1/0x3a60 [ 777.354548][T23385] ? ieee80211_tasklet_handler+0x20/0x20 [ 777.360247][T23385] ? rcu_is_watching+0x11/0xa0 [ 777.365073][T23385] ? hrtimer_init+0x10c/0x220 [ 777.369807][T23385] mac80211_hwsim_new_radio+0x209d/0x4050 [ 777.375632][T23385] hwsim_new_radio_nl+0xa7d/0xc50 [ 777.380753][T23385] genl_rcv_msg+0xd0b/0xfa0 [ 777.385334][T23385] ? genl_bind+0x370/0x370 [ 777.389815][T23385] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 777.395611][T23385] ? verify_lock_unused+0x140/0x140 [ 777.400874][T23385] ? perf_trace_lock_acquire+0x341/0x3f0 [ 777.406581][T23385] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 777.413239][T23385] ? dev_queue_xmit+0x20/0x20 [ 777.417976][T23385] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 777.424398][T23385] netlink_rcv_skb+0x1e9/0x430 [ 777.429234][T23385] ? genl_bind+0x370/0x370 [ 777.433714][T23385] ? netlink_ack+0xb10/0xb10 [ 777.438382][T23385] ? down_read+0x1aa/0x2e0 [ 777.442899][T23385] genl_rcv+0x24/0x40 [ 777.446954][T23385] netlink_unicast+0x78f/0x940 [ 777.451803][T23385] netlink_sendmsg+0x8ba/0xbe0 [ 777.456655][T23385] ? netlink_getsockopt+0x570/0x570 [ 777.461899][T23385] ? aa_sock_msg_perm+0x94/0x150 [ 777.466893][T23385] ? apparmor_socket_sendmsg+0x88/0x230 [ 777.472522][T23385] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 777.477857][T23385] ? security_socket_sendmsg+0x7c/0xa0 [ 777.483367][T23385] ? netlink_getsockopt+0x570/0x570 [ 777.488664][T23385] ____sys_sendmsg+0x5be/0x8f0 [ 777.493512][T23385] ? __sys_sendmsg_sock+0x30/0x30 [ 777.498611][T23385] ? import_iovec+0x6f/0xa0 [ 777.503177][T23385] ___sys_sendmsg+0x236/0x2e0 [ 777.507927][T23385] ? __sys_sendmsg+0x290/0x290 [ 777.512828][T23385] __se_sys_sendmsg+0x1b7/0x2a0 [ 777.517746][T23385] ? __x64_sys_sendmsg+0x80/0x80 [ 777.522763][T23385] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 777.528838][T23385] ? lockdep_hardirqs_on+0x94/0x140 [ 777.534108][T23385] do_syscall_64+0x4c/0xa0 [ 777.538678][T23385] ? clear_bhb_loop+0x30/0x80 [ 777.543409][T23385] ? clear_bhb_loop+0x30/0x80 [ 777.548135][T23385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 777.554079][T23385] RIP: 0033:0x7ffbcc8d5019 [ 777.558545][T23385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.578201][T23385] RSP: 002b:00007ffbcab2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.586689][T23385] RAX: ffffffffffffffda RBX: 00007ffbccb5cfa0 RCX: 00007ffbcc8d5019 [ 777.594736][T23385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 777.602779][T23385] RBP: 00007ffbcc96c00c R08: 0000000000000000 R09: 0000000000000000 [ 777.610815][T23385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.618865][T23385] R13: 00007ffbccb5d038 R14: 00007ffbccb5cfa0 R15: 00007fff49579d58 [ 777.626940][T23385] [ 777.932966][ T154] wlan1: Trigger new scan to find an IBSS to join [ 778.264339][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 780.254516][T23397] netlink: 'syz.1.6469': attribute type 10 has an invalid length. [ 780.331818][T23397] team0: Device wg1 is of different type [ 780.354381][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 780.475501][T23305] device hsr_slave_0 entered promiscuous mode [ 780.482454][T23305] device hsr_slave_1 entered promiscuous mode [ 780.489886][T23305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.497963][T23305] Cannot create hsr debugfs directory [ 780.692721][T23409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6474'. [ 780.847037][T23305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.888345][T23413] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6476'. [ 780.958054][T23305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.988486][T23415] netlink: 'syz.1.6477': attribute type 3 has an invalid length. [ 780.998994][T23415] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6477'. [ 781.085990][T23305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.228311][T23305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.379499][T23424] FAULT_INJECTION: forcing a failure. [ 781.379499][T23424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.393840][T23424] CPU: 1 PID: 23424 Comm: syz.1.6479 Not tainted syzkaller #0 [ 781.401532][T23424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.411621][T23424] Call Trace: [ 781.414934][T23424] [ 781.417931][T23424] dump_stack_lvl+0x188/0x250 [ 781.422649][T23424] ? show_regs_print_info+0x20/0x20 [ 781.427892][T23424] ? load_image+0x410/0x410 [ 781.432433][T23424] ? __lock_acquire+0x7b50/0x7b50 [ 781.437651][T23424] should_fail+0x383/0x4b0 [ 781.442099][T23424] _copy_from_user+0x2e/0x170 [ 781.446895][T23424] __copy_msghdr_from_user+0xc9/0x630 [ 781.452302][T23424] ? verify_lock_unused+0x140/0x140 [ 781.457534][T23424] ? mark_lock+0x94/0x320 [ 781.461894][T23424] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 781.467205][T23424] ? __lock_acquire+0x13dc/0x7b50 [ 781.472279][T23424] ___sys_sendmsg+0x19a/0x2e0 [ 781.476993][T23424] ? __sys_sendmsg+0x290/0x290 [ 781.481824][T23424] __se_sys_sendmsg+0x1b7/0x2a0 [ 781.486710][T23424] ? __x64_sys_sendmsg+0x80/0x80 [ 781.491673][T23424] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 781.497700][T23424] ? lockdep_hardirqs_on+0x94/0x140 [ 781.503044][T23424] do_syscall_64+0x4c/0xa0 [ 781.507488][T23424] ? clear_bhb_loop+0x30/0x80 [ 781.512212][T23424] ? clear_bhb_loop+0x30/0x80 [ 781.516920][T23424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 781.522839][T23424] RIP: 0033:0x7f6a12f4a019 [ 781.527287][T23424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.547042][T23424] RSP: 002b:00007f6a111a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.555604][T23424] RAX: ffffffffffffffda RBX: 00007f6a131d1fa0 RCX: 00007f6a12f4a019 [ 781.563612][T23424] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 781.571635][T23424] RBP: 00007f6a111a2090 R08: 0000000000000000 R09: 0000000000000000 [ 781.579638][T23424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.587637][T23424] R13: 00007f6a131d2038 R14: 00007f6a131d1fa0 R15: 00007fff7715f618 [ 781.595667][T23424] [ 781.669823][T23427] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6480'. [ 781.707147][T23427] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 781.722758][T23427] CPU: 0 PID: 23427 Comm: syz.4.6480 Not tainted syzkaller #0 [ 781.730297][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.740405][T23427] Call Trace: [ 781.743739][T23427] [ 781.746711][T23427] dump_stack_lvl+0x188/0x250 [ 781.751465][T23427] ? show_regs_print_info+0x20/0x20 [ 781.756727][T23427] ? load_image+0x410/0x410 [ 781.761316][T23427] sysfs_warn_dup+0x8a/0xa0 [ 781.765883][T23427] sysfs_do_create_link_sd+0xc0/0x110 [ 781.771324][T23427] device_add+0x83b/0x1050 [ 781.775814][T23427] wiphy_register+0x1e74/0x2c40 [ 781.780775][T23427] ? cfg80211_event_work+0x40/0x40 [ 781.785947][T23427] ? minstrel_ht_alloc+0x807/0x980 [ 781.791130][T23427] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 781.797257][T23427] ieee80211_register_hw+0x2a03/0x3a60 [ 781.802785][T23427] ? ieee80211_register_hw+0xae1/0x3a60 [ 781.808405][T23427] ? ieee80211_tasklet_handler+0x20/0x20 [ 781.814122][T23427] ? rcu_is_watching+0x11/0xa0 [ 781.818964][T23427] ? hrtimer_init+0x10c/0x220 [ 781.823696][T23427] mac80211_hwsim_new_radio+0x209d/0x4050 [ 781.829503][T23427] hwsim_new_radio_nl+0xa7d/0xc50 [ 781.834620][T23427] genl_rcv_msg+0xd0b/0xfa0 [ 781.839206][T23427] ? genl_bind+0x370/0x370 [ 781.843686][T23427] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 781.849467][T23427] ? verify_lock_unused+0x140/0x140 [ 781.854730][T23427] ? perf_trace_lock_acquire+0x341/0x3f0 [ 781.860431][T23427] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 781.867133][T23427] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 781.873548][T23427] netlink_rcv_skb+0x1e9/0x430 [ 781.878364][T23427] ? genl_bind+0x370/0x370 [ 781.882832][T23427] ? netlink_ack+0xb10/0xb10 [ 781.887491][T23427] ? down_read+0x1aa/0x2e0 [ 781.891972][T23427] genl_rcv+0x24/0x40 [ 781.896013][T23427] netlink_unicast+0x78f/0x940 [ 781.900865][T23427] netlink_sendmsg+0x8ba/0xbe0 [ 781.905697][T23427] ? netlink_getsockopt+0x570/0x570 [ 781.910944][T23427] ? aa_sock_msg_perm+0x94/0x150 [ 781.916021][T23427] ? apparmor_socket_sendmsg+0x88/0x230 [ 781.921619][T23427] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 781.926944][T23427] ? security_socket_sendmsg+0x7c/0xa0 [ 781.932452][T23427] ? netlink_getsockopt+0x570/0x570 [ 781.937712][T23427] ____sys_sendmsg+0x5be/0x8f0 [ 781.942540][T23427] ? __sys_sendmsg_sock+0x30/0x30 [ 781.947631][T23427] ? import_iovec+0x6f/0xa0 [ 781.952187][T23427] ___sys_sendmsg+0x236/0x2e0 [ 781.956939][T23427] ? __sys_sendmsg+0x290/0x290 [ 781.961852][T23427] __se_sys_sendmsg+0x1b7/0x2a0 [ 781.966749][T23427] ? __x64_sys_sendmsg+0x80/0x80 [ 781.971724][T23427] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 781.977781][T23427] ? lockdep_hardirqs_on+0x94/0x140 [ 781.982074][T23428] netlink: 'syz.4.6480': attribute type 29 has an invalid length. [ 781.983033][T23427] do_syscall_64+0x4c/0xa0 [ 781.995284][T23427] ? clear_bhb_loop+0x30/0x80 [ 782.000005][T23427] ? clear_bhb_loop+0x30/0x80 [ 782.004727][T23427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 782.010660][T23427] RIP: 0033:0x7ffbcc8d5019 [ 782.015118][T23427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.034801][T23427] RSP: 002b:00007ffbcab2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.043271][T23427] RAX: ffffffffffffffda RBX: 00007ffbccb5cfa0 RCX: 00007ffbcc8d5019 [ 782.051289][T23427] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 782.059404][T23427] RBP: 00007ffbcc96c00c R08: 0000000000000000 R09: 0000000000000000 [ 782.067422][T23427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.075435][T23427] R13: 00007ffbccb5d038 R14: 00007ffbccb5cfa0 R15: 00007fff49579d58 [ 782.083487][T23427] [ 782.099333][T23428] netlink: 'syz.4.6480': attribute type 29 has an invalid length. [ 782.151442][T23305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 782.176612][T23305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 782.214753][T23305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 782.267540][T23305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 782.382730][T23441] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6486'. [ 782.436027][ T4227] Bluetooth: hci5: command 0x0419 tx timeout [ 782.538211][T23305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.576778][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 782.614897][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 782.636324][T23305] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.683379][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 782.717829][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 782.739935][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.747140][ T4517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.774126][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 782.798414][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 782.817335][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.824529][ T4517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.864181][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.882819][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 782.904336][ T4452] wlan1: Trigger new scan to find an IBSS to join [ 782.918318][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 782.947245][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 782.955744][ T4209] wlan1: Creating new IBSS network, BSSID 66:cb:88:13:95:70 [ 782.978545][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 782.995409][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 783.018541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 783.035646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 783.063573][T23305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 783.110869][T23305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.136075][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 783.149936][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.169301][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 783.189824][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.210018][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 783.230631][T23456] FAULT_INJECTION: forcing a failure. [ 783.230631][T23456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.274414][T23456] CPU: 1 PID: 23456 Comm: syz.6.6491 Not tainted syzkaller #0 [ 783.281943][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.292035][T23456] Call Trace: [ 783.295353][T23456] [ 783.298314][T23456] dump_stack_lvl+0x188/0x250 [ 783.303044][T23456] ? show_regs_print_info+0x20/0x20 [ 783.308309][T23456] ? load_image+0x410/0x410 [ 783.312864][T23456] ? __lock_acquire+0x7b50/0x7b50 [ 783.317938][T23456] ? __mutex_trylock_common+0x15c/0x260 [ 783.323534][T23456] should_fail+0x383/0x4b0 [ 783.327997][T23456] _copy_from_user+0x2e/0x170 [ 783.332716][T23456] br_ioctl_stub+0x3cc/0xbe0 [ 783.337375][T23456] ? rcu_read_unlock+0x90/0x90 [ 783.342185][T23456] ? sock_ioctl+0x434/0x700 [ 783.346754][T23456] ? rcu_read_unlock+0x90/0x90 [ 783.351560][T23456] sock_ioctl+0x453/0x700 [ 783.355933][T23456] ? sock_poll+0x420/0x420 [ 783.360391][T23456] ? bpf_lsm_file_ioctl+0x5/0x10 [ 783.365371][T23456] ? security_file_ioctl+0x7c/0xa0 [ 783.370520][T23456] ? sock_poll+0x420/0x420 [ 783.374982][T23456] __se_sys_ioctl+0xfa/0x170 [ 783.379609][T23456] do_syscall_64+0x4c/0xa0 [ 783.384058][T23456] ? clear_bhb_loop+0x30/0x80 [ 783.388772][T23456] ? clear_bhb_loop+0x30/0x80 [ 783.393486][T23456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 783.399406][T23456] RIP: 0033:0x7fe7c76ff019 [ 783.403851][T23456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.423478][T23456] RSP: 002b:00007fe7c5957028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.431920][T23456] RAX: ffffffffffffffda RBX: 00007fe7c7986fa0 RCX: 00007fe7c76ff019 [ 783.439912][T23456] RDX: 0000000000000000 RSI: 00000000000089a0 RDI: 0000000000000004 [ 783.447903][T23456] RBP: 00007fe7c5957090 R08: 0000000000000000 R09: 0000000000000000 [ 783.455894][T23456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.463995][T23456] R13: 00007fe7c7987038 R14: 00007fe7c7986fa0 R15: 00007fffe70a7fb8 [ 783.472012][T23456] [ 783.701545][T23465] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6494'. [ 783.803268][T23465] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 783.876548][T23471] netlink: 'syz.6.6494': attribute type 29 has an invalid length. [ 784.002307][T23465] CPU: 1 PID: 23465 Comm: syz.6.6494 Not tainted syzkaller #0 [ 784.009852][T23465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.019957][T23465] Call Trace: [ 784.023286][T23465] [ 784.026264][T23465] dump_stack_lvl+0x188/0x250 [ 784.031012][T23465] ? show_regs_print_info+0x20/0x20 [ 784.036268][T23465] ? load_image+0x410/0x410 [ 784.040868][T23465] sysfs_warn_dup+0x8a/0xa0 [ 784.045449][T23465] sysfs_do_create_link_sd+0xc0/0x110 [ 784.050886][T23465] device_add+0x83b/0x1050 [ 784.055368][T23465] wiphy_register+0x1e74/0x2c40 [ 784.060323][T23465] ? cfg80211_event_work+0x40/0x40 [ 784.065498][T23465] ? minstrel_ht_alloc+0x807/0x980 [ 784.070683][T23465] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 784.076824][T23465] ieee80211_register_hw+0x2a03/0x3a60 [ 784.082383][T23465] ? ieee80211_register_hw+0xae1/0x3a60 [ 784.088023][T23465] ? ieee80211_tasklet_handler+0x20/0x20 [ 784.093730][T23465] ? rcu_is_watching+0x11/0xa0 [ 784.098566][T23465] ? hrtimer_init+0x10c/0x220 [ 784.103315][T23465] mac80211_hwsim_new_radio+0x209d/0x4050 [ 784.109137][T23465] hwsim_new_radio_nl+0xa7d/0xc50 [ 784.114255][T23465] genl_rcv_msg+0xd0b/0xfa0 [ 784.118853][T23465] ? genl_bind+0x370/0x370 [ 784.123334][T23465] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 784.129116][T23465] ? verify_lock_unused+0x140/0x140 [ 784.134368][T23465] ? perf_trace_lock_acquire+0x341/0x3f0 [ 784.140080][T23465] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 784.146733][T23465] ? dev_queue_xmit+0x20/0x20 [ 784.151486][T23465] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 784.157911][T23465] netlink_rcv_skb+0x1e9/0x430 [ 784.162738][T23465] ? genl_bind+0x370/0x370 [ 784.167218][T23465] ? netlink_ack+0xb10/0xb10 [ 784.171891][T23465] ? down_read+0x1aa/0x2e0 [ 784.176405][T23465] genl_rcv+0x24/0x40 [ 784.180434][T23465] netlink_unicast+0x78f/0x940 [ 784.185280][T23465] netlink_sendmsg+0x8ba/0xbe0 [ 784.190124][T23465] ? netlink_getsockopt+0x570/0x570 [ 784.195377][T23465] ? aa_sock_msg_perm+0x94/0x150 [ 784.200371][T23465] ? apparmor_socket_sendmsg+0x88/0x230 [ 784.205997][T23465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 784.211338][T23465] ? security_socket_sendmsg+0x7c/0xa0 [ 784.216847][T23465] ? netlink_getsockopt+0x570/0x570 [ 784.222108][T23465] ____sys_sendmsg+0x5be/0x8f0 [ 784.226952][T23465] ? __sys_sendmsg_sock+0x30/0x30 [ 784.232050][T23465] ? import_iovec+0x6f/0xa0 [ 784.236614][T23465] ___sys_sendmsg+0x236/0x2e0 [ 784.241367][T23465] ? __sys_sendmsg+0x290/0x290 [ 784.246278][T23465] __se_sys_sendmsg+0x1b7/0x2a0 [ 784.251223][T23465] ? __x64_sys_sendmsg+0x80/0x80 [ 784.256208][T23465] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 784.262279][T23465] ? lockdep_hardirqs_on+0x94/0x140 [ 784.267541][T23465] do_syscall_64+0x4c/0xa0 [ 784.272114][T23465] ? clear_bhb_loop+0x30/0x80 [ 784.276840][T23465] ? clear_bhb_loop+0x30/0x80 [ 784.281568][T23465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 784.287506][T23465] RIP: 0033:0x7fe7c76ff019 [ 784.291975][T23465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.311636][T23465] RSP: 002b:00007fe7c5957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.320112][T23465] RAX: ffffffffffffffda RBX: 00007fe7c7986fa0 RCX: 00007fe7c76ff019 [ 784.328136][T23465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 784.336163][T23465] RBP: 00007fe7c779600c R08: 0000000000000000 R09: 0000000000000000 [ 784.344189][T23465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.352209][T23465] R13: 00007fe7c7987038 R14: 00007fe7c7986fa0 R15: 00007fffe70a7fb8 [ 784.360273][T23465] [ 784.419708][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.436617][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.877969][T23471] netlink: 'syz.6.6494': attribute type 29 has an invalid length. [ 786.682525][T23305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.754067][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 786.788437][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 786.839540][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 786.879862][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 786.897913][T23481] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6497'. [ 786.914314][T23305] device veth0_vlan entered promiscuous mode [ 786.921272][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 786.935021][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 786.968059][T23305] device veth1_vlan entered promiscuous mode [ 787.000311][T23483] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6499'. [ 787.025360][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 787.037753][ T4517] bridge0: port 4(team0) entered disabled state [ 787.101729][T23305] device veth0_macvtap entered promiscuous mode [ 787.126092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 787.146779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 787.180629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 787.203824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 787.223536][T23305] device veth1_macvtap entered promiscuous mode [ 787.289465][T23305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.314597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 787.355752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 787.396260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 787.412666][T23500] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6506'. [ 787.432296][T23305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.466050][T23504] netlink: 'syz.6.6506': attribute type 29 has an invalid length. [ 787.474458][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 787.505262][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 787.522891][T23305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.551751][T23305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.606393][T23305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.650140][T23305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.672426][T23500] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 787.695726][T23500] CPU: 0 PID: 23500 Comm: syz.6.6506 Not tainted syzkaller #0 [ 787.703283][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 787.713525][T23500] Call Trace: [ 787.716852][T23500] [ 787.719833][T23500] dump_stack_lvl+0x188/0x250 [ 787.724628][T23500] ? show_regs_print_info+0x20/0x20 [ 787.729894][T23500] ? load_image+0x410/0x410 [ 787.734479][T23500] sysfs_warn_dup+0x8a/0xa0 [ 787.739037][T23500] sysfs_do_create_link_sd+0xc0/0x110 [ 787.744441][T23500] device_add+0x83b/0x1050 [ 787.748929][T23500] wiphy_register+0x1e74/0x2c40 [ 787.753877][T23500] ? cfg80211_event_work+0x40/0x40 [ 787.759057][T23500] ? minstrel_ht_alloc+0x807/0x980 [ 787.764222][T23500] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 787.770342][T23500] ieee80211_register_hw+0x2a03/0x3a60 [ 787.775836][T23500] ? ieee80211_register_hw+0xae1/0x3a60 [ 787.781448][T23500] ? ieee80211_tasklet_handler+0x20/0x20 [ 787.787148][T23500] ? rcu_is_watching+0x11/0xa0 [ 787.791961][T23500] ? hrtimer_init+0x10c/0x220 [ 787.796686][T23500] mac80211_hwsim_new_radio+0x209d/0x4050 [ 787.802500][T23500] hwsim_new_radio_nl+0xa7d/0xc50 [ 787.807613][T23500] genl_rcv_msg+0xd0b/0xfa0 [ 787.812199][T23500] ? genl_bind+0x370/0x370 [ 787.816695][T23500] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 787.822455][T23500] ? verify_lock_unused+0x140/0x140 [ 787.827699][T23500] ? perf_trace_lock_acquire+0x341/0x3f0 [ 787.833387][T23500] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 787.840035][T23500] ? dev_queue_xmit+0x20/0x20 [ 787.844767][T23500] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 787.851192][T23500] netlink_rcv_skb+0x1e9/0x430 [ 787.856021][T23500] ? genl_bind+0x370/0x370 [ 787.860492][T23500] ? netlink_ack+0xb10/0xb10 [ 787.865159][T23500] ? down_read+0x1aa/0x2e0 [ 787.869641][T23500] genl_rcv+0x24/0x40 [ 787.873706][T23500] netlink_unicast+0x78f/0x940 [ 787.878551][T23500] netlink_sendmsg+0x8ba/0xbe0 [ 787.883391][T23500] ? netlink_getsockopt+0x570/0x570 [ 787.888644][T23500] ? aa_sock_msg_perm+0x94/0x150 [ 787.893663][T23500] ? apparmor_socket_sendmsg+0x88/0x230 [ 787.899262][T23500] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 787.904621][T23500] ? security_socket_sendmsg+0x7c/0xa0 [ 787.910146][T23500] ? netlink_getsockopt+0x570/0x570 [ 787.915405][T23500] ____sys_sendmsg+0x5be/0x8f0 [ 787.920249][T23500] ? __sys_sendmsg_sock+0x30/0x30 [ 787.925355][T23500] ? import_iovec+0x6f/0xa0 [ 787.929935][T23500] ___sys_sendmsg+0x236/0x2e0 [ 787.934691][T23500] ? __sys_sendmsg+0x290/0x290 [ 787.939601][T23500] __se_sys_sendmsg+0x1b7/0x2a0 [ 787.944553][T23500] ? __x64_sys_sendmsg+0x80/0x80 [ 787.949542][T23500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 787.955607][T23500] ? lockdep_hardirqs_on+0x94/0x140 [ 787.960868][T23500] do_syscall_64+0x4c/0xa0 [ 787.965350][T23500] ? clear_bhb_loop+0x30/0x80 [ 787.970076][T23500] ? clear_bhb_loop+0x30/0x80 [ 787.974809][T23500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 787.980768][T23500] RIP: 0033:0x7fe7c76ff019 [ 787.985236][T23500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.004898][T23500] RSP: 002b:00007fe7c5957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.013381][T23500] RAX: ffffffffffffffda RBX: 00007fe7c7986fa0 RCX: 00007fe7c76ff019 [ 788.021412][T23500] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 788.029436][T23500] RBP: 00007fe7c779600c R08: 0000000000000000 R09: 0000000000000000 [ 788.037465][T23500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.045487][T23500] R13: 00007fe7c7987038 R14: 00007fe7c7986fa0 R15: 00007fffe70a7fb8 [ 788.053548][T23500] [ 788.106766][T23504] netlink: 'syz.6.6506': attribute type 29 has an invalid length. [ 788.332811][T23518] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6510'. [ 788.387724][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.409944][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.418605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 788.461865][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.473554][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.518584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 789.216113][T23544] netlink: 'syz.1.6516': attribute type 21 has an invalid length. [ 789.871692][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.116901][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.168462][T23541] chnl_net:caif_netlink_parms(): no params data found [ 790.207698][T23563] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6521'. [ 790.267283][T23565] netlink: 'syz.3.6521': attribute type 29 has an invalid length. [ 790.319407][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.359179][T23563] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 790.379229][T23565] netlink: 'syz.3.6521': attribute type 29 has an invalid length. [ 790.429040][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.585704][T23541] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.639457][T23541] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.675542][T23541] device bridge_slave_0 entered promiscuous mode [ 790.989351][T23541] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.007097][T23541] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.035327][T23541] device bridge_slave_1 entered promiscuous mode [ 791.157119][T23573] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6523'. [ 791.217393][T23541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.228025][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 791.261301][T23541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.375625][T23541] team0: Port device team_slave_0 added [ 791.462524][T23541] team0: Port device team_slave_1 added [ 791.547192][T23541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.586834][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.717922][T23541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.759692][T23541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.799700][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.910543][T23541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.382280][T23541] device hsr_slave_0 entered promiscuous mode [ 792.427241][T23541] device hsr_slave_1 entered promiscuous mode [ 792.439619][T23541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.466558][T23541] Cannot create hsr debugfs directory [ 792.661083][T23611] netlink: 'syz.4.6530': attribute type 21 has an invalid length. [ 793.305329][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 795.384131][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 795.680168][T23634] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6532'. [ 795.710813][T23634] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 795.720003][T23634] CPU: 1 PID: 23634 Comm: syz.3.6532 Not tainted syzkaller #0 [ 795.727540][T23634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.737675][T23634] Call Trace: [ 795.741010][T23634] [ 795.743979][T23634] dump_stack_lvl+0x188/0x250 [ 795.748716][T23634] ? show_regs_print_info+0x20/0x20 [ 795.754088][T23634] ? load_image+0x410/0x410 [ 795.758725][T23634] sysfs_warn_dup+0x8a/0xa0 [ 795.763284][T23634] sysfs_do_create_link_sd+0xc0/0x110 [ 795.768727][T23634] device_add+0x83b/0x1050 [ 795.773208][T23634] wiphy_register+0x1e74/0x2c40 [ 795.778167][T23634] ? cfg80211_event_work+0x40/0x40 [ 795.783329][T23634] ? minstrel_ht_alloc+0x807/0x980 [ 795.788510][T23634] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 795.794653][T23634] ieee80211_register_hw+0x2a03/0x3a60 [ 795.800200][T23634] ? ieee80211_register_hw+0xae1/0x3a60 [ 795.805816][T23634] ? ieee80211_tasklet_handler+0x20/0x20 [ 795.811517][T23634] ? rcu_is_watching+0x11/0xa0 [ 795.816346][T23634] ? hrtimer_init+0x10c/0x220 [ 795.821084][T23634] mac80211_hwsim_new_radio+0x209d/0x4050 [ 795.826899][T23634] hwsim_new_radio_nl+0xa7d/0xc50 [ 795.832010][T23634] genl_rcv_msg+0xd0b/0xfa0 [ 795.836587][T23634] ? genl_bind+0x370/0x370 [ 795.841058][T23634] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 795.846839][T23634] ? verify_lock_unused+0x140/0x140 [ 795.852093][T23634] ? perf_trace_lock_acquire+0x341/0x3f0 [ 795.857820][T23634] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 795.864474][T23634] ? dev_queue_xmit+0x20/0x20 [ 795.869205][T23634] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 795.875641][T23634] netlink_rcv_skb+0x1e9/0x430 [ 795.880466][T23634] ? genl_bind+0x370/0x370 [ 795.884936][T23634] ? netlink_ack+0xb10/0xb10 [ 795.889601][T23634] ? down_read+0x1aa/0x2e0 [ 795.894068][T23634] genl_rcv+0x24/0x40 [ 795.898089][T23634] netlink_unicast+0x78f/0x940 [ 795.902927][T23634] netlink_sendmsg+0x8ba/0xbe0 [ 795.907760][T23634] ? netlink_getsockopt+0x570/0x570 [ 795.913033][T23634] ? aa_sock_msg_perm+0x94/0x150 [ 795.918017][T23634] ? apparmor_socket_sendmsg+0x88/0x230 [ 795.923613][T23634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 795.928957][T23634] ? security_socket_sendmsg+0x7c/0xa0 [ 795.934496][T23634] ? netlink_getsockopt+0x570/0x570 [ 795.939758][T23634] ____sys_sendmsg+0x5be/0x8f0 [ 795.944590][T23634] ? __sys_sendmsg_sock+0x30/0x30 [ 795.949694][T23634] ? import_iovec+0x6f/0xa0 [ 795.954266][T23634] ___sys_sendmsg+0x236/0x2e0 [ 795.959016][T23634] ? __sys_sendmsg+0x290/0x290 [ 795.963927][T23634] __se_sys_sendmsg+0x1b7/0x2a0 [ 795.968831][T23634] ? __x64_sys_sendmsg+0x80/0x80 [ 795.973810][T23634] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 795.979870][T23634] ? lockdep_hardirqs_on+0x94/0x140 [ 795.985125][T23634] do_syscall_64+0x4c/0xa0 [ 795.989617][T23634] ? clear_bhb_loop+0x30/0x80 [ 795.994345][T23634] ? clear_bhb_loop+0x30/0x80 [ 795.999073][T23634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.005011][T23634] RIP: 0033:0x7fd6c751b019 [ 796.009467][T23634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.029110][T23634] RSP: 002b:00007fd6c5773028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.037727][T23634] RAX: ffffffffffffffda RBX: 00007fd6c77a2fa0 RCX: 00007fd6c751b019 [ 796.045769][T23634] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 796.053793][T23634] RBP: 00007fd6c75b200c R08: 0000000000000000 R09: 0000000000000000 [ 796.061818][T23634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.069844][T23634] R13: 00007fd6c77a3038 R14: 00007fd6c77a2fa0 R15: 00007ffdae0330f8 [ 796.077940][T23634] [ 796.119889][T23641] netlink: 'syz.3.6532': attribute type 29 has an invalid length. [ 796.176119][T23641] netlink: 'syz.3.6532': attribute type 29 has an invalid length. [ 796.355194][T23643] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6535'. [ 797.052375][ C0] [ 797.052385][ C0] ================================ [ 797.052391][ C0] WARNING: inconsistent lock state [ 797.052471][ C0] syzkaller #0 Not tainted [ 797.052482][ C0] -------------------------------- [ 797.052487][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 797.052497][ C0] syz.3.6543/23669 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 797.052518][ C0] ffff88805035aa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 797.052578][ C0] {INITIAL USE} state was registered at: [ 797.052586][ C0] lock_acquire+0x19e/0x400 [ 797.052609][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 797.052628][ C0] trie_update_elem+0xb9/0xc10 [ 797.052647][ C0] bpf_map_update_value+0x57c/0x650 [ 797.052665][ C0] map_update_elem+0x603/0x760 [ 797.052683][ C0] __sys_bpf+0x46b/0x6f0 [ 797.052700][ C0] __x64_sys_bpf+0x78/0x90 [ 797.052717][ C0] do_syscall_64+0x4c/0xa0 [ 797.052734][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.052752][ C0] irq event stamp: 1416 [ 797.052759][ C0] hardirqs last enabled at (1415): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 797.052786][ C0] hardirqs last disabled at (1416): [] exc_debug+0x6e/0x130 [ 797.052807][ C0] softirqs last enabled at (1198): [] netlink_insert+0xe90/0x11f0 [ 797.052834][ C0] softirqs last disabled at (1196): [] release_sock+0x2b/0x1b0 [ 797.052859][ C0] [ 797.052859][ C0] other info that might help us debug this: [ 797.052865][ C0] Possible unsafe locking scenario: [ 797.052865][ C0] [ 797.052869][ C0] CPU0 [ 797.052872][ C0] ---- [ 797.052875][ C0] lock(&trie->lock); [ 797.052887][ C0] [ 797.052890][ C0] lock(&trie->lock); [ 797.052900][ C0] [ 797.052900][ C0] *** DEADLOCK *** [ 797.052900][ C0] [ 797.052904][ C0] no locks held by syz.3.6543/23669. [ 797.052912][ C0] [ 797.052912][ C0] stack backtrace: [ 797.052917][ C0] CPU: 0 PID: 23669 Comm: syz.3.6543 Not tainted syzkaller #0 [ 797.052935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.052944][ C0] Call Trace: [ 797.052951][ C0] <#DB> [ 797.052958][ C0] dump_stack_lvl+0x188/0x250 [ 797.052981][ C0] ? show_regs_print_info+0x20/0x20 [ 797.053004][ C0] ? print_usage_bug+0x42a/0x690 [ 797.053019][ C0] ? verify_lock_unused+0x15/0x140 [ 797.053040][ C0] lock_acquire+0x2c3/0x400 [ 797.053062][ C0] ? trie_delete_elem+0x8e/0x620 [ 797.053083][ C0] ? read_lock_is_recursive+0x10/0x10 [ 797.053104][ C0] ? look_up_lock_class+0x71/0x110 [ 797.053125][ C0] ? verify_lock_unused+0x15/0x140 [ 797.053150][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 797.053168][ C0] ? trie_delete_elem+0x8e/0x620 [ 797.053189][ C0] ? _raw_spin_lock+0x40/0x40 [ 797.053208][ C0] ? read_lock_is_recursive+0x10/0x10 [ 797.053232][ C0] trie_delete_elem+0x8e/0x620 [ 797.053258][ C0] bpf_prog_7b2af035fac74422+0x3d/0x6a4 [ 797.053278][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 797.053302][ C0] ? perf_get_page_size+0x430/0x430 [ 797.053322][ C0] ? perf_event_switch_output+0x730/0x730 [ 797.053348][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 797.053370][ C0] __perf_event_overflow+0x35f/0x550 [ 797.053393][ C0] perf_bp_event+0x276/0x320 [ 797.053415][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 797.053434][ C0] ? perf_trace_lock+0xe4/0x390 [ 797.053468][ C0] ? rcu_lock_acquire+0x9/0x30 [ 797.053489][ C0] ? read_lock_is_recursive+0x10/0x10 [ 797.053515][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 797.053539][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 797.053562][ C0] notify_die+0x141/0x1a0 [ 797.053591][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 797.053615][ C0] ? exc_debug+0x6e/0x130 [ 797.053633][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 797.053658][ C0] notify_debug+0x20/0x30 [ 797.053679][ C0] exc_debug+0xcf/0x130 [ 797.053698][ C0] asm_exc_debug+0x1a/0x40 [ 797.053716][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 797.053737][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 797.053752][ C0] RSP: 0018:ffffc900030df918 EFLAGS: 00050206 [ 797.053768][ C0] RAX: ffffffff83e66701 RBX: 000000000000fe33 RCX: 000000000000fb33 [ 797.053781][ C0] RDX: 000000000000fe33 RSI: 0000200000000340 RDI: ffffc90003451300 [ 797.053795][ C0] RBP: ffffc900030dfa70 R08: ffffc90003460e32 R09: 1ffff9200068c1c6 [ 797.053808][ C0] R10: dffffc0000000000 R11: fffff5200068c1c7 R12: ffffc90003451000 [ 797.053822][ C0] R13: 000000000000feff R14: 0000200000000040 R15: 0000000000000000 [ 797.053838][ C0] ? _copy_from_iter+0x2d1/0x1160 [ 797.053861][ C0] [ 797.053867][ C0] [ 797.053872][ C0] _copy_from_iter+0x322/0x1160 [ 797.053897][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 797.053916][ C0] ? __build_skb+0x26/0x2e0 [ 797.053932][ C0] ? rcu_is_watching+0x11/0xa0 [ 797.053950][ C0] ? __build_skb+0x26/0x2e0 [ 797.053967][ C0] ? kmem_cache_alloc+0x189/0x280 [ 797.053985][ C0] ? __virt_addr_valid+0xbd/0x470 [ 797.054004][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 797.054021][ C0] ? __check_object_size+0x30c/0x410 [ 797.054043][ C0] netlink_sendmsg+0x758/0xbe0 [ 797.054068][ C0] ? netlink_getsockopt+0x570/0x570 [ 797.054089][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 797.054109][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 797.054128][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 797.054149][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 797.054173][ C0] sock_write_iter+0x2a6/0x3a0 [ 797.054195][ C0] ? sock_read_iter+0x380/0x380 [ 797.054221][ C0] ? sock_write_iter+0x6/0x3a0 [ 797.054243][ C0] vfs_write+0x748/0xd70 [ 797.054265][ C0] ? file_end_write+0x250/0x250 [ 797.054287][ C0] ? __fget_files+0x402/0x470 [ 797.054309][ C0] ? __fdget_pos+0x1e2/0x370 [ 797.054327][ C0] ? ksys_write+0x70/0x260 [ 797.054345][ C0] ksys_write+0x153/0x260 [ 797.054364][ C0] ? __ia32_sys_read+0x80/0x80 [ 797.054385][ C0] ? syscall_enter_from_user_mode+0x2a/0x70 [ 797.054408][ C0] do_syscall_64+0x4c/0xa0 [ 797.054424][ C0] ? clear_bhb_loop+0x30/0x80 [ 797.054443][ C0] ? clear_bhb_loop+0x30/0x80 [ 797.054462][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.054482][ C0] RIP: 0033:0x7fd6c751b019 [ 797.054499][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.054516][ C0] RSP: 002b:00007fd6c5773028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.054535][ C0] RAX: ffffffffffffffda RBX: 00007fd6c77a2fa0 RCX: 00007fd6c751b019 [ 797.054555][ C0] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000009 [ 797.054575][ C0] RBP: 00007fd6c75b200c R08: 0000000000000000 R09: 0000000000000000 [ 797.054587][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.054598][ C0] R13: 00007fd6c77a3038 R14: 00007fd6c77a2fa0 R15: 00007ffdae0330f8 [ 797.054619][ C0] [ 797.464507][T18729] Bluetooth: hci3: command 0x0419 tx timeout [ 797.759034][T23669] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.6543'. [ 797.780627][T23541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 797.874309][T23541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 797.996874][T23541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 798.035882][T23541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 798.160324][T23541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.194853][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.206914][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.232380][T23541] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.255411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.266617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.275248][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.282368][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.292502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 798.332019][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 798.355972][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 798.374150][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.381248][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.404406][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 798.422971][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 798.432682][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 798.443075][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 798.462910][T23541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 798.475412][T23541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 798.489686][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 798.498213][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 798.508648][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 798.519261][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 798.530356][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 798.541167][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 798.549959][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 798.565943][ T154] device hsr_slave_0 left promiscuous mode [ 798.572281][ T154] device hsr_slave_1 left promiscuous mode [ 798.579157][ T154] bridge0: port 4(team0) entered disabled state [ 798.591966][ T154] bridge0: port 3(hsr0) entered disabled state [ 798.599528][ T154] device bridge_slave_1 left promiscuous mode [ 798.606307][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.614889][ T154] device bridge_slave_0 left promiscuous mode [ 798.621194][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.633799][ T154] device veth0_macvtap left promiscuous mode [ 798.641042][ T154] device veth1_vlan left promiscuous mode [ 798.647373][ T154] device veth0_vlan left promiscuous mode [ 798.721698][ T154] device geneve1 left promiscuous mode [ 798.732674][ T154] team0 (unregistering): Port device geneve1 removed [ 798.820403][ T154] device team_slave_1 left promiscuous mode [ 798.830590][ T154] team0 (unregistering): Port device team_slave_1 removed [ 798.845315][ T154] device team_slave_0 left promiscuous mode [ 798.852084][ T154] team0 (unregistering): Port device team_slave_0 removed [ 798.982449][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.079421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.088396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.100498][T23541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.243074][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 799.253762][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 799.272594][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 799.281526][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 799.290691][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 799.298784][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 799.309735][T23541] device veth0_vlan entered promiscuous mode [ 799.322865][T23541] device veth1_vlan entered promiscuous mode [ 799.345870][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 799.356413][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 799.365365][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 799.375512][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 799.388040][T23541] device veth0_macvtap entered promiscuous mode [ 799.399261][T23541] device veth1_macvtap entered promiscuous mode [ 799.414588][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.426060][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.437568][T23541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.447973][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 799.466599][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 799.484710][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 799.504398][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 799.516157][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.526903][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.538557][T23541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.551405][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 799.564908][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 799.586191][T23541] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.595659][T23541] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.605452][T23541] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.614935][T23541] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.652774][T23541] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 799.682354][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.695833][T23541] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 799.703713][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.719048][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 799.740934][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.751033][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.759529][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready