last executing test programs: 7m57.879226663s ago: executing program 2 (id=5831): sendmsg(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7m57.642610351s ago: executing program 2 (id=5842): sendmsg(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7m57.262011723s ago: executing program 2 (id=5835): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7fffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000001e00)=[{&(0x7f00000000c0)="8c", 0x1}, {0x0}, {0x0}], 0x3}, 0x81) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x40047440, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000800)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240f6f7995e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57000000000000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f9886862c9e2841033c91633d5f77d6a6e3b5", 0x8f}, {&(0x7f0000000240)="df3b060000000000000080a88800aa", 0xf}, {&(0x7f0000002300)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0538d90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a22b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9dc8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323d79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7", 0xe2a}], 0x5}, 0x40080) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, 0x0, 0x0) getpid() sendmsg$unix(r5, 0x0, 0x4000411) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000008c9073c6b845a19fa37a731279cbcff2000000000000000000003d67f1ecb7a9b53d"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc8", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m52.549940398s ago: executing program 2 (id=5843): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb9041c1d0800fe007c05e8fe55a10a001500020014261e600e12080005007f370401a8001600200006000000027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000380)='c\x03\x1do\xd0V.\x80\xfb\xea\xe3\xda'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYRES32=r6], 0x5) openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2d6370752000000000008720a58931ec8b328cebbe4f1094bb70696473202d63701de7d98123da3890b7"], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48004) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffc7b, 0x0, 0x3, 0x0, 0xf7, 0x0, 0x5d31, 0x6e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) 7m51.8713656s ago: executing program 2 (id=5845): sendmsg(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000050000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7m51.654994458s ago: executing program 2 (id=5847): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x15) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x4, @mcast2, 0x7, 0x2000003}, 0x80, 0x0}, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="25b4ff73c1e8"}) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$kcm(0xf, 0x3, 0x2) (async) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xb9, 0x45, 0x0, 0xfd, 0x0, 0x10009c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x5, 0x8, 0x2, 0x80, 0x48, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) 7m36.580251824s ago: executing program 32 (id=5847): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x15) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x4, @mcast2, 0x7, 0x2000003}, 0x80, 0x0}, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="25b4ff73c1e8"}) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$kcm(0xf, 0x3, 0x2) (async) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xb9, 0x45, 0x0, 0xfd, 0x0, 0x10009c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x5, 0x8, 0x2, 0x80, 0x48, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) 8.868081898s ago: executing program 1 (id=8066): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x112036, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) close(r3) 8.463497491s ago: executing program 1 (id=8071): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_clone(0x4000000, &(0x7f00000002c0)="e7b45f8b56017a67a46a16c5fa7c4162043b5126a5532aa9fbc221b13fc5f3634f3f21cc6c7ee6c8ec85db967951708c0971003a547095598d72a873fd4f2e3b50f6a0c1cbb6715f6a3e6175c476bf7316843e0f67cee4155bf4ae622ad1b10cc934c108e4f3b1cecd877d54c4546a3cbf5b5acba8718e38861c944162759ea6869d91149c0e3a2ea3c622455674902189d3156074dbfbaae3232c642d9d62a46fcd4522a55abc9c17050daa152d70296b30a242a0156b46b82be03473395e00e07996b5cba88c732be38192e805ea24bab5d1a22c319741b9cb17f0300522b05361aec6737cbc492af0b9ae55", 0xed, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000003c0)="ce8f2e1743e22138b3913c4211a8fa778a9e19f4ce0d21003084d34ef0f6a8b4a3a3c73bf30ac4ed0764ace439b359bca6c7fd090f6b239e820461b56fe8845a5b6f66") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000580)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x14002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab070004000523"], 0xfe33) 8.274569448s ago: executing program 4 (id=8072): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="b408000000000000711138000000000085100000020000006a000000000000009500c2c2000000009500001200000000c0c415c60ab698c253d78155622d5ccb23f001665d814d38222f4c05e191fa23cbfe"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 7.938819199s ago: executing program 4 (id=8074): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x1}, 0x20, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x5, 0x5}, 0x104101, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x8080) 7.439178235s ago: executing program 4 (id=8078): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d6cbd91e4a8da09c2e320957fcada6a4e", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117e", 0x9}, {&(0x7f000001f4c0)='U\fm2u', 0x5}], 0x6}, 0x0) (fail_nth: 10) 6.944354341s ago: executing program 5 (id=8079): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) 6.330726711s ago: executing program 1 (id=8081): sendmsg(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 6.253645724s ago: executing program 3 (id=8083): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb9041c1d0800fe007c05e8fe55a10a001500020014261e600e12080005007f370401a8001600200006000000027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd7}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000380)='c\x03\x1do\xd0V.\x80\xfb\xea\xe3\xda'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) write$cgroup_subtree(r6, &(0x7f0000000540)=ANY=[@ANYRES32=r7], 0x5) openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2d6370752000000000008720a58931ec8b328cebbe4f1094bb70696473202d63701de7d98123da3890b7"], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48004) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffc7b, 0x0, 0x3, 0x0, 0xf7, 0x0, 0x5d31, 0x6e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) 6.141975188s ago: executing program 4 (id=8084): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0xff, 0x0, 0xfffffffffffffff7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="10971719961d6c83938c20f5b2bafa2045b1867fb94449b21812f6d8a3e5436728753609cd0dc677ad", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0x26, 0x0, 0x0, 0x1}, 0x28) 6.0590763s ago: executing program 5 (id=8085): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f0000000840)}, 0x10) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) socketpair(0x2, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xf1, 0x7, 0x0, 0x0, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 5.389155033s ago: executing program 0 (id=8086): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x30, 0x5f, 0x5f]}}, &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 5.082181033s ago: executing program 4 (id=8087): socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000001200", @ANYRESDEC], 0xffdd) 4.998762396s ago: executing program 3 (id=8088): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x7, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000030000000600000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) close(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1d0000000000000000000000080000e8", @ANYBLOB], 0x60}, 0x200040c4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb904021d0800fd007c05e8fe55a108001e000140020304000e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a7cee4090000001fb791643a5ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af2f28fcb1dc7a2cfe8ee732717c6ef", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000030000000600000007"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6d, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e04000000000000000000000000000002000000000200ffff0f0000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) 4.980700366s ago: executing program 1 (id=8089): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socket$kcm(0xa, 0x1, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x1, 0x7fe2, 0xfffffffe, 0x12}, 0x50) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) close(r1) (async, rerun: 64) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 64) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, 0x0) sendmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x408c080}, 0x24048090) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)="9ebe39988ceaa832b58ee6a6eb64caeaf07ff20e166ce1fd66a63657e859dd311c60d3b26a166bf074e372f83d5e2598e9c6eba40cdba5cd9c9365afd87fc35ab5cd7b83e64ccffc2b7121309aa9c1c2443a053fb1c5ba4320fc4e68e5b7543e9a81748675937e062c684854cb05933620b30107d8edcc71150bbc04a3f72bd9af6a504a2e17e4a4f026926655703fa289647e1d90df02b33452a00bf64016898ae4ad9996ffba83874d7fcaf38ba171d6fd8e8cf091c32e8024a885de45fed3299fbed073102f04f165ecfccfae5f07f92ac43f395235e812a78346792a723f4472f36ca1290925bbf428da6a606ffb649faaba", 0xf4}, {&(0x7f00000014c0)="79ba307841d7bc03448717e381d3992a763adc7f60379787a11d3f7270e190596cf46d757b0c096898210b007e14e675903d5257a11a3e08a4526cf79c3329a3f11300b6bf02b9bd673654f3fba9269376ecff6dbda16fe54451bdacf61731d9d605ff2bcdd1cf0a483d55d5b299b14c1fb0e089aa30ea4d45e32890a3f0f7bc51bc3b41c4b6d970f3d3083f5cd579808bb669356d58d70facf35b9142cb69a9cba1233d241a81a41c00696b483721b4bed81ca3dc2fa528b90d22e4426e907ca2297923e28861ca52f190f9b69e57865ef6a102bcee6adeaf442a3dc7819795aa43102b3af6484c6a6134131d9d56dbb0bd", 0xf2}, {&(0x7f0000000400)="4d24606b6f732863024b211293c358464d4a5337d82045f39d7fe3e3a04d97ceb2165e8ca806357461d64c5ec9dbe703dc4f461285cad9096f9c14e0ba74376906ae7a3f95b098f110d814f5b4e6d836e618113243103d6bac632e9457fffc856e62c0114cfb932d4dde0ea51d6f46e6e714af2ab7442a4e1f215794ca2eda962d41ca6fe8e710bfbd76d1d89b3b63967b797b50537ddc6978f6a3d409dd3eaeac0b", 0xa2}, {&(0x7f00000015c0)="98d7fe7ede3ca23b515d8bd7cc0667ad0d7986e94dc48638c9e12c0a3dd16c0fff0b14a2712a2f3341c8fdb17307cddb73b3b354bb7775c1d3caa1956a6d79bda36f86996bd456067a51a7150c779455232abd81cd45aad1fa49af786d125ded508e03b4fb5b45e9838f425623c08a1154bc21f6dd89f62a9aa6ec740cd635580ffb42c42efa02fe0f6c0581f03a5730c6c60ac5d1131dd83e17ec2f4a621340eb14f14a9fe559f8c9425593526bec6020c517a00e5f1c48573cf7b06d87e12d0897d7aa9fdce8c5cf41d44172a74829307d66c6785549829dd07d7d6fb5cd6a29b40cde788e4b0140a9e79f96d9ec", 0xef}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000011c0)="5f5daa241d08327d0a88d0dcd51862e90477dfa3dc10474da4c9ad8f57da588f155f56dbdeb4c50aea75d5224d27fb8a9efb2bbed4da2a94d336f44dfd4764c0a1a4fe5caf4beb5f2db083f33c7453deaa42295a692211dc7fbf1fe3ddd7e06ddd1fb8707f503152d2", 0x69}, {&(0x7f00000026c0)="eb71751f3b7525e91cff7670d14e2c593322ac019107045b9dbedfbba9286abd15d16d234486aa68b829988e28ed7a9c13458ece476872d5c03ba14247889d5f902e4907d4fba899a3df44333d31f223276cd4ac84e231e2e628767214abbfcbc418c5e0397a674c05901565be0ab45e1386", 0x72}], 0x7, &(0x7f0000002800)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14}}], 0x90}, 0x40014) (async) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) (rerun: 32) 4.818033771s ago: executing program 5 (id=8090): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004c00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20565, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x4}, 0x100904, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)='4', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x5e0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.487457192s ago: executing program 0 (id=8091): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071107b000000000066710000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x7000000}, 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 4.342215587s ago: executing program 3 (id=8092): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffe}, 0x48) 4.169809783s ago: executing program 0 (id=8093): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000)="9837195112a7061ebed503b5", &(0x7f0000000040)=""/59, &(0x7f0000000080)="df1636d4652575dc62bd1676e04824ed7d731937c64f66a4beb398950876a92d1c054fcb669296ed20a8397c51fba9c9616ebcc500cd08845893af958cc4fb984425cc5419cd211d08bd020d317400bc51b86eb584171542a0a9f0c29ca9a754814f516704c331b5c4a50550680fd675e4587c1fc02b45cdd8442f8e49f12e4091327164219c83902a", &(0x7f0000000140)="dd0246ffe1891c46b51a1a1d7a3b5d1695bb42e860199a68f5c255652bfa3cf32003d9db663c6a4c", 0x3, r0}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0xd, 0x1, 0x22b, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r0, r0, 0x53bf72a5232f7701, 0x2040, 0x0, @value=r0, @void, @void, @void, r2}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r1, r0, 0x0, r0}, 0x10) r4 = socket$kcm(0x29, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x99, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000dc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e21, 0x4, @remote, 0x1}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000840)="e149db9d4903b77f8caf13ac91f5c624fd4796b9242920ccb851e6868bd8e0b2b84b6d59640c2a86655ef421715557c09081ab568eab205de397e2709b6e5006d3d41abbce90ec8ca3af46d825251aa3d0b426b4def29dcac536c6e42a00e28b3bc53566d3bb466fd9cb8f2f049c85d566aac4e6d24e709d13be2a995cb3fa5077cde1daa690041e012ac8a298e4fd057ba9d0ac7fa2b6a986af1e9a6949dad3ab525d8e9c200f1339c1f6e0e325f533a26ac582beb05d73694fc789d856f6c51c8f7e56d603a68d5ed467057542", 0xce}, {&(0x7f0000000940)}, {0x0}, {&(0x7f0000000980)="69d3bdf3ee1bec1e334fe4eeb694753aedd74641413868f3c7e394984c99e2c38844e18aa23f5d6e940a68f99c411d889fa8fed11b36dce595912675f9712a0efe50c4b27b68c65e16e42cbb4aa4ea9829dc1d70bf9b0ba3ee2252613c30f50eb37f08b4af5b2634860c843587fcbf9e8295413c140230c7b31edf1803a805c0be2d1ed521abfac1a9aace3ad84e91e0399cab4e520d99441bff0677234cfb8efe2ed0f266f725c6f2eb0161e6b706d5274c03502877d4b38b96d1e1ca116556703e0164c9ca2fda0118a13f6e68516826310dcb93b807580ed8d0d98bdf76803885f95a7228424baf07f748537f", 0xee}, {&(0x7f0000000a80)="13f1dce03cef09e8ec899c85f18ac5ac6fe60a8836dac51d972cada4ccc9170d31649ebed697b8a2316a277c202d25e2afb118668767c87aceb221db4ed2df6c499862fd25dcf460ac3fb8d5934f73ce22fd5c3f3e4d3367d09b2a50a16b74ecdb070a39742539e148834a4f3b6dd461f8041e1264fc4978d3d6553c890f0cd338d27dac8c5a437cd76e4a0114f29e3be6f4b3182c8f3e959567bbb54dacbc404bdc3182b3a1c1e6a7f265f3fc78b2acf1ed92d5dee57af7d44b73d088582615638dc514d74c7c87826dacb8756326330be4e5c0c4e524ba5f6b", 0xda}, {&(0x7f0000000b80)="a252e313ee483deeef4a7ed2cdc8f34c5bef32ec67d4b0bdb9e9e3499e063f5f9abcf01150888a76c5c72115b1bb2e25cdcfcdeed11c763cf0ea5960b96a772c818ee3ad99afac201ad8ca9940fc5a236e80c193e083382720728c4e84c8b618413c391c71a8f94aad5dfb1d3977a499fe3052d59860ecd57bd2b97d3bbd0eab96f6002cf66561b580225fecc18c526790d547a9cef5252693", 0x99}, {&(0x7f0000000c40)="373adec4765baca83946567a58c42c0c6b23ee1f4c9850b5c375bc0afaef4de5d00b8b1f9d914639b70feaf41125d0bc0a602ce05cab0d04fd579a4812b8a512623c09de95a18eca61ad2de082d39c493587a3c6970ba61d183d213b0cd3880cb8f4a97713e6bc7548f8e7f08b994399786e94a25a607f01e90ff438b099f44d0ca617852d958bde3bbae14a02d4e9e9c1c2523bed99ebc004b680af3cb7b22277987334fbf51bd03ffa944af07c802b41847cdc82f2cde5126379dbfb1cf16cd9ae65ab8b95", 0xc6}], 0x7}, 0x40000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000e00)={'veth1_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e40)={@map=r0, r0, 0x33, 0x1, 0xffffffffffffffff, @void, @value=r1, @void, @void, r2}, 0x20) (async) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000e80)='{\x14\x00') (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000ec0)={0x80}, 0x8) (async) write$cgroup_devices(r1, &(0x7f0000000f00)={'c', ' *:* ', 'rw\x00'}, 0x9) (async, rerun: 32) bpf$ENABLE_STATS(0x20, &(0x7f0000000f40), 0x4) (async, rerun: 32) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) write$cgroup_pressure(r0, &(0x7f0000000f80)={'some', 0x20, 0x1, 0x20, 0x7ba}, 0x2f) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000fc0)={r0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r0, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x42, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) (async, rerun: 32) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_lsm={0x1d, 0x11, &(0x7f0000001540)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0xb, 0x2, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000001600)='GPL\x00', 0x6, 0x78, &(0x7f0000001640)=""/120, 0x40f00, 0x45, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000016c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x2, &(0x7f0000001700)=[r0, r0, r1, r0, r1, r1, r1, r1, r1], &(0x7f0000001740)=[{0x3, 0x3, 0x10, 0x7}, {0x3, 0x4, 0x3, 0xb}], 0x10, 0xf}, 0x94) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x8, 0x6, 0x80, 0x1, 0x11000, r1, 0x2, '\x00', r5, r1, 0x1, 0x5, 0x5, 0x0, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1b, 0x10, &(0x7f0000001000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x7, 0x7, 0x2, 0x6, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000001080)='GPL\x00', 0x1, 0xc4, &(0x7f00000010c0)=""/196, 0x0, 0x4, '\x00', r8, @fallback=0x2d, r0, 0x8, &(0x7f00000014c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x2, 0xc, 0x0, 0x6baf}, 0x10, r6, r9, 0x4, &(0x7f00000018c0)=[r10, r1, r1, r0, r0, r1], &(0x7f0000001900)=[{0x5, 0x4, 0x3, 0x6}, {0x2, 0x1, 0x1, 0x3}, {0x3, 0x1, 0x4, 0x9}, {0x0, 0x3, 0x10, 0xc}], 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a00)={@map=r0, r0, 0x30, 0x34, 0x0, @void, @void, @void, @value=r7, r2}, 0x20) (async) r11 = perf_event_open$cgroup(&(0x7f0000001a40)={0x1, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x8, 0x22, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x1000, 0xff}, 0x10000, 0x3ff, 0x0, 0x6, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x10c}, r0, 0x3, r1, 0x4) (async) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff}) (rerun: 64) recvmsg$unix(r13, &(0x7f00000031c0)={&(0x7f0000001b80), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/115, 0x73}, {&(0x7f0000002c80)=""/233, 0xe9}, {&(0x7f0000002d80)=""/52, 0x34}, {&(0x7f0000002dc0)=""/238, 0xee}, {&(0x7f0000002ec0)=""/229, 0xe5}, {&(0x7f0000002fc0)=""/226, 0xe2}], 0x7, &(0x7f0000003140)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40002000) 3.727272018s ago: executing program 0 (id=8094): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xa, 0x3, 0x6}]}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x61, 0x0, 0x61, 0x25a049f4d060172d]}}, 0x0, 0x3a}, 0x28) sendmsg$inet(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r3, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='R', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x12, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0xd001}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0) recvmsg(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) close(0x3) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) 3.559099513s ago: executing program 3 (id=8095): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000fffff0000000000000b030000000000006361"], 0x0, 0x52}, 0x28) 3.489355935s ago: executing program 5 (id=8096): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x112036, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) close(r3) 3.178098556s ago: executing program 3 (id=8097): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x8, 0x7, &(0x7f0000002380)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000580)=@caif, 0x80, 0x0, 0x0, &(0x7f0000001cc0)=[{0x10, 0x103, 0x7}, {0x10, 0x0, 0x4}], 0x20}, 0x12) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000100000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40804) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, 0x0, 0x0, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.963603243s ago: executing program 5 (id=8098): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb9041c1d0800fe007c05e8fe55a10a001500020014261e600e12080005007f370401a8001600200006000000027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd7}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000380)='c\x03\x1do\xd0V.\x80\xfb\xea\xe3\xda'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) write$cgroup_subtree(r6, &(0x7f0000000540)=ANY=[@ANYRES32=r7], 0x5) openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2d6370752000000000008720a58931ec8b328cebbe4f1094bb70696473202d63701de7d98123da3890b7"], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48004) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffc7b, 0x0, 0x3, 0x0, 0xf7, 0x0, 0x5d31, 0x6e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) 311.55529ms ago: executing program 1 (id=8099): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_type(r5, &(0x7f0000000200), 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff000000000004000085100000020000008500000023"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) (async) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000280)={'lo\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 261.293632ms ago: executing program 0 (id=8100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000f85000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 209.759063ms ago: executing program 3 (id=8101): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x30, 0x5f, 0x5f]}}, &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 209.141433ms ago: executing program 5 (id=8102): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 146.195965ms ago: executing program 4 (id=8103): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 111.508926ms ago: executing program 1 (id=8104): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3fffe, 0x2890ec548fa81f18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x90000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x4239, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32, @ANYBLOB], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000006c40)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 0s ago: executing program 0 (id=8105): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8937, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 1196.988977][T25302] dump_stack_lvl+0x188/0x24e [ 1196.993829][T25302] ? show_regs_print_info+0x12/0x12 [ 1196.999171][T25302] ? load_image+0x400/0x400 [ 1197.003852][T25302] ? __might_sleep+0xd0/0xd0 [ 1197.008570][T25302] ? __lock_acquire+0x7d10/0x7d10 [ 1197.013776][T25302] should_fail_ex+0x399/0x4d0 [ 1197.018630][T25302] should_failslab+0x5/0x20 [ 1197.023248][T25302] slab_pre_alloc_hook+0x59/0x310 [ 1197.028466][T25302] kmem_cache_alloc_node+0x5a/0x320 [ 1197.033791][T25302] ? lock_chain_count+0x20/0x20 [ 1197.038769][T25302] ? dup_task_struct+0x57/0x6b0 [ 1197.043817][T25302] dup_task_struct+0x57/0x6b0 [ 1197.048594][T25302] ? lockdep_hardirqs_on+0x94/0x140 [ 1197.053905][T25302] copy_process+0x5fa/0x4030 [ 1197.058583][T24861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.058677][T25302] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1197.070731][T24861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.074833][T25302] ? perf_trace_lock+0x301/0x390 [ 1197.074950][T25302] ? idle_dummy+0x10/0x10 [ 1197.085353][T24861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.089806][T25302] kernel_clone+0x24b/0x900 [ 1197.094302][T24861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.104554][T25302] ? ksys_write+0x1c0/0x250 [ 1197.104631][T25302] ? create_io_thread+0x170/0x170 [ 1197.104812][T25302] __x64_sys_clone+0x1a7/0x220 [ 1197.104842][T25302] ? __fget_files+0x43d/0x4b0 [ 1197.118768][T24861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.119194][T25302] ? __ia32_sys_vfork+0x140/0x140 [ 1197.130879][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1197.133657][T25302] ? lock_chain_count+0x20/0x20 [ 1197.133754][T25302] ? lockdep_hardirqs_on+0x94/0x140 [ 1197.142191][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1197.145738][T25302] do_syscall_64+0x4c/0xa0 [ 1197.145783][T25302] ? clear_bhb_loop+0x60/0xb0 [ 1197.145817][T25302] ? clear_bhb_loop+0x60/0xb0 [ 1197.145868][T25302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.153138][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1197.158379][T25302] RIP: 0033:0x7f0dfc99c819 [ 1197.158423][T25302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.158451][T25302] RSP: 002b:00007f0dfd909fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1197.187805][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1197.190050][T25302] RAX: ffffffffffffffda RBX: 00007f0dfcc15fa0 RCX: 00007f0dfc99c819 [ 1197.190081][T25302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000081000000 [ 1197.190103][T25302] RBP: 00007f0dfd90a090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.190127][T25302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1197.190150][T25302] R13: 00007f0dfcc16038 R14: 00007f0dfcc15fa0 R15: 00007ffddffb0ff8 [ 1197.219520][T24861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.228674][T25302] [ 1197.328868][T24861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.339553][T24861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.351001][T24861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.370091][T24861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.401750][T24861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.447661][T24861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.502652][T24861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.568033][T24861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.613649][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1197.639311][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1197.682128][T25312] netlink: 'syz.5.6482': attribute type 10 has an invalid length. [ 1197.721420][T25312] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6482'. [ 1197.768483][T25312] device ipvlan1 entered promiscuous mode [ 1197.879674][T25312] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1197.929768][T25312] bridge0: port 3(ipvlan1) entered blocking state [ 1197.963464][T25312] bridge0: port 3(ipvlan1) entered disabled state [ 1197.987131][T25312] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1198.022927][T25312] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1198.092855][T24861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.146248][T24861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.194963][T24861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.233103][T24861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.103746][ T5068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.111741][ T5068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.227928][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1199.284383][ T5059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.292296][ T5059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.322269][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1199.520137][T25332] netlink: 'syz.0.6487': attribute type 11 has an invalid length. [ 1199.584244][T25332] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6487'. [ 1199.692899][T25330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.916716][T25357] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6496'. [ 1201.926102][T25394] netlink: 'syz.1.6503': attribute type 11 has an invalid length. [ 1202.040490][T25394] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1202.083310][T25393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.501399][T25412] FAULT_INJECTION: forcing a failure. [ 1202.501399][T25412] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.622817][T25412] CPU: 1 PID: 25412 Comm: syz.0.6507 Not tainted syzkaller #0 [ 1202.630384][T25412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1202.640584][T25412] Call Trace: [ 1202.644014][T25412] [ 1202.646993][T25412] dump_stack_lvl+0x188/0x24e [ 1202.651743][T25412] ? show_regs_print_info+0x12/0x12 [ 1202.657007][T25412] ? load_image+0x400/0x400 [ 1202.661575][T25412] ? __lock_acquire+0x7d10/0x7d10 [ 1202.666656][T25412] ? get_random_u64+0x16c/0x8d0 [ 1202.671568][T25412] ? get_random_u64+0x53a/0x8d0 [ 1202.676494][T25412] should_fail_ex+0x399/0x4d0 [ 1202.681326][T25412] should_failslab+0x5/0x20 [ 1202.685886][T25412] slab_pre_alloc_hook+0x59/0x310 [ 1202.691055][T25412] ? memset+0x1e/0x40 [ 1202.695110][T25412] kmem_cache_alloc+0x56/0x2f0 [ 1202.699921][T25412] ? prepare_creds+0x3c/0x610 [ 1202.704671][T25412] prepare_creds+0x3c/0x610 [ 1202.709292][T25412] copy_creds+0x146/0xd50 [ 1202.713715][T25412] copy_process+0x932/0x4030 [ 1202.718401][T25412] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1202.724203][T25412] ? perf_trace_lock+0x301/0x390 [ 1202.729232][T25412] ? idle_dummy+0x10/0x10 [ 1202.733668][T25412] kernel_clone+0x24b/0x900 [ 1202.738229][T25412] ? ksys_write+0x1c0/0x250 [ 1202.742806][T25412] ? create_io_thread+0x170/0x170 [ 1202.747948][T25412] __x64_sys_clone+0x1a7/0x220 [ 1202.752755][T25412] ? __fget_files+0x43d/0x4b0 [ 1202.757497][T25412] ? __ia32_sys_vfork+0x140/0x140 [ 1202.762627][T25412] ? lock_chain_count+0x20/0x20 [ 1202.767593][T25412] ? lockdep_hardirqs_on+0x94/0x140 [ 1202.772884][T25412] do_syscall_64+0x4c/0xa0 [ 1202.777364][T25412] ? clear_bhb_loop+0x60/0xb0 [ 1202.782094][T25412] ? clear_bhb_loop+0x60/0xb0 [ 1202.786831][T25412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1202.792775][T25412] RIP: 0033:0x7f9be9b9c819 [ 1202.797263][T25412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.817012][T25412] RSP: 002b:00007f9beab47fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1202.825482][T25412] RAX: ffffffffffffffda RBX: 00007f9be9e15fa0 RCX: 00007f9be9b9c819 [ 1202.833505][T25412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000081000000 [ 1202.841516][T25412] RBP: 00007f9beab48090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.849524][T25412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1202.857538][T25412] R13: 00007f9be9e16038 R14: 00007f9be9e15fa0 R15: 00007ffc803f5948 [ 1202.865610][T25412] [ 1203.076319][T25419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1204.257663][T25442] netlink: 'syz.5.6515': attribute type 11 has an invalid length. [ 1204.286842][T25437] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6514'. [ 1204.411267][T25442] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6515'. [ 1204.454423][T25439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.993070][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1205.864118][T25474] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6523'. [ 1206.171508][T25487] netlink: 'syz.1.6529': attribute type 11 has an invalid length. [ 1206.236032][T25487] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1206.265036][T25491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6527'. [ 1206.330385][T25484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.739740][T25495] netlink: 'syz.5.6530': attribute type 10 has an invalid length. [ 1207.256907][T25515] netlink: 'syz.0.6535': attribute type 21 has an invalid length. [ 1207.290125][T25515] IPv6: NLM_F_CREATE should be specified when creating new route [ 1207.425791][T25524] FAULT_INJECTION: forcing a failure. [ 1207.425791][T25524] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.508793][T25524] CPU: 0 PID: 25524 Comm: syz.4.6536 Not tainted syzkaller #0 [ 1207.516447][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1207.526549][T25524] Call Trace: [ 1207.529872][T25524] [ 1207.532848][T25524] dump_stack_lvl+0x188/0x24e [ 1207.537593][T25524] ? show_regs_print_info+0x12/0x12 [ 1207.542850][T25524] ? load_image+0x400/0x400 [ 1207.547419][T25524] ? __lock_acquire+0x7d10/0x7d10 [ 1207.552505][T25524] should_fail_ex+0x399/0x4d0 [ 1207.557232][T25524] should_failslab+0x5/0x20 [ 1207.561765][T25524] slab_pre_alloc_hook+0x59/0x310 [ 1207.566823][T25524] kmem_cache_alloc_node+0x5a/0x320 [ 1207.572066][T25524] ? alloc_vmap_area+0x18e/0x18c0 [ 1207.577126][T25524] alloc_vmap_area+0x18e/0x18c0 [ 1207.582024][T25524] ? vm_map_ram+0xab0/0xab0 [ 1207.586552][T25524] ? rcu_is_watching+0x11/0xa0 [ 1207.591414][T25524] __get_vm_area_node+0x158/0x330 [ 1207.596457][T25524] ? mod_objcg_state+0x50d/0x8a0 [ 1207.601418][T25524] __vmalloc_node_range+0x357/0x13b0 [ 1207.606844][T25524] ? copy_process+0x5fa/0x4030 [ 1207.611650][T25524] ? free_vm_area+0x50/0x50 [ 1207.616257][T25524] ? rcu_is_watching+0x11/0xa0 [ 1207.621049][T25524] dup_task_struct+0x3d3/0x6b0 [ 1207.625824][T25524] ? copy_process+0x5fa/0x4030 [ 1207.630604][T25524] copy_process+0x5fa/0x4030 [ 1207.635209][T25524] ? __lock_acquire+0x7d10/0x7d10 [ 1207.640286][T25524] ? idle_dummy+0x10/0x10 [ 1207.644732][T25524] kernel_clone+0x24b/0x900 [ 1207.649258][T25524] ? ksys_write+0x1c0/0x250 [ 1207.653793][T25524] ? create_io_thread+0x170/0x170 [ 1207.658850][T25524] __x64_sys_clone+0x1a7/0x220 [ 1207.663626][T25524] ? __fget_files+0x43d/0x4b0 [ 1207.668321][T25524] ? __ia32_sys_vfork+0x140/0x140 [ 1207.673376][T25524] ? lock_chain_count+0x20/0x20 [ 1207.678338][T25524] ? lockdep_hardirqs_on+0x94/0x140 [ 1207.683555][T25524] do_syscall_64+0x4c/0xa0 [ 1207.687988][T25524] ? clear_bhb_loop+0x60/0xb0 [ 1207.692694][T25524] ? clear_bhb_loop+0x60/0xb0 [ 1207.697386][T25524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1207.703290][T25524] RIP: 0033:0x7fc0d719c819 [ 1207.707717][T25524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.727356][T25524] RSP: 002b:00007fc0d53d4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1207.735785][T25524] RAX: ffffffffffffffda RBX: 00007fc0d7416180 RCX: 00007fc0d719c819 [ 1207.743765][T25524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000081000000 [ 1207.751742][T25524] RBP: 00007fc0d53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.759719][T25524] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1207.767714][T25524] R13: 00007fc0d7416218 R14: 00007fc0d7416180 R15: 00007ffe4d1cb9b8 [ 1207.775737][T25524] [ 1207.862807][T25524] syz.4.6536: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1208.063952][T25524] CPU: 0 PID: 25524 Comm: syz.4.6536 Not tainted syzkaller #0 [ 1208.071515][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.081613][T25524] Call Trace: [ 1208.084967][T25524] [ 1208.087936][T25524] dump_stack_lvl+0x188/0x24e [ 1208.092684][T25524] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1208.099148][T25524] ? show_regs_print_info+0x12/0x12 [ 1208.104409][T25524] ? load_image+0x400/0x400 [ 1208.108982][T25524] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1208.115443][T25524] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1208.121998][T25524] warn_alloc+0x242/0x330 [ 1208.126373][T25524] ? slab_free_freelist_hook+0x131/0x1a0 [ 1208.132059][T25524] ? zone_watermark_ok_safe+0x270/0x270 [ 1208.137641][T25524] ? __get_vm_area_node+0x16d/0x330 [ 1208.142881][T25524] ? __get_vm_area_node+0x16d/0x330 [ 1208.148116][T25524] ? mod_objcg_state+0x50d/0x8a0 [ 1208.153203][T25524] __vmalloc_node_range+0x37c/0x13b0 [ 1208.158559][T25524] ? free_vm_area+0x50/0x50 [ 1208.163095][T25524] ? rcu_is_watching+0x11/0xa0 [ 1208.167991][T25524] dup_task_struct+0x3d3/0x6b0 [ 1208.172773][T25524] ? copy_process+0x5fa/0x4030 [ 1208.177554][T25524] copy_process+0x5fa/0x4030 [ 1208.182156][T25524] ? __lock_acquire+0x7d10/0x7d10 [ 1208.187226][T25524] ? idle_dummy+0x10/0x10 [ 1208.191578][T25524] kernel_clone+0x24b/0x900 [ 1208.196096][T25524] ? ksys_write+0x1c0/0x250 [ 1208.200620][T25524] ? create_io_thread+0x170/0x170 [ 1208.205986][T25524] __x64_sys_clone+0x1a7/0x220 [ 1208.210785][T25524] ? __fget_files+0x43d/0x4b0 [ 1208.215517][T25524] ? __ia32_sys_vfork+0x140/0x140 [ 1208.220575][T25524] ? lock_chain_count+0x20/0x20 [ 1208.225468][T25524] ? lockdep_hardirqs_on+0x94/0x140 [ 1208.230689][T25524] do_syscall_64+0x4c/0xa0 [ 1208.235125][T25524] ? clear_bhb_loop+0x60/0xb0 [ 1208.239815][T25524] ? clear_bhb_loop+0x60/0xb0 [ 1208.244512][T25524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1208.250417][T25524] RIP: 0033:0x7fc0d719c819 [ 1208.254844][T25524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.274918][T25524] RSP: 002b:00007fc0d53d4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1208.283355][T25524] RAX: ffffffffffffffda RBX: 00007fc0d7416180 RCX: 00007fc0d719c819 [ 1208.291387][T25524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000081000000 [ 1208.299373][T25524] RBP: 00007fc0d53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.307353][T25524] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1208.315333][T25524] R13: 00007fc0d7416218 R14: 00007fc0d7416180 R15: 00007ffe4d1cb9b8 [ 1208.323334][T25524] [ 1208.371096][T25530] sctp: [Deprecated]: syz.5.6541 (pid 25530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1208.371096][T25530] Use struct sctp_sack_info instead [ 1208.414607][T25534] netlink: 'syz.3.6540': attribute type 1 has an invalid length. [ 1208.484133][T25524] Mem-Info: [ 1208.487320][T25524] active_anon:7470 inactive_anon:0 isolated_anon:0 [ 1208.487320][T25524] active_file:20893 inactive_file:40393 isolated_file:0 [ 1208.487320][T25524] unevictable:768 dirty:152 writeback:0 [ 1208.487320][T25524] slab_reclaimable:21161 slab_unreclaimable:97143 [ 1208.487320][T25524] mapped:29952 shmem:1373 pagetables:674 [ 1208.487320][T25524] sec_pagetables:0 bounce:0 [ 1208.487320][T25524] kernel_misc_reclaimable:0 [ 1208.487320][T25524] free:1316776 free_pcp:8926 free_cma:0 [ 1208.587867][T25537] netlink: 'syz.1.6542': attribute type 11 has an invalid length. [ 1208.843239][T25537] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1208.912943][T25524] Node 0 active_anon:30348kB inactive_anon:0kB active_file:83572kB inactive_file:161372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119880kB dirty:604kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10584kB pagetables:2864kB sec_pagetables:0kB all_unreclaimable? no [ 1208.948365][T25535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.969745][T25524] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1209.059352][T25524] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1209.096215][T25524] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1209.102250][T25524] Node 0 DMA32 free:1348168kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:30472kB inactive_anon:0kB active_file:83572kB inactive_file:161372kB unevictable:1536kB writepending:584kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:21016kB local_pcp:12920kB free_cma:0kB [ 1209.148085][T25524] lowmem_reserve[]: 0 0 1 1 1 [ 1209.153115][T25524] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1209.214098][T25524] lowmem_reserve[]: 0 0 0 0 0 [ 1209.218913][T25524] Node 1 Normal free:3903304kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14400kB local_pcp:3264kB free_cma:0kB [ 1209.262706][T25524] lowmem_reserve[]: 0 0 0 0 0 [ 1209.352569][T25524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1209.384095][T25553] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1209.402706][T25524] Node 0 DMA32: 196*4kB (UME) 1003*8kB (UME) 1034*16kB (UME) 1068*32kB (UME) 1539*64kB (UME) 744*128kB (UME) 177*256kB (UME) 78*512kB (UM) 46*1024kB (UME) 16*2048kB (UME) 227*4096kB (UM) = 1348168kB [ 1209.470766][T25524] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1209.505410][T25553] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1209.522814][T25524] Node 1 Normal: 282*4kB (UM) 62*8kB (UE) 31*16kB (UME) 130*32kB (UME) 61*64kB (UME) 21*128kB (UME) 13*256kB (UM) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3903304kB [ 1209.614238][T25524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.688810][T25524] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1209.711164][T25552] netlink: 'syz.1.6545': attribute type 29 has an invalid length. [ 1209.791186][T25524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.817906][T25563] netlink: 'syz.0.6548': attribute type 10 has an invalid length. [ 1209.831950][T25524] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1209.884228][T25524] 62659 total pagecache pages [ 1209.921511][T25524] 0 pages in swap cache [ 1209.926494][T25524] Free swap = 124996kB [ 1209.930691][T25524] Total swap = 124996kB [ 1209.944443][T25524] 2097051 pages RAM [ 1209.948520][T25524] 0 pages HighMem/MovableOnly [ 1209.966491][T25524] 415207 pages reserved [ 1209.970850][T25524] 0 pages cma reserved [ 1210.178240][T25575] netlink: 'syz.4.6550': attribute type 21 has an invalid length. [ 1210.238370][T25575] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6550'. [ 1210.452048][T25588] IPv6: Can't replace route, no match found [ 1210.582232][T25589] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1211.285886][T25598] netlink: 'syz.3.6555': attribute type 11 has an invalid length. [ 1211.492613][T25598] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1211.962291][T25595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.918513][ T5091] wlan1: Trigger new scan to find an IBSS to join [ 1213.534207][T25624] device syzkaller0 entered promiscuous mode [ 1215.835868][T25623] netlink: 'syz.0.6562': attribute type 10 has an invalid length. [ 1215.873224][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1216.244722][T25659] IPv6: Can't replace route, no match found [ 1216.303607][T25658] netlink: 'syz.4.6570': attribute type 11 has an invalid length. [ 1216.386479][T25658] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6570'. [ 1216.510332][T25666] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1216.530372][T25653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.570093][T25665] netlink: 'syz.0.6569': attribute type 3 has an invalid length. [ 1216.645160][T25665] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6569'. [ 1216.650594][T25656] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6568'. [ 1216.678001][T25656] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6568'. [ 1216.820408][T25661] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6568'. [ 1217.236092][T25679] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6571'. [ 1217.343918][T25678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6573'. [ 1217.878654][T25542] wlan1: Creating new IBSS network, BSSID aa:e4:f0:86:d9:d4 [ 1218.047995][T25708] netlink: 'syz.5.6581': attribute type 11 has an invalid length. [ 1218.279504][T25708] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6581'. [ 1218.362275][T25704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.630471][T25719] IPv6: Can't replace route, no match found [ 1218.653323][T25719] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1218.914749][ T5054] wlan1: Trigger new scan to find an IBSS to join [ 1219.407643][T25739] device syzkaller0 entered promiscuous mode [ 1220.525206][T25774] netlink: 'syz.1.6594': attribute type 11 has an invalid length. [ 1220.544321][T25774] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6594'. [ 1220.587608][T25773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1220.832787][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1222.848691][T25770] netlink: 'syz.4.6592': attribute type 10 has an invalid length. [ 1222.922571][ T5059] wlan1: Trigger new scan to find an IBSS to join [ 1223.527471][T25803] IPv6: Can't replace route, no match found [ 1223.944327][T25806] Ÿë: port 1(veth0_to_team) entered blocking state [ 1223.953022][T25806] Ÿë: port 1(veth0_to_team) entered disabled state [ 1223.979475][T25806] device veth0_to_team entered promiscuous mode [ 1224.020080][T25803] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1224.082287][T25819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6604'. [ 1224.388212][T25822] netlink: 'syz.0.6605': attribute type 11 has an invalid length. [ 1224.464556][T25822] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1224.574585][T25821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1225.472592][T22784] Bluetooth: hci1: command 0x0406 tx timeout [ 1227.012597][ T5054] wlan1: Trigger new scan to find an IBSS to join [ 1227.137537][ T5054] wlan1: Creating new IBSS network, BSSID da:af:d2:c2:90:64 [ 1227.972221][ T5054] wlan1: Trigger new scan to find an IBSS to join [ 1229.265116][T25880] IPv6: Can't replace route, no match found [ 1229.359001][T25883] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1229.961955][T25895] netlink: 'syz.5.6620': attribute type 11 has an invalid length. [ 1230.019178][T25895] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6620'. [ 1230.118337][T25894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.742503][T25915] netlink: 'syz.4.6625': attribute type 10 has an invalid length. [ 1230.834241][ T5059] wlan1: Trigger new scan to find an IBSS to join [ 1230.910346][T25910] netlink: 'syz.5.6624': attribute type 10 has an invalid length. [ 1231.872777][ T5086] wlan1: Trigger new scan to find an IBSS to join [ 1232.145541][T25937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6631'. [ 1232.277004][T25944] IPv6: Can't replace route, no match found [ 1232.303168][T25944] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1232.460354][T25949] netlink: 'syz.0.6634': attribute type 11 has an invalid length. [ 1232.525744][T25949] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1232.599342][T25947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1232.912711][ T5091] wlan1: Creating new IBSS network, BSSID 5a:2a:89:37:e4:13 [ 1233.281106][T25961] netlink: 'syz.4.6637': attribute type 2 has an invalid length. [ 1233.935840][T25961] device 0 entered promiscuous mode [ 1234.857580][ T5091] wlan1: Trigger new scan to find an IBSS to join [ 1235.203465][T26006] netlink: 'syz.4.6648': attribute type 11 has an invalid length. [ 1235.243466][T26006] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6648'. [ 1235.293086][T26005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.872991][ T5091] wlan1: Trigger new scan to find an IBSS to join [ 1236.067646][T26030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6655'. [ 1236.342519][T26042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1236.944057][T26046] netlink: 'syz.5.6658': attribute type 10 has an invalid length. [ 1237.004116][T26058] netlink: 'syz.3.6662': attribute type 11 has an invalid length. [ 1237.059739][T26058] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6662'. [ 1237.122559][T26057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1237.859193][T26074] netlink: 'syz.5.6675': attribute type 10 has an invalid length. [ 1238.755783][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.767819][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.813440][T26102] netlink: 'syz.3.6673': attribute type 1 has an invalid length. [ 1238.913852][ T5054] wlan1: Trigger new scan to find an IBSS to join [ 1238.942788][T26102] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1239.339559][T26111] netlink: 'syz.1.6677': attribute type 11 has an invalid length. [ 1239.377480][T26111] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1239.408235][T26110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.125806][T26127] netlink: 'syz.4.6684': attribute type 2 has an invalid length. [ 1240.242684][T26127] device .*! entered promiscuous mode [ 1240.375043][T26125] netlink: 'syz.5.6683': attribute type 10 has an invalid length. [ 1240.912869][ T4412] wlan1: Creating new IBSS network, BSSID 02:0d:c6:17:51:90 [ 1241.514366][T26147] netlink: 'syz.3.6692': attribute type 11 has an invalid length. [ 1241.548015][T26147] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6692'. [ 1241.589357][T26145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.886914][T26197] netlink: 'syz.0.6708': attribute type 11 has an invalid length. [ 1243.902592][T26197] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6708'. [ 1244.056495][T26195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.237576][T26218] netlink: 'syz.0.6715': attribute type 10 has an invalid length. [ 1245.813099][T26230] netlink: 'syz.5.6722': attribute type 11 has an invalid length. [ 1245.831205][T26230] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6722'. [ 1245.862001][T26229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.381690][T26269] netlink: 'syz.4.6734': attribute type 10 has an invalid length. [ 1247.544689][T26274] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1250.666626][T26331] netlink: 'syz.4.6755': attribute type 11 has an invalid length. [ 1250.743515][T26331] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6755'. [ 1250.800254][T26330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1251.165270][T26338] netlink: 'syz.1.6764': attribute type 10 has an invalid length. [ 1251.696864][T26334] netlink: 'syz.3.6756': attribute type 10 has an invalid length. [ 1252.621835][T26352] device wlan1 entered promiscuous mode [ 1252.934265][T26361] IPv6: Can't replace route, no match found [ 1252.940502][T26358] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1254.977220][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1255.839149][T26405] IPv6: pim6reg1: Disabled Multicast RS [ 1256.281805][T26415] netlink: 'syz.4.6780': attribute type 2 has an invalid length. [ 1256.317540][T26415] netlink: 193088 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1256.704000][T26424] IPv6: Can't replace route, no match found [ 1256.935243][T26428] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1257.882695][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1258.563353][T26441] netlink: 'syz.3.6784': attribute type 10 has an invalid length. [ 1258.571374][T26441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.770372][T26441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.068966][T26443] netlink: 'syz.5.6786': attribute type 10 has an invalid length. [ 1259.121666][T26449] netlink: 'syz.0.6787': attribute type 1 has an invalid length. [ 1259.580027][T26453] device syzkaller0 entered promiscuous mode [ 1259.658581][T26459] netlink: 'syz.3.6790': attribute type 27 has an invalid length. [ 1259.886575][T26459] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1260.187639][T26473] delete_channel: no stack [ 1260.202302][T26473] delete_channel: no stack [ 1260.633192][T26477] netlink: 'syz.4.6797': attribute type 3 has an invalid length. [ 1260.641012][T26477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6797'. [ 1261.823369][T26487] netlink: 'syz.3.6799': attribute type 11 has an invalid length. [ 1261.847983][T26487] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1261.872883][ T5091] wlan1: Trigger new scan to find an IBSS to join [ 1261.888505][T26487] FAULT_INJECTION: forcing a failure. [ 1261.888505][T26487] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.901906][T26487] CPU: 0 PID: 26487 Comm: syz.3.6799 Not tainted syzkaller #0 [ 1261.909435][T26487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1261.919630][T26487] Call Trace: [ 1261.922948][T26487] [ 1261.925926][T26487] dump_stack_lvl+0x188/0x24e [ 1261.930670][T26487] ? show_regs_print_info+0x12/0x12 [ 1261.935931][T26487] ? load_image+0x400/0x400 [ 1261.940495][T26487] ? __might_sleep+0xd0/0xd0 [ 1261.945130][T26487] ? __lock_acquire+0x7d10/0x7d10 [ 1261.950225][T26487] should_fail_ex+0x399/0x4d0 [ 1261.954976][T26487] should_failslab+0x5/0x20 [ 1261.959520][T26487] slab_pre_alloc_hook+0x59/0x310 [ 1261.964597][T26487] ? __get_vm_area_node+0x122/0x330 [ 1261.969848][T26487] __kmem_cache_alloc_node+0x4f/0x260 [ 1261.975279][T26487] ? __get_vm_area_node+0x122/0x330 [ 1261.980527][T26487] kmalloc_node_trace+0x22/0xe0 [ 1261.985453][T26487] __get_vm_area_node+0x122/0x330 [ 1261.990530][T26487] ? __local_bh_enable_ip+0x136/0x1c0 [ 1261.996044][T26487] __vmalloc_node_range+0x357/0x13b0 [ 1262.001477][T26487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1262.006483][T26487] ? netlink_insert+0x1034/0x13c0 [ 1262.011611][T26487] ? free_vm_area+0x50/0x50 [ 1262.016186][T26487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1262.021180][T26487] vmalloc+0x75/0x80 [ 1262.025127][T26487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1262.030119][T26487] netlink_sendmsg+0x5ec/0xbd0 [ 1262.035045][T26487] ? netlink_getsockopt+0x550/0x550 [ 1262.040303][T26487] ? aa_sock_msg_perm+0x94/0x150 [ 1262.045290][T26487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1262.050625][T26487] ? security_socket_sendmsg+0x7c/0xa0 [ 1262.056153][T26487] ? netlink_getsockopt+0x550/0x550 [ 1262.061404][T26487] ____sys_sendmsg+0x5be/0x970 [ 1262.066237][T26487] ? __sys_sendmsg_sock+0x30/0x30 [ 1262.071313][T26487] ? __import_iovec+0x315/0x500 [ 1262.076403][T26487] ? import_iovec+0x6f/0xa0 [ 1262.081054][T26487] ___sys_sendmsg+0x2a2/0x360 [ 1262.085802][T26487] ? __sys_sendmsg+0x290/0x290 [ 1262.090670][T26487] ? __lock_acquire+0x7d10/0x7d10 [ 1262.095896][T26487] __se_sys_sendmsg+0x1bb/0x2a0 [ 1262.100879][T26487] ? ct_nmi_exit+0x145/0x1c0 [ 1262.105519][T26487] ? __x64_sys_sendmsg+0x80/0x80 [ 1262.110544][T26487] ? lockdep_hardirqs_on+0x94/0x140 [ 1262.115804][T26487] do_syscall_64+0x4c/0xa0 [ 1262.120266][T26487] ? clear_bhb_loop+0x60/0xb0 [ 1262.124984][T26487] ? clear_bhb_loop+0x60/0xb0 [ 1262.129716][T26487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1262.135671][T26487] RIP: 0033:0x7f0dfc99c819 [ 1262.140145][T26487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.159812][T26487] RSP: 002b:00007f0dfd90a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.168290][T26487] RAX: ffffffffffffffda RBX: 00007f0dfcc15fa0 RCX: 00007f0dfc99c819 [ 1262.176463][T26487] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1262.184458][T26487] RBP: 00007f0dfd90a090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.192538][T26487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.200537][T26487] R13: 00007f0dfcc16038 R14: 00007f0dfcc15fa0 R15: 00007ffddffb0ff8 [ 1262.208564][T26487] [ 1262.214999][T26487] syz.3.6799: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1262.237490][ T5091] wlan1: Creating new IBSS network, BSSID 4e:72:e1:43:45:c4 [ 1262.238301][T26487] CPU: 0 PID: 26487 Comm: syz.3.6799 Not tainted syzkaller #0 [ 1262.252335][T26487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1262.262422][T26487] Call Trace: [ 1262.265724][T26487] [ 1262.268678][T26487] dump_stack_lvl+0x188/0x24e [ 1262.273386][T26487] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1262.279819][T26487] ? show_regs_print_info+0x12/0x12 [ 1262.285038][T26487] ? load_image+0x400/0x400 [ 1262.289607][T26487] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1262.296041][T26487] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1262.302572][T26487] warn_alloc+0x242/0x330 [ 1262.306924][T26487] ? __get_vm_area_node+0x122/0x330 [ 1262.312154][T26487] ? zone_watermark_ok_safe+0x270/0x270 [ 1262.317735][T26487] ? rcu_is_watching+0x11/0xa0 [ 1262.322540][T26487] ? __get_vm_area_node+0x318/0x330 [ 1262.327770][T26487] ? __local_bh_enable_ip+0x136/0x1c0 [ 1262.333179][T26487] __vmalloc_node_range+0x37c/0x13b0 [ 1262.338504][T26487] ? netlink_insert+0x1034/0x13c0 [ 1262.343601][T26487] ? free_vm_area+0x50/0x50 [ 1262.348141][T26487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1262.353204][T26487] vmalloc+0x75/0x80 [ 1262.357120][T26487] ? netlink_sendmsg+0x5ec/0xbd0 [ 1262.362090][T26487] netlink_sendmsg+0x5ec/0xbd0 [ 1262.366893][T26487] ? netlink_getsockopt+0x550/0x550 [ 1262.372211][T26487] ? aa_sock_msg_perm+0x94/0x150 [ 1262.377169][T26487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1262.382474][T26487] ? security_socket_sendmsg+0x7c/0xa0 [ 1262.388060][T26487] ? netlink_getsockopt+0x550/0x550 [ 1262.393280][T26487] ____sys_sendmsg+0x5be/0x970 [ 1262.398080][T26487] ? __sys_sendmsg_sock+0x30/0x30 [ 1262.403124][T26487] ? __import_iovec+0x315/0x500 [ 1262.408005][T26487] ? import_iovec+0x6f/0xa0 [ 1262.412551][T26487] ___sys_sendmsg+0x2a2/0x360 [ 1262.417287][T26487] ? __sys_sendmsg+0x290/0x290 [ 1262.422120][T26487] ? __lock_acquire+0x7d10/0x7d10 [ 1262.427226][T26487] __se_sys_sendmsg+0x1bb/0x2a0 [ 1262.432199][T26487] ? ct_nmi_exit+0x145/0x1c0 [ 1262.436818][T26487] ? __x64_sys_sendmsg+0x80/0x80 [ 1262.441809][T26487] ? lockdep_hardirqs_on+0x94/0x140 [ 1262.447032][T26487] do_syscall_64+0x4c/0xa0 [ 1262.451466][T26487] ? clear_bhb_loop+0x60/0xb0 [ 1262.456174][T26487] ? clear_bhb_loop+0x60/0xb0 [ 1262.460874][T26487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1262.466790][T26487] RIP: 0033:0x7f0dfc99c819 [ 1262.471231][T26487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.490852][T26487] RSP: 002b:00007f0dfd90a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.499286][T26487] RAX: ffffffffffffffda RBX: 00007f0dfcc15fa0 RCX: 00007f0dfc99c819 [ 1262.507285][T26487] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1262.515270][T26487] RBP: 00007f0dfd90a090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.523256][T26487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.531241][T26487] R13: 00007f0dfcc16038 R14: 00007f0dfcc15fa0 R15: 00007ffddffb0ff8 [ 1262.539265][T26487] [ 1262.549546][T26487] Mem-Info: [ 1262.555474][T26487] active_anon:23979 inactive_anon:0 isolated_anon:0 [ 1262.555474][T26487] active_file:20893 inactive_file:40413 isolated_file:0 [ 1262.555474][T26487] unevictable:768 dirty:95 writeback:0 [ 1262.555474][T26487] slab_reclaimable:21151 slab_unreclaimable:99286 [ 1262.555474][T26487] mapped:30029 shmem:17806 pagetables:727 [ 1262.555474][T26487] sec_pagetables:0 bounce:0 [ 1262.555474][T26487] kernel_misc_reclaimable:0 [ 1262.555474][T26487] free:1302291 free_pcp:4878 free_cma:0 [ 1262.610142][T26487] Node 0 active_anon:95916kB inactive_anon:0kB active_file:83572kB inactive_file:161452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120116kB dirty:376kB writeback:0kB shmem:69688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10456kB pagetables:2908kB sec_pagetables:0kB all_unreclaimable? no [ 1262.664988][T26486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.685901][T26487] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1262.718744][T26487] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.747699][T26487] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1262.755853][T26487] Node 0 DMA32 free:1289456kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:92816kB inactive_anon:0kB active_file:83572kB inactive_file:161452kB unevictable:1536kB writepending:376kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:10244kB local_pcp:2936kB free_cma:0kB [ 1262.787144][T26487] lowmem_reserve[]: 0 0 1 1 1 [ 1262.792065][T26487] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1262.820899][T26487] lowmem_reserve[]: 0 0 0 0 0 [ 1262.826129][T26487] Node 1 Normal free:3904328kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:13376kB local_pcp:11136kB free_cma:0kB [ 1262.857081][T26487] lowmem_reserve[]: 0 0 0 0 0 [ 1262.861987][T26487] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1262.875385][T26487] Node 0 DMA32: 1812*4kB (UME) 1938*8kB (UME) 1103*16kB (UME) 527*32kB (UME) 1257*64kB (UME) 656*128kB (UME) 137*256kB (UE) 45*512kB (UM) 46*1024kB (UME) 16*2048kB (UME) 227*4096kB (UM) = 1289456kB [ 1262.896013][T26487] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1262.910330][T26487] Node 1 Normal: 282*4kB (UM) 62*8kB (UE) 31*16kB (UME) 142*32kB (UME) 65*64kB (UME) 24*128kB (UME) 13*256kB (UM) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3904328kB [ 1262.929480][T26487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.939575][T26487] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1262.949396][T26487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.959417][T26487] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1262.969253][T26487] 72957 total pagecache pages [ 1262.974312][T26487] 0 pages in swap cache [ 1262.978621][T26487] Free swap = 124996kB [ 1262.984255][T26487] Total swap = 124996kB [ 1262.992765][T26487] 2097051 pages RAM [ 1263.001292][T26487] 0 pages HighMem/MovableOnly [ 1263.011722][T26487] 415207 pages reserved [ 1263.020767][T26487] 0 pages cma reserved [ 1263.398996][T26494] netlink: 'syz.3.6801': attribute type 11 has an invalid length. [ 1263.423940][T26494] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6801'. [ 1263.473154][T26494] netlink: 'syz.3.6801': attribute type 11 has an invalid length. [ 1263.481115][T26494] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6801'. [ 1263.496702][T26493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1264.871314][T26499] netlink: 'syz.3.6803': attribute type 10 has an invalid length. [ 1265.237914][T26512] netlink: 'syz.1.6807': attribute type 2 has an invalid length. [ 1265.850766][T26512] device 0 entered promiscuous mode [ 1265.898558][T26516] netlink: 'syz.5.6808': attribute type 10 has an invalid length. [ 1265.922309][T26528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1267.628633][T26568] device syzkaller0 entered promiscuous mode [ 1272.219020][T26590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6832'. [ 1272.536010][T26629] netlink: 'syz.0.6841': attribute type 11 has an invalid length. [ 1272.572745][T26629] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6841'. [ 1272.599851][T26629] netlink: 'syz.0.6841': attribute type 21 has an invalid length. [ 1273.372276][T26628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.958705][T26661] IPv6: Can't replace route, no match found [ 1274.063368][T26661] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1275.002158][T26679] netlink: 'syz.3.6854': attribute type 11 has an invalid length. [ 1275.053391][T26679] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1275.184373][T26674] netlink: 'syz.3.6854': attribute type 11 has an invalid length. [ 1275.262533][T26674] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1275.353991][T26673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1276.268623][T26694] device syzkaller0 entered promiscuous mode [ 1276.869579][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1279.911424][T26720] IPv6: Can't replace route, no match found [ 1279.932925][T26723] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1280.174190][T26730] netlink: 'syz.3.6868': attribute type 11 has an invalid length. [ 1280.182226][T26730] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6868'. [ 1280.215310][T22784] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 1280.239928][T26729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.869534][T26758] netlink: 'syz.4.6876': attribute type 15 has an invalid length. [ 1280.899535][T26758] netlink: 'syz.4.6876': attribute type 5 has an invalid length. [ 1280.916286][T26758] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6876'. [ 1281.401405][T26773] IPv6: Can't replace route, no match found [ 1281.538249][T26774] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1283.066272][T26805] device syzkaller0 entered promiscuous mode [ 1283.174402][T26807] netlink: 'syz.3.6892': attribute type 10 has an invalid length. [ 1283.882132][ T5091] wlan1: Trigger new scan to find an IBSS to join [ 1283.884174][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1287.875388][ T5086] wlan1: Trigger new scan to find an IBSS to join [ 1287.882092][ T5086] wlan1: Trigger new scan to find an IBSS to join [ 1287.961885][ T5068] wlan1: Creating new IBSS network, BSSID ca:8f:69:1a:36:0c [ 1288.502673][T26842] IPv6: Can't replace route, no match found [ 1288.509151][T26844] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1288.680634][T26856] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1288.716815][T26856] netlink: 'syz.0.6906': attribute type 1 has an invalid length. [ 1288.752537][T26856] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1289.215421][T26874] netlink: 'syz.5.6908': attribute type 10 has an invalid length. [ 1289.733296][T26889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6915'. [ 1289.872984][T25542] wlan1: Creating new IBSS network, BSSID d6:ff:ba:70:3c:66 [ 1290.290903][T26906] IPv6: Can't replace route, no match found [ 1290.321057][T26906] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1290.553629][T26913] netlink: 'syz.3.6923': attribute type 10 has an invalid length. [ 1290.582571][T26913] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.6923'. [ 1290.628920][T26913] netlink: 'syz.3.6923': attribute type 11 has an invalid length. [ 1290.683242][T26913] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6923'. [ 1290.707007][T26918] netlink: 'syz.3.6923': attribute type 11 has an invalid length. [ 1290.754473][T26918] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6923'. [ 1290.840495][T26912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.851023][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1291.121752][T26919] netlink: 'syz.1.6924': attribute type 10 has an invalid length. [ 1292.868312][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1293.367741][T26949] device syzkaller0 entered promiscuous mode [ 1295.700438][T26965] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6936'. [ 1295.978651][T26977] IPv6: Can't replace route, no match found [ 1296.013444][T26977] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1296.481679][T26980] netlink: 'syz.4.6942': attribute type 10 has an invalid length. [ 1296.866072][T22784] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1297.152615][T22784] Bluetooth: hci3: command 0x0406 tx timeout [ 1299.094196][T27038] netlink: 'syz.0.6959': attribute type 10 has an invalid length. [ 1299.963734][T27050] netlink: 'syz.5.6960': attribute type 28 has an invalid length. [ 1300.023696][T27050] netlink: 'syz.5.6960': attribute type 29 has an invalid length. [ 1300.031598][T27050] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6960'. [ 1300.274806][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.281259][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.938441][T27067] netlink: 'syz.4.6964': attribute type 29 has an invalid length. [ 1302.353412][T27067] netlink: 'syz.4.6964': attribute type 29 has an invalid length. [ 1305.973570][T27144] netlink: 'syz.1.6989': attribute type 10 has an invalid length. [ 1307.422125][T27170] device syzkaller0 entered promiscuous mode [ 1307.647399][T27182] netlink: 'syz.0.7002': attribute type 11 has an invalid length. [ 1307.726855][T27182] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7002'. [ 1307.867821][T27184] netlink: 'syz.0.7002': attribute type 11 has an invalid length. [ 1307.887313][T27184] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7002'. [ 1308.371343][T27178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1314.086026][T27246] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7020'. [ 1315.886586][T27272] FAULT_INJECTION: forcing a failure. [ 1315.886586][T27272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.935160][T27272] CPU: 1 PID: 27272 Comm: syz.5.7028 Not tainted syzkaller #0 [ 1315.942708][T27272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1315.952892][T27272] Call Trace: [ 1315.956196][T27272] [ 1315.959147][T27272] dump_stack_lvl+0x188/0x24e [ 1315.963872][T27272] ? show_regs_print_info+0x12/0x12 [ 1315.969102][T27272] ? load_image+0x400/0x400 [ 1315.973637][T27272] ? __lock_acquire+0x7d10/0x7d10 [ 1315.978710][T27272] should_fail_ex+0x399/0x4d0 [ 1315.983428][T27272] _copy_from_user+0x2c/0x170 [ 1315.988146][T27272] __sys_bpf+0x2ea/0x780 [ 1315.992433][T27272] ? bpf_link_show_fdinfo+0x380/0x380 [ 1315.997866][T27272] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1316.004088][T27272] __x64_sys_bpf+0x78/0x90 [ 1316.008635][T27272] do_syscall_64+0x4c/0xa0 [ 1316.013121][T27272] ? clear_bhb_loop+0x60/0xb0 [ 1316.017831][T27272] ? clear_bhb_loop+0x60/0xb0 [ 1316.022548][T27272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1316.028471][T27272] RIP: 0033:0x7f1306f9c819 [ 1316.033007][T27272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.052658][T27272] RSP: 002b:00007f1307dd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.061131][T27272] RAX: ffffffffffffffda RBX: 00007f1307215fa0 RCX: 00007f1306f9c819 [ 1316.069133][T27272] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1316.077133][T27272] RBP: 00007f1307dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.085129][T27272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.093123][T27272] R13: 00007f1307216038 R14: 00007f1307215fa0 R15: 00007fff991c6238 [ 1316.101141][T27272] [ 1316.325429][T27276] device syzkaller0 entered promiscuous mode [ 1316.661423][T27287] device syzkaller0 entered promiscuous mode [ 1321.051935][T27276] netlink: 'syz.0.7029': attribute type 10 has an invalid length. [ 1321.060025][T27276] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1326.173085][T27355] netlink: 'syz.0.7051': attribute type 10 has an invalid length. [ 1326.181935][T27359] netlink: 'syz.5.7053': attribute type 10 has an invalid length. [ 1326.677148][T27368] netlink: 'syz.4.7054': attribute type 10 has an invalid length. [ 1326.928733][T27375] netlink: 'syz.3.7055': attribute type 2 has an invalid length. [ 1326.952769][T27375] netlink: 'syz.3.7055': attribute type 1 has an invalid length. [ 1326.970561][T27375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.240346][T27390] netlink: 'syz.5.7062': attribute type 11 has an invalid length. [ 1327.261390][T27390] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7062'. [ 1327.305772][T27387] FAULT_INJECTION: forcing a failure. [ 1327.305772][T27387] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.341614][T27387] CPU: 1 PID: 27387 Comm: syz.0.7061 Not tainted syzkaller #0 [ 1327.349341][T27387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1327.352612][T27390] netlink: 'syz.5.7062': attribute type 11 has an invalid length. [ 1327.359440][T27387] Call Trace: [ 1327.359454][T27387] [ 1327.359464][T27387] dump_stack_lvl+0x188/0x24e [ 1327.359504][T27387] ? show_regs_print_info+0x12/0x12 [ 1327.359534][T27387] ? load_image+0x400/0x400 [ 1327.359561][T27387] ? __might_sleep+0xd0/0xd0 [ 1327.392816][T27387] ? __lock_acquire+0x7d10/0x7d10 [ 1327.397688][T27390] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7062'. [ 1327.397882][T27387] should_fail_ex+0x399/0x4d0 [ 1327.411892][T27387] should_failslab+0x5/0x20 [ 1327.416427][T27387] slab_pre_alloc_hook+0x59/0x310 [ 1327.421582][T27387] ? trace_call_bpf+0xbf/0x6b0 [ 1327.426401][T27387] ? trace_call_bpf+0xbf/0x6b0 [ 1327.431206][T27387] ? __get_vm_area_node+0x122/0x330 [ 1327.435574][T27389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.436440][T27387] __kmem_cache_alloc_node+0x4f/0x260 [ 1327.436476][T27387] ? __get_vm_area_node+0x122/0x330 [ 1327.456851][T27387] kmalloc_node_trace+0x22/0xe0 [ 1327.461761][T27387] __get_vm_area_node+0x122/0x330 [ 1327.466824][T27387] ? mark_lock+0x94/0x320 [ 1327.471207][T27387] __vmalloc_node_range+0x357/0x13b0 [ 1327.476538][T27387] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1327.482129][T27387] ? perf_trace_preemptirq_template+0x268/0x320 [ 1327.488436][T27387] ? free_vm_area+0x50/0x50 [ 1327.492976][T27387] ? lockdep_hardirqs_on+0x94/0x140 [ 1327.498225][T27387] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1327.503836][T27387] __vmalloc+0x76/0x80 [ 1327.507963][T27387] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1327.513561][T27387] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1327.518986][T27387] bpf_prog_alloc+0x1c/0x1b0 [ 1327.523624][T27387] bpf_prog_load+0x7c9/0x1560 [ 1327.528361][T27387] ? map_freeze+0x390/0x390 [ 1327.532909][T27387] ? __might_fault+0xa6/0x120 [ 1327.537615][T27387] ? trace_call_bpf+0xbf/0x6b0 [ 1327.542428][T27387] ? __might_fault+0xa6/0x120 [ 1327.547149][T27387] ? __might_fault+0xc2/0x120 [ 1327.551861][T27387] ? __might_fault+0xa6/0x120 [ 1327.556576][T27387] ? bpf_lsm_bpf+0x5/0x10 [ 1327.560937][T27387] ? security_bpf+0x7a/0xa0 [ 1327.565474][T27387] __sys_bpf+0x5b8/0x780 [ 1327.569758][T27387] ? bpf_link_show_fdinfo+0x380/0x380 [ 1327.575188][T27387] ? lock_chain_count+0x20/0x20 [ 1327.580074][T27387] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1327.586126][T27387] __x64_sys_bpf+0x78/0x90 [ 1327.590577][T27387] do_syscall_64+0x4c/0xa0 [ 1327.595031][T27387] ? clear_bhb_loop+0x60/0xb0 [ 1327.599746][T27387] ? clear_bhb_loop+0x60/0xb0 [ 1327.604463][T27387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.610400][T27387] RIP: 0033:0x7f9be9b9c819 [ 1327.614842][T27387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.634485][T27387] RSP: 002b:00007f9beab48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1327.642938][T27387] RAX: ffffffffffffffda RBX: 00007f9be9e15fa0 RCX: 00007f9be9b9c819 [ 1327.650946][T27387] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1327.658970][T27387] RBP: 00007f9beab48090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.666977][T27387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.674983][T27387] R13: 00007f9be9e16038 R14: 00007f9be9e15fa0 R15: 00007ffc803f5948 [ 1327.683007][T27387] [ 1327.836057][T27387] syz.0.7061: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1327.890124][T27387] CPU: 0 PID: 27387 Comm: syz.0.7061 Not tainted syzkaller #0 [ 1327.897667][T27387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1327.907761][T27387] Call Trace: [ 1327.911072][T27387] [ 1327.914047][T27387] dump_stack_lvl+0x188/0x24e [ 1327.918787][T27387] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1327.925242][T27387] ? show_regs_print_info+0x12/0x12 [ 1327.930482][T27387] ? load_image+0x400/0x400 [ 1327.935041][T27387] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1327.941530][T27387] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1327.948072][T27387] warn_alloc+0x242/0x330 [ 1327.952433][T27387] ? zone_watermark_ok_safe+0x270/0x270 [ 1327.958004][T27387] ? __get_vm_area_node+0x318/0x330 [ 1327.963221][T27387] ? mark_lock+0x94/0x320 [ 1327.967575][T27387] __vmalloc_node_range+0x37c/0x13b0 [ 1327.972878][T27387] ? perf_trace_preemptirq_template+0x268/0x320 [ 1327.979152][T27387] ? free_vm_area+0x50/0x50 [ 1327.983672][T27387] ? lockdep_hardirqs_on+0x94/0x140 [ 1327.988889][T27387] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1327.994454][T27387] __vmalloc+0x76/0x80 [ 1327.998539][T27387] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1328.004100][T27387] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1328.009498][T27387] bpf_prog_alloc+0x1c/0x1b0 [ 1328.014104][T27387] bpf_prog_load+0x7c9/0x1560 [ 1328.018804][T27387] ? map_freeze+0x390/0x390 [ 1328.023585][T27387] ? __might_fault+0xa6/0x120 [ 1328.028270][T27387] ? trace_call_bpf+0xbf/0x6b0 [ 1328.033085][T27387] ? __might_fault+0xa6/0x120 [ 1328.037785][T27387] ? __might_fault+0xc2/0x120 [ 1328.042480][T27387] ? __might_fault+0xa6/0x120 [ 1328.047181][T27387] ? bpf_lsm_bpf+0x5/0x10 [ 1328.051523][T27387] ? security_bpf+0x7a/0xa0 [ 1328.056048][T27387] __sys_bpf+0x5b8/0x780 [ 1328.060308][T27387] ? bpf_link_show_fdinfo+0x380/0x380 [ 1328.065715][T27387] ? lock_chain_count+0x20/0x20 [ 1328.070577][T27387] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1328.076589][T27387] __x64_sys_bpf+0x78/0x90 [ 1328.081021][T27387] do_syscall_64+0x4c/0xa0 [ 1328.085460][T27387] ? clear_bhb_loop+0x60/0xb0 [ 1328.090147][T27387] ? clear_bhb_loop+0x60/0xb0 [ 1328.094841][T27387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1328.100754][T27387] RIP: 0033:0x7f9be9b9c819 [ 1328.105181][T27387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.124973][T27387] RSP: 002b:00007f9beab48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1328.133400][T27387] RAX: ffffffffffffffda RBX: 00007f9be9e15fa0 RCX: 00007f9be9b9c819 [ 1328.141381][T27387] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1328.149363][T27387] RBP: 00007f9beab48090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.157342][T27387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.165318][T27387] R13: 00007f9be9e16038 R14: 00007f9be9e15fa0 R15: 00007ffc803f5948 [ 1328.173320][T27387] [ 1328.945850][T27387] Mem-Info: [ 1328.950373][T27387] active_anon:7521 inactive_anon:0 isolated_anon:0 [ 1328.950373][T27387] active_file:20893 inactive_file:40437 isolated_file:0 [ 1328.950373][T27387] unevictable:768 dirty:109 writeback:0 [ 1328.950373][T27387] slab_reclaimable:21137 slab_unreclaimable:98448 [ 1328.950373][T27387] mapped:31048 shmem:1373 pagetables:715 [ 1328.950373][T27387] sec_pagetables:0 bounce:0 [ 1328.950373][T27387] kernel_misc_reclaimable:0 [ 1328.950373][T27387] free:1317656 free_pcp:6911 free_cma:0 [ 1329.108396][T27387] Node 0 active_anon:30084kB inactive_anon:0kB active_file:83572kB inactive_file:161548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124192kB dirty:436kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10516kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? no [ 1329.182035][T27387] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1329.222600][T27387] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.270844][T27387] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1329.279457][T27387] Node 0 DMA32 free:1349540kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:30084kB inactive_anon:0kB active_file:83572kB inactive_file:161548kB unevictable:1536kB writepending:436kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:14812kB local_pcp:500kB free_cma:0kB [ 1329.321204][T27387] lowmem_reserve[]: 0 0 1 1 1 [ 1329.326166][T27387] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1329.381620][T27387] lowmem_reserve[]: 0 0 0 0 0 [ 1329.388763][T27387] Node 1 Normal free:3904584kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:13120kB local_pcp:1984kB free_cma:0kB [ 1329.429337][T27387] lowmem_reserve[]: 0 0 0 0 0 [ 1329.437204][T27387] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1329.460955][T27387] Node 0 DMA32: 2239*4kB (UME) 2051*8kB (UME) 1229*16kB (UME) 1029*32kB (UME) 1317*64kB (UME) 748*128kB (UME) 177*256kB (UME) 81*512kB (UM) 47*1024kB (UME) 15*2048kB (UME) 226*4096kB (UM) = 1349316kB [ 1329.501640][T27387] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1329.522633][T27387] Node 1 Normal: 282*4kB (UM) 62*8kB (UE) 31*16kB (UME) 148*32kB (UME) 66*64kB (UME) 24*128kB (UME) 13*256kB (UM) 4*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3904584kB [ 1329.551506][T27387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.572725][T27387] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1329.582074][T27387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.610908][T27387] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1329.630943][T27387] 62705 total pagecache pages [ 1329.640868][T27387] 0 pages in swap cache [ 1329.651095][T27387] Free swap = 124996kB [ 1329.661249][T27387] Total swap = 124996kB [ 1329.669645][T27387] 2097051 pages RAM [ 1329.676940][T27387] 0 pages HighMem/MovableOnly [ 1329.697095][T27387] 415207 pages reserved [ 1329.722033][T27387] 0 pages cma reserved [ 1330.367824][T27414] netlink: 'syz.1.7067': attribute type 10 has an invalid length. [ 1331.507067][T27442] netlink: 'syz.1.7074': attribute type 10 has an invalid length. [ 1333.217535][T27468] device syzkaller0 entered promiscuous mode [ 1334.393322][T27491] netlink: 'syz.4.7093': attribute type 11 has an invalid length. [ 1334.429751][T27491] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7093'. [ 1334.476520][T27491] netlink: 'syz.4.7093': attribute type 11 has an invalid length. [ 1334.509661][T27491] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7093'. [ 1334.553491][T27490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.422238][T27524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7102'. [ 1339.713639][T27530] netlink: 'syz.4.7101': attribute type 10 has an invalid length. [ 1340.505968][T27538] netlink: 'syz.5.7103': attribute type 2 has an invalid length. [ 1340.592582][T27538] netlink: 'syz.5.7103': attribute type 1 has an invalid length. [ 1340.642494][T27538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.839543][T27588] netlink: 'syz.0.7115': attribute type 10 has an invalid length. [ 1344.738139][T27613] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7126'. [ 1345.307789][T27627] netlink: 'syz.4.7131': attribute type 10 has an invalid length. [ 1347.484590][T27658] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7142'. [ 1347.903481][T27658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.019123][T27658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.223191][T27658] bond0 (unregistering): Released all slaves [ 1348.577516][T27676] netlink: 'syz.3.7149': attribute type 10 has an invalid length. [ 1349.953311][T27706] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7157'. [ 1350.132048][T27710] device syzkaller0 entered promiscuous mode [ 1353.297871][T27760] netlink: 'syz.5.7174': attribute type 1 has an invalid length. [ 1353.344380][T27760] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.7174'. [ 1356.311065][T27804] netlink: 'syz.3.7187': attribute type 10 has an invalid length. [ 1357.386778][T27845] device syzkaller0 entered promiscuous mode [ 1357.401273][T27843] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.7202'. [ 1360.272926][T27865] netlink: 'syz.3.7205': attribute type 10 has an invalid length. [ 1360.281471][T27879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1360.535387][T27883] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7213'. [ 1361.736788][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.743270][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.420055][T27970] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1363.530575][T27970] team0: Port device team_slave_0 removed [ 1363.620614][T27970] device veth0_to_team left promiscuous mode [ 1363.690585][T27970] Ÿë: port 1(veth0_to_team) entered disabled state [ 1365.519285][T28022] netlink: 'syz.1.7258': attribute type 10 has an invalid length. [ 1365.679586][T28027] netlink: 'syz.0.7262': attribute type 11 has an invalid length. [ 1365.719067][T28027] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7262'. [ 1365.823947][T28027] netlink: 'syz.0.7262': attribute type 11 has an invalid length. [ 1365.833530][T28027] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7262'. [ 1365.968833][T28037] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7264'. [ 1366.034699][T28026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.901096][T28069] IPv6: Can't replace route, no match found [ 1366.938720][T28069] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1367.736696][T28084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7278'. [ 1367.909762][T28093] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7280'. [ 1368.182266][T28099] netlink: 'syz.3.7284': attribute type 1 has an invalid length. [ 1369.055478][T28121] IPv6: Can't replace route, no match found [ 1369.073479][T28121] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1369.366255][T28127] netlink: 'syz.4.7293': attribute type 11 has an invalid length. [ 1369.392557][T28127] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1369.416198][T28127] netlink: 'syz.4.7293': attribute type 11 has an invalid length. [ 1369.430599][T28127] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1369.456186][T28125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.733748][T28135] sctp: [Deprecated]: syz.5.7295 (pid 28135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1369.733748][T28135] Use struct sctp_sack_info instead [ 1370.589552][T28153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1371.377405][T28178] IPv6: Can't replace route, no match found [ 1371.416338][T28178] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1371.754913][T28182] netlink: 'syz.3.7310': attribute type 10 has an invalid length. [ 1372.867809][T28212] netlink: 'syz.0.7318': attribute type 11 has an invalid length. [ 1372.972075][T28212] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1373.052842][T28211] netlink: 'syz.0.7318': attribute type 11 has an invalid length. [ 1373.082747][T28211] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1373.177018][T28207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.508539][T28222] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7321'. [ 1374.455944][T28239] netlink: 'syz.5.7325': attribute type 10 has an invalid length. [ 1374.553850][T28232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7324'. [ 1376.363475][T28271] device syzkaller0 entered promiscuous mode [ 1376.601119][T28290] IPv6: Can't replace route, no match found [ 1376.656316][T28294] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1378.834588][ T5086] wlan1: Trigger new scan to find an IBSS to join [ 1378.973538][T28298] netlink: 'syz.0.7341': attribute type 1 has an invalid length. [ 1378.996319][T28303] netlink: 'syz.5.7343': attribute type 10 has an invalid length. [ 1379.336373][T28311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1379.384112][T28316] netlink: 'syz.1.7345': attribute type 10 has an invalid length. [ 1379.391453][T28318] netlink: 'syz.0.7346': attribute type 27 has an invalid length. [ 1379.469138][T28316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1379.501260][T28318] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1379.567127][T28316] bridge0: port 3(veth0_vlan) entered blocking state [ 1379.617520][T28316] bridge0: port 3(veth0_vlan) entered disabled state [ 1379.641984][T28316] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1379.699474][T28315] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7349'. [ 1380.464297][T28342] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7366'. [ 1380.873836][T28348] IPv6: Can't replace route, no match found [ 1380.927937][T28348] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1381.746245][T28365] netlink: 'syz.0.7361': attribute type 11 has an invalid length. [ 1381.791922][T28365] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7361'. [ 1381.863471][T28365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.811660][T28378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7368'. [ 1382.999887][T28384] netlink: 'syz.4.7369': attribute type 10 has an invalid length. [ 1383.301571][T28389] netlink: 'syz.0.7372': attribute type 10 has an invalid length. [ 1384.842658][ T5054] wlan1: Trigger new scan to find an IBSS to join [ 1385.345254][T28435] netlink: 'syz.0.7385': attribute type 10 has an invalid length. [ 1385.604457][T28444] netlink: 'syz.4.7389': attribute type 10 has an invalid length. [ 1386.442634][T22784] Bluetooth: hci0: ISO packet for unknown connection handle 58 [ 1386.444639][T28466] netlink: 'syz.0.7398': attribute type 3 has an invalid length. [ 1386.530916][T28466] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1386.541122][T28467] netlink: 'syz.0.7398': attribute type 3 has an invalid length. [ 1386.550536][T28467] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.7398'. [ 1386.635992][T28471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7400'. [ 1386.801650][T28467] delete_channel: no stack [ 1386.810351][T28467] delete_channel: no stack [ 1387.116435][T28483] sock: sock_set_timeout: `syz.1.7405' (pid 28483) tries to set negative timeout [ 1387.516278][T28497] netlink: 'syz.4.7406': attribute type 10 has an invalid length. [ 1388.912574][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1389.008953][ T5086] wlan1: Creating new IBSS network, BSSID 82:e5:54:4e:46:ea [ 1389.483913][T28536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1390.544901][T28562] netlink: 'syz.1.7440': attribute type 10 has an invalid length. [ 1391.550460][T28574] device syzkaller0 entered promiscuous mode [ 1394.602286][T28603] netlink: 'syz.4.7443': attribute type 10 has an invalid length. [ 1395.030843][T28628] IPv6: Can't replace route, no match found [ 1395.061977][T28628] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1395.173205][T28630] IPv6: Can't replace route, no match found [ 1395.256636][T28634] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1395.386508][T28639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7451'. [ 1396.242659][T28651] netlink: 'syz.0.7456': attribute type 10 has an invalid length. [ 1397.853298][T28689] IPv6: Can't replace route, no match found [ 1397.872637][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1397.959625][T28689] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1398.189483][T28698] IPv6: Can't replace route, no match found [ 1398.242499][T28698] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1398.832679][ T5059] wlan1: Trigger new scan to find an IBSS to join [ 1398.839470][T28706] netlink: 'syz.1.7473': attribute type 10 has an invalid length. [ 1399.741250][T28730] device syzkaller0 entered promiscuous mode [ 1400.923792][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1401.874848][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1402.546142][T28748] IPv6: Can't replace route, no match found [ 1402.553822][T28753] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1402.564295][T28762] IPv6: Can't replace route, no match found [ 1402.915037][ T5068] wlan1: Creating new IBSS network, BSSID 0e:08:b3:cd:69:47 [ 1402.929179][T28772] netlink: 'syz.0.7488': attribute type 10 has an invalid length. [ 1403.715273][T28797] IPv6: Can't replace route, no match found [ 1403.778691][T28797] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1403.892724][T28801] IPv6: Can't replace route, no match found [ 1403.989551][T28806] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1404.985499][T28832] netlink: 'syz.0.7508': attribute type 10 has an invalid length. [ 1405.568450][T28855] IPv6: Can't replace route, no match found [ 1405.721572][T28859] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1405.873053][ T5091] wlan1: Trigger new scan to find an IBSS to join [ 1406.521083][T28874] device syzkaller0 entered promiscuous mode [ 1407.877783][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1409.169696][T28878] netlink: 'syz.3.7524': attribute type 10 has an invalid length. [ 1409.831746][T28915] IPv6: Can't replace route, no match found [ 1409.851690][T28915] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1410.387290][T28937] netlink: 'syz.1.7541': attribute type 10 has an invalid length. [ 1411.883170][ T5086] wlan1: Trigger new scan to find an IBSS to join [ 1412.164699][T28979] device syzkaller0 entered promiscuous mode [ 1412.279590][T28978] IPv6: Can't replace route, no match found [ 1412.297556][T28981] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1414.720904][T28999] netlink: 'syz.4.7562': attribute type 10 has an invalid length. [ 1415.029011][T29016] netlink: 'syz.0.7570': attribute type 10 has an invalid length. [ 1415.072435][T29016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7570'. [ 1415.101339][T29016] bridge0: port 3(veth0_vlan) entered blocking state [ 1415.129188][T29016] bridge0: port 3(veth0_vlan) entered disabled state [ 1415.179415][T29016] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1415.486455][T29031] IPv6: Can't replace route, no match found [ 1415.539343][T29033] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1415.899558][ T5091] wlan1: Trigger new scan to find an IBSS to join [ 1416.694698][T29069] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7586'. [ 1417.630418][T29085] device syzkaller0 entered promiscuous mode [ 1417.687918][T29083] netlink: 'syz.0.7590': attribute type 10 has an invalid length. [ 1417.783967][T29095] IPv6: Can't replace route, no match found [ 1417.890754][T29099] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1420.549227][T29103] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7595'. [ 1421.162347][T29135] netlink: 'syz.1.7605': attribute type 10 has an invalid length. [ 1421.440903][T29155] netlink: 'syz.0.7612': attribute type 46 has an invalid length. [ 1421.465660][T29156] IPv6: Can't replace route, no match found [ 1421.492699][T29156] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1422.029359][T29167] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1422.063501][T29167] syzkaller0: linktype set to 825 [ 1422.954732][T29192] netlink: 'syz.1.7624': attribute type 10 has an invalid length. [ 1423.074704][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.081196][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.314791][T29204] syz.3.7627[29204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1423.314912][T29204] syz.3.7627[29204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1423.517249][T29212] IPv6: Can't replace route, no match found [ 1423.632999][T29217] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1424.080758][T29225] device syzkaller0 entered promiscuous mode [ 1425.876425][ T5086] wlan1: Trigger new scan to find an IBSS to join [ 1427.699629][T29283] IPv6: Can't replace route, no match found [ 1427.722973][T29283] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1427.926978][T29294] netlink: 'syz.1.7654': attribute type 10 has an invalid length. [ 1428.992272][T29314] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1429.015437][T29314] syzkaller0: linktype set to 820 [ 1430.290202][T29334] netlink: 'syz.1.7669': attribute type 10 has an invalid length. [ 1430.587967][T29336] device syzkaller0 entered promiscuous mode [ 1433.094403][T29349] IPv6: Can't replace route, no match found [ 1433.100665][T29352] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1433.122205][T29362] device sit0 entered promiscuous mode [ 1433.671253][T29379] FAULT_INJECTION: forcing a failure. [ 1433.671253][T29379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.715046][T29379] CPU: 1 PID: 29379 Comm: syz.1.7683 Not tainted syzkaller #0 [ 1433.722770][T29379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1433.732876][T29379] Call Trace: [ 1433.736186][T29379] [ 1433.739147][T29379] dump_stack_lvl+0x188/0x24e [ 1433.743873][T29379] ? show_regs_print_info+0x12/0x12 [ 1433.749119][T29379] ? load_image+0x400/0x400 [ 1433.753662][T29379] ? __lock_acquire+0x7d10/0x7d10 [ 1433.758735][T29379] should_fail_ex+0x399/0x4d0 [ 1433.763446][T29379] _copy_from_user+0x2c/0x170 [ 1433.768167][T29379] ___sys_sendmsg+0x1c3/0x360 [ 1433.772900][T29379] ? __sys_sendmsg+0x290/0x290 [ 1433.777819][T29379] ? __lock_acquire+0x7d10/0x7d10 [ 1433.782918][T29379] __se_sys_sendmsg+0x1bb/0x2a0 [ 1433.787816][T29379] ? __x64_sys_sendmsg+0x80/0x80 [ 1433.792808][T29379] ? lockdep_hardirqs_on+0x94/0x140 [ 1433.798217][T29379] do_syscall_64+0x4c/0xa0 [ 1433.802677][T29379] ? clear_bhb_loop+0x60/0xb0 [ 1433.807484][T29379] ? clear_bhb_loop+0x60/0xb0 [ 1433.812204][T29379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1433.818156][T29379] RIP: 0033:0x7f5de439c819 [ 1433.822605][T29379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.842342][T29379] RSP: 002b:00007f5de52a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.850812][T29379] RAX: ffffffffffffffda RBX: 00007f5de4615fa0 RCX: 00007f5de439c819 [ 1433.858824][T29379] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1433.866826][T29379] RBP: 00007f5de52a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.874837][T29379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.882845][T29379] R13: 00007f5de4616038 R14: 00007f5de4615fa0 R15: 00007ffc32bf2b38 [ 1433.890873][T29379] [ 1434.025961][T29388] netlink: 'syz.4.7686': attribute type 10 has an invalid length. [ 1434.828644][T29403] IPv6: Can't replace route, no match found [ 1434.874023][T29403] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1436.705134][T29449] device syzkaller0 entered promiscuous mode [ 1437.055561][T29465] IPv6: Can't replace route, no match found [ 1437.064566][T29468] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1440.305325][T29471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7714'. [ 1440.853080][T29504] netlink: 'syz.1.7722': attribute type 10 has an invalid length. [ 1440.882946][T29508] IPv6: Can't replace route, no match found [ 1440.892501][T29508] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1441.025198][T29507] netlink: 'syz.3.7725': attribute type 10 has an invalid length. [ 1441.045294][T29507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1441.068284][T29507] bridge0: port 3(veth0_vlan) entered blocking state [ 1441.099435][T29507] bridge0: port 3(veth0_vlan) entered disabled state [ 1441.130655][T29507] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1441.313669][T29518] FAULT_INJECTION: forcing a failure. [ 1441.313669][T29518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.378435][T29518] CPU: 0 PID: 29518 Comm: syz.5.7727 Not tainted syzkaller #0 [ 1441.385992][T29518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1441.396088][T29518] Call Trace: [ 1441.399415][T29518] [ 1441.402379][T29518] dump_stack_lvl+0x188/0x24e [ 1441.407115][T29518] ? show_regs_print_info+0x12/0x12 [ 1441.412355][T29518] ? load_image+0x400/0x400 [ 1441.416893][T29518] ? __lock_acquire+0x7d10/0x7d10 [ 1441.421964][T29518] should_fail_ex+0x399/0x4d0 [ 1441.426660][T29518] _copy_from_user+0x2c/0x170 [ 1441.431341][T29518] __copy_msghdr+0x3b7/0x580 [ 1441.435938][T29518] ___sys_sendmsg+0x210/0x360 [ 1441.440618][T29518] ? __sys_sendmsg+0x290/0x290 [ 1441.445397][T29518] ? __lock_acquire+0x7d10/0x7d10 [ 1441.450436][T29518] __se_sys_sendmsg+0x1bb/0x2a0 [ 1441.455284][T29518] ? ct_nmi_exit+0x145/0x1c0 [ 1441.459870][T29518] ? __x64_sys_sendmsg+0x80/0x80 [ 1441.464817][T29518] ? lockdep_hardirqs_on+0x94/0x140 [ 1441.470013][T29518] do_syscall_64+0x4c/0xa0 [ 1441.474433][T29518] ? clear_bhb_loop+0x60/0xb0 [ 1441.479153][T29518] ? clear_bhb_loop+0x60/0xb0 [ 1441.483858][T29518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.489811][T29518] RIP: 0033:0x7f1306f9c819 [ 1441.494252][T29518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.513860][T29518] RSP: 002b:00007f1307dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.522366][T29518] RAX: ffffffffffffffda RBX: 00007f1307215fa0 RCX: 00007f1306f9c819 [ 1441.530334][T29518] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1441.538319][T29518] RBP: 00007f1307dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.546331][T29518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.554326][T29518] R13: 00007f1307216038 R14: 00007f1307215fa0 R15: 00007fff991c6238 [ 1441.562348][T29518] [ 1442.811547][T29551] netlink: 'syz.3.7741': attribute type 10 has an invalid length. [ 1442.977773][T29551] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.053292][T29551] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.117771][T29551] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.181554][T29551] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.556057][T29551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.577710][T29551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.586846][T29551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.595814][T29551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.612414][T29551] team0: Port device geneve1 added [ 1443.618391][T29554] netlink: 'syz.5.7742': attribute type 10 has an invalid length. [ 1443.634254][T29559] IPv6: Can't replace route, no match found [ 1443.663814][T29563] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1444.832779][ T5059] wlan1: Trigger new scan to find an IBSS to join [ 1445.275679][T29605] netlink: 'syz.3.7757': attribute type 10 has an invalid length. [ 1445.320855][T29612] IPv6: Can't replace route, no match found [ 1445.340732][T29612] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1445.860346][T29620] netlink: 'syz.3.7762': attribute type 21 has an invalid length. [ 1446.707976][T29637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7768'. [ 1447.064521][T29642] device syzkaller0 entered promiscuous mode [ 1447.817592][T29668] FAULT_INJECTION: forcing a failure. [ 1447.817592][T29668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.835553][T29668] CPU: 1 PID: 29668 Comm: syz.4.7777 Not tainted syzkaller #0 [ 1447.843087][T29668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1447.853209][T29668] Call Trace: [ 1447.856524][T29668] [ 1447.859486][T29668] dump_stack_lvl+0x188/0x24e [ 1447.864223][T29668] ? show_regs_print_info+0x12/0x12 [ 1447.869484][T29668] ? load_image+0x400/0x400 [ 1447.874053][T29668] ? __lock_acquire+0x7d10/0x7d10 [ 1447.879150][T29668] should_fail_ex+0x399/0x4d0 [ 1447.883978][T29668] _copy_from_user+0x2c/0x170 [ 1447.888711][T29668] iovec_from_user+0x143/0x360 [ 1447.893531][T29668] __import_iovec+0x6d/0x500 [ 1447.898160][T29668] ? __might_fault+0xc2/0x120 [ 1447.902890][T29668] import_iovec+0x6f/0xa0 [ 1447.907277][T29668] ___sys_sendmsg+0x252/0x360 [ 1447.912031][T29668] ? __sys_sendmsg+0x290/0x290 [ 1447.916867][T29668] ? trace_call_bpf+0xbf/0x6b0 [ 1447.921706][T29668] __se_sys_sendmsg+0x1bb/0x2a0 [ 1447.926698][T29668] ? __x64_sys_sendmsg+0x80/0x80 [ 1447.931698][T29668] ? lockdep_hardirqs_on+0x94/0x140 [ 1447.936934][T29668] do_syscall_64+0x4c/0xa0 [ 1447.941392][T29668] ? clear_bhb_loop+0x60/0xb0 [ 1447.946111][T29668] ? clear_bhb_loop+0x60/0xb0 [ 1447.950833][T29668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1447.956755][T29668] RIP: 0033:0x7fc0d719c819 [ 1447.961188][T29668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.981082][T29668] RSP: 002b:00007fc0d7f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1447.989512][T29668] RAX: ffffffffffffffda RBX: 00007fc0d7415fa0 RCX: 00007fc0d719c819 [ 1447.997494][T29668] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1448.005568][T29668] RBP: 00007fc0d7f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.013551][T29668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.021531][T29668] R13: 00007fc0d7416038 R14: 00007fc0d7415fa0 R15: 00007ffe4d1cb9b8 [ 1448.029612][T29668] [ 1448.035806][ T5059] wlan1: Trigger new scan to find an IBSS to join [ 1448.914437][ T5054] wlan1: Trigger new scan to find an IBSS to join [ 1448.975838][ T5054] wlan1: Creating new IBSS network, BSSID d2:6c:85:b6:c5:ad [ 1449.955187][T29651] netlink: 'syz.3.7773': attribute type 10 has an invalid length. [ 1449.964047][T29666] IPv6: Can't replace route, no match found [ 1449.971558][T29670] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1451.370832][T29701] netlink: 'syz.3.7788': attribute type 1 has an invalid length. [ 1451.406316][T29701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7788'. [ 1451.436163][T29701] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7788'. [ 1451.826060][T29710] netlink: 'syz.0.7792': attribute type 10 has an invalid length. [ 1451.937575][T29723] IPv6: Can't replace route, no match found [ 1451.958447][T29723] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1452.202188][T29726] netlink: 'syz.1.7795': attribute type 1 has an invalid length. [ 1452.222817][T29726] netlink: 'syz.1.7795': attribute type 4 has an invalid length. [ 1452.242659][T29726] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7795'. [ 1452.539463][T29735] sock: sock_timestamping_bind_phc: sock not bind to device [ 1453.670947][T29770] IPv6: Can't replace route, no match found [ 1453.727124][T29770] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1453.823043][T29766] netlink: 'syz.4.7808': attribute type 10 has an invalid length. [ 1454.504579][T29789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1454.919247][T29801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7820'. [ 1454.968902][T29803] FAULT_INJECTION: forcing a failure. [ 1454.968902][T29803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.013475][T29801] netlink: 'syz.1.7820': attribute type 12 has an invalid length. [ 1455.020616][T29803] CPU: 0 PID: 29803 Comm: syz.4.7819 Not tainted syzkaller #0 [ 1455.023577][T29801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7820'. [ 1455.028810][T29803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1455.048017][T29803] Call Trace: [ 1455.051313][T29803] [ 1455.054260][T29803] dump_stack_lvl+0x188/0x24e [ 1455.058988][T29803] ? show_regs_print_info+0x12/0x12 [ 1455.064237][T29803] ? load_image+0x400/0x400 [ 1455.068807][T29803] ? __might_fault+0xa6/0x120 [ 1455.073678][T29803] should_fail_ex+0x399/0x4d0 [ 1455.078369][T29803] copyin+0x1b/0x120 [ 1455.082281][T29803] _copy_from_iter+0x447/0x1130 [ 1455.087213][T29803] ? copyout_mc+0x110/0x110 [ 1455.091914][T29803] ? dev_get_by_index+0x1e/0x2d0 [ 1455.096882][T29803] ? dev_get_by_index+0x1e/0x2d0 [ 1455.101927][T29803] packet_sendmsg+0x3099/0x4e60 [ 1455.106796][T29803] ? aa_sk_perm+0x950/0x950 [ 1455.111529][T29803] ? __might_sleep+0xd0/0xd0 [ 1455.116239][T29803] ? verify_lock_unused+0x140/0x140 [ 1455.121573][T29803] ? aa_sk_perm+0x81f/0x950 [ 1455.126110][T29803] ? packet_getsockopt+0x9a0/0x9a0 [ 1455.131249][T29803] ? aa_sock_msg_perm+0x94/0x150 [ 1455.136205][T29803] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1455.141506][T29803] ? security_socket_sendmsg+0x7c/0xa0 [ 1455.146983][T29803] ? packet_getsockopt+0x9a0/0x9a0 [ 1455.152138][T29803] ____sys_sendmsg+0x5be/0x970 [ 1455.156942][T29803] ? __sys_sendmsg_sock+0x30/0x30 [ 1455.162245][T29803] ? __import_iovec+0x315/0x500 [ 1455.167114][T29803] ? import_iovec+0x6f/0xa0 [ 1455.171627][T29803] ___sys_sendmsg+0x2a2/0x360 [ 1455.176330][T29803] ? __sys_sendmsg+0x290/0x290 [ 1455.181133][T29803] ? __lock_acquire+0x7d10/0x7d10 [ 1455.186282][T29803] __se_sys_sendmsg+0x1bb/0x2a0 [ 1455.191159][T29803] ? __x64_sys_sendmsg+0x80/0x80 [ 1455.196127][T29803] ? lockdep_hardirqs_on+0x94/0x140 [ 1455.201342][T29803] do_syscall_64+0x4c/0xa0 [ 1455.205773][T29803] ? clear_bhb_loop+0x60/0xb0 [ 1455.210463][T29803] ? clear_bhb_loop+0x60/0xb0 [ 1455.215150][T29803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1455.221053][T29803] RIP: 0033:0x7fc0d719c819 [ 1455.225484][T29803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.245103][T29803] RSP: 002b:00007fc0d7f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.253614][T29803] RAX: ffffffffffffffda RBX: 00007fc0d7415fa0 RCX: 00007fc0d719c819 [ 1455.261593][T29803] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1455.269660][T29803] RBP: 00007fc0d7f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.277663][T29803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.285643][T29803] R13: 00007fc0d7416038 R14: 00007fc0d7415fa0 R15: 00007ffe4d1cb9b8 [ 1455.293640][T29803] [ 1455.732647][T29805] device syzkaller0 entered promiscuous mode [ 1455.875357][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1456.012492][T29817] netlink: 'syz.3.7824': attribute type 10 has an invalid length. [ 1459.087630][T29823] IPv6: Can't replace route, no match found [ 1459.093772][T29826] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1459.873956][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1459.953804][ T4412] wlan1: Creating new IBSS network, BSSID a6:16:b8:e3:99:1b [ 1459.955318][T29874] netlink: 'syz.1.7840': attribute type 10 has an invalid length. [ 1461.158897][T29905] IPv6: Can't replace route, no match found [ 1461.239484][T29907] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1462.118271][T29930] netlink: 'syz.1.7855': attribute type 10 has an invalid length. [ 1462.617547][T29939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7861'. [ 1463.103197][T29958] FAULT_INJECTION: forcing a failure. [ 1463.103197][T29958] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.161737][T29957] IPv6: Can't replace route, no match found [ 1463.168409][T29958] CPU: 1 PID: 29958 Comm: syz.4.7865 Not tainted syzkaller #0 [ 1463.175930][T29958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1463.186032][T29958] Call Trace: [ 1463.189367][T29958] [ 1463.192341][T29958] dump_stack_lvl+0x188/0x24e [ 1463.197076][T29958] ? show_regs_print_info+0x12/0x12 [ 1463.202320][T29958] ? load_image+0x400/0x400 [ 1463.206953][T29958] ? __might_sleep+0xd0/0xd0 [ 1463.207240][T29957] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1463.211558][T29958] ? __lock_acquire+0x7d10/0x7d10 [ 1463.211591][T29958] ? __lock_acquire+0x12f4/0x7d10 [ 1463.230723][T29958] ? verify_lock_unused+0x140/0x140 [ 1463.235969][T29958] should_fail_ex+0x399/0x4d0 [ 1463.240686][T29958] should_failslab+0x5/0x20 [ 1463.245239][T29958] slab_pre_alloc_hook+0x59/0x310 [ 1463.250511][T29958] kmem_cache_alloc_node+0x5a/0x320 [ 1463.255846][T29958] ? __alloc_skb+0xfc/0x7e0 [ 1463.260406][T29958] __alloc_skb+0xfc/0x7e0 [ 1463.264883][T29958] alloc_skb_with_frags+0xa7/0x710 [ 1463.270227][T29958] ? __lock_acquire+0x7d10/0x7d10 [ 1463.275319][T29958] sock_alloc_send_pskb+0x87f/0x9a0 [ 1463.280585][T29958] ? sock_kzfree_s+0x50/0x50 [ 1463.285328][T29958] ? dev_get_by_index+0x1e/0x2d0 [ 1463.290313][T29958] ? dev_get_by_index+0x1e/0x2d0 [ 1463.295306][T29958] packet_sendmsg+0x32b0/0x4e60 [ 1463.300218][T29958] ? __might_sleep+0xd0/0xd0 [ 1463.304843][T29958] ? verify_lock_unused+0x140/0x140 [ 1463.310638][T29958] ? aa_sk_perm+0x81f/0x950 [ 1463.315373][T29958] ? packet_getsockopt+0x9a0/0x9a0 [ 1463.320542][T29958] ? aa_sock_msg_perm+0x94/0x150 [ 1463.325522][T29958] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1463.330844][T29958] ? security_socket_sendmsg+0x7c/0xa0 [ 1463.336350][T29958] ? packet_getsockopt+0x9a0/0x9a0 [ 1463.341499][T29958] ____sys_sendmsg+0x5be/0x970 [ 1463.346325][T29958] ? __sys_sendmsg_sock+0x30/0x30 [ 1463.351399][T29958] ? __import_iovec+0x315/0x500 [ 1463.356299][T29958] ? import_iovec+0x6f/0xa0 [ 1463.360847][T29958] ___sys_sendmsg+0x2a2/0x360 [ 1463.365577][T29958] ? __sys_sendmsg+0x290/0x290 [ 1463.370409][T29958] ? __lock_acquire+0x7d10/0x7d10 [ 1463.375509][T29958] __se_sys_sendmsg+0x1bb/0x2a0 [ 1463.380410][T29958] ? __x64_sys_sendmsg+0x80/0x80 [ 1463.385415][T29958] ? lockdep_hardirqs_on+0x94/0x140 [ 1463.390743][T29958] do_syscall_64+0x4c/0xa0 [ 1463.395205][T29958] ? clear_bhb_loop+0x60/0xb0 [ 1463.399920][T29958] ? clear_bhb_loop+0x60/0xb0 [ 1463.404650][T29958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1463.410585][T29958] RIP: 0033:0x7fc0d719c819 [ 1463.415042][T29958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.434726][T29958] RSP: 002b:00007fc0d7f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.443193][T29958] RAX: ffffffffffffffda RBX: 00007fc0d7415fa0 RCX: 00007fc0d719c819 [ 1463.451395][T29958] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1463.459420][T29958] RBP: 00007fc0d7f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.467439][T29958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.475454][T29958] R13: 00007fc0d7416038 R14: 00007fc0d7415fa0 R15: 00007ffe4d1cb9b8 [ 1463.483500][T29958] [ 1463.892706][ T5059] wlan1: Trigger new scan to find an IBSS to join [ 1464.193689][T29986] netlink: 'syz.0.7872': attribute type 10 has an invalid length. [ 1465.163401][T29994] device syzkaller0 entered promiscuous mode [ 1467.877782][ T5054] wlan1: Trigger new scan to find an IBSS to join [ 1468.269264][T30022] IPv6: Can't replace route, no match found [ 1468.278360][T30024] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1468.302469][T30033] netlink: 'syz.0.7888': attribute type 10 has an invalid length. [ 1468.314837][T30040] netlink: 35840 bytes leftover after parsing attributes in process `syz.5.7890'. [ 1469.877889][ T5054] wlan1: Creating new IBSS network, BSSID 5e:11:12:6c:0b:1f [ 1473.044378][T30087] IPv6: Can't replace route, no match found [ 1473.072587][T30078] À: port 1(vlan0) entered blocking state [ 1473.142039][T30078] À: port 1(vlan0) entered disabled state [ 1473.340477][T30078] device vlan0 entered promiscuous mode [ 1473.585644][T30087] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1473.600227][T30088] À: port 1(vlan0) entered blocking state [ 1473.606183][T30088] À: port 1(vlan0) entered forwarding state [ 1473.614171][T30088] IPv6: ADDRCONF(NETDEV_CHANGE): À: link becomes ready [ 1473.637927][T30080] netlink: 'syz.0.7903': attribute type 10 has an invalid length. [ 1473.662659][T30091] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7905'. [ 1473.677760][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): À: link becomes ready [ 1473.692546][T30094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7906'. [ 1474.594362][T30116] netlink: 'syz.5.7912': attribute type 10 has an invalid length. [ 1474.827490][T30116] device bridge_slave_1 left promiscuous mode [ 1474.844991][T30116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.026415][T30126] IPv6: Can't replace route, no match found [ 1475.053054][T30126] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1475.255409][T30128] netlink: 'syz.1.7918': attribute type 10 has an invalid length. [ 1475.855307][T30145] netlink: 'syz.1.7923': attribute type 29 has an invalid length. [ 1475.874104][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1475.938497][T30145] netlink: 'syz.1.7923': attribute type 3 has an invalid length. [ 1475.954430][T30145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7923'. [ 1477.207756][T30170] device syzkaller0 entered promiscuous mode [ 1477.343312][T30175] IPv6: Can't replace route, no match found [ 1477.364418][T30177] netlink: 'syz.3.7934': attribute type 10 has an invalid length. [ 1477.400599][T30179] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1478.914054][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1479.875995][ T5059] wlan1: Trigger new scan to find an IBSS to join [ 1480.486275][T30201] netlink: 'syz.4.7941': attribute type 4 has an invalid length. [ 1480.505242][T30201] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7941'. [ 1481.043974][T30220] IPv6: Can't replace route, no match found [ 1481.064993][T30220] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1481.173006][T30219] netlink: 'syz.3.7947': attribute type 10 has an invalid length. [ 1481.377034][T30227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1481.695449][T30237] FAULT_INJECTION: forcing a failure. [ 1481.695449][T30237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1481.742486][T30237] CPU: 1 PID: 30237 Comm: syz.5.7954 Not tainted syzkaller #0 [ 1481.750116][T30237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1481.760211][T30237] Call Trace: [ 1481.763526][T30237] [ 1481.766490][T30237] dump_stack_lvl+0x188/0x24e [ 1481.771223][T30237] ? show_regs_print_info+0x12/0x12 [ 1481.776462][T30237] ? load_image+0x400/0x400 [ 1481.781035][T30237] ? __might_fault+0xa6/0x120 [ 1481.785762][T30237] should_fail_ex+0x399/0x4d0 [ 1481.790481][T30237] copyin+0x1b/0x120 [ 1481.794426][T30237] _copy_from_iter+0x447/0x1130 [ 1481.799321][T30237] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 1481.804737][T30237] ? copyout_mc+0x110/0x110 [ 1481.809284][T30237] ? __virt_addr_valid+0x188/0x540 [ 1481.814449][T30237] ? __virt_addr_valid+0x188/0x540 [ 1481.819726][T30237] ? __virt_addr_valid+0x465/0x540 [ 1481.824904][T30237] ? __check_object_size+0x500/0xa40 [ 1481.830231][T30237] skb_copy_datagram_from_iter+0xef/0x690 [ 1481.835992][T30237] ? skb_put+0x117/0x210 [ 1481.840363][T30237] packet_sendmsg+0x3727/0x4e60 [ 1481.845270][T30237] ? __might_sleep+0xd0/0xd0 [ 1481.849904][T30237] ? verify_lock_unused+0x140/0x140 [ 1481.855155][T30237] ? aa_sk_perm+0x81f/0x950 [ 1481.859702][T30237] ? packet_getsockopt+0x9a0/0x9a0 [ 1481.864871][T30237] ? aa_sock_msg_perm+0x94/0x150 [ 1481.869867][T30237] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1481.875185][T30237] ? security_socket_sendmsg+0x7c/0xa0 [ 1481.880690][T30237] ? packet_getsockopt+0x9a0/0x9a0 [ 1481.885919][T30237] ____sys_sendmsg+0x5be/0x970 [ 1481.890736][T30237] ? __sys_sendmsg_sock+0x30/0x30 [ 1481.895797][T30237] ? __import_iovec+0x315/0x500 [ 1481.900705][T30237] ? import_iovec+0x6f/0xa0 [ 1481.905244][T30237] ___sys_sendmsg+0x2a2/0x360 [ 1481.910068][T30237] ? __sys_sendmsg+0x290/0x290 [ 1481.914911][T30237] ? __lock_acquire+0x7d10/0x7d10 [ 1481.920036][T30237] __se_sys_sendmsg+0x1bb/0x2a0 [ 1481.925009][T30237] ? __x64_sys_sendmsg+0x80/0x80 [ 1481.930095][T30237] ? lockdep_hardirqs_on+0x94/0x140 [ 1481.935332][T30237] do_syscall_64+0x4c/0xa0 [ 1481.939790][T30237] ? clear_bhb_loop+0x60/0xb0 [ 1481.944506][T30237] ? clear_bhb_loop+0x60/0xb0 [ 1481.949222][T30237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1481.955157][T30237] RIP: 0033:0x7f1306f9c819 [ 1481.959610][T30237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.979254][T30237] RSP: 002b:00007f1307dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.987701][T30237] RAX: ffffffffffffffda RBX: 00007f1307215fa0 RCX: 00007f1306f9c819 [ 1481.995706][T30237] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1482.003704][T30237] RBP: 00007f1307dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.011818][T30237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.019929][T30237] R13: 00007f1307216038 R14: 00007f1307215fa0 R15: 00007fff991c6238 [ 1482.027951][T30237] [ 1482.033743][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1482.121210][ T5068] wlan1: Creating new IBSS network, BSSID 9a:39:b6:3a:e2:aa [ 1482.787274][T30247] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7956'. [ 1482.913134][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1482.982971][T30247] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1483.060755][T30256] delete_channel: no stack [ 1483.088890][T30256] delete_channel: no stack [ 1483.526456][T30271] IPv6: Can't replace route, no match found [ 1483.673214][ T5054] wlan1: Creating new IBSS network, BSSID 42:81:f5:02:8f:00 [ 1483.722953][T30271] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1483.827180][T30267] netlink: 'syz.5.7963': attribute type 10 has an invalid length. [ 1484.554089][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.560530][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.432862][T30316] netlink: 'syz.5.7978': attribute type 10 has an invalid length. [ 1485.497707][T30308] delete_channel: no stack [ 1485.821121][T30327] IPv6: Can't replace route, no match found [ 1485.843459][T30327] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1485.872740][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1486.130631][T30334] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7981'. [ 1487.260531][T30347] device syzkaller0 entered promiscuous mode [ 1487.882657][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1489.878925][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1491.633310][T30369] netlink: 'syz.5.7993': attribute type 10 has an invalid length. [ 1491.652378][T30378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1491.872588][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1491.907886][T30382] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7996'. [ 1492.042065][T30392] IPv6: Can't replace route, no match found [ 1492.081310][T30392] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1492.111412][T30394] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8001'. [ 1492.250830][T30398] FAULT_INJECTION: forcing a failure. [ 1492.250830][T30398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.272676][T30398] CPU: 0 PID: 30398 Comm: syz.5.8002 Not tainted syzkaller #0 [ 1492.280218][T30398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1492.290309][T30398] Call Trace: [ 1492.293624][T30398] [ 1492.296588][T30398] dump_stack_lvl+0x188/0x24e [ 1492.301320][T30398] ? show_regs_print_info+0x12/0x12 [ 1492.306561][T30398] ? load_image+0x400/0x400 [ 1492.311109][T30398] ? __might_fault+0xa6/0x120 [ 1492.315901][T30398] should_fail_ex+0x399/0x4d0 [ 1492.320603][T30398] copyin+0x1b/0x120 [ 1492.324547][T30398] _copy_from_iter+0x559/0x1130 [ 1492.329452][T30398] ? copyout_mc+0x110/0x110 [ 1492.333991][T30398] ? __virt_addr_valid+0x188/0x540 [ 1492.339141][T30398] ? __virt_addr_valid+0x188/0x540 [ 1492.344370][T30398] ? __virt_addr_valid+0x465/0x540 [ 1492.349510][T30398] ? __check_object_size+0x500/0xa40 [ 1492.354823][T30398] skb_copy_datagram_from_iter+0xef/0x690 [ 1492.360577][T30398] ? skb_put+0x117/0x210 [ 1492.364952][T30398] packet_sendmsg+0x3727/0x4e60 [ 1492.369853][T30398] ? __might_sleep+0xd0/0xd0 [ 1492.374467][T30398] ? verify_lock_unused+0x140/0x140 [ 1492.379712][T30398] ? aa_sk_perm+0x81f/0x950 [ 1492.384250][T30398] ? packet_getsockopt+0x9a0/0x9a0 [ 1492.389423][T30398] ? aa_sock_msg_perm+0x94/0x150 [ 1492.394387][T30398] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1492.399700][T30398] ? security_socket_sendmsg+0x7c/0xa0 [ 1492.405190][T30398] ? packet_getsockopt+0x9a0/0x9a0 [ 1492.410331][T30398] ____sys_sendmsg+0x5be/0x970 [ 1492.415131][T30398] ? __sys_sendmsg_sock+0x30/0x30 [ 1492.420179][T30398] ? __import_iovec+0x315/0x500 [ 1492.425069][T30398] ? import_iovec+0x6f/0xa0 [ 1492.429612][T30398] ___sys_sendmsg+0x2a2/0x360 [ 1492.434387][T30398] ? __sys_sendmsg+0x290/0x290 [ 1492.439227][T30398] ? __lock_acquire+0x7d10/0x7d10 [ 1492.444318][T30398] __se_sys_sendmsg+0x1bb/0x2a0 [ 1492.449312][T30398] ? __x64_sys_sendmsg+0x80/0x80 [ 1492.454298][T30398] ? lockdep_hardirqs_on+0x94/0x140 [ 1492.459525][T30398] do_syscall_64+0x4c/0xa0 [ 1492.463976][T30398] ? clear_bhb_loop+0x60/0xb0 [ 1492.468681][T30398] ? clear_bhb_loop+0x60/0xb0 [ 1492.473386][T30398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1492.479744][T30398] RIP: 0033:0x7f1306f9c819 [ 1492.484193][T30398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.503853][T30398] RSP: 002b:00007f1307dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1492.512315][T30398] RAX: ffffffffffffffda RBX: 00007f1307215fa0 RCX: 00007f1306f9c819 [ 1492.520313][T30398] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1492.528367][T30398] RBP: 00007f1307dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.536368][T30398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.544357][T30398] R13: 00007f1307216038 R14: 00007f1307215fa0 R15: 00007fff991c6238 [ 1492.552373][T30398] [ 1493.019697][T30410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8005'. [ 1493.180677][T30411] netlink: 'syz.5.8007': attribute type 10 has an invalid length. [ 1494.361973][T30442] IPv6: Can't replace route, no match found [ 1494.412438][T30442] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1495.810166][T30466] netlink: 'syz.4.8027': attribute type 10 has an invalid length. [ 1496.124955][T30486] IPv6: Can't replace route, no match found [ 1496.182783][T30486] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1497.591885][T30515] FAULT_INJECTION: forcing a failure. [ 1497.591885][T30515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1497.618354][T30515] CPU: 0 PID: 30515 Comm: syz.5.8043 Not tainted syzkaller #0 [ 1497.625900][T30515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1497.635983][T30515] Call Trace: [ 1497.639286][T30515] [ 1497.642243][T30515] dump_stack_lvl+0x188/0x24e [ 1497.646963][T30515] ? show_regs_print_info+0x12/0x12 [ 1497.652198][T30515] ? load_image+0x400/0x400 [ 1497.656735][T30515] ? __might_fault+0xa6/0x120 [ 1497.661449][T30515] should_fail_ex+0x399/0x4d0 [ 1497.666161][T30515] copyin+0x1b/0x120 [ 1497.670095][T30515] _copy_from_iter+0x559/0x1130 [ 1497.674997][T30515] ? copyout_mc+0x110/0x110 [ 1497.679536][T30515] ? __virt_addr_valid+0x188/0x540 [ 1497.684685][T30515] ? __virt_addr_valid+0x188/0x540 [ 1497.689840][T30515] ? __virt_addr_valid+0x465/0x540 [ 1497.694989][T30515] ? __check_object_size+0x500/0xa40 [ 1497.700318][T30515] skb_copy_datagram_from_iter+0xef/0x690 [ 1497.706330][T30515] ? skb_put+0x117/0x210 [ 1497.710583][T30515] packet_sendmsg+0x3727/0x4e60 [ 1497.715444][T30515] ? __might_sleep+0xd0/0xd0 [ 1497.720067][T30515] ? verify_lock_unused+0x140/0x140 [ 1497.725277][T30515] ? aa_sk_perm+0x81f/0x950 [ 1497.729853][T30515] ? packet_getsockopt+0x9a0/0x9a0 [ 1497.734994][T30515] ? aa_sock_msg_perm+0x94/0x150 [ 1497.739932][T30515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1497.745213][T30515] ? security_socket_sendmsg+0x7c/0xa0 [ 1497.750684][T30515] ? packet_getsockopt+0x9a0/0x9a0 [ 1497.755850][T30515] ____sys_sendmsg+0x5be/0x970 [ 1497.760623][T30515] ? __sys_sendmsg_sock+0x30/0x30 [ 1497.765757][T30515] ? __import_iovec+0x315/0x500 [ 1497.770664][T30515] ? import_iovec+0x6f/0xa0 [ 1497.775216][T30515] ___sys_sendmsg+0x2a2/0x360 [ 1497.779905][T30515] ? __sys_sendmsg+0x290/0x290 [ 1497.784770][T30515] ? __lock_acquire+0x7d10/0x7d10 [ 1497.789861][T30515] __se_sys_sendmsg+0x1bb/0x2a0 [ 1497.794893][T30515] ? __x64_sys_sendmsg+0x80/0x80 [ 1497.800033][T30515] ? lockdep_hardirqs_on+0x94/0x140 [ 1497.805247][T30515] do_syscall_64+0x4c/0xa0 [ 1497.809691][T30515] ? clear_bhb_loop+0x60/0xb0 [ 1497.814384][T30515] ? clear_bhb_loop+0x60/0xb0 [ 1497.819104][T30515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1497.825020][T30515] RIP: 0033:0x7f1306f9c819 [ 1497.829558][T30515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.849267][T30515] RSP: 002b:00007f1307dd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1497.857690][T30515] RAX: ffffffffffffffda RBX: 00007f1307215fa0 RCX: 00007f1306f9c819 [ 1497.865666][T30515] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1497.873742][T30515] RBP: 00007f1307dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.881722][T30515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.889742][T30515] R13: 00007f1307216038 R14: 00007f1307215fa0 R15: 00007fff991c6238 [ 1497.897878][T30515] [ 1498.834261][ T4412] wlan1: Trigger new scan to find an IBSS to join [ 1500.337278][T30498] device syzkaller0 entered promiscuous mode [ 1502.379874][T30508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8040'. [ 1502.391848][T30523] netlink: 'syz.5.8046': attribute type 10 has an invalid length. [ 1502.571638][T30535] IPv6: Can't replace route, no match found [ 1502.630851][T30541] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1504.217105][T30576] netlink: 'syz.4.8064': attribute type 10 has an invalid length. [ 1504.835883][T30601] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1504.960959][T30596] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1505.070916][T30596] bond0: (slave bond_slave_0): Releasing backup interface [ 1505.281183][T30596] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1505.473574][T30622] FAULT_INJECTION: forcing a failure. [ 1505.473574][T30622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.498456][T30622] CPU: 1 PID: 30622 Comm: syz.4.8078 Not tainted syzkaller #0 [ 1505.506016][T30622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1505.516482][T30622] Call Trace: [ 1505.519803][T30622] [ 1505.522772][T30622] dump_stack_lvl+0x188/0x24e [ 1505.527598][T30622] ? show_regs_print_info+0x12/0x12 [ 1505.532853][T30622] ? load_image+0x400/0x400 [ 1505.536954][T30596] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1505.537382][T30622] ? __might_fault+0xa6/0x120 [ 1505.551313][T30622] should_fail_ex+0x399/0x4d0 [ 1505.556039][T30622] copyin+0x1b/0x120 [ 1505.559987][T30622] _copy_from_iter+0x559/0x1130 [ 1505.564901][T30622] ? copyout_mc+0x110/0x110 [ 1505.569451][T30622] ? __virt_addr_valid+0x188/0x540 [ 1505.574607][T30622] ? __virt_addr_valid+0x188/0x540 [ 1505.579768][T30622] ? __virt_addr_valid+0x465/0x540 [ 1505.584914][T30622] ? __check_object_size+0x500/0xa40 [ 1505.590218][T30622] skb_copy_datagram_from_iter+0xef/0x690 [ 1505.595956][T30622] ? skb_put+0x117/0x210 [ 1505.600223][T30622] packet_sendmsg+0x3727/0x4e60 [ 1505.605101][T30622] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1505.611706][T30622] ? __might_sleep+0xd0/0xd0 [ 1505.616305][T30622] ? verify_lock_unused+0x140/0x140 [ 1505.621528][T30622] ? aa_sk_perm+0x81f/0x950 [ 1505.626050][T30622] ? packet_getsockopt+0x9a0/0x9a0 [ 1505.631178][T30622] ? aa_sock_msg_perm+0x94/0x150 [ 1505.636129][T30622] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1505.641421][T30622] ? security_socket_sendmsg+0x7c/0xa0 [ 1505.646905][T30622] ? packet_getsockopt+0x9a0/0x9a0 [ 1505.652028][T30622] ____sys_sendmsg+0x5be/0x970 [ 1505.656819][T30622] ? __sys_sendmsg_sock+0x30/0x30 [ 1505.661871][T30622] ? __import_iovec+0x315/0x500 [ 1505.666740][T30622] ? import_iovec+0x6f/0xa0 [ 1505.671258][T30622] ___sys_sendmsg+0x2a2/0x360 [ 1505.675957][T30622] ? __sys_sendmsg+0x290/0x290 [ 1505.680757][T30622] ? trace_call_bpf+0xbf/0x6b0 [ 1505.685561][T30622] __se_sys_sendmsg+0x1bb/0x2a0 [ 1505.690433][T30622] ? __x64_sys_sendmsg+0x80/0x80 [ 1505.695410][T30622] ? lockdep_hardirqs_on+0x94/0x140 [ 1505.700809][T30622] do_syscall_64+0x4c/0xa0 [ 1505.705249][T30622] ? clear_bhb_loop+0x60/0xb0 [ 1505.709940][T30622] ? clear_bhb_loop+0x60/0xb0 [ 1505.714644][T30622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1505.720555][T30622] RIP: 0033:0x7fc0d719c819 [ 1505.724989][T30622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.744613][T30622] RSP: 002b:00007fc0d7f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.753049][T30622] RAX: ffffffffffffffda RBX: 00007fc0d7415fa0 RCX: 00007fc0d719c819 [ 1505.761031][T30622] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1505.769010][T30622] RBP: 00007fc0d7f87090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.777077][T30622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1505.785057][T30622] R13: 00007fc0d7416038 R14: 00007fc0d7415fa0 R15: 00007ffe4d1cb9b8 [ 1505.793055][T30622] [ 1506.909686][T25542] wlan1: Trigger new scan to find an IBSS to join [ 1507.069941][T30642] netlink: 'syz.3.8083': attribute type 10 has an invalid length. [ 1507.836579][T30652] IPv6: Can't replace route, no match found [ 1507.978972][T30654] device syzkaller0 entered promiscuous mode [ 1507.993752][T30652] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1508.187635][T30658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8088'. [ 1510.929721][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1511.878728][ T5068] wlan1: Trigger new scan to find an IBSS to join [ 1512.532814][T30692] netlink: 'syz.5.8098': attribute type 10 has an invalid length. [ 1512.763169][T30707] netlink: 'syz.4.8103': attribute type 10 has an invalid length. [ 1512.797666][T30707] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.8103'. [ 1512.834721][ T4412] wlan1: Creating new IBSS network, BSSID 3a:7d:50:0e:82:00 [ 1512.845732][T30711] IPv6: Can't replace route, no match found [ 1512.882666][T30711] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1512.889639][ T5059] ------------[ cut here ]------------ [ 1512.897858][ T5059] WARNING: CPU: 1 PID: 5059 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 1512.907789][ T5059] Modules linked in: [ 1512.911729][ T5059] CPU: 1 PID: 5059 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 1512.919541][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1512.929675][ T5059] Workqueue: cfg80211 cfg80211_event_work [ 1512.935502][ T5059] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1512.941900][ T5059] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 a5 ed f7 0f 0b eb bb e8 08 a5 ed f7 <0f> 0b eb b2 e8 ff a4 ed f7 0f 0b e9 77 fd ff ff e8 f3 a4 ed f7 0f [ 1512.961639][ T5059] RSP: 0018:ffffc9000d05faa0 EFLAGS: 00010293 [ 1512.967797][ T5059] RAX: ffffffff8994cf88 RBX: dffffc0000000000 RCX: ffff88802b03bb80 [ 1512.975946][ T5059] RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 1512.983994][ T5059] RBP: ffffc9000d05fb70 R08: ffffffff90af72a7 R09: 1ffffffff215ee54 [ 1512.992012][ T5059] R10: dffffc0000000000 R11: fffffbfff215ee55 R12: ffff88807a3e35f8 [ 1513.000077][ T5059] R13: 1ffff92001a0bf5c R14: 000000000000001f R15: ffff8880792c0c90 [ 1513.008121][ T5059] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1513.017144][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1513.023802][ T5059] CR2: 00007f9bea9456b8 CR3: 00000000525c5000 CR4: 00000000003506e0 [ 1513.031827][ T5059] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1513.039886][ T5059] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 1513.047934][ T5059] Call Trace: [ 1513.051250][ T5059] [ 1513.054279][ T5059] ? mutex_lock_nested+0x10/0x10 [ 1513.059280][ T5059] ? trace_rdev_return_void+0x240/0x240 [ 1513.064934][ T5059] cfg80211_process_wdev_events+0x3ad/0x550 [ 1513.070889][ T5059] cfg80211_process_rdev_events+0x9d/0x110 [ 1513.076812][ T5059] ? process_one_work+0x7b0/0x1160 [ 1513.081972][ T5059] cfg80211_event_work+0x2b/0x40 [ 1513.087015][ T5059] process_one_work+0x8a2/0x1160 [ 1513.092028][ T5059] ? worker_detach_from_pool+0x240/0x240 [ 1513.097797][ T5059] ? _raw_spin_lock_irq+0x86/0xf0 [ 1513.102916][ T5059] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1513.107993][ T5059] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1513.113657][ T5059] ? kthread_data+0x4b/0xc0 [ 1513.118244][ T5059] worker_thread+0xaa2/0x1270 [ 1513.123049][ T5059] kthread+0x29d/0x330 [ 1513.127159][ T5059] ? worker_clr_flags+0x1a0/0x1a0 [ 1513.132228][ T5059] ? kthread_blkcg+0xd0/0xd0 [ 1513.136915][ T5059] ret_from_fork+0x1f/0x30 [ 1513.141492][ T5059] [ 1513.144647][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1513.151956][ T5059] CPU: 1 PID: 5059 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 1513.159612][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1513.169701][ T5059] Workqueue: cfg80211 cfg80211_event_work [ 1513.175490][ T5059] Call Trace: [ 1513.178804][ T5059] [ 1513.181764][ T5059] dump_stack_lvl+0x188/0x24e [ 1513.186489][ T5059] ? memcpy+0x3c/0x60 [ 1513.190498][ T5059] ? show_regs_print_info+0x12/0x12 [ 1513.195751][ T5059] ? load_image+0x400/0x400 [ 1513.200320][ T5059] panic+0x2e5/0x730 [ 1513.204251][ T5059] ? bpf_jit_dump+0xd0/0xd0 [ 1513.208793][ T5059] ? ret_from_fork+0x1f/0x30 [ 1513.213424][ T5059] __warn+0x2f8/0x4f0 [ 1513.217428][ T5059] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1513.223003][ T5059] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1513.228574][ T5059] report_bug+0x2ba/0x4f0 [ 1513.232938][ T5059] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1513.238521][ T5059] handle_bug+0x3a/0x70 [ 1513.242704][ T5059] exc_invalid_op+0x16/0x40 [ 1513.247233][ T5059] asm_exc_invalid_op+0x16/0x20 [ 1513.252105][ T5059] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1513.258292][ T5059] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 a5 ed f7 0f 0b eb bb e8 08 a5 ed f7 <0f> 0b eb b2 e8 ff a4 ed f7 0f 0b e9 77 fd ff ff e8 f3 a4 ed f7 0f [ 1513.277926][ T5059] RSP: 0018:ffffc9000d05faa0 EFLAGS: 00010293 [ 1513.284016][ T5059] RAX: ffffffff8994cf88 RBX: dffffc0000000000 RCX: ffff88802b03bb80 [ 1513.292016][ T5059] RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 1513.300008][ T5059] RBP: ffffc9000d05fb70 R08: ffffffff90af72a7 R09: 1ffffffff215ee54 [ 1513.307998][ T5059] R10: dffffc0000000000 R11: fffffbfff215ee55 R12: ffff88807a3e35f8 [ 1513.315988][ T5059] R13: 1ffff92001a0bf5c R14: 000000000000001f R15: ffff8880792c0c90 [ 1513.324078][ T5059] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1513.329674][ T5059] ? mutex_lock_nested+0x10/0x10 [ 1513.334641][ T5059] ? trace_rdev_return_void+0x240/0x240 [ 1513.340229][ T5059] cfg80211_process_wdev_events+0x3ad/0x550 [ 1513.346160][ T5059] cfg80211_process_rdev_events+0x9d/0x110 [ 1513.351986][ T5059] ? process_one_work+0x7b0/0x1160 [ 1513.357120][ T5059] cfg80211_event_work+0x2b/0x40 [ 1513.362095][ T5059] process_one_work+0x8a2/0x1160 [ 1513.367077][ T5059] ? worker_detach_from_pool+0x240/0x240 [ 1513.372735][ T5059] ? _raw_spin_lock_irq+0x86/0xf0 [ 1513.377792][ T5059] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1513.382849][ T5059] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1513.388416][ T5059] ? kthread_data+0x4b/0xc0 [ 1513.392953][ T5059] worker_thread+0xaa2/0x1270 [ 1513.397864][ T5059] kthread+0x29d/0x330 [ 1513.401949][ T5059] ? worker_clr_flags+0x1a0/0x1a0 [ 1513.406996][ T5059] ? kthread_blkcg+0xd0/0xd0 [ 1513.411614][ T5059] ret_from_fork+0x1f/0x30 [ 1513.416068][ T5059] [ 1513.419708][ T5059] Kernel Offset: disabled [ 1513.424165][ T5059] Rebooting in 86400 seconds..