last executing test programs: 10m43.219125762s ago: executing program 4 (id=4274): socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 10m42.757919961s ago: executing program 4 (id=4277): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x401}, 0x0, 0x6, 0xc2ba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b35d25a806f8c6394f91424fc60", 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x401}, 0x0, 0x6, 0xc2ba, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b35d25a806f8c6394f91424fc60", 0x14}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x4) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) (async) close(0x3) (async) 10m42.264716948s ago: executing program 4 (id=4283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 10m42.035128857s ago: executing program 4 (id=4286): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400008, 0x0, @perf_config_ext, 0x10c002, 0xac5f, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4010) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd28, 0xd00, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x8000, 0x10001}, 0x100410, 0x200, 0x2, 0x1, 0x7, 0x9, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r2, 0x1) 10m40.688398018s ago: executing program 4 (id=4292): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2, 0x0, 0xf401}, 0x0) 10m40.401493499s ago: executing program 4 (id=4297): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x82, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00ff0006000000080000000a00000000010000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000fbff0000000000000000850000009b000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff0882762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000040)="88f586a64cb271ec0f05171789e5f067accc1ea059ff648f36ab3f", &(0x7f0000000180)=""/169, &(0x7f0000000240)="96177d6fe2c63b1b9df326c91a73eed4541a26acb8e237fcd4a39d997ebd6bcdf88b656d6e6cb0aa70905515028eb43b1cfbba6d9d88f9aa707055f56685c92f5dd9c2d33e1a04a514b2fe954e206bc9c7411fd359b3d1c9a59a16b9babe48ee207b4e3202cf4090c7c3b812f16a64b00190e7696d460e9333bac7a533c6887f8cd1f774f0a22b3586118f6c0129d54972d3226e0de3e7315b07afde3b4e14437bc9ed09772640e87b4af4582563cf59dfd22e2fb9f10d6669b6aae74174921651dcdd34688a15f40820218a8e", &(0x7f0000000500)="18723d6714de1680236131f0b55192bdb34f8becd2080a07c2081b1d4e3ba8f2e0a6a3bbcc40241f024dac28b7562745c6be8a7217", 0xfffffff7, r2}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 10m25.193817945s ago: executing program 32 (id=4297): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x82, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00ff0006000000080000000a00000000010000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000fbff0000000000000000850000009b000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff0882762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000040)="88f586a64cb271ec0f05171789e5f067accc1ea059ff648f36ab3f", &(0x7f0000000180)=""/169, &(0x7f0000000240)="96177d6fe2c63b1b9df326c91a73eed4541a26acb8e237fcd4a39d997ebd6bcdf88b656d6e6cb0aa70905515028eb43b1cfbba6d9d88f9aa707055f56685c92f5dd9c2d33e1a04a514b2fe954e206bc9c7411fd359b3d1c9a59a16b9babe48ee207b4e3202cf4090c7c3b812f16a64b00190e7696d460e9333bac7a533c6887f8cd1f774f0a22b3586118f6c0129d54972d3226e0de3e7315b07afde3b4e14437bc9ed09772640e87b4af4582563cf59dfd22e2fb9f10d6669b6aae74174921651dcdd34688a15f40820218a8e", &(0x7f0000000500)="18723d6714de1680236131f0b55192bdb34f8becd2080a07c2081b1d4e3ba8f2e0a6a3bbcc40241f024dac28b7562745c6be8a7217", 0xfffffff7, r2}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 7.616638679s ago: executing program 1 (id=7638): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1}}}], 0x20}, 0x40c4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000007be6a636373ebc4575000000000000b9f63ec6ee06645d00ef02f82ef78f7a7468522ae5ca0488f800876b352a03c402320177722f749f7383371a185d298d912351b2ddc9a1676991830343135cbe11e9b72ea4ebc405a32a4fea8a7afa0b1ab6b8db9888645b0c00000014010910e29ca97743cda5d88400"/136, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x24000014) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xc, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) 7.591183155s ago: executing program 2 (id=7639): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="a866178f40fd84b2cf3a1924a1f9776cb7c94f7b9962334e986634a0d9afc5bf7dab14174077074015b8b2235f41a50ece7bea6d116a31e127b83549075de681e83f1203714f8bbf67b81c917345add826af8b8984ba31b3be4c36acd2b89003b68f3535e5f745908347a880be15f7e41ba1de5b1d6d677904950bf2455f536b29f833c2b79e91799043630c5c23e72da7117b3574e6ab596a791bc5136d4fc265ea1ad9ed0b5a0ae3701f60d11a414b21aedfe04cd72b8b906615abf71decb33db64a01f92bb7a0fd", 0xc9}, {&(0x7f0000000840)="6346000f1a1a96a29b05346840b03786e3789baabcd6c13143806882241240130d830492650a64bd6d18b24b944f7bb7ce30401b5926c4a8b0a2c8b712af68cc18c35153807404f17afe9f8361c0bf39400bbd5a11134eebd4b22d24cec66bb972bc917ca1ba181f66c1958cde953dbcbcd70bb3ee054eb23b6e41cb04480d24e5574ac9e02b13daca122dcd4e614df0675377f440d854b672a802d205e1c9482886847379ead8f20d1a5788a5566933bcf16a0fd83495497507ce95aa2106991a888c81d8aa6ed3ea8e6ee7b9e970", 0xcf}, {&(0x7f0000000940)="e3723aafae703e4a253326a40398565ac436aca1fe9813e501796f95bd1d2530a2200ed86363f7688305b7804f0780e30443c99c35ba767aedf5ccceb79af78377c7b3352f28ceaaa56b276b9ec304158aee57e92e6873c64f", 0x59}, {&(0x7f00000009c0)="04cd2b", 0x3}, {&(0x7f0000000a00)="81e8cc2abaf4e719f3678374812f71a8882a0f422f5bce10c3e8718f3fb7eb2f596fb09b40a146de6eb1de5024a571b536798064051ae0755fdf82bd0fa955b256debdaf3ecf3243cb6f951f92dbc4472716f2", 0x53}], 0x5}, 0x4010800) 7.395093899s ago: executing program 2 (id=7640): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ff00"/21], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x3ff800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000003}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8cda, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c000000020000000000001304000000005f5f00"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r7, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r8 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x5d, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x69, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x9, 0xb, 0x9, 0xe049, 0x81}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x0, 0x3}, 0x10, r10, 0x0, 0x4, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x2, 0xa}, {0x3, 0x1, 0x1, 0x1}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) r11 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$kcm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x541b, &(0x7f0000000180)) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) 4.386453627s ago: executing program 0 (id=7641): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff01, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.357705934s ago: executing program 1 (id=7651): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=0x1, @ANYBLOB="feffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000fe00000000000000000000000000007812ecf70a7948d953b49bf62485c5036463415b6e9e9d029ae36e5aaa8555d7b8cd3e7089e6c7af0d932625ff35962551606bd30c"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb0100180000000400"/26], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) recvmsg(r1, &(0x7f0000000980)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/43, 0x2b}, {0x0}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/66, 0x42}], 0x7, &(0x7f00000008c0)=""/138, 0x8a}, 0x2100) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0xff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x8c, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x40049409, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000010000270eef000000000000000095000000000000003d53e5765335adc97fbded47931032ac0bb12080c747e17f62ec056fd5f64cf887c5d7bfe7a84636a33e56727560567801202631b0b7d8bdd58d9886263b317cb6f346dc4e2418e1a77cdb2285f5761becd8a4abcdc7cc92dcc73d81abb71f8c77653f6f54a6c11cc5252d3403ddb8463f36a9e0"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={0x0, r5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="3eca", @ANYRES8], 0x9a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3460}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x6}]}, &(0x7f0000000b00)='syzkaller\x00', 0x0, 0xd3, &(0x7f0000000cc0)=""/211, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x0, 0xff}, 0x10, 0x56f1, 0xffffffffffffffff, 0x1, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f80)=[{0x5, 0x2, 0xa, 0x2}], 0x10, 0x15b20f0b}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 4.289039569s ago: executing program 5 (id=7642): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000004000000080000000100000000010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000000002300000000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x4, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000002d40)={&(0x7f0000002800)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002840)="2209a04ae605e553bfb652b6b1370704e7e76a721a67d52ce194c61c2af462b61722c9dcb18738e74f482f3348", 0x2d}, {&(0x7f0000002880)="1f5d2e769b64dcf443965b2d397f986ce8e3c857ede70e0fa8ad948f6abdfec5ac966625e5d9c67038188b14c11dc594726538b7fdc8483091a62cdf1bafa2d56512a26a5042087d115f8ca63f7905efc7bbf4c786b362637bd0cf43f8f243d7977b8915e2e29335a6ecf266bc1dd2504eb6b891b3a9ff3bf313e5b3ecfe04c6826ab5f20961efd7083cab6f8ea78af4b651a63d205e9c19ed7999f15c6b1e19ccd22e9ddca63885ecca667f5fa9e50786e4cc2eaf77775979efa65f49b7190b1ecd289bb9083f6427e20d9947c5c485e7e5072162d475db535a4aa13a13896ae298cc477e5f5091523b09f75f310a1ce326c69c42b022441a41abf5", 0xfc}, {&(0x7f0000002980)="4aed96d2e4abfb0c55b0598ee7808ca4393577d686633f9704ea8e209bee60e9e21f2385f9e254ac82b85f08eadcf29e1c1afa88eb172a19014933f6e10c58987c3f26021c9649ae585a913988e973c216180e4f8392116b5cbc31861f9a501ee8ead41a008b8d25fe230b4d9f71a6", 0x6f}, {&(0x7f0000002a00)="8b69b79aba01b7d2f0efa29ebb78ea8c82ed6ac2f98d8dff2b2a60e72ff6da2fe77398a6187489d34d5401b50c91f3d5cebc59f51426b43736a92690d662737737d8e976", 0x44}, {&(0x7f0000002a80)="89b32e984bc4748de4bf13e6a034f8f98d6a5f73aa6d2056b091347d529f510e6414248154e02810ad5a16e8bd268e833c6651ce800c5e81075c57d978c09db5cb15af549ea98d3a78a815df88241b4fb6fcb697055314b0e6a9cfdb5345adea45e2609addc4ef707cba5b6de9d0e696886a9eb221808e", 0x77}, {&(0x7f0000002b00)="6d6cffc7a86c380b15b921e4f68503856da353ec56fb95105021d56f0eaf9f0802b3a3ce30fea189c5816ea86fe1734784ebe76e06aff3185fbf9e32bd07ccb22c08e8999cceabb79ab75c6f6b874faab04f91612b39d05e05b0bf634feb50c539eb320b291f342b0a451089055bedd251c4dbae9685e85ff3947bbbfc58afc996420d5778a285077aa219d4aefaee004dbbcc09856c637b1aeab61d15c3439d51c690a06fec0c721e4c72ae33a2c165843edf4176594b0f83b229ded5df61", 0xbf}, {&(0x7f0000002bc0)="475a3f7bfcd557ad3a9f252b5335f93480b1468a8032940efd84b0141f45d7c556007e953e5d5b004e1f5f327d0f4489e493aad4cd53", 0x36}], 0x7, &(0x7f0000002c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4ad7}}, @ip_ttl={{0x14}}, @ip_retopts={{0x28, 0x0, 0x7, {[@end, @rr={0x7, 0x17, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}], 0xc0}, 0x20000000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001240)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000011c0)={0x0, 0x80, 0xf0, 0x5, 0x7, 0x6, 0x0, 0x32a398d, 0x40400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x6dd30aba6b9bafec, 0x7, 0xfffffff8, 0x4, 0x75fe, 0x1, 0xb887, 0x0, 0x10000, 0x0, 0x2}, r4, 0xe, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002640)={r0, 0xe0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0], 0x0, 0x9d, &(0x7f00000014c0)=[{}, {}], 0x10, 0x10, &(0x7f0000002480), &(0x7f00000024c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000002500)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002680)={0x6, 0x0}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x3}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_lsm={0x1d, 0x10, &(0x7f0000001280)=@raw=[@generic={0x0, 0x0, 0x6, 0x2, 0x97}, @jmp={0x5, 0x1, 0xd, 0x0, 0x9, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, @jmp={0x5, 0x1, 0xb, 0x9, 0x4, 0x0, 0xfffffffffffffff0}], &(0x7f0000001300)='GPL\x00', 0xd, 0xb2, &(0x7f0000001340)=""/178, 0x41100, 0x6, '\x00', r5, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x4, &(0x7f00000026c0)=[r2, r2, r3], &(0x7f0000002700)=[{0x3, 0x1, 0x6, 0x8}, {0x2, 0x1, 0x0, 0x6}, {0x5, 0x3, 0x5, 0xb}, {0x0, 0x4, 0x0, 0x1}], 0x10, 0x1a9e}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b707000000010000487000000000000050000000000000ff95000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 4.218538366s ago: executing program 2 (id=7644): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r4, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000480)="06fa03076844ba8cb89e14", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x21, 0x2, 0x2, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0xa000000a, 0xfffc, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'pimreg\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) 4.031616328s ago: executing program 0 (id=7645): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="62031400d70000000010072f1eafbcf72be12b11087f5c582d26116642c499301267b9736146e7ab21f9e02728f2b80188a39f1108d4cce47b7acbcb0ed0d7cdaacb885512b1398c2e07be9a471b86b4d206de31b9723833bb3cdcdb9e94beb8acae8233927af4a760059d265034c70ad834d2146804a9a9f9f8873637d556b4af12dbd5b75bc6a57a471d8afa8dbaa0200a867d1a6fc2ec1d611123b8f14a", 0x9f}, {&(0x7f0000000280)="1d0606091cfb3752211378dcb770ad184812690611e9964dbd9e0c86ef36d7c3411385284c817144f882b9b75df7ab98296f2e1d068ed91a44fa7b1c64a604f7e9279665ec1a7d6d496f", 0x4a}], 0x2}, 0x4004051) 3.687276877s ago: executing program 0 (id=7646): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000680), 0x2}, 0x8000, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x800, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000580), 0x8}, 0x10180, 0x4, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83126bd66e323593, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair(0x1d, 0x800, 0x2b06, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x1fffffffffffff45, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT=r0, @ANYRES64=r3], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc3c) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000008800000004000000020000000000001304000000005f5f00"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r5, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="1400000016000b63d25a732ff4da8857d5f352b4", 0x14}], 0x1}, 0x4044) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62a020000009f0ba1f848390000005e140602000000000e000a00feb20af3028000001294", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000000)={'wlan0\x00'}) 3.611185054s ago: executing program 1 (id=7658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4000000}, 0x10c002, 0xac7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c27004065582f9e0ff008001fffffe1ffff8100632f88a886dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 3.520718485s ago: executing program 5 (id=7648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x5, 0x3, &(0x7f0000002180)=ANY=[], &(0x7f0000000400)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x9, 0xd, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x5, 0x2, 0x0, r1}, @map_idx={0x18, 0x5}, @generic={0x44, 0x5, 0xf, 0x1, 0x9}, @ldst={0x0, 0x2, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1006, 0x0, 0x0, 0x0, 0xf5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}]}, &(0x7f0000000b40)='syzkaller\x00', 0xfffffffb, 0xc4, &(0x7f0000001ec0)=""/196, 0x41100, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001fc0)={0x1, 0xd, 0x7, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000002000)=[r1, 0x1, r1], &(0x7f0000002040)=[{0x2, 0x4, 0x5, 0x3}, {0x2, 0x2, 0x4, 0x3}, {0x0, 0x4, 0x4, 0x9}, {0x3, 0x5, 0xe, 0x8}, {0x0, 0x3, 0xc, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 3.475331196s ago: executing program 0 (id=7649): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x1005, &(0x7f0000001840)=""/4101}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'batadv_slave_1\x00', 0x1000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x2, [{0xb, 0x4, 0x78}, {0x7, 0x0, 0x541b}]}, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0xffffffee, [{0xf, 0x2}, {0x1, 0x1, 0xfffffffe}, {0xb, 0x0, 0x80}, {0x7, 0x0, 0x7f}, {0x9, 0x4, 0xf33a}, {0x2, 0x0, 0x8}, {0xe, 0x1, 0xf8}]}]}, {0x0, [0x2e]}}, &(0x7f0000000980)=""/65, 0x9f, 0x41, 0x1, 0x3, 0x10000}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e000000ce0b0000070000000800000054200200", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000f6030000000800"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x0, 0xa, 0x8, 0x6, 0x100, 0xfffffffffffffffc}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @jmp={0x5, 0x1, 0x6, 0x3, 0xa, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x2, 0x7, 0xb, 0x1, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}]}, &(0x7f0000000600)='syzkaller\x00', 0x5, 0xe9, &(0x7f0000000640)=""/233, 0x41000, 0x20, '\x00', r9, 0x17, r10, 0x8, &(0x7f0000000a40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x1, 0x1, 0x9}, 0x10, 0x26f20, r1, 0x3, &(0x7f0000000b40)=[r11], &(0x7f0000000b80)=[{0x3, 0x5, 0x10, 0x9}, {0x4, 0x4}, {0x1, 0x3, 0x0, 0x5}], 0x10, 0x29fd}, 0x94) 3.256414286s ago: executing program 1 (id=7650): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="a866178f40fd84b2cf3a1924a1f9776cb7c94f7b9962334e986634a0d9afc5bf7dab14174077074015b8b2235f41a50ece7bea6d116a31e127b83549075de681e83f1203714f8bbf67b81c917345add826af8b8984ba31b3be4c36acd2b89003b68f3535e5f745908347a880be15f7e41ba1de5b1d6d677904950bf2455f536b29f833c2b79e91799043630c5c23e72da7117b3574e6ab596a791bc5136d4fc265ea1ad9ed0b5a0ae3701f60d11a414b21aedfe04cd72b8b906615abf71decb33db64a01f92bb7a0fd", 0xc9}, {&(0x7f0000000840)="6346000f1a1a96a29b05346840b03786e3789baabcd6c13143806882241240130d830492650a64bd6d18b24b944f7bb7ce30401b5926c4a8b0a2c8b712af68cc18c35153807404f17afe9f8361c0bf39400bbd5a11134eebd4b22d24cec66bb972bc917ca1ba181f66c1958cde953dbcbcd70bb3ee054eb23b6e41cb04480d24e5574ac9e02b13daca122dcd4e614df0675377f440d854b672a802d205e1c9482886847379ead8f20d1a5788a5566933bcf16a0fd83495497507ce95aa2106991a888c81d8aa6ed3ea8e6ee7b9e970", 0xcf}, {&(0x7f0000000940)="e3723aafae703e4a253326a40398565ac436aca1fe9813e501796f95bd1d2530a2200ed86363f7688305b7804f0780e30443c99c35ba767aedf5ccceb79af78377c7b3352f28ceaaa56b276b9ec304158aee57e92e6873c64f", 0x59}, {&(0x7f00000009c0)="04cd2b", 0x3}, {&(0x7f0000000a00)="81e8cc2abaf4e719f3678374812f71a8882a0f422f5bce10c3e8718f3fb7eb2f596fb09b40a146de6eb1de5024a571b536798064051ae0755fdf82bd0fa955b256debdaf3ecf3243cb6f951f92dbc4472716f2", 0x53}], 0x5}, 0x4010800) 3.244679038s ago: executing program 3 (id=7652): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1}}}], 0x20}, 0x40c4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000007be6a636373ebc4575000000000000b9f63ec6ee06645d00ef02f82ef78f7a7468522ae5ca0488f800876b352a03c402320177722f749f7383371a185d298d912351b2ddc9a1676991830343135cbe11e9b72ea4ebc405a32a4fea8a7afa0b1ab6b8db9888645b0c00000014010910e29ca97743cda5d88400"/136, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x24000014) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xc, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) 3.076347396s ago: executing program 2 (id=7653): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb0120, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x4, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.042588644s ago: executing program 5 (id=7654): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402002000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) 2.987555837s ago: executing program 1 (id=7655): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000400), 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8, 0x1040bb, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x0, 0x56}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r1, &(0x7f0000000600), &(0x7f0000000980)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x40040) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) close(r6) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x1458}, 0x240480d1) 2.924565222s ago: executing program 3 (id=7656): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff01, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.457054658s ago: executing program 5 (id=7657): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f0000001300)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="62031400d70000000010072f1eafbcf72be12b11087f5c582d26116642c499301267b9736146e7ab21f9e02728f2b80188a39f1108d4cce47b7acbcb0ed0d7cdaacb885512b1398c2e07be9a471b86b4d206de31b9723833bb3cdcdb9e94beb8acae8233927af4a760059d265034c70ad834d2146804a9a9f9f8873637d556b4af12dbd5b75bc6a57a471d8afa8dbaa0200a867d1a6fc2ec1d611123b8f14aaa75f346bbffbd0420044b", 0xaa}, {&(0x7f0000000280)="1d0606091cfb3752211378dcb770ad184812690611e9964dbd9e0c86ef36d7c3411385284c817144f882b9b75df7ab98296f2e1d068ed91a44fa7b1c64a604f7e9279665ec1a7d6d496f", 0x4a}], 0x2}, 0x4004051) 2.456510788s ago: executing program 0 (id=7659): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x280e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x2005, 0x89, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x71}, 0x10c002, 0xac5d, 0x9, 0x0, 0x8, 0xd2cf, 0x200, 0x0, 0x2}, 0x0, 0xffffffffbfffffff, r0, 0x8) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x3, 0x9, 0x2, 0xfe, 0x0, 0x6, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0x1}, 0x2430, 0x0, 0x0, 0x7, 0x2, 0xc278, 0xe34, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xc004) close(r1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x28}, 0x880) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xcb60, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x414}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802e2a2100d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.374388867s ago: executing program 3 (id=7660): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18004000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000ac00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r3, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000f00)=[{}], 0x8, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001140), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x1f, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='GPL\x00', 0xb3, 0x0, 0x0, 0x41100, 0x8, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000001180)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000011c0)={0x2, 0x4, 0x1000, 0xffff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001200)=[{0x0, 0x2, 0x1, 0xa}, {0x5, 0x1, 0xb, 0x7}, {0x1, 0x5, 0x9, 0x7}, {0x0, 0x5, 0x9, 0xa}, {0x2, 0x1, 0xe}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, 0x0, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), &(0x7f00000008c0), 0x0, 0x2e, &(0x7f0000000940), 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x8, 0xf3, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x100591, 0x0, 0xc2aa, 0x0, 0x66, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r7 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)="d8", 0x1}], 0x1}, 0x44000) sendmsg(r7, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) 885.496377ms ago: executing program 5 (id=7661): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000680), 0x2}, 0x8000, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x800, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000580), 0x8}, 0x10180, 0x4, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83126bd66e323593, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair(0x1d, 0x800, 0x2b06, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x1fffffffffffff45, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1, @ANYRESOCT=0x0, @ANYRES64, @ANYRESOCT=r0, @ANYRES64=r3], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc3c) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000008800000004000000020000000000001304000000005f5f00"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r5, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="1400000016000b63d25a732ff4da8857d5f352b4", 0x14}], 0x1}, 0x4044) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62a020000009f0ba1f848390000005e140602000000000e000a00feb20af3028000001294", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000000)={'wlan0\x00'}) 835.813179ms ago: executing program 1 (id=7662): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x9, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, 0x0, 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0021402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 834.971649ms ago: executing program 2 (id=7663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4000000}, 0x10c002, 0xac7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c27004065582f9e0ff008001fffffe1ffff8100632f88a886dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 791.004259ms ago: executing program 3 (id=7664): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x7b, &(0x7f0000000000), 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) sendmsg$inet(r13, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x20000004) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@const={0x8, 0x0, 0x0, 0xa, 0x4}, @typedef={0x7}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x15, 0x0, 0x42, 0x4}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000680)=""/220, 0x49, 0xdc, 0x0, 0x81, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x4, '\x00', 0x0, r14, 0x5, 0x5, 0x5}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300000005000000000000433b367f0bf8b960a2d5bb205570f0b700000000000000007e5b8d315f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x70017ec6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @generic={0xb, 0x6, 0x9, 0xffff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 722.712545ms ago: executing program 0 (id=7665): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10020, 0x0, 0xc2ba}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400008, 0x0, @perf_config_ext, 0x10c002, 0xac5f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, r1, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) sendmsg(r5, &(0x7f0000003a80)={&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f00000036c0)=[{&(0x7f00000001c0)="07bcaaae6a61a506c2d0a353278288c75fafe437549b0b17aab39e6fae1f27058749c627b85e5701ad1915c48f338416e19920130a33e27ab3607a400e6ef49e9c501a23dbf6029dfae14fa25715544ae44d4b8c65473455ac68f53a9720f8054342bf9864a6da9038e92b2625096078661448c771ce54db8fea2d03c409aaf9a7d245c568cc61028fc65586ec52a281590bc133ab694b38bf6ba1e58794b5e2fbd2b859de3619fadc0997b8de47b4217d1885c30c1114b039e77e5eec4198d81d6ae1e174ca4641164f6128a57cbbb570338cf1cef24b5158bd2d62bbae3e0f65b4b1cb4eb362dac4d3acf859be4f", 0xef}, {&(0x7f00000002c0)="926897b0ee3c5c4306f5213232cb996553c295d1023e00805fc0fa5966cb790d01d4a1da144af7fba4847356961fc8fc691bf4", 0x33}, {&(0x7f0000001680)="7d47faa97ef19bb0b788071b645f632f9bf34b7b09636b3fb53c273ff4aff2989aac75ef66422eb43c92e55b8b5b3f6cee956476be3f776f1db44f81303a2346301ade017f3063a079b64a41e42c6e6d68ac2d8c1d0911086a502d33c5541d70c7b0186b87c9b09969fcb95f10060688e4a896c7c45731df97cd54bbcf74d231f483800cc9b87db1ca6019ee69ef917a72c43adbfc191ce293697f72c61fbae31b17cc891ac2654bd471f87a99550cb7771ada4fb58c8d7b81aa78dd8aa1e961eb70b1c6cb65b23c6de31463814654410c2f9d7124772520e4a132dc90fcd5d1885a709e1912f8098ab550e8f4feecdf7ff7927fa66594fd76ee64fbadf2a8bfce90e19051f424a9d4c32b1ec80337c16f3611852221d60fc7ba2e3ceaa54889bd442a82cae4beeda845512fdd5463ec943707cdb53c323570e7404fbc3161023d91e98cf94607d61f01eba31d3c52cdf9ce898d20a735ebea3fde039f3b2e1b877e70bcc0a220f3a18a633867a8cfd1d141f127d97b684ce9831f945513a30169334beedc19a2152de35ab90203c97f99e9bd172cc1bdc0f38af97e944380c9649eeb60e55d9283f6dc30f0401afb49cd491b9192c5bb0d1e19376047fb579c7ecda1c7a2580de68742de2346d6d9a8cc8d56385b8147ae0e253df2999b41314aa4e87bb8d899a23969653eeda4ad0fb807b95ddfb1ea16746c97c5b33a40022fe11f38fb611b043002e032eef944007dfcf39d3e9003895d868f79d22bdefb951c2f6b4472d5b3425a22c6edd8e1a5cdc4394bb5fdb05752fb07e701df92636df4f702271c07ac4271bce22ad07c59fde1155ce28f66d0d2891de007c107d015f478087ebc57ed73f15a4363036bc90fd2fa7a202ce1d630c8ca58e759406a7d4731576a072fa4dfcedeabef95809197ceaa092e5389bfc97c648bf42649f99a78eb3d47906236773ecbddaa02b1e875912b096af665fcd3240ff6445e8ac2fae6b4a25a425e2509d77948664e833b441594651ed338a5b4dbfead981907ce2b4c991ff1d833110e2713a6e22a16b3f68580e495d5bb2c0cb8dc2b5ea887c8268590d42045fdbe876ce7311abff2b81c0a30d5c489dd9dafa8e06bd3d85a30712ec2be02f1cc706d72e910bf266dea2a328d53e26993ba557436b3c3c2aa6aff3d62535dae073b0ca3e4fce5edbf125a00739d68bb197d9ba66d69d5d2904ae9df72675007383b94fea8e5e33e837707267a9a2a55cb1fa7a12e45e8ab8c290e3954c45fde198a1b81f8a7ac4a45d5a18514e7939c3c9f8b1f1e9bdd5197bd22805aa350362aa9c1b51f81c747f442c824050be47d7b4c7555416a19d91e3867e64eebab8aea0787375c779e142f5c04eb0d8d1ec28f47a9296cce5b0a4fed6f8f03717fc0e965880f9401b16198a1b7e964c5e1ae98269b07a6a8ea62f37a52e1e565422758b1083ca91c455af1551141172399db521bd8becc2e2c725c7085bed1d32ed27065df8dcc2641ad8127bdc7671d40499fda96ab6482ab0158b88f12ae462c7c0ccc23bab3245870d26371b99b420448c47ba7a468973625efeef37a386fff83c049807bd85b6219d20d46dc7cb1f7549196c123787a11c13a19933691be0dff080e79ca681b1dc95059ed48850ac10f366b862368fa873eaeb2c998873b039a497f114702486c59aa959f38dd3d32b606fd32de962643cf170937402c83c83c6aee3ed099a56e84a22d0b61606e178d611ad0528f44d0de7eaca3354377954d676e1688d55c64db9be7bc199932c50980b3e1ec9b8927fa5b3219a227ac5643e40f6467e551ab9c4b690c7deb4f5ca8242bd51832ed7acf1cec3bc6e47165f7015cf35106327db0ada1861a23f0a766782440de3b643f497bad7356e658f5735bae02aa5246acc1b44e3d0ff7441be7a81885ffe512ccdf39f8e9028dbb8801074ce78ed5835728de0cf82450fdf9dd2070f260e6ac34bd4a433c089b7ea3c4c4ff08aa3338a17eac644b21897427a0b95e83af7d2bdec8335097509be3b8c84a430e6a1f4ee7465108b33c36eff71c18e4267fb1d81afda3947411a02e446bf29afbdac47a65c6461e30b1db57d9945b12906c158150fbaeb1676025bf4d31187c9cc9f93b8f15b31f31b81cd614d2edf38e3523b2adfb99be6716bce968efb24168016d62d01c3d23571eae0b29d1905a65a6d2fe2ac9d4b24f5a6996da46afac62328fd001aa2b21d748530234f43faa866020623ccc9e1d31898ba3b190cb0033d5dfecc6d8eb3396d81cc8078e9af7b5a9523ca8a03c073023753a6c7399b1552e1c2a6cbe354b3a00252697db1ddf0ab3bd02f5b39963cacaf77ecf694200fdbf87285ab5e4070aa425dcc8439e5baa6d2cdf39f9363b77fa67b5f1346ddd1836d4d59bb02ba50933929f2b7c43f2e777025674d7354483ebac3573b7669960ffda14f2ed0aea71f1c39882d602b3bd7355d53c9fe0da54c26fe856e1a2d5dcf888334ba1559bf9ed6ae7ce839c9ea004c3817a3dc87db7b9f320715d51ff3b907e900b589138f74554efa06eece41fff28b132e726746484a2774894bfcf2bfe4c4083cdf7df14afc980243b607ffef27660af7f57cf561ac0e8509c6255325bbc843ed8b35a37cabb51ac3143adedce5f07e7210b04d6be84720cec9dff5e9afafdd8f40a48841b73d1e2909f6eca871c97fa89aa70111e728b1d9837113011e63ab2a3551f7eeebb9ee4478d83df3924c672d562585ef1fd1b4f23f1a105fdb3d9a1ee47744b6f3e839d994cf2ddfd49a0b5d5a814a796ee1aa132c92a81bcfb597e52e32e68d3e8a512932759fa47ab0fd23c3047f20d6f665c47d50b5ef1acf654e8042cfbde379789103f25845a2466fc7ff2eceb94d022b019c6ab09c053aac8cb467bb9eda8eb3d8942777eec69998dafec064a9873995a9209e8bfe4798e77780656263fdb7b0ca4a64f3b41809d3b317e5f40396e16b13cb8fc48f82d0676639e898773f1d4ba3e8ff08b550d697fd7971b71f3b424405f73acae5b312f232445622385c9ad439c4603a5309924c7ada659a3edb24e18923c02a05a581e4226aa82b96421a7805c42bd715173230751c186a80a916c2faf48c159be25ea9f5d09f9307bb904a9e91ba64a57395c7addf57897c0a9aaf6364ba121fa28b55fea20e215cdbc86f5be12d3de3ebef00d17b6aef96051b80e55942518816f06c4b6433aeb18e938a9fba280788bd1e5ef8b247c26639428cbf7ed585c5830c0162725fb207e34fc9ff30cad230b16c782fd10c96766231ba2a323a27759015b8698995df70d30f56f5d46c65c15b9b52d58535a199528315dae798248c474cc3e90cd784caa213d9a4eda59010c79a8433fe056427a9362320c3dca8109e619c1110f8e60c6e354922d4493abd70c63174999a9e6c5fc1241036c7202f1701cf2be8dba096c6ed78a78123bf417ba089e99f5019d794d7143e3b274192dd5b1fcbbacf850645b3e9e725c3590b8c60c0caa62dfb7b4edc5f047e8794144551250842579940b928c3b95a516293d91223e095b31018859da1e2dd043e5c57871946236349cb4ff35009cd8735e3d48e2db270fa22be834395c9a9ca77d2b6472d337ff6feb65e631c217e9cb55a6f9e695bf3ccd920f99d52f681e8d6a1e65951a652c799d4f0b36afcafc1de92368d397b6df8c6a67738d3c4568a4b8080b0e9e32844f39512cb2429dd4fedd6c2a704c307db90d1cccd15761fae31955b6417389ba9a44ea66d0ec7584bbb7eaa273c9ae175927d45f3ee79b150377256584dc1da0bfe9c14108b7e752a7b3838eac4e711dcdf47883201342755a33221d316b3d227c748e4e08afd2d43eca2797558893d61eeb04899b9d111e0b91c1e7ea31510c856481623162374a8eaada691cc0f6dec9674659aa1e78974670825cd348e98c1496222fd93760eb419458e880c255e8df3e2e212ee5485d31328427e740e520401de5eddd237741e7ffb788df4fc8b09730940fdd680db90bc57d5b58d1b5a2529a4f958f94413cfdcc280f72add01325d9ee081a8b44f0159e59292c8adbf1cba5539f1d88dec5e02f89eefb99c2aeaab2cd7af7a930f531570d2c4098712c9d3741196cc5640e1eef301c383f84532200680609740f18fb15b946290b630b0f6657c9cf9b2d62721931da93dc2f78ba5511f39eb7306a9a6c284fcd3c1be96a7815b61e6fee9c7766adca61704c9464f708f18015ed9d5647b0405966982237e4cf581bc9e1a4cae29d25fe33cafbf24b6194a434cea94d801af75cda4eb1e735d61de32330b38c5d2b8afa6d3dea298ee49472bdead5046e690ae53b6f4e39449a6dbfa1427eeee9f9903491a2c4d8f50aaadd240cf1832c54cad863754244a3c2204b730d24e249579f9a622ce6a3daf429b3bc648521c2459aa4d5e305b0dad92408b764b84f52e73c05539a7d1db4d98dfcb82586430c94fcc13399329a1099ff3c0f93fb4ad750f3c200d53ebeacd11748d5e4f1793d54c5379e6bfdf0720c9eb6d4712d011e7d8cdde0eaf07676dae5061403d21b7b243f79c5607eb10c81c3353b8c2f470796999bfebad4f68745e70d7f6ad2b5cc1dee3eeb2be6d84f5dd9def699a95440ea240a077ef2490b440d40b7dfe51cef4821021cd48ae4b38c694b8b87765dd00fc746cdf81ba660b9f63126998be7ae7b5cf6388fba5eb8dcec43459128a02b06be9379128d3a3dcd360bd1c04d0fb0d1e3c1869d272959573c0d156f9a9b5d96708acf413faa8bfc6d3fc30b539464a52be883ee417dc609cd6114a8a5197aabc55dfabdc344dffb0809511496ead47ace7cea74da9b03a1b7b073f90d86fa94734b8ae331622f1f77674ac89ec1c833a8c477a227d90d4160ab8a11e1bda14dc67207b291d6df7a272afac487cb5b47aa17b9d1b696ca16f76ee5d9e401a56920d93b740b317f86796d6530be865533d7310d2a570c38a0b1ac728e88c1e6e9562ec23e4de74055664dee0e95be0d87142f6d128d58a1d513a86d1a51fe4dcadbfe32958fdff5a62b217cf622e2851fdd0361b76293bb16d7661fc211f29579ddcd42ccf4b167aa5d0131e2e770516c5f252b9b4a710996e9ffed768a30add5d0178c818f738aedfc71dbbebc1bb655f24bd880297480a9e0906f7797b1c0efa098256d18cf615a7c8a4beaac1482849101cc48f608de4cbba94cd00380e364af5f1eaf4ccfa6ae7fdcbc657c39dac46cd7c1cd27d425506aea746eabe71868ce0bf05e4602cd37f51d100f33a4023cf19b560d636cb00483de8fb214dab3974dfeb137ef6a705712af936b1cf096a12a53726d0e1bcb7ec38900607b95d648f5d7074be904dd4fe886916307c615ac20f59abf2fbff3df0b3abf1b10b33c9a64f41a5e88033386db27ac3f36cc238d43a05fb1469b61b9db66adab3e29781ebbdbbd36aeead8a32456d0f178de1083b7c8f828a4430f4088539bda37285b757666a31de556b516d6a1ded2927979cfd8edeb176543fff43987f9511b8c2b7d9bc044f426892e77da072afa5e452c1de5d828dfccd1ab4e9ec21c748ad71a41180a13598234d514578d699ae0b352c72635fd46d8a627e2bb944c5700dacf4b4f3b190078b3d1938f2ef5c803108c445051fa32db0d0c9a990ac5b628ad50c899ec591a514267b80ed5f3259de855811437728cd2f20c270786a9a1f117840aedb536a4d03d3b42e50d529e2244c97f0c6d7a2f24f7453efa73977321a813dc1e28a82c960f", 0x1000}, {&(0x7f0000002680)}, {&(0x7f00000026c0)="e76bfbe6b21ec6d0f4531a2bf5c0019041db3543667f146be3c621db2641976b31935d5050c9061542e68a8a5096e459b35ec766b27a07450fe599758e7761309945af6fa4e4793076872bc9be44bc30d1e04454cd0a827af75bea2a16b57e1b34a1ac0881fd77a788e29f06ddfac93becf3bf09ea27a41d91347c0850cfa404e4dc437a6644a55ecb8ccabf144403f3ca8d8822deb3b68db96394235496530872b630c29728bc4275f85cb124fea58c79c4ff2ddd76bf12013d678825e4f472caab32e1c965355022308f23625aa5f6a5804d04e132e6bf5c78a08c04c3eb25daccdbf1e2af825e78f68da62c5a7cfd863aac978afdccc031f22f3b5c0b82cb1724e5057875350b984713bdf999b814219a0349e56355b63b64aa2cda892c1e80d87d6096d9ec2286ae44e46426a1130108db53275814f01920357311e1faeb1fc90ae85c4c3a360503c4a5b04e9271e4d5df1463be420234aa0e06f06b84f2fdf46e87f52cbcc9155814c691c460bc45adbf68e43f3325916186c45cadec4119fc7777d2e2504860a074045bebaadc2c3f51bae009628bb481a2a160f217966d445c610fc9ca1bd1b958cdab4de86f959d34cb82db1ce2cca47036b94ef904d2a6e1e40506568ce4ac8b064a42597f49e5ed4aecdcbfb885f745e6b0cbf485a9f7477439de79be65835b5c21501aec00aa182b2dfbb0fa114a891cd52222800d137ffce9852fa8ce3d8dc84521c1ab7868ec7ef1d28f874e00ff2193ecbe55fc761b178058f028a8488cb1b2842a1e3505e36a16cd7ebd60c2f02af2b6c5c457cb87e8c1a18739e75f5e30e6a8541c9432a629110478d145401eceabaf947adde0bb91322a8f37554ed503c7f1fbc6ce3238d50609979f8f37343b0729309250a3fd1031ea54760c1cebd65a41079fa0e1632af1d9285f2efa16037bbd1c4321dcaff69e593ad812df4a61e51c23e976b2982a6c9244c176bbe36e832a691c1142a6b5c9f983a4c56caa4d30828ae6f891b0cc0ba923e7c060b4dbd5ef463d5b8d5f538e923b8b444fb6592bb4bfbf13321a2527f06c3322f9a7b0f275598da3306caf53e93e25f36efcad1b7aaf9b450c405c73a99831e535c6b3ad39938c56aa4ab6e42623b1b7dd23617b38e364d64a7afd4a66174ca149d490759eaa05eb11f7c519982cf6b4ed691d846fb44cfe036312e68d62b82b179bbb3b69746c4079371f9e4610111859fe186763c3b514e129a1f588e0cb9bff7baf8cf30f7c9e4b93cfaff32c1e4dd31b9862a93c329a2cf7246846da6e96418ffcb8552d2669abcac0772c0f2e63f2a0c6510e2e011801f113b5e15b6f8221e63acc690f20dee4398d56285b591a8b817533e4e6aec9d0ab8af4fc1f14064b3007fb1cc4a3e2700882af5bf28388356510c780cc737dac48405df01def0ce6f1174c434a2d036f932aeff20c3dec7ac753fddbe4ee2bd7fcef8b6fcc0ac963a4b5fc157f814126f14562c9367cdd703c11f506b9dd7143f53693a3dea8a9fdc3d42d6fbe8c5c1ebeb4dcc3257dcffda6f5e0908aaab0033c24c0c9933e403d0a3e40a7f0c15f7e004c97163530f6b9dfe0dcfc14ecd42df829f12ece5e11187a910526b9c02c30f8a9f9e5b1891327b12e34b612448281b6a99d2db18de13efd0e4f276d94fd2214b8c6ef80c2cdf57276a50d71c2590fd4dbc4effd556e82c14b76e6880ce1d493243d4418b0be5724ae2cc730dd5316b94097eec7ea914fc6889e63763751c7e1dc7549732b30f2228b4802bc6585469afa5bd7bb207e9e38e1cde3c3ed502ca2e69998c930cf5748d7336f2cc1df9b9900bc33b482f8d0e94a7d66f8f531d18dc6e90e14927774b1d53786fb7813f1f3fcee85b1f7dd924c12003c44146bd19784c8ce2e22f86056ef88ed2fd1be7744e5a448f7477777ad996a3a1d2ddb1db3900dffef87ac3ceb26b9ef4235ce9fdb73f62f471b66bc6c8d1a70886a971ee3dc4f14e0863b357af6c9e88a8f0aa62d4310103152d3e7b726ccdebcfd567947cf42c924657b4a5c827d04736c976135fb4529a8acd968b0addf1979b23c902e7322d50116af6c9b29af399c9ded0b7588ac1d0fb3b03907b0a13c44ce28e6e66933c30d15beace72831db95116348eb492350b8096dc0eedae076292510500612266b061f121e648af0fce4dbee413f58c8f5074c51b591144143900aa61929f028188dcf0e79451c2e6415c2c6dc5c82c209231bdda77badf2fc2adee81c74a258e009392c42a31392ccafc1c1b312f475e5bd3b09e978a332d31a324052a133d8b085e3c23ecaaa744f294904d70c3effda09b9eb51f2e73c3870845bbfe43d3d2cac248ca2cd6194d34efaae8d55767f2ebd8a83ff09a8658774e7aec85b0907358e014f79dd98b757886c00929d0799d60865a286899c296dc5d3ea98aecc117b5a9e65b9498daaf3064ee034b920a1f133122f29fea04f69fac8cde5b56e6e5ea723db61673b67b481c650de908396e450ee53bcba37509f6f93337801b239a31385ffdf3694e752398235e42bcb0224c175a2d46adb707808c6af82657d9ce1a6c5a47664bedc7120e3206059c0dfef031e1ed502e47fa59b6689a8b9d2cb3634530d0033c3b0ae61af248316cf7a130088d8652470f755baffee649aac8d3f168c9251c0ac135e94faceda525e678c337db3ab8948116d455a1b929df54d146c812d9d26296d37b184764fbcd3c3ee2389b7d8b4ce9dd8e8b9cc46121d44ae50b5ebdaee92959559335ef2aeff52fe7d0579fd1248d2d5846389b422ab06895eb4a28eac428b6ba29472c50ca4fc5996c15bd14763fe325e9d6dc311093582776e47aa1fc889daf8046ffb29c57fa0b07a0a9388341a23b1d73f97aed24cba49cc39af3e383bc40b07f4687347dbe250eceeb08d16ae6104751364584ea0033b70e23dfd19140c15f5d1250b129bac9456ffac2605fa203f49c907c98c84ec04c1cb06fe34c015b6feaf75f1dc22833fa214fbdb143ad9d471ff2b953d3a803213a63def146ddc30a9412ebc63a1948b6742246601efa3693a13f7cb7b77f55b41f7f9c7b8ac262f0b36781460fe702f4929a84a1926971599a0eaf114b4cd2850cc5aec479b4d9aa96dde3b870302e95a9e637d2165b0c79a86002686afd7e13f4443a78797fb1e893b95f22285104349059475e87bfcf0fe54570349d1a87e22632933db374c2d0d2bc23a9037f20cfb6e51528550fec1a6cdca0530fb0da200f4e82b408ba28fb26adc9f48a9551fec52c24c67a50198f5a0a23585c33681b5a6383d370ab5b0e4aacd85fa3fd3156a99e0dd4c820fd4e3db8793797042cf70b866e88eba7be79028598a5f71d5db587e863d4ed32fa8ea76b1272b8035093f824a90c366735c0a562bf69762fcf5d5e81018608c76a2e02ba6ab5944485a2fdea6e242720f868a9a6cb8aa6b7a147a16fadd475d478db9b4f04ae09633c33c4a5c6cfac788473a1db7ba6b28b55600b6f0cbe39c564c880d088ac8c7198f7bac5f0f9180f9aa9674d95e8e13e35595eacd8bb9f4dd563a1bd98b3f37f19171e62cbee2202c81674d102bc738f43235fb18f7d0b31f06f9533ddf7f3f88a8f7d55de3e81aa93120997cc9572e78121bfd0630fe150f0619668d87a6d20709c17afe05d8d348960abbac4631de59f7dc87ed9c3b6a69521da8bbd6ba7cb7425d14b9a867277b1444df054c131921bdda03419b02b16b532627d72cd719bba11408bcbe7913de379d53eaf8030ed122f8ef0f613f246be96f6eae7a979b9d6cd712e52a2d6ca26c740536b94606d99e59dc04acdd63b259509164f93c96703ce080142e9d5d14463d2ea6cd6c64d6d6d8382570a7d49cf94766b3f5f5ec5ac9fc3ea50438bfcdff8db6c96b2c5c5281d2a01261fe34e934bd8e3f54d5836f254d8eb28538df24e88db22f3a8aaf673bba1a3145e47a36c621523e25df946145fe90e760931e4dc873d88ec5e28228e2475a537e4898e243b820bf03792e10b7565fa58dc8fa349942ae58b00db715510f55f0e780d4c446ea62bef618da5d7c5b05bac8d38897767edfe34c0dad89b2b0ae673ff865e922e10ee4354820bc22b1c22f8126a4411dbd03c71fd52c39a8f3d75423647babd4d73f886fbb3a8f87c8302d466bf4d450943cf3a8ba6ab00806b8f032ad3c418647fb99b02989d54957c0c49366594a4281aa1bc36b1172c8ba66be6301cd06febdee56d14ea26d165822c9e8d71b30a650735c4b57f1e230b10d560691ae62ad2b346123af74b7825f798355d30eba73cf2a46eabf5098e93b476cfae3806cdd9d7dfc0fd1be73a48517862b0d6cc171e4d90caa4d95ea62fbef5bcbfce96bd6d67b62568cfb11a48ea66ae4ff424378b8917e4d165d84a5a224ea5e82a5506eb41c3a98e7fe4986383c13d308ad562b94fb8e852f0c0d927774fd8b7cf38e91cabbbf628b965680870d924f59a19709bb5ed83b64c033d71fb7f32e9636ab5a834b8b6df2dd35fa23f2dc2df7ac11b68f8486ba4e15316c0eb5cd68b1d447f2f95012ae2571ad0e1dbf605759285085654d48acca4b46b04d985bc644d2ad716a58d6f2dd26b286d077253777df04a351a7e65ae01fc466056784080c42059f14ffedf3e6f55dba4296388372341ad7b361eda8298813105e642560b886670b04332382812f8c786a50750957f8c6a90c434a6973a8944cdcaa882effa96609d798ce0197a85ee7a0a1f3938bc9e9f88ca0e68fb3df7de345a1076819e8760007f7e554d18682d13354aa233ea68edd20e457c5484e3903a06981f84d3f74777dd3206d1a90520b225fd490a9c9bc02695980a1e4b4789ddbdb8cdbe83ce44f297b61526a74788a36c545bb28cad0ee09dcfb9824072e455013da5d02bbf3fc194d7b9e94ab928d71c97ea1f1484bc5d1dc9c205cae235ebc85fe58bc424b3294498291cd866df8737d1a826b86ef6a743278ac1e16cfa65e259b89b323b3dce3da17a2946fa68d9732aeeffde19399db08a7a75e97fd637232c8e5c0b4ba62d24c121732ffd16ad022f78cba03c9e9b520f68e94f3f747df28b476d75df683976314980be1beed6ea6925f4a3050b77c34e326f279d80ff5f7a78542ee77142deec395036b62dc5cc8f6db77d45c462b4de2a4a4696fbd199f4f8ea3aa842b5a1cf42883bcf3be1b27958f650fb058518a7d6d0205f24dfa7e2bd07a149f937ecbaf0c9df659074346c08b1d2bb59ce0a8c877afef191aaf2124c8607838840a4374e3976d8e668164e6e20a58e787f7a7d3aaaba13e09016f54fa947fd91580903f28b6b22fab6c4fd458f9534b06906c85e651015d8db066abb0b916e073b6009f6a895411f2983a539236c4da42616a9465b7c6dbb442649b5fc444d38ceaeeb6cc190ca51b23d28a220e113a1faf1bf9dc6378af1f032ce93b5f677434418b12d4b54779c8be04602c56dc00482b7ebdf4b8d048c455f3ae9ea24fcf65b66a27ca1b50331aa52d7a1ab95cc52a761b97ed1e167bc0408228af62dedf61794ed063d431e2d90e8ea9a6866954916ea58668d11808cf68a3569539cc1887f01f8c141561ec93eeee11b69a630d2c33645b63eb1ad99ea84baed974942cbc94c6fc9afd31c04d6f5944636eee5659696108bd32d0712ecf035d33217fd0655b1715ed3afdad6169d500fec35181426e013224dc2f4f0a87f82abd94dea37582f1bef05aca8c9353f521d47b8905e94fb198c472b89a62057297554d2ac0f390", 0x1000}], 0x5, &(0x7f0000003740)=[{0x20, 0x10b, 0x0, "09a568860f137a3d6a62a0222b4664"}, {0x30, 0x101, 0xa5e, "af54c24ed2e866ba3831eb85edd7ee598e134f0ab9e422422052645e5d"}, {0x80, 0x10d, 0x8, "5d12866118b3a64d6e133bce74bf98768833c9ecef814ce3370fe3b22bc7948170dd6456cc79c102c30580047cedecf4823e914a8f057775fa02a0c5898395bbd4467e8eed70e28a967454a411783b1bf7fa5ece4df736669f2626aed0da5709766ba1046defd9edbee8e70ef3"}, {0xa0, 0x10f, 0x4, "566593c243d1d721efd88518f22d4ba8df94a67a1363e4000e1e0ed01a36369351478448e84a7b831d4a696ddf74e43bb578bd824db40e0f2dc4942f31001e1cc6ec55a2ad35b2b89b6386b4cb4f5354bdd2bb9a0c82258a35a8afc5c5a9e8d6b1757b259ab060d43bef18fec9c05e208947ce696ba2c288e90625c286fc77861241ecc4d82a4d1a4eb7a7d8"}, {0xb0, 0x6, 0xce, "242a2b930734d779d790214c09936eb3706596429c0f8579cc736e4a265f0920934493abd09438c562ef5c5d05c5186ab277f66292535a6a2499a4ef95ee39ffe39e61cec207150f05b02db0693bee57b2e419754a0e38b88f4e88048d3154a6d9da3fd3e647fd6897656e5162858756fbc55ba482f4f730acfacc8e5c59c8417bed9a79dfc13997f14b41de219017646982faebf4d4dfde00"}, {0xb0, 0x108, 0x28, "c25495f9db2c70a30d77713682c600a32fee1f242077217d9a0dd0b050c1b279b0bd2abdd17eeb8ec5948c68cc8cf414b470cfdb3210043d25e2c6f9df73c85554b116ab1b4af3708c113982ca977a205f7df8aa963aee991dddf657e0b8226b8d91614a1f0cb6faf82a5aa838a568fd69d4faa41ef57b90d7fda06038c767b2bfaba2282135bd1c0fc6c458c52f1999a8839253763f6616e9e85a8b04dc55"}, {0x50, 0x10b, 0x4, "5c97116a007a8269548423407fa16f01b2778a7bd008f796f26fc87200b4cc22b3c4843e300b4ca849c16d176aeb3e4f7a0a958d0febaafa6af2334cc05612f2"}], 0x320}, 0x8000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r6, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000500000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000100000d03"], 0x0, 0x65}, 0x28) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x8c54) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4010) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0), 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x8000, 0x10001}, 0x100410, 0x200, 0x2, 0x1, 0x7, 0x9, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r8, 0x1) 409.102697ms ago: executing program 3 (id=7666): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="a866178f40fd84b2cf3a1924a1f9776cb7c94f7b9962334e986634a0d9afc5bf7dab14174077074015b8b2235f41a50ece7bea6d116a31e127b83549075de681e83f1203714f8bbf67b81c917345add826af8b8984ba31b3be4c36acd2b89003b68f3535e5f745908347a880be15f7e41ba1de5b1d6d677904950bf2455f536b29f833c2b79e91799043630c5c23e72da7117b3574e6ab596a791bc5136d4fc265ea1ad9ed0b5a0ae3701f60d11a414b21aedfe04cd72b8b906615abf71decb33db64a01f92bb7a0fd", 0xc9}, {&(0x7f0000000840)="6346000f1a1a96a29b05346840b03786e3789baabcd6c13143806882241240130d830492650a64bd6d18b24b944f7bb7ce30401b5926c4a8b0a2c8b712af68cc18c35153807404f17afe9f8361c0bf39400bbd5a11134eebd4b22d24cec66bb972bc917ca1ba181f66c1958cde953dbcbcd70bb3ee054eb23b6e41cb04480d24e5574ac9e02b13daca122dcd4e614df0675377f440d854b672a802d205e1c9482886847379ead8f20d1a5788a5566933bcf16a0fd83495497507ce95aa2106991a888c81d8aa6ed3ea8e6ee7b9e970", 0xcf}, {&(0x7f0000000940)="e3723aafae703e4a253326a40398565ac436aca1fe9813e501796f95bd1d2530a2200ed86363f7688305b7804f0780e30443c99c35ba767aedf5ccceb79af78377c7b3352f28ceaaa56b276b9ec304158aee57e92e6873c64f", 0x59}, {&(0x7f00000009c0)="04cd2b", 0x3}, {&(0x7f0000000a00)="81e8cc2abaf4e719f3678374812f71a8882a0f422f5bce10c3e8718f3fb7eb2f596fb09b40a146de6eb1de5024a571b536798064051ae0755fdf82bd0fa955b256debdaf3ecf3243cb6f951f92dbc4472716f2", 0x53}], 0x5}, 0x4010800) 345.475181ms ago: executing program 5 (id=7667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001400000002", 0x29}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x92613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00"/20, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000030000000100"/25], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x1, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000200)=r5, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb8, 0x0, &(0x7f00000001c0)='N', 0x0, 0xb8ff}, 0x48) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4090) socket$kcm(0x10, 0x2, 0x0) 195.667725ms ago: executing program 2 (id=7668): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @link_local}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10021, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183000000100000000000000030000009500c60000002000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000d00)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 0s ago: executing program 3 (id=7669): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x40c4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000007be6a636373ebc4575000000000000b9f63ec6ee06645d00ef02f82ef78f7a7468522ae5ca0488f800876b352a03c402320177722f749f7383371a185d298d912351b2ddc9a1676991830343135cbe11e9b72ea4ebc405a32a4fea8a7afa0b1ab6b8db9888645b0c00000014010910e29ca97743cda5d88400"/136, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x24000014) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xc, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) kernel console output (not intermixed with test programs): es in process `syz.1.6620'. [ 1132.052897][T15235] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1132.114531][T24468] IPv6: …: Disabled Multicast RS [ 1132.258346][T24480] delete_channel: no stack [ 1132.385484][T24476] netlink: 'syz.3.6621': attribute type 39 has an invalid length. [ 1132.845803][T24496] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1132.881392][T24502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6625'. [ 1132.981990][T24493] netlink: 'syz.2.6626': attribute type 21 has an invalid length. [ 1132.993468][T24493] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.6626'. [ 1133.681264][T24508] netlink: 'syz.3.6627': attribute type 10 has an invalid length. [ 1133.716414][T24508] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6627'. [ 1133.880004][T17090] wlan1: Trigger new scan to find an IBSS to join [ 1134.105202][T24514] netlink: 'syz.5.6629': attribute type 10 has an invalid length. [ 1136.828330][T24542] netlink: 'syz.3.6636': attribute type 10 has an invalid length. [ 1136.838900][T17094] wlan1: Trigger new scan to find an IBSS to join [ 1137.588639][T24542] team0: Device nlmon0 is of different type [ 1137.724884][T24551] netlink: 'syz.1.6637': attribute type 10 has an invalid length. [ 1137.738445][T24551] __nla_validate_parse: 1 callbacks suppressed [ 1137.738463][T24551] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6637'. [ 1137.759339][T24558] FAULT_INJECTION: forcing a failure. [ 1137.759339][T24558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.785909][T24554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1137.798621][T24558] CPU: 0 PID: 24558 Comm: syz.0.6640 Not tainted syzkaller #0 [ 1137.806157][T24558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1137.816265][T24558] Call Trace: [ 1137.819585][T24558] [ 1137.822544][T24558] dump_stack_lvl+0x188/0x24e [ 1137.827254][T24558] ? show_regs_print_info+0x12/0x12 [ 1137.832483][T24558] ? load_image+0x410/0x410 [ 1137.837023][T24558] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1137.843217][T24558] should_fail_ex+0x390/0x4c0 [ 1137.847935][T24558] copyin+0x1b/0x120 [ 1137.851867][T24558] _copy_from_iter+0x559/0x1130 [ 1137.856759][T24558] ? copyout_mc+0x110/0x110 [ 1137.861287][T24558] ? __virt_addr_valid+0x188/0x540 [ 1137.866425][T24558] ? __virt_addr_valid+0x188/0x540 [ 1137.871571][T24558] ? __virt_addr_valid+0x467/0x540 [ 1137.876716][T24558] ? __phys_addr_symbol+0x2b/0x70 [ 1137.881770][T24558] ? __check_object_size+0x4f6/0xa70 [ 1137.887079][T24558] netlink_sendmsg+0x755/0xbd0 [ 1137.891876][T24558] ? netlink_getsockopt+0x550/0x550 [ 1137.897125][T24558] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1137.902708][T24558] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1137.908017][T24558] ? security_socket_sendmsg+0x7c/0xa0 [ 1137.913506][T24558] ? netlink_getsockopt+0x550/0x550 [ 1137.918741][T24558] ____sys_sendmsg+0x5ed/0x9a0 [ 1137.923535][T24558] ? __sys_sendmsg_sock+0x30/0x30 [ 1137.928578][T24558] ? __import_iovec+0x306/0x510 [ 1137.933469][T24558] ? import_iovec+0x6f/0xa0 [ 1137.938011][T24558] ___sys_sendmsg+0x2a2/0x360 [ 1137.942716][T24558] ? __sys_sendmsg+0x2a0/0x2a0 [ 1137.947535][T24558] __se_sys_sendmsg+0x1c3/0x2b0 [ 1137.952417][T24558] ? __x64_sys_sendmsg+0x80/0x80 [ 1137.957391][T24558] ? lockdep_hardirqs_on+0x94/0x140 [ 1137.962626][T24558] do_syscall_64+0x4c/0xa0 [ 1137.967071][T24558] ? clear_bhb_loop+0x60/0xb0 [ 1137.971770][T24558] ? clear_bhb_loop+0x60/0xb0 [ 1137.976491][T24558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1137.982416][T24558] RIP: 0033:0x7faca7d9e159 [ 1137.986855][T24558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.006482][T24558] RSP: 002b:00007faca8ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.014924][T24558] RAX: ffffffffffffffda RBX: 00007faca8025fa0 RCX: 00007faca7d9e159 [ 1138.022915][T24558] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1138.030904][T24558] RBP: 00007faca8ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.038897][T24558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.046890][T24558] R13: 00007faca8026038 R14: 00007faca8025fa0 R15: 00007ffc71fdf1f8 [ 1138.054901][T24558] [ 1138.073240][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1138.088050][T24555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1138.195597][T24560] netlink: 'syz.5.6642': attribute type 10 has an invalid length. [ 1138.207481][T24560] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6642'. [ 1138.337115][T24568] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1138.389263][T24566] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.6644'. [ 1138.410166][T24569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6644'. [ 1138.427207][T24566] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1138.478576][T24570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6643'. [ 1138.564287][T24575] netlink: 'syz.5.6646': attribute type 3 has an invalid length. [ 1138.586255][T24575] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6646'. [ 1139.031691][T24584] FAULT_INJECTION: forcing a failure. [ 1139.031691][T24584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.061462][T24584] CPU: 1 PID: 24584 Comm: syz.5.6650 Not tainted syzkaller #0 [ 1139.068991][T24584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1139.079092][T24584] Call Trace: [ 1139.082412][T24584] [ 1139.085382][T24584] dump_stack_lvl+0x188/0x24e [ 1139.090112][T24584] ? show_regs_print_info+0x12/0x12 [ 1139.095379][T24584] ? load_image+0x410/0x410 [ 1139.099964][T24584] ? __lock_acquire+0x7c40/0x7c40 [ 1139.105067][T24584] should_fail_ex+0x390/0x4c0 [ 1139.109808][T24584] _copy_from_user+0x2c/0x170 [ 1139.114566][T24584] ethtool_set_one_feature+0x96/0x200 [ 1139.120077][T24584] ? ethtool_get_one_feature+0x1a0/0x1a0 [ 1139.125767][T24584] ? security_capable+0x85/0xb0 [ 1139.130669][T24584] dev_ethtool+0xebc/0x12f0 [ 1139.135232][T24584] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1139.141578][T24584] ? __lock_acquire+0x7c40/0x7c40 [ 1139.146662][T24584] ? lockdep_hardirqs_on+0x94/0x140 [ 1139.151914][T24584] ? full_name_hash+0x8e/0xe0 [ 1139.156634][T24584] ? dev_load+0x1d/0x1e0 [ 1139.160920][T24584] ? dev_load+0x1d/0x1e0 [ 1139.165208][T24584] dev_ioctl+0x474/0xe80 [ 1139.169506][T24584] sock_do_ioctl+0x245/0x320 [ 1139.174148][T24584] ? sock_show_fdinfo+0xb0/0xb0 [ 1139.179055][T24584] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1139.185084][T24584] ? lock_chain_count+0x20/0x20 [ 1139.189998][T24584] sock_ioctl+0x48a/0x700 [ 1139.194384][T24584] ? sock_poll+0x420/0x420 [ 1139.198848][T24584] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1139.205053][T24584] ? __se_sys_ioctl+0x91/0x170 [ 1139.209869][T24584] ? sock_poll+0x420/0x420 [ 1139.214325][T24584] __se_sys_ioctl+0xfa/0x170 [ 1139.218966][T24584] do_syscall_64+0x4c/0xa0 [ 1139.223423][T24584] ? clear_bhb_loop+0x60/0xb0 [ 1139.228140][T24584] ? clear_bhb_loop+0x60/0xb0 [ 1139.232861][T24584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.238859][T24584] RIP: 0033:0x7f091719e159 [ 1139.243316][T24584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.262972][T24584] RSP: 002b:00007f0917f99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.271453][T24584] RAX: ffffffffffffffda RBX: 00007f0917425fa0 RCX: 00007f091719e159 [ 1139.279489][T24584] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 1139.287501][T24584] RBP: 00007f0917f99090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.295517][T24584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.303534][T24584] R13: 00007f0917426038 R14: 00007f0917425fa0 R15: 00007ffd34075398 [ 1139.311571][T24584] [ 1139.467940][T17094] wlan1: Creating new IBSS network, BSSID ca:f4:64:e1:68:ce [ 1140.042091][T24605] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6656'. [ 1140.089027][T24604] netlink: 'syz.2.6655': attribute type 10 has an invalid length. [ 1140.145930][T24604] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6655'. [ 1140.626688][T24617] netlink: 'syz.1.6660': attribute type 3 has an invalid length. [ 1140.828886][T24613] netlink: 'syz.0.6657': attribute type 10 has an invalid length. [ 1140.842506][T17099] wlan1: Trigger new scan to find an IBSS to join [ 1140.849173][T17090] wlan1: Trigger new scan to find an IBSS to join [ 1140.935442][T24623] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1141.268517][T24632] FAULT_INJECTION: forcing a failure. [ 1141.268517][T24632] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.333611][T24630] netlink: 'syz.1.6664': attribute type 21 has an invalid length. [ 1141.386094][T24632] CPU: 0 PID: 24632 Comm: syz.0.6665 Not tainted syzkaller #0 [ 1141.393653][T24632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1141.403760][T24632] Call Trace: [ 1141.407079][T24632] [ 1141.410053][T24632] dump_stack_lvl+0x188/0x24e [ 1141.414812][T24632] ? show_regs_print_info+0x12/0x12 [ 1141.420065][T24632] ? load_image+0x410/0x410 [ 1141.424647][T24632] ? __might_sleep+0xd0/0xd0 [ 1141.429283][T24632] ? __lock_acquire+0x7c40/0x7c40 [ 1141.434369][T24632] should_fail_ex+0x390/0x4c0 [ 1141.439139][T24632] should_failslab+0x5/0x20 [ 1141.443683][T24632] slab_pre_alloc_hook+0x59/0x300 [ 1141.448756][T24632] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1141.454530][T24632] __kmem_cache_alloc_node+0x4f/0x270 [ 1141.459984][T24632] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1141.465660][T24632] __kmalloc_node+0xa2/0x240 [ 1141.470302][T24632] memcg_alloc_slab_cgroups+0x81/0x120 [ 1141.475817][T24632] slab_post_alloc_hook+0xba/0x490 [ 1141.481000][T24632] kmem_cache_alloc_node+0x1ad/0x310 [ 1141.486354][T24632] ? __alloc_skb+0xf9/0x7d0 [ 1141.490915][T24632] __alloc_skb+0xf9/0x7d0 [ 1141.495302][T24632] alloc_skb_with_frags+0xa7/0x710 [ 1141.500473][T24632] ? trace_event_raw_event_lock+0x230/0x230 [ 1141.506412][T24632] ? perf_trace_lock+0xf8/0x390 [ 1141.511318][T24632] sock_alloc_send_pskb+0x87f/0x9a0 [ 1141.516590][T24632] ? sock_kzfree_s+0x50/0x50 [ 1141.521243][T24632] ? do_raw_spin_lock+0x128/0x2f0 [ 1141.526317][T24632] ? __rwlock_init+0x140/0x140 [ 1141.531127][T24632] ? do_raw_spin_unlock+0x11d/0x230 [ 1141.536375][T24632] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1141.541553][T24632] ? aa_sk_perm+0x81f/0x950 [ 1141.546115][T24632] ? aa_af_perm+0x340/0x340 [ 1141.550668][T24632] ? unix_dgram_poll+0x680/0x680 [ 1141.555653][T24632] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1141.562139][T24632] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1141.567735][T24632] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1141.573056][T24632] ? security_socket_sendmsg+0x7c/0xa0 [ 1141.578560][T24632] ? unix_dgram_poll+0x680/0x680 [ 1141.583541][T24632] ____sys_sendmsg+0x5ed/0x9a0 [ 1141.588345][T24632] ? __might_fault+0xa6/0x120 [ 1141.593080][T24632] ? __sys_sendmsg_sock+0x30/0x30 [ 1141.598146][T24632] ? __import_iovec+0x306/0x510 [ 1141.603061][T24632] ? import_iovec+0x6f/0xa0 [ 1141.607646][T24632] ___sys_sendmsg+0x2a2/0x360 [ 1141.612428][T24632] ? __sys_sendmsg+0x2a0/0x2a0 [ 1141.617268][T24632] ? __lock_acquire+0x7c40/0x7c40 [ 1141.622373][T24632] __se_sys_sendmsg+0x1c3/0x2b0 [ 1141.627268][T24632] ? ct_nmi_exit+0x145/0x1c0 [ 1141.631926][T24632] ? __x64_sys_sendmsg+0x80/0x80 [ 1141.636935][T24632] ? lockdep_hardirqs_on+0x94/0x140 [ 1141.642227][T24632] do_syscall_64+0x4c/0xa0 [ 1141.646691][T24632] ? clear_bhb_loop+0x60/0xb0 [ 1141.651413][T24632] ? clear_bhb_loop+0x60/0xb0 [ 1141.656140][T24632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1141.662094][T24632] RIP: 0033:0x7faca7d9e159 [ 1141.666552][T24632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.686201][T24632] RSP: 002b:00007faca8ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.694667][T24632] RAX: ffffffffffffffda RBX: 00007faca8025fa0 RCX: 00007faca7d9e159 [ 1141.702677][T24632] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 1141.710681][T24632] RBP: 00007faca8ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.718688][T24632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.726695][T24632] R13: 00007faca8026038 R14: 00007faca8025fa0 R15: 00007ffc71fdf1f8 [ 1141.734722][T24632] [ 1141.751044][T24630] netlink: 'syz.1.6664': attribute type 1 has an invalid length. [ 1142.126597][T15594] wlan1: Creating new IBSS network, BSSID ce:95:57:81:2b:95 [ 1142.544936][T24654] netlink: 'syz.0.6671': attribute type 2 has an invalid length. [ 1142.840572][T24663] netlink: 'syz.2.6674': attribute type 3 has an invalid length. [ 1142.918480][T24663] __nla_validate_parse: 5 callbacks suppressed [ 1142.918509][T24663] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1143.083883][T24669] netlink: 'syz.0.6675': attribute type 10 has an invalid length. [ 1143.116058][T24669] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6675'. [ 1143.362751][T24678] FAULT_INJECTION: forcing a failure. [ 1143.362751][T24678] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.386002][T24678] CPU: 0 PID: 24678 Comm: syz.2.6678 Not tainted syzkaller #0 [ 1143.393545][T24678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1143.403639][T24678] Call Trace: [ 1143.406953][T24678] [ 1143.409919][T24678] dump_stack_lvl+0x188/0x24e [ 1143.414640][T24678] ? show_regs_print_info+0x12/0x12 [ 1143.419875][T24678] ? load_image+0x410/0x410 [ 1143.424424][T24678] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1143.430452][T24678] ? __lock_acquire+0x7c40/0x7c40 [ 1143.435538][T24678] should_fail_ex+0x390/0x4c0 [ 1143.440269][T24678] should_failslab+0x5/0x20 [ 1143.444829][T24678] slab_pre_alloc_hook+0x59/0x300 [ 1143.449906][T24678] kmem_cache_alloc+0x56/0x2f0 [ 1143.454720][T24678] ? __build_skb+0x27/0x3b0 [ 1143.459381][T24678] __build_skb+0x27/0x3b0 [ 1143.463770][T24678] ? build_skb+0x14/0x230 [ 1143.468253][T24678] build_skb+0x1e/0x230 [ 1143.472452][T24678] bpf_prog_test_run_skb+0x38d/0x18e0 [ 1143.477877][T24678] ? __fget_files+0x28/0x460 [ 1143.482520][T24678] ? __fget_files+0x3fc/0x460 [ 1143.487261][T24678] ? cpu_online+0xa0/0xa0 [ 1143.491646][T24678] bpf_prog_test_run+0x31c/0x390 [ 1143.496660][T24678] __sys_bpf+0x62b/0x780 [ 1143.500955][T24678] ? bpf_link_show_fdinfo+0x380/0x380 [ 1143.506394][T24678] ? lock_chain_count+0x20/0x20 [ 1143.511296][T24678] __x64_sys_bpf+0x78/0x90 [ 1143.515772][T24678] do_syscall_64+0x4c/0xa0 [ 1143.520248][T24678] ? clear_bhb_loop+0x60/0xb0 [ 1143.524964][T24678] ? clear_bhb_loop+0x60/0xb0 [ 1143.529683][T24678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.535615][T24678] RIP: 0033:0x7f109ab9e159 [ 1143.540066][T24678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.559711][T24678] RSP: 002b:00007f109baa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1143.568170][T24678] RAX: ffffffffffffffda RBX: 00007f109ae25fa0 RCX: 00007f109ab9e159 [ 1143.576177][T24678] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1143.584181][T24678] RBP: 00007f109baa2090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.592182][T24678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.600191][T24678] R13: 00007f109ae26038 R14: 00007f109ae25fa0 R15: 00007ffe26e4de88 [ 1143.608214][T24678] [ 1143.920268][T24679] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1143.958803][T24680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6676'. [ 1144.654372][T24710] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6687'. [ 1144.832046][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1144.911103][T15594] wlan1: Trigger new scan to find an IBSS to join [ 1145.013389][T24723] netlink: 'syz.2.6690': attribute type 10 has an invalid length. [ 1145.033747][T24723] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1145.978039][T24743] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1146.000480][T24745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1146.602930][T24764] FAULT_INJECTION: forcing a failure. [ 1146.602930][T24764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.660357][T24771] netlink: 'syz.0.6701': attribute type 2 has an invalid length. [ 1146.675200][T24764] CPU: 0 PID: 24764 Comm: syz.0.6701 Not tainted syzkaller #0 [ 1146.675634][T24771] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1146.682709][T24764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1146.682724][T24764] Call Trace: [ 1146.682733][T24764] [ 1146.682743][T24764] dump_stack_lvl+0x188/0x24e [ 1146.682775][T24764] ? show_regs_print_info+0x12/0x12 [ 1146.682797][T24764] ? load_image+0x410/0x410 [ 1146.682829][T24764] ? __lock_acquire+0x7c40/0x7c40 [ 1146.682861][T24764] ? snprintf+0xe5/0x140 [ 1146.682891][T24764] should_fail_ex+0x390/0x4c0 [ 1146.682928][T24764] _copy_to_user+0x2c/0x130 [ 1146.682973][T24764] simple_read_from_buffer+0xe3/0x150 [ 1146.683002][T24764] proc_fail_nth_read+0x1a6/0x220 [ 1146.752006][T24764] ? proc_fault_inject_write+0x310/0x310 [ 1146.757725][T24764] ? fsnotify_perm+0x248/0x550 [ 1146.762564][T24764] ? proc_fault_inject_write+0x310/0x310 [ 1146.768248][T24764] vfs_read+0x2db/0x960 [ 1146.772460][T24764] ? kernel_read+0x1e0/0x1e0 [ 1146.777104][T24764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1146.783303][T24764] ? lockdep_hardirqs_on+0x94/0x140 [ 1146.788547][T24764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1146.794762][T24764] ksys_read+0x14d/0x260 [ 1146.799063][T24764] ? vfs_write+0x9a0/0x9a0 [ 1146.803542][T24764] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1146.809505][T24764] do_syscall_64+0x4c/0xa0 [ 1146.813967][T24764] ? clear_bhb_loop+0x60/0xb0 [ 1146.818696][T24764] ? clear_bhb_loop+0x60/0xb0 [ 1146.823419][T24764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1146.829364][T24764] RIP: 0033:0x7faca7d5e98e [ 1146.833825][T24764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1146.853479][T24764] RSP: 002b:00007faca8ce4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1146.861943][T24764] RAX: ffffffffffffffda RBX: 00007faca8ce56c0 RCX: 00007faca7d5e98e [ 1146.869958][T24764] RDX: 000000000000000f RSI: 00007faca8ce50a0 RDI: 000000000000000c [ 1146.877980][T24764] RBP: 00007faca8ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.885998][T24764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.894012][T24764] R13: 00007faca8026038 R14: 00007faca8025fa0 R15: 00007ffc71fdf1f8 [ 1146.902059][T24764] [ 1147.790482][T24786] netlink: 'syz.5.6707': attribute type 10 has an invalid length. [ 1147.807933][T24786] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6707'. [ 1147.880470][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1148.025672][T24791] bridge0: port 3(batadv0) entered blocking state [ 1148.062366][T24791] bridge0: port 3(batadv0) entered disabled state [ 1148.082077][T24791] device batadv0 entered promiscuous mode [ 1148.089734][T24791] bridge0: port 3(batadv0) entered blocking state [ 1148.096415][T24791] bridge0: port 3(batadv0) entered forwarding state [ 1148.551617][T24795] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1148.560783][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6709'. [ 1148.580006][T17091] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1148.589798][T17091] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1148.671206][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 1148.831795][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1148.846040][T24801] netlink: 'syz.3.6711': attribute type 29 has an invalid length. [ 1148.870340][T24803] device netdevsim0 entered promiscuous mode [ 1148.882096][T24806] FAULT_INJECTION: forcing a failure. [ 1148.882096][T24806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.918128][T24801] netlink: 'syz.3.6711': attribute type 29 has an invalid length. [ 1148.989911][T24806] CPU: 1 PID: 24806 Comm: syz.3.6711 Not tainted syzkaller #0 [ 1148.997507][T24806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1149.007623][T24806] Call Trace: [ 1149.010928][T24806] [ 1149.013923][T24806] dump_stack_lvl+0x188/0x24e [ 1149.018663][T24806] ? show_regs_print_info+0x12/0x12 [ 1149.023914][T24806] ? load_image+0x410/0x410 [ 1149.028463][T24806] ? __might_fault+0xa6/0x120 [ 1149.033204][T24806] should_fail_ex+0x390/0x4c0 [ 1149.037931][T24806] copyin+0x1b/0x120 [ 1149.041878][T24806] _copy_from_iter+0x559/0x1130 [ 1149.046770][T24806] ? copyout_mc+0x110/0x110 [ 1149.051302][T24806] ? __virt_addr_valid+0x188/0x540 [ 1149.056444][T24806] ? __virt_addr_valid+0x188/0x540 [ 1149.061589][T24806] ? __virt_addr_valid+0x467/0x540 [ 1149.066736][T24806] ? __phys_addr_symbol+0x2b/0x70 [ 1149.071789][T24806] ? __check_object_size+0x4f6/0xa70 [ 1149.077099][T24806] netlink_sendmsg+0x755/0xbd0 [ 1149.081894][T24806] ? netlink_getsockopt+0x550/0x550 [ 1149.087117][T24806] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1149.092695][T24806] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1149.098000][T24806] ? security_socket_sendmsg+0x7c/0xa0 [ 1149.103493][T24806] ? netlink_getsockopt+0x550/0x550 [ 1149.108713][T24806] ____sys_sendmsg+0x5ed/0x9a0 [ 1149.113507][T24806] ? __sys_sendmsg_sock+0x30/0x30 [ 1149.118555][T24806] ? __import_iovec+0x306/0x510 [ 1149.123449][T24806] ? import_iovec+0x6f/0xa0 [ 1149.127988][T24806] ___sys_sendmsg+0x2a2/0x360 [ 1149.132700][T24806] ? __sys_sendmsg+0x2a0/0x2a0 [ 1149.137504][T24806] ? __lock_acquire+0x7c40/0x7c40 [ 1149.142578][T24806] __se_sys_sendmsg+0x1c3/0x2b0 [ 1149.147458][T24806] ? __x64_sys_sendmsg+0x80/0x80 [ 1149.152435][T24806] ? lockdep_hardirqs_on+0x94/0x140 [ 1149.157673][T24806] do_syscall_64+0x4c/0xa0 [ 1149.162115][T24806] ? clear_bhb_loop+0x60/0xb0 [ 1149.166818][T24806] ? clear_bhb_loop+0x60/0xb0 [ 1149.171528][T24806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.177483][T24806] RIP: 0033:0x7f5aed59e159 [ 1149.181923][T24806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.201550][T24806] RSP: 002b:00007f5aee452028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.210008][T24806] RAX: ffffffffffffffda RBX: 00007f5aed826090 RCX: 00007f5aed59e159 [ 1149.218016][T24806] RDX: 0000000000000010 RSI: 0000200000002940 RDI: 0000000000000009 [ 1149.226018][T24806] RBP: 00007f5aee452090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.234007][T24806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.241995][T24806] R13: 00007f5aed826128 R14: 00007f5aed826090 R15: 00007ffcb5b3b9e8 [ 1149.250004][T24806] [ 1149.803779][T24810] netlink: 'syz.1.6715': attribute type 15 has an invalid length. [ 1149.824213][T24810] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1149.881866][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1149.944850][T24801] device sit0 entered promiscuous mode [ 1151.059613][T17090] wlan1: Creating new IBSS network, BSSID 96:a4:98:73:97:ff [ 1151.584770][T24839] netlink: 'syz.2.6721': attribute type 3 has an invalid length. [ 1151.610587][T24839] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6721'. [ 1151.871336][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1152.012077][T24844] netlink: 'syz.3.6723': attribute type 10 has an invalid length. [ 1152.020725][T24844] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6723'. [ 1152.125965][T24854] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1152.169890][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6725'. [ 1152.491801][T24868] netlink: 'syz.5.6729': attribute type 15 has an invalid length. [ 1152.543374][T24868] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6729'. [ 1153.833607][T24892] netlink: 'syz.0.6736': attribute type 1 has an invalid length. [ 1153.847973][T24892] netlink: 'syz.0.6736': attribute type 3 has an invalid length. [ 1153.871587][T17095] wlan1: Trigger new scan to find an IBSS to join [ 1154.238109][T24910] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1154.262426][T24904] netlink: 'syz.3.6738': attribute type 10 has an invalid length. [ 1154.332272][T24904] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1154.350439][T24912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1154.369824][T24914] netlink: 'syz.0.6743': attribute type 15 has an invalid length. [ 1154.378111][T24914] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6743'. [ 1154.844473][T15594] wlan1: Trigger new scan to find an IBSS to join [ 1154.848457][T17090] wlan1: Trigger new scan to find an IBSS to join [ 1154.869028][T15235] wlan1: Creating new IBSS network, BSSID ca:70:60:b5:8b:5b [ 1155.262954][T24933] netlink: 'syz.1.6749': attribute type 10 has an invalid length. [ 1155.305389][T24935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6750'. [ 1155.384645][T24932] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6760'. [ 1155.409528][T24932] openvswitch: netlink: Message has 6 unknown bytes. [ 1155.666434][T24945] netlink: 'syz.2.6753': attribute type 2 has an invalid length. [ 1156.174388][T24953] netlink: 'syz.5.6755': attribute type 10 has an invalid length. [ 1156.215249][T24953] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6755'. [ 1156.234069][T24955] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1156.325146][T24956] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1156.344587][T24956] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1156.358873][T24956] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.6757'. [ 1156.525772][T24961] netlink: 'syz.2.6758': attribute type 21 has an invalid length. [ 1156.892791][T15235] wlan1: Creating new IBSS network, BSSID f2:4a:5c:1c:7e:5f [ 1156.911117][T17090] wlan1: Trigger new scan to find an IBSS to join [ 1157.265676][T24969] netlink: 'syz.2.6764': attribute type 21 has an invalid length. [ 1157.332516][T24969] IPv6: NLM_F_CREATE should be specified when creating new route [ 1157.373839][T24969] IPv6: Can't replace route, no match found [ 1157.412217][T24969] netlink: 'syz.2.6764': attribute type 1 has an invalid length. [ 1157.559518][T24979] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1157.883744][T15594] wlan1: Trigger new scan to find an IBSS to join [ 1159.183465][T25016] validate_nla: 2 callbacks suppressed [ 1159.183484][T25016] netlink: 'syz.5.6778': attribute type 21 has an invalid length. [ 1159.429738][T25016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1159.437092][T25016] IPv6: NLM_F_CREATE should be set when creating new route [ 1159.444448][T25016] IPv6: NLM_F_CREATE should be set when creating new route [ 1159.451758][T25016] IPv6: NLM_F_CREATE should be set when creating new route [ 1159.659551][T25022] __nla_validate_parse: 12 callbacks suppressed [ 1159.659574][T25022] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6781'. [ 1159.731329][T25022] device hsr_slave_0 left promiscuous mode [ 1159.754416][T25022] device hsr_slave_1 left promiscuous mode [ 1159.909868][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1160.467353][T25026] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6781'. [ 1160.619068][T25036] netlink: 'syz.5.6785': attribute type 10 has an invalid length. [ 1160.628761][T25036] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6785'. [ 1160.858179][T25043] netlink: 'syz.0.6787': attribute type 10 has an invalid length. [ 1160.913232][T17095] wlan1: Creating new IBSS network, BSSID 26:84:92:6e:99:20 [ 1161.238236][T25053] netlink: 'syz.2.6792': attribute type 3 has an invalid length. [ 1161.275448][T25053] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6792'. [ 1161.837785][T25061] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.6795'. [ 1161.848008][T25061] netlink: zone id is out of range [ 1161.863596][T25061] netlink: del zone limit has 4 unknown bytes [ 1162.292768][T25066] netlink: 'syz.5.6796': attribute type 10 has an invalid length. [ 1162.667293][T25077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6798'. [ 1162.866160][T25081] netlink: 'syz.1.6800': attribute type 10 has an invalid length. [ 1162.899286][T25081] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6800'. [ 1162.912461][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1163.680826][T17090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1163.897219][T17090] wlan1: Creating new IBSS network, BSSID 8a:e5:7c:26:1b:7c [ 1163.989217][T25101] netlink: 'syz.1.6808': attribute type 3 has an invalid length. [ 1164.006795][T25101] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6808'. [ 1164.030971][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 1164.037897][T25104] netlink: 'syz.0.6809': attribute type 10 has an invalid length. [ 1164.239557][T25114] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.6810'. [ 1164.978849][T25124] netlink: 'syz.2.6814': attribute type 10 has an invalid length. [ 1165.051035][T25124] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1166.300997][T25144] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1166.306922][T25144] syzkaller1: group set to 778 [ 1166.527744][T25141] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.6819'. [ 1166.618775][T25141] openvswitch: netlink: Key type 386 is out of range max 32 [ 1166.997987][T25153] FAULT_INJECTION: forcing a failure. [ 1166.997987][T25153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.051397][T25153] CPU: 0 PID: 25153 Comm: syz.2.6821 Not tainted syzkaller #0 [ 1167.058935][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1167.069031][T25153] Call Trace: [ 1167.072366][T25153] [ 1167.075332][T25153] dump_stack_lvl+0x188/0x24e [ 1167.080068][T25153] ? show_regs_print_info+0x12/0x12 [ 1167.085306][T25153] ? load_image+0x410/0x410 [ 1167.089873][T25153] ? __lock_acquire+0x7c40/0x7c40 [ 1167.094949][T25153] ? __might_sleep+0xd0/0xd0 [ 1167.099581][T25153] should_fail_ex+0x390/0x4c0 [ 1167.104316][T25153] _copy_from_user+0x2c/0x170 [ 1167.109039][T25153] generic_map_update_batch+0x4dc/0x7f0 [ 1167.114641][T25153] ? rcu_read_unlock+0xa0/0xa0 [ 1167.119483][T25153] ? __fdget+0x17c/0x200 [ 1167.123775][T25153] ? rcu_read_unlock+0xa0/0xa0 [ 1167.128584][T25153] bpf_map_do_batch+0x475/0x5f0 [ 1167.133484][T25153] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 1167.138991][T25153] __sys_bpf+0x6f7/0x780 [ 1167.143293][T25153] ? bpf_link_show_fdinfo+0x380/0x380 [ 1167.148755][T25153] ? lock_chain_count+0x20/0x20 [ 1167.153685][T25153] __x64_sys_bpf+0x78/0x90 [ 1167.158154][T25153] do_syscall_64+0x4c/0xa0 [ 1167.162620][T25153] ? clear_bhb_loop+0x60/0xb0 [ 1167.167335][T25153] ? clear_bhb_loop+0x60/0xb0 [ 1167.172065][T25153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1167.178014][T25153] RIP: 0033:0x7f109ab9e159 [ 1167.182494][T25153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.202185][T25153] RSP: 002b:00007f109ba81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1167.210629][T25153] RAX: ffffffffffffffda RBX: 00007f109ae26090 RCX: 00007f109ab9e159 [ 1167.218623][T25153] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 1167.226619][T25153] RBP: 00007f109ba81090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.234615][T25153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.242621][T25153] R13: 00007f109ae26128 R14: 00007f109ae26090 R15: 00007ffe26e4de88 [ 1167.250634][T25153] [ 1169.661813][T25176] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6825'. [ 1170.381920][T25174] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6825'. [ 1170.519854][T25178] netlink: 'syz.0.6827': attribute type 10 has an invalid length. [ 1170.529659][T25178] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6827'. [ 1170.793446][T25193] netlink: 'syz.2.6832': attribute type 3 has an invalid length. [ 1170.802548][T25193] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6832'. [ 1172.645281][T25182] netlink: 'syz.5.6828': attribute type 10 has an invalid length. [ 1173.279012][T25205] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1173.322530][T25205] syzkaller1: group set to 778 [ 1173.458661][T25205] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.6836'. [ 1173.513094][T25205] openvswitch: netlink: Key type 386 is out of range max 32 [ 1174.039527][T25219] netlink: 'syz.1.6840': attribute type 2 has an invalid length. [ 1174.075367][T25219] device .*! entered promiscuous mode [ 1174.196585][T25217] netlink: 'syz.3.6839': attribute type 3 has an invalid length. [ 1174.210074][T25217] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1174.578476][T25225] netlink: 'syz.2.6842': attribute type 10 has an invalid length. [ 1174.650913][T25225] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1174.664130][T25227] netlink: 'syz.1.6843': attribute type 3 has an invalid length. [ 1174.723394][T25227] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6843'. [ 1174.809008][T25228] netlink: 'syz.5.6838': attribute type 2 has an invalid length. [ 1174.843106][T25228] netlink: 'syz.5.6838': attribute type 8 has an invalid length. [ 1174.895744][T25228] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6838'. [ 1175.420360][T25247] netlink: 'syz.1.6848': attribute type 2 has an invalid length. [ 1175.471818][T25247] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6848'. [ 1175.558599][T25253] netlink: 'syz.0.6850': attribute type 39 has an invalid length. [ 1176.378319][T25263] netlink: 'syz.1.6852': attribute type 3 has an invalid length. [ 1176.387077][T25263] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6852'. [ 1176.782335][T25273] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1176.869574][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6853'. [ 1177.056931][T25279] netlink: 'syz.0.6856': attribute type 3 has an invalid length. [ 1177.101061][T25279] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1177.308568][T25282] netlink: 'syz.2.6868': attribute type 3 has an invalid length. [ 1177.341598][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.341724][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.377907][T25282] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6868'. [ 1177.522435][T25285] netlink: 'syz.5.6858': attribute type 3 has an invalid length. [ 1177.530471][T25285] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6858'. [ 1177.931579][T25292] netlink: 'syz.3.6861': attribute type 10 has an invalid length. [ 1177.951582][T25292] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6861'. [ 1178.245470][T25305] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6865'. [ 1178.539461][T25313] netlink: 'syz.0.6866': attribute type 3 has an invalid length. [ 1178.571621][T25313] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6866'. [ 1178.918128][T17092] wlan1: Trigger new scan to find an IBSS to join [ 1179.007240][T25317] netlink: 'syz.1.6869': attribute type 3 has an invalid length. [ 1179.032111][T25317] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6869'. [ 1179.115204][T25319] netlink: 'syz.0.6871': attribute type 3 has an invalid length. [ 1179.251315][T25330] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1179.412949][T25335] FAULT_INJECTION: forcing a failure. [ 1179.412949][T25335] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.467300][T25335] CPU: 1 PID: 25335 Comm: syz.1.6875 Not tainted syzkaller #0 [ 1179.474861][T25335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1179.484973][T25335] Call Trace: [ 1179.488297][T25335] [ 1179.491303][T25335] dump_stack_lvl+0x188/0x24e [ 1179.496035][T25335] ? show_regs_print_info+0x12/0x12 [ 1179.501271][T25335] ? load_image+0x410/0x410 [ 1179.505815][T25335] ? __lock_acquire+0x7c40/0x7c40 [ 1179.510884][T25335] should_fail_ex+0x390/0x4c0 [ 1179.515613][T25335] should_failslab+0x5/0x20 [ 1179.520148][T25335] slab_pre_alloc_hook+0x59/0x300 [ 1179.525213][T25335] ? security_sk_alloc+0x47/0x130 [ 1179.530273][T25335] __kmem_cache_alloc_node+0x4f/0x270 [ 1179.535685][T25335] ? security_sk_alloc+0x47/0x130 [ 1179.540751][T25335] __kmalloc+0xa3/0x240 [ 1179.544940][T25335] ? sk_prot_alloc+0xe7/0x210 [ 1179.549666][T25335] security_sk_alloc+0x47/0x130 [ 1179.554564][T25335] sk_prot_alloc+0x101/0x210 [ 1179.559188][T25335] ? sk_alloc+0x20/0x330 [ 1179.563465][T25335] sk_alloc+0x36/0x330 [ 1179.567568][T25335] ? bpf_ctx_init+0x154/0x190 [ 1179.572287][T25335] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1179.577696][T25335] ? __fget_files+0x28/0x460 [ 1179.582325][T25335] ? __fget_files+0x3fc/0x460 [ 1179.587042][T25335] ? cpu_online+0xa0/0xa0 [ 1179.591409][T25335] bpf_prog_test_run+0x31c/0x390 [ 1179.596405][T25335] __sys_bpf+0x62b/0x780 [ 1179.600709][T25335] ? bpf_link_show_fdinfo+0x380/0x380 [ 1179.606136][T25335] ? lock_chain_count+0x20/0x20 [ 1179.611025][T25335] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1179.617047][T25335] __x64_sys_bpf+0x78/0x90 [ 1179.621503][T25335] do_syscall_64+0x4c/0xa0 [ 1179.625954][T25335] ? clear_bhb_loop+0x60/0xb0 [ 1179.630661][T25335] ? clear_bhb_loop+0x60/0xb0 [ 1179.635365][T25335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.641300][T25335] RIP: 0033:0x7fd27879e159 [ 1179.645771][T25335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.665411][T25335] RSP: 002b:00007fd27973b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.673857][T25335] RAX: ffffffffffffffda RBX: 00007fd278a25fa0 RCX: 00007fd27879e159 [ 1179.681860][T25335] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 1179.689863][T25335] RBP: 00007fd27973b090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.697856][T25335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.705866][T25335] R13: 00007fd278a26038 R14: 00007fd278a25fa0 R15: 00007ffe5bb65f48 [ 1179.713884][T25335] [ 1179.764192][T25326] netlink: 'syz.5.6870': attribute type 3 has an invalid length. [ 1181.172388][T25356] __nla_validate_parse: 5 callbacks suppressed [ 1181.172412][T25356] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1181.237435][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1181.445903][T25368] validate_nla: 2 callbacks suppressed [ 1181.445942][T25368] netlink: 'syz.0.6886': attribute type 3 has an invalid length. [ 1181.478874][T25368] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6886'. [ 1182.595316][T25379] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1182.673911][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6889'. [ 1182.725174][T25377] netlink: 'syz.0.6888': attribute type 10 has an invalid length. [ 1182.745837][T25377] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1182.889897][T25391] netlink: 'syz.2.6890': attribute type 39 has an invalid length. [ 1182.911302][T17095] wlan1: Trigger new scan to find an IBSS to join [ 1183.273541][T25406] netlink: 'syz.1.6898': attribute type 3 has an invalid length. [ 1183.310650][T25406] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6898'. [ 1184.831292][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1184.944567][T25440] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1185.022001][T25429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6903'. [ 1185.267849][T25445] netlink: 'syz.5.6905': attribute type 10 has an invalid length. [ 1185.281395][T25445] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6905'. [ 1185.628808][T25448] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1185.668593][T25448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1185.873397][T25455] netlink: 'syz.0.6909': attribute type 2 has an invalid length. [ 1185.884967][T17094] wlan1: Trigger new scan to find an IBSS to join [ 1185.921819][T25455] netlink: 'syz.0.6909': attribute type 8 has an invalid length. [ 1185.959725][T25459] netlink: 'syz.5.6912': attribute type 3 has an invalid length. [ 1186.018447][T25462] netlink: 'syz.2.6911': attribute type 3 has an invalid length. [ 1187.623655][T17094] wlan1: Creating new IBSS network, BSSID e2:5f:90:42:fe:1f [ 1187.884207][T17090] wlan1: Trigger new scan to find an IBSS to join [ 1188.195489][T25495] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1188.220083][T25500] delete_channel: no stack [ 1188.283318][T25503] netlink: 'syz.0.6922': attribute type 10 has an invalid length. [ 1188.301146][T25503] __nla_validate_parse: 3 callbacks suppressed [ 1188.301165][T25503] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6922'. [ 1188.367267][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6921'. [ 1188.544718][T25509] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6923'. [ 1188.645895][T25512] netlink: 'syz.1.6924': attribute type 2 has an invalid length. [ 1188.708561][T25512] netlink: 'syz.1.6924': attribute type 8 has an invalid length. [ 1188.746876][T25512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1189.074770][T15235] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1190.524501][T25544] netlink: 'syz.5.6936': attribute type 10 has an invalid length. [ 1190.556953][T25544] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6936'. [ 1190.688071][T25549] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1190.726101][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6938'. [ 1190.912791][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1190.920035][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1191.943888][T17097] wlan1: Creating new IBSS network, BSSID 7e:07:c4:d1:7d:53 [ 1191.951626][T25572] netlink: 'syz.1.6948': attribute type 10 has an invalid length. [ 1192.911197][T17099] wlan1: Trigger new scan to find an IBSS to join [ 1192.985179][T25586] netlink: 'syz.0.6953': attribute type 10 has an invalid length. [ 1193.009661][T25586] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1193.457558][T25599] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1193.545663][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6956'. [ 1193.657843][T25608] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6959'. [ 1194.702861][T17091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1195.319279][T25622] netlink: 'syz.1.6965': attribute type 10 has an invalid length. [ 1195.636332][T25631] netlink: 'syz.3.6969': attribute type 10 has an invalid length. [ 1195.661019][T25631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6969'. [ 1195.816616][T25631] netlink: 'syz.3.6969': attribute type 10 has an invalid length. [ 1195.833860][T25631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6969'. [ 1195.871708][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1196.202358][T25635] netlink: 'syz.5.6968': attribute type 10 has an invalid length. [ 1196.246066][T25635] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6968'. [ 1196.405491][T25642] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1196.435430][T25642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6974'. [ 1196.808351][T17097] wlan1: Creating new IBSS network, BSSID 9a:65:55:9a:12:84 [ 1197.215948][T25662] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6979'. [ 1197.337894][T25667] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.6980'. [ 1197.879586][T25675] netlink: 'syz.1.6983': attribute type 10 has an invalid length. [ 1198.426370][T25684] netlink: 'syz.0.6987': attribute type 10 has an invalid length. [ 1198.461774][T25684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1198.514814][T25684] netlink: 'syz.0.6987': attribute type 10 has an invalid length. [ 1198.537036][T25684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1198.912315][T17095] wlan1: Trigger new scan to find an IBSS to join [ 1199.477990][T25698] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1199.491171][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6989'. [ 1201.057393][T25718] netlink: 'syz.2.6998': attribute type 10 has an invalid length. [ 1201.595188][T25723] netlink: 'syz.0.6999': attribute type 10 has an invalid length. [ 1201.613745][T25723] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6999'. [ 1201.661195][T25725] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1202.271517][T25743] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1202.702355][T25741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7003'. [ 1202.918785][T17095] wlan1: Trigger new scan to find an IBSS to join [ 1203.006564][T25763] netlink: 'syz.2.7013': attribute type 10 has an invalid length. [ 1203.445856][T25769] FAULT_INJECTION: forcing a failure. [ 1203.445856][T25769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.512566][T25769] CPU: 1 PID: 25769 Comm: syz.2.7016 Not tainted syzkaller #0 [ 1203.520116][T25769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1203.530200][T25769] Call Trace: [ 1203.533508][T25769] [ 1203.536471][T25769] dump_stack_lvl+0x188/0x24e [ 1203.541224][T25769] ? show_regs_print_info+0x12/0x12 [ 1203.546470][T25769] ? load_image+0x410/0x410 [ 1203.551027][T25769] ? __lock_acquire+0x7c40/0x7c40 [ 1203.556116][T25769] should_fail_ex+0x390/0x4c0 [ 1203.560851][T25769] _copy_to_user+0x2c/0x130 [ 1203.565412][T25769] bpf_verifier_vlog+0x172/0x3a0 [ 1203.570449][T25769] __btf_verifier_log+0xdf/0x130 [ 1203.575467][T25769] ? lockdep_hardirqs_on+0x94/0x140 [ 1203.580731][T25769] ? btf_check_sec_info+0x350/0x350 [ 1203.585989][T25769] ? _copy_from_user+0x21/0x170 [ 1203.590889][T25769] btf_parse_hdr+0x352/0x7d0 [ 1203.595549][T25769] btf_new_fd+0x367/0x760 [ 1203.599911][T25769] __sys_bpf+0x612/0x780 [ 1203.604185][T25769] ? bpf_link_show_fdinfo+0x380/0x380 [ 1203.609605][T25769] ? lock_chain_count+0x20/0x20 [ 1203.614490][T25769] __x64_sys_bpf+0x78/0x90 [ 1203.618936][T25769] do_syscall_64+0x4c/0xa0 [ 1203.623375][T25769] ? clear_bhb_loop+0x60/0xb0 [ 1203.628076][T25769] ? clear_bhb_loop+0x60/0xb0 [ 1203.632773][T25769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.638718][T25769] RIP: 0033:0x7f109ab9e159 [ 1203.643157][T25769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.662783][T25769] RSP: 002b:00007f109baa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1203.671218][T25769] RAX: ffffffffffffffda RBX: 00007f109ae25fa0 RCX: 00007f109ab9e159 [ 1203.679220][T25769] RDX: 0000000000000028 RSI: 0000200000000a40 RDI: 0000000000000012 [ 1203.687227][T25769] RBP: 00007f109baa2090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.695225][T25769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.703227][T25769] R13: 00007f109ae26038 R14: 00007f109ae25fa0 R15: 00007ffe26e4de88 [ 1203.711236][T25769] [ 1203.919280][T25776] netlink: 'syz.1.7012': attribute type 1 has an invalid length. [ 1203.931979][T25776] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7012'. [ 1204.335934][T25790] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.7023'. [ 1204.366000][T25794] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1204.453086][T25794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7024'. [ 1204.831934][T17092] wlan1: Trigger new scan to find an IBSS to join [ 1204.991093][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 1206.911802][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1207.881268][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1207.903176][T25821] netlink: 'syz.5.7033': attribute type 1 has an invalid length. [ 1207.960497][T25821] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.7033'. [ 1208.648499][T25826] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7034'. [ 1208.848947][T17092] wlan1: Creating new IBSS network, BSSID 3a:fe:3c:c7:d1:70 [ 1208.860778][T25839] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1208.927159][T25839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7035'. [ 1209.574620][T25869] netlink: 'syz.0.7050': attribute type 10 has an invalid length. [ 1209.709804][T25872] netlink: 'syz.1.7051': attribute type 2 has an invalid length. [ 1209.733203][T25872] netlink: 'syz.1.7051': attribute type 8 has an invalid length. [ 1209.754688][T25872] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7051'. [ 1209.872269][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1210.303790][T25893] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1210.355567][T25893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1210.811481][T17097] wlan1: Creating new IBSS network, BSSID 8a:d4:6a:e2:8a:59 [ 1210.850786][T25904] netlink: 'syz.2.7062': attribute type 10 has an invalid length. [ 1210.932590][T25906] FAULT_INJECTION: forcing a failure. [ 1210.932590][T25906] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.972261][T25906] CPU: 1 PID: 25906 Comm: syz.1.7063 Not tainted syzkaller #0 [ 1210.979806][T25906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1210.989925][T25906] Call Trace: [ 1210.993242][T25906] [ 1210.996212][T25906] dump_stack_lvl+0x188/0x24e [ 1211.000946][T25906] ? show_regs_print_info+0x12/0x12 [ 1211.006191][T25906] ? load_image+0x410/0x410 [ 1211.010754][T25906] ? debug_objects_fill_pool+0x87/0x780 [ 1211.016354][T25906] should_fail_ex+0x390/0x4c0 [ 1211.021087][T25906] should_failslab+0x5/0x20 [ 1211.025629][T25906] slab_pre_alloc_hook+0x59/0x300 [ 1211.030699][T25906] ? ref_tracker_alloc+0x14f/0x490 [ 1211.035867][T25906] __kmem_cache_alloc_node+0x4f/0x270 [ 1211.041301][T25906] ? ref_tracker_alloc+0x14f/0x490 [ 1211.046465][T25906] kmalloc_trace+0x26/0xe0 [ 1211.050928][T25906] ref_tracker_alloc+0x14f/0x490 [ 1211.055926][T25906] ? lockdep_init_map_type+0x98/0x8d0 [ 1211.061351][T25906] ? ref_tracker_dir_print+0x150/0x150 [ 1211.066866][T25906] ? lockdep_softirqs_off+0x430/0x430 [ 1211.072292][T25906] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1211.078242][T25906] ? _raw_spin_unlock+0x40/0x40 [ 1211.083155][T25906] ? neigh_release+0x80/0x80 [ 1211.087826][T25906] ? init_timer_key+0x178/0x320 [ 1211.092718][T25906] ? ___neigh_create+0xc1d/0x2450 [ 1211.097799][T25906] ___neigh_create+0xcbe/0x2450 [ 1211.102703][T25906] ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0 [ 1211.108586][T25906] ? ip6_finish_output2+0x6e9/0x1680 [ 1211.113927][T25906] ip6_finish_output2+0x15b7/0x1680 [ 1211.119191][T25906] ? ip6_mtu+0x79/0x3f0 [ 1211.123395][T25906] ? ip6_finish_output2+0x6e9/0x1680 [ 1211.128737][T25906] ? nf_hook+0x390/0x390 [ 1211.133038][T25906] ? ip6_mtu+0x31a/0x3f0 [ 1211.137336][T25906] ? ip6_finish_output+0x563/0x7f0 [ 1211.142514][T25906] rawv6_send_hdrinc+0xd9f/0x16a0 [ 1211.147613][T25906] ? rawv6_send_hdrinc+0xb17/0x16a0 [ 1211.152868][T25906] ? rawv6_probe_proto_opt+0x300/0x300 [ 1211.158394][T25906] ? txopt_get+0x340/0x3f0 [ 1211.162883][T25906] ? rawv6_push_pending_frames+0x920/0x920 [ 1211.168781][T25906] ? fl6_sock_lookup+0xc0/0xc0 [ 1211.173705][T25906] rawv6_sendmsg+0x11a7/0x1710 [ 1211.178547][T25906] ? compat_rawv6_ioctl+0x60/0x60 [ 1211.183643][T25906] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1211.190114][T25906] ? aa_sock_msg_perm+0x94/0x150 [ 1211.195125][T25906] ? inet_sendmsg+0x7a/0x2a0 [ 1211.199775][T25906] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1211.205101][T25906] ? inet_send_prepare+0x250/0x250 [ 1211.210255][T25906] ____sys_sendmsg+0x5ed/0x9a0 [ 1211.215077][T25906] ? __sys_sendmsg_sock+0x30/0x30 [ 1211.220141][T25906] ? __import_iovec+0x306/0x510 [ 1211.225071][T25906] ? import_iovec+0x6f/0xa0 [ 1211.229664][T25906] ___sys_sendmsg+0x2a2/0x360 [ 1211.234404][T25906] ? __sys_sendmsg+0x2a0/0x2a0 [ 1211.239258][T25906] ? __lock_acquire+0x7c40/0x7c40 [ 1211.244375][T25906] __se_sys_sendmsg+0x1c3/0x2b0 [ 1211.249287][T25906] ? __x64_sys_sendmsg+0x80/0x80 [ 1211.254307][T25906] ? lockdep_hardirqs_on+0x94/0x140 [ 1211.259578][T25906] do_syscall_64+0x4c/0xa0 [ 1211.264035][T25906] ? clear_bhb_loop+0x60/0xb0 [ 1211.268754][T25906] ? clear_bhb_loop+0x60/0xb0 [ 1211.273478][T25906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1211.279438][T25906] RIP: 0033:0x7fd27879e159 [ 1211.283906][T25906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.303562][T25906] RSP: 002b:00007fd27973b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.312037][T25906] RAX: ffffffffffffffda RBX: 00007fd278a25fa0 RCX: 00007fd27879e159 [ 1211.320052][T25906] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1211.328067][T25906] RBP: 00007fd27973b090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.336078][T25906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1211.344086][T25906] R13: 00007fd278a26038 R14: 00007fd278a25fa0 R15: 00007ffe5bb65f48 [ 1211.352115][T25906] [ 1211.462976][T25906] memory allocation failure, unreliable refcount tracker. [ 1211.769393][T25920] netlink: 'syz.0.7067': attribute type 10 has an invalid length. [ 1211.791045][T25920] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7067'. [ 1211.812784][T25922] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7069'. [ 1211.986180][T25932] netlink: 'syz.2.7072': attribute type 10 has an invalid length. [ 1212.074159][T25935] netlink: 'syz.3.7073': attribute type 29 has an invalid length. [ 1212.102155][T25935] netlink: 'syz.3.7073': attribute type 29 has an invalid length. [ 1212.133342][T25940] netlink: 'syz.3.7073': attribute type 29 has an invalid length. [ 1212.182194][T25939] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1212.247361][T25939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7075'. [ 1212.380237][T25946] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1212.611792][T25952] FAULT_INJECTION: forcing a failure. [ 1212.611792][T25952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.641093][T25952] CPU: 1 PID: 25952 Comm: syz.1.7078 Not tainted syzkaller #0 [ 1212.648631][T25952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1212.658741][T25952] Call Trace: [ 1212.662054][T25952] [ 1212.665026][T25952] dump_stack_lvl+0x188/0x24e [ 1212.669745][T25952] ? show_regs_print_info+0x12/0x12 [ 1212.674990][T25952] ? load_image+0x410/0x410 [ 1212.679554][T25952] ? __lock_acquire+0x7c40/0x7c40 [ 1212.684640][T25952] should_fail_ex+0x390/0x4c0 [ 1212.689376][T25952] _copy_to_user+0x2c/0x130 [ 1212.693926][T25952] bpf_verifier_vlog+0x172/0x3a0 [ 1212.698917][T25952] __btf_verifier_log+0xdf/0x130 [ 1212.703911][T25952] ? btf_check_sec_info+0x350/0x350 [ 1212.709161][T25952] ? btf_parse_hdr+0x1dd/0x7d0 [ 1212.713982][T25952] btf_parse_hdr+0x352/0x7d0 [ 1212.718621][T25952] btf_new_fd+0x367/0x760 [ 1212.723007][T25952] __sys_bpf+0x612/0x780 [ 1212.727310][T25952] ? bpf_link_show_fdinfo+0x380/0x380 [ 1212.732754][T25952] ? lock_chain_count+0x20/0x20 [ 1212.737656][T25952] __x64_sys_bpf+0x78/0x90 [ 1212.742154][T25952] do_syscall_64+0x4c/0xa0 [ 1212.746610][T25952] ? clear_bhb_loop+0x60/0xb0 [ 1212.751327][T25952] ? clear_bhb_loop+0x60/0xb0 [ 1212.756038][T25952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1212.761987][T25952] RIP: 0033:0x7fd27879e159 [ 1212.766439][T25952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1212.786176][T25952] RSP: 002b:00007fd27973b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1212.794642][T25952] RAX: ffffffffffffffda RBX: 00007fd278a25fa0 RCX: 00007fd27879e159 [ 1212.802660][T25952] RDX: 0000000000000028 RSI: 0000200000000a40 RDI: 0000000000000012 [ 1212.810693][T25952] RBP: 00007fd27973b090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.818706][T25952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.826712][T25952] R13: 00007fd278a26038 R14: 00007fd278a25fa0 R15: 00007ffe5bb65f48 [ 1212.834742][T25952] [ 1212.843229][T17099] wlan1: Trigger new scan to find an IBSS to join [ 1213.035803][T25954] validate_nla: 3 callbacks suppressed [ 1213.035845][T25954] netlink: 'syz.2.7079': attribute type 2 has an invalid length. [ 1213.067103][T25954] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7079'. [ 1213.176459][T25959] netlink: 'syz.0.7081': attribute type 10 has an invalid length. [ 1213.547119][T25971] netlink: 'syz.5.7084': attribute type 10 has an invalid length. [ 1213.570206][T25971] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7084'. [ 1213.893839][T25956] device syzkaller0 entered promiscuous mode [ 1213.926264][T25982] netlink: 'syz.2.7090': attribute type 3 has an invalid length. [ 1213.944603][T25981] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1213.954982][T25982] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7090'. [ 1213.969270][T25981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7089'. [ 1214.195484][T25987] netlink: 'syz.0.7092': attribute type 10 has an invalid length. [ 1214.575319][T26000] netlink: 'syz.5.7098': attribute type 10 has an invalid length. [ 1214.614118][T26000] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7098'. [ 1214.895900][T26009] netlink: 'syz.1.7102': attribute type 10 has an invalid length. [ 1214.965932][T26011] netlink: 'syz.5.7103': attribute type 3 has an invalid length. [ 1215.016514][T26011] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7103'. [ 1215.305434][T26022] netlink: 'syz.3.7107': attribute type 10 has an invalid length. [ 1215.331283][T26020] netlink: 'syz.2.7106': attribute type 10 has an invalid length. [ 1215.403886][T26020] batman_adv: batadv0: Adding interface: netdevsim0 [ 1215.444712][T26020] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.489137][T26020] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1215.516405][T26025] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1215.531955][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7105'. [ 1215.861106][T26035] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1215.871269][T17095] wlan1: Trigger new scan to find an IBSS to join [ 1216.177719][T26044] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7113'. [ 1216.302701][T26049] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7115'. [ 1216.379393][T26053] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7114'. [ 1217.174703][T26074] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1217.872329][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1217.880184][T15594] wlan1: Trigger new scan to find an IBSS to join [ 1217.906042][T26084] delete_channel: no stack [ 1218.407249][T26092] validate_nla: 8 callbacks suppressed [ 1218.409767][T26092] netlink: 'syz.0.7128': attribute type 10 has an invalid length. [ 1218.446711][T26097] netlink: 'syz.3.7129': attribute type 3 has an invalid length. [ 1218.477162][T26092] __nla_validate_parse: 2 callbacks suppressed [ 1218.477256][T26092] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7128'. [ 1218.512088][T26097] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7129'. [ 1218.782222][T26105] netlink: 'syz.1.7133': attribute type 10 has an invalid length. [ 1218.912545][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1218.964291][T26109] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7135'. [ 1219.067525][T26109] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1219.445442][T26114] netlink: 'syz.1.7137': attribute type 10 has an invalid length. [ 1219.491439][T26114] device geneve1 left promiscuous mode [ 1219.565516][T26114] team0: Port device geneve1 added [ 1219.742351][T26118] netlink: 'syz.2.7139': attribute type 29 has an invalid length. [ 1219.759358][T26118] netlink: 'syz.2.7139': attribute type 29 has an invalid length. [ 1219.783054][T26118] netlink: 'syz.2.7139': attribute type 29 has an invalid length. [ 1219.839079][T26121] netlink: 'syz.3.7140': attribute type 10 has an invalid length. [ 1219.872703][T17099] wlan1: Trigger new scan to find an IBSS to join [ 1219.891394][T17097] wlan1: Creating new IBSS network, BSSID 6e:4e:96:52:b4:c7 [ 1220.976958][T26144] netlink: 'syz.1.7147': attribute type 10 has an invalid length. [ 1221.111601][T26150] device sit0 left promiscuous mode [ 1221.213694][T26151] device sit0 entered promiscuous mode [ 1221.702143][T26160] netlink: 'syz.5.7154': attribute type 10 has an invalid length. [ 1222.509948][T26176] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1222.531374][T26176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7159'. [ 1222.718048][T26182] team0: Port device geneve1 added [ 1222.911601][T17092] wlan1: Trigger new scan to find an IBSS to join [ 1222.918525][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1223.275571][T26195] FAULT_INJECTION: forcing a failure. [ 1223.275571][T26195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1223.300413][T26195] CPU: 1 PID: 26195 Comm: syz.0.7167 Not tainted syzkaller #0 [ 1223.307970][T26195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1223.318065][T26195] Call Trace: [ 1223.321387][T26195] [ 1223.324350][T26195] dump_stack_lvl+0x188/0x24e [ 1223.329077][T26195] ? show_regs_print_info+0x12/0x12 [ 1223.334320][T26195] ? load_image+0x410/0x410 [ 1223.338878][T26195] ? __lock_acquire+0x7c40/0x7c40 [ 1223.343948][T26195] ? tomoyo_path_number_perm+0x205/0x650 [ 1223.349633][T26195] should_fail_ex+0x390/0x4c0 [ 1223.354369][T26195] _copy_from_user+0x2c/0x170 [ 1223.359099][T26195] vlan_ioctl_handler+0xba/0x5c0 [ 1223.364137][T26195] ? sock_ioctl+0x21b/0x700 [ 1223.368708][T26195] ? net_generic+0x240/0x240 [ 1223.373354][T26195] ? net_generic+0x240/0x240 [ 1223.378010][T26195] sock_ioctl+0x23b/0x700 [ 1223.382384][T26195] ? sock_poll+0x420/0x420 [ 1223.386855][T26195] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1223.391833][T26195] ? security_file_ioctl+0x7c/0xa0 [ 1223.396991][T26195] ? sock_poll+0x420/0x420 [ 1223.401466][T26195] __se_sys_ioctl+0xfa/0x170 [ 1223.406104][T26195] do_syscall_64+0x4c/0xa0 [ 1223.410568][T26195] ? clear_bhb_loop+0x60/0xb0 [ 1223.415293][T26195] ? clear_bhb_loop+0x60/0xb0 [ 1223.420008][T26195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1223.425928][T26195] RIP: 0033:0x7faca7d9e159 [ 1223.430368][T26195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.450008][T26195] RSP: 002b:00007faca8ce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.458460][T26195] RAX: ffffffffffffffda RBX: 00007faca8025fa0 RCX: 00007faca7d9e159 [ 1223.466464][T26195] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 0000000000000004 [ 1223.474463][T26195] RBP: 00007faca8ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.482457][T26195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.490454][T26195] R13: 00007faca8026038 R14: 00007faca8025fa0 R15: 00007ffc71fdf1f8 [ 1223.498462][T26195] [ 1223.912092][T15235] wlan1: Creating new IBSS network, BSSID da:61:c1:3c:6e:b9 [ 1224.240146][T26219] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1224.305342][T26220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7173'. [ 1224.561938][T26222] validate_nla: 5 callbacks suppressed [ 1224.561987][T26222] netlink: 'syz.2.7175': attribute type 10 has an invalid length. [ 1224.783785][T26230] netlink: 'syz.0.7178': attribute type 10 has an invalid length. [ 1224.837492][T15594] wlan1: Trigger new scan to find an IBSS to join [ 1224.921593][T26234] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.7181'. [ 1224.953264][T26234] netlink: 'syz.1.7181': attribute type 21 has an invalid length. [ 1224.969199][T26234] netlink: 'syz.1.7181': attribute type 1 has an invalid length. [ 1225.006830][T26236] netlink: 'syz.5.7179': attribute type 46 has an invalid length. [ 1225.245508][T26240] netlink: 'syz.3.7183': attribute type 10 has an invalid length. [ 1225.284990][T26240] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7183'. [ 1225.747684][T26252] netlink: 'syz.5.7187': attribute type 10 has an invalid length. [ 1225.813499][T26252] batman_adv: batadv0: Adding interface: netdevsim0 [ 1225.820325][T26252] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.879249][T15594] wlan1: Creating new IBSS network, BSSID de:a1:24:38:99:bd [ 1225.916873][T26252] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1226.190762][T26267] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1226.266875][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1226.882881][T26276] netlink: 'syz.5.7193': attribute type 10 has an invalid length. [ 1226.918781][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1227.099883][T26282] netlink: 'syz.3.7194': attribute type 10 has an invalid length. [ 1227.437108][T26282] team0: Port device geneve1 added [ 1227.517218][T26284] netlink: 'syz.0.7195': attribute type 10 has an invalid length. [ 1227.546331][T26284] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7195'. [ 1227.871263][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1228.721273][T26320] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1228.817963][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7206'. [ 1228.832276][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1229.039468][T26324] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7209'. [ 1229.822548][T26333] validate_nla: 5 callbacks suppressed [ 1229.822585][T26333] netlink: 'syz.1.7212': attribute type 46 has an invalid length. [ 1230.114071][T26347] netlink: 'syz.3.7219': attribute type 10 has an invalid length. [ 1230.409494][T26360] FAULT_INJECTION: forcing a failure. [ 1230.409494][T26360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.482466][T26360] CPU: 1 PID: 26360 Comm: syz.3.7225 Not tainted syzkaller #0 [ 1230.490015][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1230.500135][T26360] Call Trace: [ 1230.503458][T26360] [ 1230.506440][T26360] dump_stack_lvl+0x188/0x24e [ 1230.511172][T26360] ? show_regs_print_info+0x12/0x12 [ 1230.516440][T26360] ? load_image+0x410/0x410 [ 1230.521017][T26360] ? __lock_acquire+0x7c40/0x7c40 [ 1230.526100][T26360] ? snprintf+0xe5/0x140 [ 1230.530399][T26360] should_fail_ex+0x390/0x4c0 [ 1230.535134][T26360] _copy_to_user+0x2c/0x130 [ 1230.539685][T26360] simple_read_from_buffer+0xe3/0x150 [ 1230.545110][T26360] proc_fail_nth_read+0x1a6/0x220 [ 1230.550184][T26360] ? proc_fault_inject_write+0x310/0x310 [ 1230.555869][T26360] ? fsnotify_perm+0x248/0x550 [ 1230.560685][T26360] ? proc_fault_inject_write+0x310/0x310 [ 1230.566368][T26360] vfs_read+0x2db/0x960 [ 1230.570591][T26360] ? kernel_read+0x1e0/0x1e0 [ 1230.575234][T26360] ? __fget_files+0x28/0x460 [ 1230.579885][T26360] ? __fget_files+0x3fc/0x460 [ 1230.584624][T26360] ? __fdget_pos+0x2ae/0x360 [ 1230.589258][T26360] ? ksys_read+0x70/0x260 [ 1230.593644][T26360] ksys_read+0x14d/0x260 [ 1230.598116][T26360] ? vfs_write+0x9a0/0x9a0 [ 1230.602614][T26360] ? lockdep_hardirqs_on+0x94/0x140 [ 1230.607870][T26360] do_syscall_64+0x4c/0xa0 [ 1230.612331][T26360] ? clear_bhb_loop+0x60/0xb0 [ 1230.617059][T26360] ? clear_bhb_loop+0x60/0xb0 [ 1230.621806][T26360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1230.627750][T26360] RIP: 0033:0x7f5aed55e98e [ 1230.632204][T26360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1230.651856][T26360] RSP: 002b:00007f5aee472fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1230.660331][T26360] RAX: ffffffffffffffda RBX: 00007f5aee4736c0 RCX: 00007f5aed55e98e [ 1230.668342][T26360] RDX: 000000000000000f RSI: 00007f5aee4730a0 RDI: 0000000000000004 [ 1230.676361][T26360] RBP: 00007f5aee473090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.684377][T26360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.692385][T26360] R13: 00007f5aed826038 R14: 00007f5aed825fa0 R15: 00007ffcb5b3b9e8 [ 1230.700417][T26360] [ 1230.706093][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 1230.732628][T26361] netlink: 'syz.2.7224': attribute type 10 has an invalid length. [ 1230.778611][T26361] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7224'. [ 1230.925026][T17095] wlan1: Trigger new scan to find an IBSS to join [ 1230.932361][T26368] netlink: 'syz.0.7227': attribute type 11 has an invalid length. [ 1230.941101][T17092] wlan1: Trigger new scan to find an IBSS to join [ 1230.961238][T26368] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7227'. [ 1231.006602][T26370] netlink: 'syz.0.7227': attribute type 11 has an invalid length. [ 1231.070214][T26370] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7227'. [ 1231.704257][T26367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1231.871112][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1231.871114][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1231.950564][T26380] netlink: 'syz.3.7231': attribute type 46 has an invalid length. [ 1231.952866][T17091] wlan1: Creating new IBSS network, BSSID 3a:7d:0d:f4:32:f6 [ 1232.092321][T26395] netlink: 'syz.0.7235': attribute type 10 has an invalid length. [ 1232.497348][T26408] netlink: 'syz.2.7241': attribute type 10 has an invalid length. [ 1232.586731][T26409] netlink: 'syz.0.7240': attribute type 10 has an invalid length. [ 1232.615251][T26409] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7240'. [ 1232.646650][T26413] netlink: 'syz.3.7242': attribute type 10 has an invalid length. [ 1232.786004][T17092] wlan1: Creating new IBSS network, BSSID a6:9e:d8:0c:15:3a [ 1233.389543][T26428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7247'. [ 1233.435100][T26428] : renamed from caif0 [ 1233.471801][T26428] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1233.913655][T26439] netlink: 'syz.3.7250': attribute type 10 has an invalid length. [ 1233.939811][T26436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7252'. [ 1234.831240][T17095] wlan1: Trigger new scan to find an IBSS to join [ 1234.859574][T26451] netlink: 'syz.3.7254': attribute type 46 has an invalid length. [ 1235.763005][T26465] netlink: 'syz.0.7259': attribute type 10 has an invalid length. [ 1235.811347][T17091] wlan1: Creating new IBSS network, BSSID 86:17:a8:c7:12:2b [ 1235.871082][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1235.919445][T26469] netlink: 'syz.2.7262': attribute type 10 has an invalid length. [ 1236.147538][T26475] netlink: 'syz.1.7264': attribute type 10 has an invalid length. [ 1236.229890][T26478] netlink: 'syz.3.7265': attribute type 15 has an invalid length. [ 1236.261083][T26478] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7265'. [ 1236.520788][T26480] netlink: 'syz.1.7266': attribute type 10 has an invalid length. [ 1236.560606][T26480] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7266'. [ 1236.815142][T15235] wlan1: Creating new IBSS network, BSSID aa:f1:4b:39:40:04 [ 1237.076786][T26496] netlink: 'syz.3.7273': attribute type 5 has an invalid length. [ 1237.220610][T26503] netlink: 'syz.2.7276': attribute type 10 has an invalid length. [ 1237.352216][ T4280] Bluetooth: hci3: Dropping invalid advertising data [ 1237.359408][ T4280] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1237.619559][T26512] netlink: 'syz.1.7279': attribute type 15 has an invalid length. [ 1237.631303][T26512] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7279'. [ 1237.955768][T26518] netlink: 'syz.5.7282': attribute type 10 has an invalid length. [ 1238.424347][T26525] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7285'. [ 1238.476373][T26528] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7287'. [ 1238.543652][T26531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.597235][T26531] device bridge_slave_0 left promiscuous mode [ 1238.629008][T26531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.764520][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.771125][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.351071][T26551] FAULT_INJECTION: forcing a failure. [ 1239.351071][T26551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.394799][T26551] CPU: 1 PID: 26551 Comm: syz.5.7295 Not tainted syzkaller #0 [ 1239.402342][T26551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1239.412442][T26551] Call Trace: [ 1239.415786][T26551] [ 1239.418789][T26551] dump_stack_lvl+0x188/0x24e [ 1239.423524][T26551] ? show_regs_print_info+0x12/0x12 [ 1239.428765][T26551] ? load_image+0x410/0x410 [ 1239.433324][T26551] ? __lock_acquire+0x7c40/0x7c40 [ 1239.438401][T26551] should_fail_ex+0x390/0x4c0 [ 1239.443132][T26551] _copy_from_user+0x2c/0x170 [ 1239.447851][T26551] __copy_msghdr+0x384/0x560 [ 1239.452486][T26551] ___sys_sendmsg+0x210/0x360 [ 1239.457214][T26551] ? __sys_sendmsg+0x2a0/0x2a0 [ 1239.462048][T26551] ? __lock_acquire+0x7c40/0x7c40 [ 1239.467150][T26551] __se_sys_sendmsg+0x1c3/0x2b0 [ 1239.472058][T26551] ? __x64_sys_sendmsg+0x80/0x80 [ 1239.477060][T26551] ? lockdep_hardirqs_on+0x94/0x140 [ 1239.482327][T26551] do_syscall_64+0x4c/0xa0 [ 1239.486786][T26551] ? clear_bhb_loop+0x60/0xb0 [ 1239.491494][T26551] ? clear_bhb_loop+0x60/0xb0 [ 1239.496213][T26551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1239.502152][T26551] RIP: 0033:0x7f091719e159 [ 1239.506603][T26551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.526265][T26551] RSP: 002b:00007f0917f99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.534721][T26551] RAX: ffffffffffffffda RBX: 00007f0917425fa0 RCX: 00007f091719e159 [ 1239.542746][T26551] RDX: 0000000020040800 RSI: 0000200000000140 RDI: 0000000000000003 [ 1239.550758][T26551] RBP: 00007f0917f99090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.558770][T26551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.566783][T26551] R13: 00007f0917426038 R14: 00007f0917425fa0 R15: 00007ffd34075398 [ 1239.574812][T26551] [ 1239.897058][T26565] validate_nla: 4 callbacks suppressed [ 1239.897077][T26565] netlink: 'syz.2.7300': attribute type 10 has an invalid length. [ 1239.946293][T26565] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7300'. [ 1240.156110][T26569] device syzkaller0 entered promiscuous mode [ 1240.212763][T26572] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 1240.378971][T26576] netlink: 2147 bytes leftover after parsing attributes in process `syz.2.7306'. [ 1240.401111][T26578] netlink: 'syz.3.7307': attribute type 10 has an invalid length. [ 1240.517096][T26580] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1240.544517][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7308'. [ 1241.063629][T26596] netlink: 'syz.2.7316': attribute type 10 has an invalid length. [ 1241.091559][T26596] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7316'. [ 1241.228833][T26604] FAULT_INJECTION: forcing a failure. [ 1241.228833][T26604] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.254131][T26604] CPU: 0 PID: 26604 Comm: syz.1.7319 Not tainted syzkaller #0 [ 1241.261690][T26604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1241.271757][T26604] Call Trace: [ 1241.275047][T26604] [ 1241.277982][T26604] dump_stack_lvl+0x188/0x24e [ 1241.282675][T26604] ? show_regs_print_info+0x12/0x12 [ 1241.287910][T26604] ? load_image+0x410/0x410 [ 1241.292437][T26604] ? __might_sleep+0xd0/0xd0 [ 1241.297078][T26604] ? __lock_acquire+0x7c40/0x7c40 [ 1241.302123][T26604] ? aa_file_perm+0x3ea/0xf00 [ 1241.306842][T26604] should_fail_ex+0x390/0x4c0 [ 1241.311577][T26604] should_failslab+0x5/0x20 [ 1241.316123][T26604] slab_pre_alloc_hook+0x59/0x300 [ 1241.321201][T26604] ? kernfs_fop_write_iter+0x154/0x520 [ 1241.326711][T26604] __kmem_cache_alloc_node+0x4f/0x270 [ 1241.332139][T26604] ? kernfs_fop_write_iter+0x154/0x520 [ 1241.337646][T26604] __kmalloc+0xa3/0x240 [ 1241.341859][T26604] kernfs_fop_write_iter+0x154/0x520 [ 1241.347191][T26604] vfs_write+0x482/0x9a0 [ 1241.351487][T26604] ? file_end_write+0x250/0x250 [ 1241.356395][T26604] ? __fget_files+0x3fc/0x460 [ 1241.361139][T26604] ? __fdget_pos+0x2ae/0x360 [ 1241.365792][T26604] ? ksys_write+0x70/0x260 [ 1241.370278][T26604] ksys_write+0x14d/0x260 [ 1241.374656][T26604] ? __ia32_sys_read+0x80/0x80 [ 1241.379474][T26604] ? lockdep_hardirqs_on+0x94/0x140 [ 1241.384716][T26604] do_syscall_64+0x4c/0xa0 [ 1241.389167][T26604] ? clear_bhb_loop+0x60/0xb0 [ 1241.393883][T26604] ? clear_bhb_loop+0x60/0xb0 [ 1241.398598][T26604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1241.404542][T26604] RIP: 0033:0x7fd27879e159 [ 1241.408996][T26604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.428646][T26604] RSP: 002b:00007fd27973b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1241.437116][T26604] RAX: ffffffffffffffda RBX: 00007fd278a25fa0 RCX: 00007fd27879e159 [ 1241.445136][T26604] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1241.453154][T26604] RBP: 00007fd27973b090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.461163][T26604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.469174][T26604] R13: 00007fd278a26038 R14: 00007fd278a25fa0 R15: 00007ffe5bb65f48 [ 1241.477205][T26604] [ 1241.553247][T26609] netlink: 'syz.0.7321': attribute type 10 has an invalid length. [ 1241.785532][T26628] netlink: 'syz.2.7324': attribute type 10 has an invalid length. [ 1241.827195][T26628] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1241.995555][T26633] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1242.043222][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1242.479123][T26646] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1242.846349][T26652] netlink: 'syz.5.7334': attribute type 10 has an invalid length. [ 1242.870405][T26652] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7334'. [ 1242.911328][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1243.135680][T26662] netlink: 'syz.3.7335': attribute type 10 has an invalid length. [ 1244.311241][T26702] netlink: 'syz.5.7353': attribute type 17 has an invalid length. [ 1244.351424][T26702] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7353'. [ 1244.428886][T26702] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1244.491547][T26702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1244.569743][T26697] netlink: 'syz.0.7350': attribute type 10 has an invalid length. [ 1244.589568][T26697] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1244.718462][T26713] nr0: port 1(hsr0) entered blocking state [ 1244.775331][T26713] nr0: port 1(hsr0) entered disabled state [ 1244.788156][T26713] device hsr0 entered promiscuous mode [ 1244.903353][T26719] netlink: 'syz.0.7356': attribute type 10 has an invalid length. [ 1245.510617][T26732] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7362'. [ 1245.563423][T26732] openvswitch: netlink: Message has 6 unknown bytes. [ 1245.614975][T26741] delete_channel: no stack [ 1245.872790][T17099] wlan1: Trigger new scan to find an IBSS to join [ 1245.928435][T26737] delete_channel: no stack [ 1245.937146][T26753] netlink: 'syz.5.7369': attribute type 39 has an invalid length. [ 1246.535783][T26761] FAULT_INJECTION: forcing a failure. [ 1246.535783][T26761] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.581174][T26761] CPU: 1 PID: 26761 Comm: syz.5.7372 Not tainted syzkaller #0 [ 1246.588906][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1246.599011][T26761] Call Trace: [ 1246.602333][T26761] [ 1246.605300][T26761] dump_stack_lvl+0x188/0x24e [ 1246.610011][T26761] ? show_regs_print_info+0x12/0x12 [ 1246.615242][T26761] ? load_image+0x410/0x410 [ 1246.619787][T26761] ? __lock_acquire+0x7c40/0x7c40 [ 1246.624866][T26761] ? trace_call_bpf+0xbf/0x6b0 [ 1246.629691][T26761] should_fail_ex+0x390/0x4c0 [ 1246.634408][T26761] should_failslab+0x5/0x20 [ 1246.638934][T26761] slab_pre_alloc_hook+0x59/0x300 [ 1246.643988][T26761] ? bpf_test_init+0x9f/0x140 [ 1246.648700][T26761] __kmem_cache_alloc_node+0x4f/0x270 [ 1246.654161][T26761] ? bpf_test_init+0x9f/0x140 [ 1246.658875][T26761] __kmalloc+0xa3/0x240 [ 1246.663155][T26761] bpf_test_init+0x9f/0x140 [ 1246.667700][T26761] bpf_prog_test_run_xdp+0x488/0xf80 [ 1246.673627][T26761] ? __lock_acquire+0x7c40/0x7c40 [ 1246.678694][T26761] ? dev_put+0x80/0x80 [ 1246.682811][T26761] ? dev_put+0x80/0x80 [ 1246.686915][T26761] bpf_prog_test_run+0x31c/0x390 [ 1246.691890][T26761] __sys_bpf+0x62b/0x780 [ 1246.696174][T26761] ? bpf_link_show_fdinfo+0x380/0x380 [ 1246.701588][T26761] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1246.707782][T26761] __x64_sys_bpf+0x78/0x90 [ 1246.712233][T26761] do_syscall_64+0x4c/0xa0 [ 1246.716681][T26761] ? clear_bhb_loop+0x60/0xb0 [ 1246.721391][T26761] ? clear_bhb_loop+0x60/0xb0 [ 1246.726095][T26761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1246.732040][T26761] RIP: 0033:0x7f091719e159 [ 1246.736483][T26761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.756136][T26761] RSP: 002b:00007f0917f99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1246.764580][T26761] RAX: ffffffffffffffda RBX: 00007f0917425fa0 RCX: 00007f091719e159 [ 1246.772581][T26761] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1246.780668][T26761] RBP: 00007f0917f99090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.788752][T26761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.796786][T26761] R13: 00007f0917426038 R14: 00007f0917425fa0 R15: 00007ffd34075398 [ 1246.804796][T26761] [ 1246.953560][T26763] netlink: 'syz.3.7371': attribute type 10 has an invalid length. [ 1247.207058][T26772] FAULT_INJECTION: forcing a failure. [ 1247.207058][T26772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.257642][T26772] CPU: 0 PID: 26772 Comm: syz.2.7374 Not tainted syzkaller #0 [ 1247.265198][T26772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1247.275304][T26772] Call Trace: [ 1247.278620][T26772] [ 1247.281590][T26772] dump_stack_lvl+0x188/0x24e [ 1247.286322][T26772] ? show_regs_print_info+0x12/0x12 [ 1247.291575][T26772] ? load_image+0x410/0x410 [ 1247.296141][T26772] ? _printk+0x6/0x130 [ 1247.300264][T26772] should_fail_ex+0x390/0x4c0 [ 1247.305009][T26772] _copy_to_user+0x2c/0x130 [ 1247.309563][T26772] bpf_test_finish+0x198/0x600 [ 1247.314398][T26772] ? csum_partial+0x23d/0x2c0 [ 1247.319133][T26772] ? convert_skb_to___skb+0x420/0x420 [ 1247.324579][T26772] ? __skb_checksum+0x6fc/0x7a0 [ 1247.329478][T26772] ? __build_skb+0x24b/0x3b0 [ 1247.334116][T26772] bpf_prog_test_run_skb+0x1129/0x18e0 [ 1247.339658][T26772] ? cpu_online+0xa0/0xa0 [ 1247.344046][T26772] bpf_prog_test_run+0x31c/0x390 [ 1247.349127][T26772] __sys_bpf+0x62b/0x780 [ 1247.353425][T26772] ? bpf_link_show_fdinfo+0x380/0x380 [ 1247.358855][T26772] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1247.365070][T26772] __x64_sys_bpf+0x78/0x90 [ 1247.370220][T26772] do_syscall_64+0x4c/0xa0 [ 1247.374685][T26772] ? clear_bhb_loop+0x60/0xb0 [ 1247.379400][T26772] ? clear_bhb_loop+0x60/0xb0 [ 1247.384117][T26772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.390120][T26772] RIP: 0033:0x7f109ab9e159 [ 1247.394576][T26772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.414242][T26772] RSP: 002b:00007f109baa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1247.422707][T26772] RAX: ffffffffffffffda RBX: 00007f109ae25fa0 RCX: 00007f109ab9e159 [ 1247.430726][T26772] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 1247.438735][T26772] RBP: 00007f109baa2090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.446753][T26772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.454773][T26772] R13: 00007f109ae26038 R14: 00007f109ae25fa0 R15: 00007ffe26e4de88 [ 1247.463083][T26772] [ 1247.636762][T26778] netlink: 'syz.1.7378': attribute type 5 has an invalid length. [ 1247.882970][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1248.215838][T26790] netlink: 'syz.3.7381': attribute type 3 has an invalid length. [ 1248.301317][T26790] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1249.881232][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1249.935357][T15594] wlan1: Creating new IBSS network, BSSID aa:d5:36:8d:e4:1d [ 1250.297849][T26809] netlink: 'syz.3.7387': attribute type 10 has an invalid length. [ 1250.367031][T26811] netlink: 'syz.1.7386': attribute type 10 has an invalid length. [ 1250.377708][T26811] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7386'. [ 1250.697695][T26820] nr0: port 1(hsr0) entered blocking state [ 1250.752790][T26822] FAULT_INJECTION: forcing a failure. [ 1250.752790][T26822] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.754474][T26820] nr0: port 1(hsr0) entered disabled state [ 1250.776791][T26822] CPU: 0 PID: 26822 Comm: syz.1.7392 Not tainted syzkaller #0 [ 1250.784509][T26822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1250.794636][T26822] Call Trace: [ 1250.797955][T26822] [ 1250.800926][T26822] dump_stack_lvl+0x188/0x24e [ 1250.804349][T26820] device hsr0 entered promiscuous mode [ 1250.805642][T26822] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1250.817327][T26822] ? show_regs_print_info+0x12/0x12 [ 1250.822625][T26822] ? load_image+0x410/0x410 [ 1250.827207][T26822] should_fail_ex+0x390/0x4c0 [ 1250.831948][T26822] should_failslab+0x5/0x20 [ 1250.836514][T26822] slab_pre_alloc_hook+0x59/0x300 [ 1250.841603][T26822] kmem_cache_alloc+0x56/0x2f0 [ 1250.846433][T26822] ? skb_clone+0x1e7/0x370 [ 1250.850902][T26822] skb_clone+0x1e7/0x370 [ 1250.855199][T26822] __netlink_deliver_tap+0x3e4/0x7e0 [ 1250.860547][T26822] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.865802][T26822] netlink_deliver_tap+0x19c/0x1b0 [ 1250.870963][T26822] netlink_unicast+0x777/0x920 [ 1250.875785][T26822] netlink_sendmsg+0x8ad/0xbd0 [ 1250.880599][T26822] ? netlink_getsockopt+0x550/0x550 [ 1250.885838][T26822] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1250.891419][T26822] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1250.896760][T26822] ? security_socket_sendmsg+0x7c/0xa0 [ 1250.902251][T26822] ? netlink_getsockopt+0x550/0x550 [ 1250.907475][T26822] ____sys_sendmsg+0x5ed/0x9a0 [ 1250.912288][T26822] ? __sys_sendmsg_sock+0x30/0x30 [ 1250.917339][T26822] ? __import_iovec+0x306/0x510 [ 1250.922243][T26822] ? import_iovec+0x6f/0xa0 [ 1250.926792][T26822] ___sys_sendmsg+0x2a2/0x360 [ 1250.931507][T26822] ? __sys_sendmsg+0x2a0/0x2a0 [ 1250.936314][T26822] ? __lock_acquire+0x7c40/0x7c40 [ 1250.941433][T26822] __se_sys_sendmsg+0x1c3/0x2b0 [ 1250.946316][T26822] ? __x64_sys_sendmsg+0x80/0x80 [ 1250.951294][T26822] ? lockdep_hardirqs_on+0x94/0x140 [ 1250.956535][T26822] do_syscall_64+0x4c/0xa0 [ 1250.960975][T26822] ? clear_bhb_loop+0x60/0xb0 [ 1250.965681][T26822] ? clear_bhb_loop+0x60/0xb0 [ 1250.970390][T26822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.976333][T26822] RIP: 0033:0x7fd27879e159 [ 1250.980783][T26822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.000507][T26822] RSP: 002b:00007fd27973b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.008950][T26822] RAX: ffffffffffffffda RBX: 00007fd278a25fa0 RCX: 00007fd27879e159 [ 1251.016951][T26822] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1251.024953][T26822] RBP: 00007fd27973b090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.032960][T26822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.040954][T26822] R13: 00007fd278a26038 R14: 00007fd278a25fa0 R15: 00007ffe5bb65f48 [ 1251.048967][T26822] [ 1251.131221][T17097] wlan1: Creating new IBSS network, BSSID ae:26:0f:7d:3c:23 [ 1251.557988][T26837] netlink: 'syz.0.7395': attribute type 29 has an invalid length. [ 1251.586049][T26837] netlink: 'syz.0.7395': attribute type 29 has an invalid length. [ 1251.660199][T26837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7395'. [ 1251.965382][T26843] FAULT_INJECTION: forcing a failure. [ 1251.965382][T26843] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.986572][T26843] CPU: 1 PID: 26843 Comm: syz.2.7397 Not tainted syzkaller #0 [ 1251.994104][T26843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1252.004205][T26843] Call Trace: [ 1252.007529][T26843] [ 1252.010512][T26843] dump_stack_lvl+0x188/0x24e [ 1252.015250][T26843] ? show_regs_print_info+0x12/0x12 [ 1252.020489][T26843] ? load_image+0x410/0x410 [ 1252.025045][T26843] ? __might_sleep+0xd0/0xd0 [ 1252.029677][T26843] ? __lock_acquire+0x7c40/0x7c40 [ 1252.034752][T26843] should_fail_ex+0x390/0x4c0 [ 1252.039503][T26843] should_failslab+0x5/0x20 [ 1252.044046][T26843] slab_pre_alloc_hook+0x59/0x300 [ 1252.049113][T26843] ? lock_chain_count+0x20/0x20 [ 1252.054040][T26843] ? kvmalloc_node+0x6c/0x180 [ 1252.058767][T26843] __kmem_cache_alloc_node+0x4f/0x270 [ 1252.064196][T26843] ? kvmalloc_node+0x6c/0x180 [ 1252.068937][T26843] __kmalloc_node+0xa2/0x240 [ 1252.073578][T26843] ? _local_bh_enable+0xa0/0xa0 [ 1252.078463][T26843] kvmalloc_node+0x6c/0x180 [ 1252.083019][T26843] __veth_napi_enable_range+0xa3/0x3c0 [ 1252.088694][T26843] veth_napi_enable_range+0xd0/0x150 [ 1252.094032][T26843] veth_set_features+0x1b2/0x2b0 [ 1252.099065][T26843] __netdev_update_features+0x953/0x1730 [ 1252.104771][T26843] ? dev_xdp_attach+0xe20/0xe20 [ 1252.109686][T26843] ? __might_fault+0xa6/0x120 [ 1252.114416][T26843] ? __lock_acquire+0x7c40/0x7c40 [ 1252.119513][T26843] ? trace_contention_end+0x5f/0x170 [ 1252.124866][T26843] ? __might_fault+0xa6/0x120 [ 1252.129594][T26843] ? __might_fault+0xc2/0x120 [ 1252.134367][T26843] ? __might_fault+0xa6/0x120 [ 1252.139130][T26843] ethtool_set_one_feature+0x1b9/0x200 [ 1252.144652][T26843] ? ethtool_get_one_feature+0x1a0/0x1a0 [ 1252.150352][T26843] ? security_capable+0x85/0xb0 [ 1252.155255][T26843] dev_ethtool+0xebc/0x12f0 [ 1252.159821][T26843] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1252.166124][T26843] ? __lock_acquire+0x7c40/0x7c40 [ 1252.171196][T26843] ? __kmem_cache_free+0xb6/0x200 [ 1252.176268][T26843] ? full_name_hash+0x8e/0xe0 [ 1252.180987][T26843] ? dev_load+0x1d/0x1e0 [ 1252.185276][T26843] ? dev_load+0x1d/0x1e0 [ 1252.189569][T26843] dev_ioctl+0x474/0xe80 [ 1252.193869][T26843] sock_do_ioctl+0x245/0x320 [ 1252.198517][T26843] ? sock_show_fdinfo+0xb0/0xb0 [ 1252.203434][T26843] sock_ioctl+0x48a/0x700 [ 1252.207810][T26843] ? sock_poll+0x420/0x420 [ 1252.212276][T26843] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1252.217262][T26843] ? security_file_ioctl+0x7c/0xa0 [ 1252.222427][T26843] ? sock_poll+0x420/0x420 [ 1252.226892][T26843] __se_sys_ioctl+0xfa/0x170 [ 1252.231541][T26843] do_syscall_64+0x4c/0xa0 [ 1252.235998][T26843] ? clear_bhb_loop+0x60/0xb0 [ 1252.240723][T26843] ? clear_bhb_loop+0x60/0xb0 [ 1252.245462][T26843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1252.251421][T26843] RIP: 0033:0x7f109ab9e159 [ 1252.255876][T26843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.275530][T26843] RSP: 002b:00007f109ba3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.284004][T26843] RAX: ffffffffffffffda RBX: 00007f109ae26270 RCX: 00007f109ab9e159 [ 1252.292029][T26843] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 1252.300044][T26843] RBP: 00007f109ba3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.308056][T26843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.316074][T26843] R13: 00007f109ae26308 R14: 00007f109ae26270 R15: 00007ffe26e4de88 [ 1252.324122][T26843] [ 1252.441882][T26843] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9 [ 1252.647123][T26851] netlink: 'syz.5.7400': attribute type 10 has an invalid length. [ 1252.923831][T26859] netlink: 'syz.3.7403': attribute type 10 has an invalid length. [ 1252.979743][T26859] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7403'. [ 1253.911281][T17092] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1254.942521][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1254.953129][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1254.963151][T22486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1254.992984][T22486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1255.046848][T22486] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1255.073892][T22486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.061792][T26907] netlink: 'syz.2.7419': attribute type 10 has an invalid length. [ 1256.091202][T26907] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7419'. [ 1256.188953][T26898] netlink: 'syz.1.7416': attribute type 10 has an invalid length. [ 1256.652571][T17097] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.724776][T26920] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1256.749248][T26914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1256.868613][T17097] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.058872][T17097] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.147137][T26892] chnl_net:caif_netlink_parms(): no params data found [ 1257.161231][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 1257.272762][T17097] batman_adv: batadv0: Removing interface: netdevsim0 [ 1258.856017][T26942] netlink: 'syz.3.7429': attribute type 10 has an invalid length. [ 1258.911244][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1259.121854][T26950] netlink: 'syz.3.7431': attribute type 10 has an invalid length. [ 1259.180004][T26955] netlink: 'syz.2.7432': attribute type 10 has an invalid length. [ 1259.232360][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 1259.238565][T26955] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7432'. [ 1259.314273][T26892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.333919][T26892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.362533][T26892] device bridge_slave_0 entered promiscuous mode [ 1259.404962][T26892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.418457][T26892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.451198][T26892] device bridge_slave_1 entered promiscuous mode [ 1259.606290][T26892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.687977][T26892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.852618][T26892] team0: Port device team_slave_0 added [ 1259.903163][T26892] team0: Port device team_slave_1 added [ 1260.163621][T17097] tipc: Left network mode [ 1260.199262][T26892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.229020][T26892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.282839][T26892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.308947][T26892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.326841][T26892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.447942][T26892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.675213][ T4280] Bluetooth: hci5: ISO packet for unknown connection handle 3097 [ 1260.689115][T17097] device ip6gretap0 left promiscuous mode [ 1260.711399][T17097] Ÿë: port 1(ip6gretap0) entered disabled state [ 1261.038009][T26980] netlink: 'syz.2.7440': attribute type 10 has an invalid length. [ 1261.321231][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 1262.638380][T26892] device hsr_slave_0 entered promiscuous mode [ 1262.682102][T26892] device hsr_slave_1 entered promiscuous mode [ 1262.715453][T27001] netlink: 'syz.1.7444': attribute type 10 has an invalid length. [ 1262.734444][T27001] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7444'. [ 1262.802102][T17095] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1262.833530][T17092] wlan1: Trigger new scan to find an IBSS to join [ 1263.180077][T27011] netlink: 'syz.0.7447': attribute type 10 has an invalid length. [ 1263.263118][T22486] Bluetooth: hci0: ISO packet for unknown connection handle 3097 [ 1263.401856][T22486] Bluetooth: hci1: command 0x0419 tx timeout [ 1263.819242][T15594] wlan1: Creating new IBSS network, BSSID 0a:bf:8d:c4:bb:2b [ 1263.884168][T27027] netlink: 'syz.0.7451': attribute type 10 has an invalid length. [ 1265.787132][T27061] netlink: 'syz.3.7463': attribute type 21 has an invalid length. [ 1265.809741][T27056] netlink: 'syz.1.7459': attribute type 10 has an invalid length. [ 1265.832182][T27056] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7459'. [ 1265.869323][T27059] netlink: 'syz.2.7462': attribute type 10 has an invalid length. [ 1266.004049][ T4280] Bluetooth: hci3: ISO packet for unknown connection handle 3097 [ 1266.370677][T26892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1266.427002][T26892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1266.746358][T26892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1266.794223][T26892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1266.878635][T17097] device team0 left promiscuous mode [ 1266.894846][T17090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1266.917867][T17097] device team_slave_1 left promiscuous mode [ 1266.941383][T17097] device geneve1 left promiscuous mode [ 1266.947222][T17097] ¥: port 1(team0) entered disabled state [ 1266.973580][T17097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.000993][T17097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.046775][T17097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.065697][T17097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.039438][T17097] device veth1_vlan left promiscuous mode [ 1268.045351][T17097] device veth0_vlan left promiscuous mode [ 1268.372739][T17097] team0 (unregistering): Port device geneve1 removed [ 1268.764057][T17097] team0 (unregistering): Port device team_slave_1 removed [ 1269.182154][T27086] netlink: 'syz.2.7470': attribute type 10 has an invalid length. [ 1269.194261][T27104] netlink: 'syz.1.7476': attribute type 10 has an invalid length. [ 1269.208047][T27102] netlink: 'syz.0.7474': attribute type 10 has an invalid length. [ 1269.238553][T27102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.278057][T27102] device bridge_slave_1 left promiscuous mode [ 1269.305289][T27102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.368222][T27109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7478'. [ 1269.732289][T26892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.787048][T17095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1269.804262][T17095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1269.870769][T26892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.910185][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1269.964727][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1270.024614][T17091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.031839][T17091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.119170][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1270.151576][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1270.193869][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1270.214899][T17091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.222204][T17091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.251817][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1270.261839][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1270.284556][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1270.296799][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1270.345300][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1270.392435][T27136] netlink: 'syz.3.7484': attribute type 10 has an invalid length. [ 1270.416318][T27136] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7484'. [ 1270.442330][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1270.465528][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1270.504822][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1270.561128][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1270.619628][T26892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.678706][T26892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1270.737858][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1270.766877][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1271.546540][T27160] netlink: 'syz.0.7489': attribute type 10 has an invalid length. [ 1271.846775][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1271.886947][T17092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1271.920227][T26892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.165935][T27168] netlink: 'syz.1.7490': attribute type 10 has an invalid length. [ 1272.514132][T27168] device veth0_vlan left promiscuous mode [ 1272.539397][T27168] device veth0_vlan entered promiscuous mode [ 1272.570346][T27168] team0: Device veth0_vlan failed to register rx_handler [ 1272.976150][T27190] netlink: 'syz.0.7495': attribute type 29 has an invalid length. [ 1273.021306][T27190] netlink: 'syz.0.7495': attribute type 29 has an invalid length. [ 1273.044389][T27195] FAULT_INJECTION: forcing a failure. [ 1273.044389][T27195] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.111141][T27190] device sit0 entered promiscuous mode [ 1273.159657][T27195] CPU: 0 PID: 27195 Comm: syz.0.7495 Not tainted syzkaller #0 [ 1273.167203][T27195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1273.177314][T27195] Call Trace: [ 1273.180642][T27195] [ 1273.183655][T27195] dump_stack_lvl+0x188/0x24e [ 1273.188399][T27195] ? show_regs_print_info+0x12/0x12 [ 1273.193673][T27195] ? load_image+0x410/0x410 [ 1273.198249][T27195] ? perf_trace_lock+0xf8/0x390 [ 1273.203163][T27195] ? verify_lock_unused+0x140/0x140 [ 1273.208423][T27195] ? perf_trace_lock+0xf8/0x390 [ 1273.213344][T27195] should_fail_ex+0x390/0x4c0 [ 1273.218094][T27195] should_failslab+0x5/0x20 [ 1273.222664][T27195] slab_pre_alloc_hook+0x59/0x300 [ 1273.227757][T27195] kmem_cache_alloc+0x56/0x2f0 [ 1273.232575][T27195] ? skb_clone+0x1e7/0x370 [ 1273.237060][T27195] skb_clone+0x1e7/0x370 [ 1273.241357][T27195] __netlink_deliver_tap+0x3e4/0x7e0 [ 1273.246709][T27195] ? netlink_deliver_tap+0x2e/0x1b0 [ 1273.251966][T27195] netlink_deliver_tap+0x19c/0x1b0 [ 1273.257156][T27195] netlink_unicast+0x777/0x920 [ 1273.262022][T27195] netlink_sendmsg+0x8ad/0xbd0 [ 1273.266860][T27195] ? netlink_getsockopt+0x550/0x550 [ 1273.272137][T27195] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1273.277753][T27195] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1273.283094][T27195] ? security_socket_sendmsg+0x7c/0xa0 [ 1273.288624][T27195] ? netlink_getsockopt+0x550/0x550 [ 1273.293883][T27195] ____sys_sendmsg+0x5ed/0x9a0 [ 1273.298717][T27195] ? __sys_sendmsg_sock+0x30/0x30 [ 1273.303798][T27195] ? __import_iovec+0x306/0x510 [ 1273.308732][T27195] ? import_iovec+0x6f/0xa0 [ 1273.313311][T27195] ___sys_sendmsg+0x2a2/0x360 [ 1273.318057][T27195] ? __sys_sendmsg+0x2a0/0x2a0 [ 1273.322932][T27195] ? __lock_acquire+0x7c40/0x7c40 [ 1273.328069][T27195] __se_sys_sendmsg+0x1c3/0x2b0 [ 1273.332984][T27195] ? __x64_sys_sendmsg+0x80/0x80 [ 1273.338008][T27195] ? lockdep_hardirqs_on+0x94/0x140 [ 1273.343274][T27195] do_syscall_64+0x4c/0xa0 [ 1273.347750][T27195] ? clear_bhb_loop+0x60/0xb0 [ 1273.352488][T27195] ? clear_bhb_loop+0x60/0xb0 [ 1273.357223][T27195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1273.363184][T27195] RIP: 0033:0x7faca7d9e159 [ 1273.367659][T27195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.387502][T27195] RSP: 002b:00007faca8cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.395997][T27195] RAX: ffffffffffffffda RBX: 00007faca8026090 RCX: 00007faca7d9e159 [ 1273.404022][T27195] RDX: 0000000000000010 RSI: 0000200000002940 RDI: 0000000000000009 [ 1273.412031][T27195] RBP: 00007faca8cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.420041][T27195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.428065][T27195] R13: 00007faca8026128 R14: 00007faca8026090 R15: 00007ffc71fdf1f8 [ 1273.436087][T27195] [ 1273.768996][T27195] netlink: 'syz.0.7495': attribute type 29 has an invalid length. [ 1274.355900][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1274.375502][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1274.474264][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1274.503555][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1274.527550][T27219] netlink: 'syz.2.7498': attribute type 2 has an invalid length. [ 1274.540149][T26892] device veth0_vlan entered promiscuous mode [ 1274.556392][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1274.561961][T27219] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7498'. [ 1274.601986][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1274.649904][T26892] device veth1_vlan entered promiscuous mode [ 1274.768591][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1274.842856][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1274.970773][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1274.995683][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1275.039449][T26892] device veth0_macvtap entered promiscuous mode [ 1275.070014][T26892] device veth1_macvtap entered promiscuous mode [ 1275.214131][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.250945][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.280911][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.305679][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.331074][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.360382][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.385378][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.418318][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.452721][T26892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.471908][T27230] netlink: 'syz.2.7501': attribute type 10 has an invalid length. [ 1275.488610][T27230] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7501'. [ 1275.539560][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1275.560324][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1275.583642][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1275.613893][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1275.635905][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.661003][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.690939][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.705910][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.727159][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.765188][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.777840][T26892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.806617][T26892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.836682][T26892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.860513][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1275.879598][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1275.913632][T26892] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.931458][T26892] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.946941][T26892] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.959513][T26892] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.086194][T27243] netlink: 'syz.0.7502': attribute type 10 has an invalid length. [ 1277.361467][T15247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.399837][T15247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.441137][T17091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1277.501259][T17091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.520362][T17091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.570736][T15247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1277.993999][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1278.023204][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1278.060513][T27277] netlink: 33 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1278.112913][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1278.188645][T27277] netlink: 33 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1278.258571][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1278.314492][T27277] netlink: 33 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1278.368964][T27280] netlink: 'syz.0.7512': attribute type 10 has an invalid length. [ 1278.389460][T27280] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7512'. [ 1278.517058][T27285] netlink: 'syz.5.7513': attribute type 2 has an invalid length. [ 1278.553701][T27288] netlink: 'syz.3.7514': attribute type 10 has an invalid length. [ 1279.240392][T27298] netlink: 'syz.0.7528': attribute type 10 has an invalid length. [ 1280.013397][T15247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1280.054402][T27309] netlink: 'syz.0.7520': attribute type 2 has an invalid length. [ 1280.099873][T27309] device ..! entered promiscuous mode [ 1280.477327][T27321] __nla_validate_parse: 2 callbacks suppressed [ 1280.477392][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1280.541962][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1280.575806][T27321] netlink: 33 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1280.611785][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1280.658637][T27321] netlink: 33 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1280.686973][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1280.721417][T27321] netlink: 33 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1281.385174][T27341] netlink: 'syz.1.7532': attribute type 10 has an invalid length. [ 1281.451229][T27341] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7532'. [ 1284.019253][T27360] netlink: 'syz.1.7537': attribute type 3 has an invalid length. [ 1284.052663][T27360] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1284.117510][T27371] netlink: 'syz.3.7541': attribute type 25 has an invalid length. [ 1284.201600][T27371] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.7541'. [ 1284.517004][T27387] netlink: 'syz.1.7547': attribute type 10 has an invalid length. [ 1286.099367][T27407] netlink: 'syz.2.7552': attribute type 3 has an invalid length. [ 1286.140975][T27407] __nla_validate_parse: 7 callbacks suppressed [ 1286.141012][T27407] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1286.243315][T27415] sock: sock_set_timeout: `syz.5.7554' (pid 27415) tries to set negative timeout [ 1288.057510][T27430] netlink: 'syz.5.7558': attribute type 10 has an invalid length. [ 1289.862347][T27446] netlink: 'syz.0.7564': attribute type 10 has an invalid length. [ 1289.975423][T27452] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1290.045411][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7566'. [ 1290.187060][T27455] netlink: 'syz.5.7568': attribute type 3 has an invalid length. [ 1290.207877][T27455] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7568'. [ 1290.411655][T27470] netlink: 'syz.5.7571': attribute type 10 has an invalid length. [ 1290.480695][T27470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.539629][T27470] device bridge_slave_1 left promiscuous mode [ 1290.595538][T27470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.003499][T27483] netlink: 'syz.5.7575': attribute type 10 has an invalid length. [ 1291.040670][T27483] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7575'. [ 1291.136314][T27486] netlink: 'syz.5.7575': attribute type 2 has an invalid length. [ 1291.241984][T27489] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7577'. [ 1291.252426][T27483] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1291.304664][T27483] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.511246][T27483] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1291.556035][T27486] device .*! entered promiscuous mode [ 1291.939565][T27497] netlink: 'syz.5.7582': attribute type 3 has an invalid length. [ 1291.978948][T27497] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7582'. [ 1292.078606][T27500] netlink: 'syz.2.7590': attribute type 10 has an invalid length. [ 1292.101135][T27500] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7590'. [ 1292.405278][T27515] netlink: 'syz.2.7585': attribute type 10 has an invalid length. [ 1292.438149][T27514] netlink: 'syz.0.7596': attribute type 10 has an invalid length. [ 1292.457760][T27514] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7596'. [ 1292.565717][T27517] netlink: 'syz.1.7586': attribute type 25 has an invalid length. [ 1292.592123][T27517] netlink: 'syz.1.7586': attribute type 29 has an invalid length. [ 1292.934503][T27531] IPv6: …: Disabled Multicast RS [ 1293.326759][T27537] netlink: 'syz.1.7595': attribute type 3 has an invalid length. [ 1293.392981][T27537] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7595'. [ 1293.483509][T27542] netlink: 'syz.3.7598': attribute type 10 has an invalid length. [ 1293.622397][T27545] netlink: 'syz.2.7599': attribute type 3 has an invalid length. [ 1293.668076][T27545] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7599'. [ 1293.835067][T17092] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1293.873778][T17091] wlan1: Trigger new scan to find an IBSS to join [ 1293.884713][T27552] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7601'. [ 1293.926520][T27552] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1294.140571][T27558] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7602'. [ 1294.183106][T27552] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1294.531176][T27567] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7606'. [ 1294.661738][T27567] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7606'. [ 1296.256437][T27620] __nla_validate_parse: 3 callbacks suppressed [ 1296.256458][T27620] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7622'. [ 1296.517384][T27627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7625'. [ 1296.625758][T27630] validate_nla: 8 callbacks suppressed [ 1296.625794][T27630] netlink: 'syz.3.7627': attribute type 3 has an invalid length. [ 1296.671258][T27630] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7627'. [ 1296.758003][T27640] netlink: 'syz.5.7629': attribute type 10 has an invalid length. [ 1296.911170][T17097] wlan1: Trigger new scan to find an IBSS to join [ 1297.018480][T27638] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1297.041907][T27644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7630'. [ 1297.482355][T27657] netlink: 'syz.0.7635': attribute type 10 has an invalid length. [ 1297.541126][T27657] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1297.672913][T27668] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7637'. [ 1297.731135][T27668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1297.780360][T27668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1297.819044][T27671] netlink: 'syz.3.7637': attribute type 21 has an invalid length. [ 1297.962349][T27676] netlink: 'syz.2.7640': attribute type 10 has an invalid length. [ 1297.977382][T27676] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7640'. [ 1300.193104][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.199483][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.572843][T15247] wlan1: Creating new IBSS network, BSSID b2:39:8c:4a:82:1c [ 1300.832186][T15594] wlan1: Trigger new scan to find an IBSS to join [ 1300.874536][T27682] netlink: 'syz.0.7641': attribute type 3 has an invalid length. [ 1300.889271][T27682] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7641'. [ 1300.934957][T27681] netlink: 'syz.1.7651': attribute type 10 has an invalid length. [ 1300.965958][T27681] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7651'. [ 1301.166459][T27690] sctp: [Deprecated]: syz.2.7644 (pid 27690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1301.166459][T27690] Use struct sctp_sack_info instead [ 1301.509938][T27694] netlink: 'syz.0.7646': attribute type 10 has an invalid length. [ 1302.210363][T27714] netlink: 'syz.5.7654': attribute type 16 has an invalid length. [ 1302.288908][T27714] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7654'. [ 1302.506546][T27718] netlink: 'syz.3.7656': attribute type 3 has an invalid length. [ 1302.546695][T27718] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7656'. [ 1302.766060][T27724] netlink: 'syz.0.7659': attribute type 10 has an invalid length. [ 1302.800240][T27724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7659'. [ 1302.874709][T27724] netlink: 'syz.0.7659': attribute type 2 has an invalid length. [ 1303.053498][T27724] device .*! entered promiscuous mode [ 1303.893087][T15235] wlan1: Trigger new scan to find an IBSS to join [ 1304.320122][T27728] netlink: 'syz.5.7661': attribute type 10 has an invalid length. [ 1304.653735][T27730] netlink: 'syz.1.7662': attribute type 4 has an invalid length. [ 1304.738924][T27730] netlink: 'syz.1.7662': attribute type 33 has an invalid length. [ 1304.825895][T27730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7662'. [ 1305.420504][T17092] wlan1: Creating new IBSS network, BSSID ba:ac:c1:c4:01:ec [ 1305.442526][T27730] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1305.481149][T27753] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1305.491443][T15594] ------------[ cut here ]------------ [ 1305.497281][T15594] WARNING: CPU: 1 PID: 15594 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1305.507939][T15594] Modules linked in: [ 1305.512165][T15594] CPU: 1 PID: 15594 Comm: kworker/u4:33 Not tainted syzkaller #0 [ 1305.519939][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1305.530062][T15594] Workqueue: cfg80211 cfg80211_event_work [ 1305.535898][T15594] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1305.542153][T15594] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 a9 e8 f7 0f 0b eb bf e8 b7 a9 e8 f7 <0f> 0b eb b6 e8 ae a9 e8 f7 0f 0b e9 82 fd ff ff e8 a2 a9 e8 f7 0f [ 1305.561840][T15594] RSP: 0018:ffffc90003547ac0 EFLAGS: 00010293 [ 1305.567961][T15594] RAX: ffffffff89998929 RBX: 1ffff920006a8f5c RCX: ffff888077be3c00 [ 1305.576018][T15594] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 1305.584088][T15594] RBP: ffffc90003547b70 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1305.592153][T15594] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: ffff8880655bb5b8 [ 1305.600185][T15594] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888079c08c90 [ 1305.608268][T15594] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1305.617281][T15594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.621420][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7668'. [ 1305.623924][T15594] CR2: 000000110e22fff6 CR3: 0000000061ecb000 CR4: 00000000003506e0 [ 1305.640882][T15594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1305.648899][T15594] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1305.656961][T15594] Call Trace: [ 1305.660277][T15594] [ 1305.663301][T15594] ? trace_rdev_return_void+0x240/0x240 [ 1305.668920][T15594] cfg80211_process_wdev_events+0x359/0x4d0 [ 1305.674926][T15594] ? process_one_work+0x7b4/0x1160 [ 1305.680109][T15594] cfg80211_process_rdev_events+0x9d/0x110 [ 1305.686032][T15594] cfg80211_event_work+0x2b/0x40 [ 1305.691047][T15594] process_one_work+0x8ab/0x1160 [ 1305.696057][T15594] ? worker_detach_from_pool+0x240/0x240 [ 1305.701823][T15594] ? _raw_spin_lock_irq+0x86/0xf0 [ 1305.706943][T15594] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1305.712097][T15594] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1305.717728][T15594] ? wq_worker_running+0x97/0x190 [ 1305.722879][T15594] worker_thread+0xaf5/0x12a0 [ 1305.727641][T15594] kthread+0x29d/0x330 [ 1305.731801][T15594] ? worker_clr_flags+0x1a0/0x1a0 [ 1305.736880][T15594] ? kthread_blkcg+0xd0/0xd0 [ 1305.741565][T15594] ret_from_fork+0x1f/0x30 [ 1305.746134][T15594] [ 1305.749241][T15594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1305.756563][T15594] CPU: 1 PID: 15594 Comm: kworker/u4:33 Not tainted syzkaller #0 [ 1305.764318][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1305.774412][T15594] Workqueue: cfg80211 cfg80211_event_work [ 1305.780184][T15594] Call Trace: [ 1305.783490][T15594] [ 1305.786441][T15594] dump_stack_lvl+0x188/0x24e [ 1305.791176][T15594] ? memcpy+0x3c/0x60 [ 1305.795181][T15594] ? show_regs_print_info+0x12/0x12 [ 1305.800426][T15594] ? load_image+0x410/0x410 [ 1305.804965][T15594] panic+0x2d3/0x710 [ 1305.808895][T15594] ? bpf_jit_dump+0xd0/0xd0 [ 1305.813435][T15594] ? ret_from_fork+0x1f/0x30 [ 1305.818054][T15594] __warn+0x2f8/0x4f0 [ 1305.822124][T15594] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1305.827698][T15594] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1305.833356][T15594] report_bug+0x2ba/0x4f0 [ 1305.837703][T15594] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1305.843274][T15594] handle_bug+0x3a/0x70 [ 1305.847484][T15594] exc_invalid_op+0x16/0x40 [ 1305.852025][T15594] asm_exc_invalid_op+0x16/0x20 [ 1305.856891][T15594] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1305.863073][T15594] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 a9 e8 f7 0f 0b eb bf e8 b7 a9 e8 f7 <0f> 0b eb b6 e8 ae a9 e8 f7 0f 0b e9 82 fd ff ff e8 a2 a9 e8 f7 0f [ 1305.882700][T15594] RSP: 0018:ffffc90003547ac0 EFLAGS: 00010293 [ 1305.888783][T15594] RAX: ffffffff89998929 RBX: 1ffff920006a8f5c RCX: ffff888077be3c00 [ 1305.896775][T15594] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 1305.904771][T15594] RBP: ffffc90003547b70 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1305.912764][T15594] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: ffff8880655bb5b8 [ 1305.920755][T15594] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888079c08c90 [ 1305.928754][T15594] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1305.934334][T15594] ? trace_rdev_return_void+0x240/0x240 [ 1305.939907][T15594] cfg80211_process_wdev_events+0x359/0x4d0 [ 1305.945832][T15594] ? process_one_work+0x7b4/0x1160 [ 1305.950968][T15594] cfg80211_process_rdev_events+0x9d/0x110 [ 1305.956800][T15594] cfg80211_event_work+0x2b/0x40 [ 1305.961757][T15594] process_one_work+0x8ab/0x1160 [ 1305.966734][T15594] ? worker_detach_from_pool+0x240/0x240 [ 1305.972391][T15594] ? _raw_spin_lock_irq+0x86/0xf0 [ 1305.977458][T15594] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1305.982506][T15594] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1305.988084][T15594] ? wq_worker_running+0x97/0x190 [ 1305.993135][T15594] worker_thread+0xaf5/0x12a0 [ 1305.997857][T15594] kthread+0x29d/0x330 [ 1306.001949][T15594] ? worker_clr_flags+0x1a0/0x1a0 [ 1306.006994][T15594] ? kthread_blkcg+0xd0/0xd0 [ 1306.011605][T15594] ret_from_fork+0x1f/0x30 [ 1306.016063][T15594] [ 1306.019675][T15594] Kernel Offset: disabled [ 1306.024125][T15594] Rebooting in 86400 seconds..